Steffen Jacobs
ad8ecde81d
Bug 4894: secured getFile method with in FileStorageResource for
...
AmazonS3FileStorageServiceImpl and LocalFileStorageServiceImpl.
2019-04-03 18:09:11 +02:00
Steffen Jacobs
5a114a3666
Merge branch 'permission-vertical' of ssh://trac@sapsailing.com/home/trac/git into permission-vertical
2019-04-03 17:59:18 +02:00
Steffen Jacobs
dfaafe252f
Bug 4894: added @DELETE method additional to @POST for deleting to
...
improve REST consistency
2019-04-03 17:59:05 +02:00
Steffen Jacobs
46da85349b
Bug 4894: secured removeFile method in FileUploadServlet for
...
AmazonS3FileStorageServiceImpl
2019-04-03 17:56:11 +02:00
Steffen Jacobs
0adcb080d3
Bug 4894: secured removeFile method in FileUploadServlet for
...
LocalFileStorageServiceImpl
2019-04-03 17:54:22 +02:00
Steffen Jacobs
13e9d1923b
Bug 4894: secured storeFile method in FileUploadServlet for
...
AmazonS3FileStorageServiceImpl
2019-04-03 17:48:57 +02:00
Steffen Jacobs
fe5194967a
Bug 4894: secured storeFile method in FileUploadServlet for
...
LocalFileStorageServiceImpl
2019-04-03 17:47:24 +02:00
Steffen Jacobs
4d033076c8
Bug 4957: added id column for table in LeaderboardGroupConfigPanel
2019-04-03 16:49:05 +02:00
Steffen Jacobs
eeef90c285
Bug 4957: added id column for table in EventManagementPanel
2019-04-03 16:45:48 +02:00
Steffen Jacobs
e7a7e107c9
Bug 4957: added id column for table in UserGroupManagementPanel
2019-04-03 16:42:59 +02:00
Steffen Jacobs
72faf64aaf
Bug 4957: made role id column final
2019-04-03 16:41:57 +02:00
Steffen Jacobs
cd882e6f60
Bug 4957: added id column for table in RoleDefinitionPanel
2019-04-03 16:39:16 +02:00
Steffen Jacobs
d038383fd8
Bug 4958: added remove action to TrackedRaces table.
2019-04-03 16:35:11 +02:00
Steffen Jacobs
0ad69001c3
Bug 4967: added check if user exists before trying to open dialog in
...
User Management
2019-04-03 16:12:57 +02:00
Steffen Jacobs
8be1c9bd44
Bug 4933: allow users to create permission associations by giving
...
someone a permission without the need to have the SERVER:CREATE_OBJECT
permission
2019-03-29 18:39:02 +01:00
Steffen Jacobs
83ab331dfe
Bug 4933: allow users to
...
create role associations by giving someone a role without the need to
have the SERVER:CREATE_OBJECT permission
2019-03-29 18:33:45 +01:00
Steffen Jacobs
9e16206522
Bug 4933: added method
...
setOwnershipWithoutCheckPermissionForObjectCreationAndRevertOnError with
different overloading similar to commit
5a43660474
2019-03-29 18:32:10 +01:00
Steffen Jacobs
2eb4ffbc29
Bug 4933: adjusted RoleDefinitionPanel and backend to allow users to
...
create
role definitions without having the SERVER:CREATE_OBJECT permission
2019-03-29 18:23:51 +01:00
Steffen Jacobs
21ada0b7d2
Bug 4933: adjusted UserGroupManagementPanel to allow users to create
...
user groups without having the SERVER:CREATE_OBJECT permission
2019-03-29 18:13:13 +01:00
Steffen Jacobs
d3a8a66cdc
Bug 4933: Added possibility to circumvent permission check for
...
SERVER:CREATE_OBJECTS check in AccessControlledButtonPanel in front end
2019-03-29 18:12:13 +01:00
Steffen Jacobs
e361c37341
Bug 4933: added methods for circumventing SERVER:CREATE_OBJECT
...
permission check in UserService and UserManagementServiceImpl
2019-03-29 18:10:56 +01:00
Steffen Jacobs
4067fe9fed
Bug 4933: refactored
...
setOwnershipCheckPermissionForObjectCreationAndRevertOnError and related
methods to reduce code duplication
2019-03-29 18:09:02 +01:00
Steffen Jacobs
5a43660474
Bug 4933: added method
...
setOwnershipWithoutCheckPermissionForObjectCreationAndRevertOnError that
allows to set t he ownership and revert on error for creating an object
without checking SERVER:CREATE_OBJECT
2019-03-29 18:04:13 +01:00
Steffen Jacobs
f260d81b75
Bug 4796: adjust controls and listeners for buttons + minor refactor
2019-03-29 17:36:23 +01:00
Steffen Jacobs
0f36858214
Bug 4796: migrated table in IgtimiAccountsPanel to new secured table
...
with secured actions and columns for group and user
2019-03-29 17:26:48 +01:00
Steffen Jacobs
ec81bb7281
Bug 4796: fixed initialization issue in AccountWithSecurityDTO and minor
...
refactor of related methods in SailingServiceImpl
2019-03-29 17:12:37 +01:00
Steffen Jacobs
e287b255ab
Bug 4796: updated AccountWithSecurityDTO to become independent of
...
com.sap.sailing.domain.igtimiadapter.Account and
com.sap.sailing.domain.igtimiadapter.User
2019-03-29 16:36:01 +01:00
Steffen Jacobs
44b25298cf
Bug 4796: added method getAllIgtimiAccountsWithSecurity to
...
SailingServiceImpl + AccountWithSecurityDTO for secured igtimi account
dto
2019-03-29 15:49:28 +01:00
Steffen Jacobs
dd9d945be5
Bug 4796: Added panel refresh for IgtimiAccountsPanel when the user logs
...
out and in
2019-03-29 15:29:48 +01:00
Steffen Jacobs
10edc0d373
adjusted warning message to show permission error when resize operation
...
was not successful + fixed typo
2019-03-29 14:35:01 +01:00
Steffen Jacobs
2f05d66469
Improved javadoc in LocalStorageServiceImpl
2019-03-29 14:34:26 +01:00
Steffen Jacobs
64b0332229
added DefaultActions.UPDATE action to server actions
2019-03-29 14:34:11 +01:00
Steffen Jacobs
4f941b560d
Bug 4954: added permission check for file_storage:update for method
...
resizeImage
2019-03-29 11:59:31 +01:00
Steffen Jacobs
943509eb5e
Merge branch 'permission-vertical' of ssh://trac@sapsailing.com/home/trac/git into permission-vertical
2019-03-29 11:56:49 +01:00
Steffen Jacobs
f2110374a3
Bug 4954: added permission SecuredDomainType.FILE_STORAGE
2019-03-29 11:56:40 +01:00
Steffen Jacobs
84fc403791
Bug 4954: added automatic disabling of RaceSimulationOverlay in the
...
RaceMap if the current user does not have the SIMULATOR permission to
see it
2019-03-29 11:18:09 +01:00
Steffen Jacobs
2073633721
Bug 4954: added SIMULATOR permission to SailingViewerRole
2019-03-29 11:15:27 +01:00
Steffen Jacobs
c3e97165a9
Bug 4954: added permission SIMULATOR and permission check simulator:read
...
in SailingServiceImpl.getSimulatorResults(LegIdentifier)
2019-03-29 11:14:44 +01:00
Steffen Jacobs
66824ae2cc
fixed XMLExportTest
2019-03-28 18:26:40 +01:00
Steffen Jacobs
67c3b10468
Bug 4959: added Event ID to regatta invitations dialog + QR Code
2019-03-28 17:41:19 +01:00
Steffen Jacobs
f41f63e7a9
Bug 4913: added "throws UnauthorizedException" for all methods in
...
UserManagementService
2019-03-28 16:40:21 +01:00
Steffen Jacobs
1c1fb97e4b
Bug 4913: added license information which got lost during copying
2019-03-28 16:32:36 +01:00
Steffen Jacobs
0512a87c96
Bug 4913: added "throws UnauthorizedException" for all methods in
...
DataMiningService
2019-03-28 16:27:37 +01:00
Steffen Jacobs
b9f5c00028
Merge branch 'permission-vertical' of ssh://trac@sapsailing.com/home/trac/git into permission-vertical
2019-03-28 16:20:00 +01:00
Steffen Jacobs
b3150b83a5
Bug 4913: removed wrapping of UnauthorizedException in
...
SecurityServiceImpl.checkPermissionAndDeleteOwnershipForObjectRemoval
2019-03-28 16:19:50 +01:00
Steffen Jacobs
aaae3f84d7
Bug 4913: added "throws UnauthorizedException" for method in DispatchRPC
2019-03-28 16:19:10 +01:00
Steffen Jacobs
c7e28a460d
Bug 4913: added UnauthorizedException to SerializationDummy
2019-03-28 15:09:40 +01:00
Steffen Jacobs
b88bd4d66a
Bug 4913: added source code for
...
org.apache.shiro.authz.UnauthorizedException and related classes
2019-03-28 15:09:39 +01:00
Steffen Jacobs
dd2bfc19db
Bug 4913: added "throws UnauthorizedException" for all methods in
...
SailingService
2019-03-28 15:09:37 +01:00
Steffen Jacobs
0e5d4538d9
Bug 4386: added check for existence of user group when creating a new
...
user
2019-03-28 14:09:58 +01:00
Steffen Jacobs
073865da6c
Bug 4386: added check to prevent creation of user groups with an already
...
existing name in front end
2019-03-28 13:29:23 +01:00
Steffen Jacobs
f00997c513
Bug 4386: added correct error notification in front end + formatting
2019-03-28 12:55:11 +01:00
Steffen Jacobs
406cec1d14
Bug 4386: added check to prevent creation of user groups with an already
...
existing name -> make user group names unique
2019-03-28 12:52:45 +01:00
Steffen Jacobs
77e65bebf3
Bug 4954: added permission check for regatta:read for method
...
getCompetitorDescriptors in SailingServiceImpl
2019-03-27 17:41:03 +01:00
Steffen Jacobs
8f82a892fc
Bug 4954: changed permission check in getScoreCorrections from
...
regatta:update to regatta:read
2019-03-27 17:12:31 +01:00
Steffen Jacobs
78383c64f4
Bug 4914: added permission check for Export-as-XML functionality in
...
Leaderboards in Backend in XmlExportServlet. Check leaderboard:read and
filter by trackedrace:read
2019-03-27 15:47:41 +01:00
Steffen Jacobs
a6868a7679
Bug 4954: added permission check for regatta:update for method
...
getScoreCorrections in SailingServiceImpl
2019-03-27 15:05:55 +01:00
Steffen Jacobs
db0921f301
removed permission check in getRace since it is not callable from
...
outside and only used internally and by a race fetcher
2019-03-27 12:01:31 +01:00
Steffen Jacobs
cbcbf399c6
Bug 4954: updated permission check in linkBoatToCompetitorForRace to
...
only check for leaderboard:update and not trackedrace:update
2019-03-27 11:59:32 +01:00
Steffen Jacobs
3644e888af
Bug 4954: updated permission check in both
...
setCompetitorRegistrationsInRaceLog methods to only check for
leaderboard:update and not trackedrace:update
2019-03-27 11:58:28 +01:00
Steffen Jacobs
462fb58ee9
Bug 4954: removed permission checks in startRaceLogTracking, since they
...
are already done in PermissionAwareRaceTrackingHandler
2019-03-27 11:56:49 +01:00
Steffen Jacobs
7855791b97
Bug 4954: updated permission check in updateSuppressedMarkPassings to
...
only check for leaderboard:update and not competitor:read
2019-03-27 11:54:33 +01:00
Steffen Jacobs
f3047531ad
Bug 4954: updated permission check in updateFixedMarkPassing to only
...
check for leaderboard:update and not competitor:read
2019-03-27 11:53:49 +01:00
Steffen Jacobs
1d190fb04d
Bug 4954: updated permission check in unlinkBoatFromCompetitorForRace to
...
only check for leaderboard:update and not competitor:read
2019-03-27 11:52:48 +01:00
Steffen Jacobs
0efddad84c
Bug 4954: updated permission check in setEliminatedCompetitors to only
...
check for leaderboard:update and not competitor:read
2019-03-27 11:51:45 +01:00
Steffen Jacobs
3892436990
removed method getServerInfo from SailingService and unnecessary
...
interface ServerInfoRetriever, since the server info is available via
user service anyway.
2019-03-27 11:49:42 +01:00
Steffen Jacobs
09ade6d199
refactored FE to use ServerInfoDTO from user service instead of loading
...
it seperately.
2019-03-27 11:48:38 +01:00
Steffen Jacobs
c03c118f9a
added check if user exists to UserCreationDialog in AdminConsole
2019-03-20 18:52:56 +01:00
Steffen Jacobs
77666d4fb3
added permission check for serverinfo:update for method
...
stopReplicatingFromMaster
2019-03-20 16:47:31 +01:00
Steffen Jacobs
dc2be1cdd6
added permission check for serverinfo:update for method
...
stopSingleReplicaInstance
2019-03-20 16:46:59 +01:00
Steffen Jacobs
3dadf78ef9
added permission check for serverinfo:update for method stopAllReplicas
2019-03-20 16:46:23 +01:00
Steffen Jacobs
3f91ad8320
added permission check for serverinfo:update for method
...
startReplicatingFromMaster
2019-03-20 16:45:43 +01:00
Steffen Jacobs
93a1d6a712
added permission check for serverinfo:update for method
...
setFileStorageServiceProperties
2019-03-20 16:44:57 +01:00
Steffen Jacobs
bd6d662083
added permission check for serverinfo:update for method
...
setActiveFileStorageService
2019-03-20 16:44:10 +01:00
Steffen Jacobs
75ba6fcdbb
added permission check for serverinfo:update for method
...
removeSailingServers
2019-03-20 16:42:03 +01:00
Steffen Jacobs
719c07c1b0
added permission check for serverinfo:update for method
...
removeResultImportURLs
2019-03-20 16:40:52 +01:00
Steffen Jacobs
bad98c58b2
added permission check for leaderboard:update and competitor:read for
...
method updateSuppressedMarkPassings
2019-03-20 16:19:02 +01:00
Steffen Jacobs
817391616a
added permission check for leaderboard:update and competitor:read for
...
method updateFixedMarkPassing
2019-03-20 16:17:13 +01:00
Steffen Jacobs
0cad2329b8
added permission check for leaderboard:update and competitor:read for
...
method unlinkBoatFromCompetitorForRace
2019-03-20 16:15:12 +01:00
Steffen Jacobs
529afa4c0c
added permission checks for leaderboard:update and trackedrace:update
...
for method startRaceLogTracking
2019-03-20 16:01:27 +01:00
Steffen Jacobs
adb7fb8861
added permission check for leaderboard:update for method
...
setTrackingTimes
2019-03-20 15:59:48 +01:00
Steffen Jacobs
37c7f6b977
added permission check for trackedrace:update for method
...
setStartTimeReceivedForRace
2019-03-20 15:58:00 +01:00
Steffen Jacobs
45ad0f9da2
added permission check for leaderboard:update for method
...
setStartTimeAndProcedure
2019-03-20 15:56:33 +01:00
Steffen Jacobs
e990526717
added permission check for leaderboard:update for method
...
setFinishingAndEndTime
2019-03-20 15:54:45 +01:00
Steffen Jacobs
fba841a6ff
added permission check for leaderboard:update and competitor:read for
...
method setEliminatedCompetitors
2019-03-20 15:37:26 +01:00
Steffen Jacobs
fa550c92e2
added permission check for leaderboard:update for method
...
setCompetitorRegistrationsInRegattaLog
2019-03-20 15:35:04 +01:00
Steffen Jacobs
9fbb386928
added permission check for leaderboard:update and trackedrace:update for
...
method setCompetitorRegistrationsInRaceLog
2019-03-20 15:33:43 +01:00
Steffen Jacobs
7c386d5c95
added permission check for leaderboard:update and boat:read for method
...
setBoatRegistrationsInRegattaLog
2019-03-20 15:29:18 +01:00
Steffen Jacobs
0f4e6fec62
added permission check for leaderboard:update for second
...
revokeRaceAndRegattaLogEvents method
2019-03-20 15:27:29 +01:00
Steffen Jacobs
d6f3a3e12b
added permission check for leaderboard:update for method
...
revokeRaceAndRegattaLogEvents
2019-03-20 15:25:51 +01:00
Steffen Jacobs
0b500d7695
added correct exception
2019-03-20 15:22:01 +01:00
Steffen Jacobs
b3c1e8adf5
added permission check for leaderboard:update for method
...
revokeMarkDefinitionEventInRegattaLog
2019-03-20 15:21:21 +01:00
Steffen Jacobs
f2306ea014
added permission check for leaderboard:update for method removeMarkFix
2019-03-20 15:13:32 +01:00
Steffen Jacobs
379c7890af
added permission check for leaderboard:update for method reloadRaceLog
2019-03-20 15:11:46 +01:00
Steffen Jacobs
87c42a2b44
added permission check for leaderboard:read for method
...
prepareForSlicingOfRace
2019-03-20 15:08:52 +01:00
Steffen Jacobs
47029f2859
added permission check for leaderboard:update for method pingMark
2019-03-20 15:06:57 +01:00
Steffen Jacobs
a4f6016407
added permission check for trackedrace:update for method
...
linkBoatToCompetitorForRace
2019-03-20 15:03:29 +01:00
Steffen Jacobs
618d9876c5
added permission check for leaderboard:update for method
...
linkBoatToCompetitorForRace
2019-03-20 14:57:06 +01:00
Steffen Jacobs
069b8d88e2
added permission check for event:read, leaderboard:update and
...
regatta:update for method inviteCompetitorsForTrackingViaEmail
2019-03-20 14:54:30 +01:00
Steffen Jacobs
385ac3ddbb
added permission check for event:read and leaderboard:read and
...
regatta:update for method inviteBuoyTenderViaEmail
2019-03-20 14:51:11 +01:00