Commit Graph
100 Commits
Author SHA1 Message Date
Steffen Jacobs ad8ecde81d Bug 4894: secured getFile method with in FileStorageResource for
AmazonS3FileStorageServiceImpl and LocalFileStorageServiceImpl.
2019-04-03 18:09:11 +02:00
Steffen Jacobs 5a114a3666 Merge branch 'permission-vertical' of ssh://trac@sapsailing.com/home/trac/git into permission-vertical 2019-04-03 17:59:18 +02:00
Steffen Jacobs dfaafe252f Bug 4894: added @DELETE method additional to @POST for deleting to
improve REST consistency
2019-04-03 17:59:05 +02:00
Steffen Jacobs 46da85349b Bug 4894: secured removeFile method in FileUploadServlet for
AmazonS3FileStorageServiceImpl
2019-04-03 17:56:11 +02:00
Steffen Jacobs 0adcb080d3 Bug 4894: secured removeFile method in FileUploadServlet for
LocalFileStorageServiceImpl
2019-04-03 17:54:22 +02:00
Steffen Jacobs 13e9d1923b Bug 4894: secured storeFile method in FileUploadServlet for
AmazonS3FileStorageServiceImpl
2019-04-03 17:48:57 +02:00
Steffen Jacobs fe5194967a Bug 4894: secured storeFile method in FileUploadServlet for
LocalFileStorageServiceImpl
2019-04-03 17:47:24 +02:00
Steffen Jacobs 4d033076c8 Bug 4957: added id column for table in LeaderboardGroupConfigPanel 2019-04-03 16:49:05 +02:00
Steffen Jacobs eeef90c285 Bug 4957: added id column for table in EventManagementPanel 2019-04-03 16:45:48 +02:00
Steffen Jacobs e7a7e107c9 Bug 4957: added id column for table in UserGroupManagementPanel 2019-04-03 16:42:59 +02:00
Steffen Jacobs 72faf64aaf Bug 4957: made role id column final 2019-04-03 16:41:57 +02:00
Steffen Jacobs cd882e6f60 Bug 4957: added id column for table in RoleDefinitionPanel 2019-04-03 16:39:16 +02:00
Steffen Jacobs d038383fd8 Bug 4958: added remove action to TrackedRaces table. 2019-04-03 16:35:11 +02:00
Steffen Jacobs 0ad69001c3 Bug 4967: added check if user exists before trying to open dialog in
User Management
2019-04-03 16:12:57 +02:00
Steffen Jacobs 8be1c9bd44 Bug 4933: allow users to create permission associations by giving
someone a permission without the need to have the SERVER:CREATE_OBJECT
permission
2019-03-29 18:39:02 +01:00
Steffen Jacobs 83ab331dfe Bug 4933: allow users to
create role associations by giving someone a role without the need to
have the SERVER:CREATE_OBJECT permission
2019-03-29 18:33:45 +01:00
Steffen Jacobs 9e16206522 Bug 4933: added method
setOwnershipWithoutCheckPermissionForObjectCreationAndRevertOnError with
different overloading similar to commit
5a43660474
2019-03-29 18:32:10 +01:00
Steffen Jacobs 2eb4ffbc29 Bug 4933: adjusted RoleDefinitionPanel and backend to allow users to
create
role definitions without having the SERVER:CREATE_OBJECT permission
2019-03-29 18:23:51 +01:00
Steffen Jacobs 21ada0b7d2 Bug 4933: adjusted UserGroupManagementPanel to allow users to create
user groups without having the SERVER:CREATE_OBJECT permission
2019-03-29 18:13:13 +01:00
Steffen Jacobs d3a8a66cdc Bug 4933: Added possibility to circumvent permission check for
SERVER:CREATE_OBJECTS check in AccessControlledButtonPanel in front end
2019-03-29 18:12:13 +01:00
Steffen Jacobs e361c37341 Bug 4933: added methods for circumventing SERVER:CREATE_OBJECT
permission check in UserService and UserManagementServiceImpl
2019-03-29 18:10:56 +01:00
Steffen Jacobs 4067fe9fed Bug 4933: refactored
setOwnershipCheckPermissionForObjectCreationAndRevertOnError and related
methods to reduce code duplication
2019-03-29 18:09:02 +01:00
Steffen Jacobs 5a43660474 Bug 4933: added method
setOwnershipWithoutCheckPermissionForObjectCreationAndRevertOnError that
allows to set t he ownership and revert on error for creating an object
without checking SERVER:CREATE_OBJECT
2019-03-29 18:04:13 +01:00
Steffen Jacobs f260d81b75 Bug 4796: adjust controls and listeners for buttons + minor refactor 2019-03-29 17:36:23 +01:00
Steffen Jacobs 0f36858214 Bug 4796: migrated table in IgtimiAccountsPanel to new secured table
with secured actions and columns for group and user
2019-03-29 17:26:48 +01:00
Steffen Jacobs ec81bb7281 Bug 4796: fixed initialization issue in AccountWithSecurityDTO and minor
refactor of related methods in SailingServiceImpl
2019-03-29 17:12:37 +01:00
Steffen Jacobs e287b255ab Bug 4796: updated AccountWithSecurityDTO to become independent of
com.sap.sailing.domain.igtimiadapter.Account and
com.sap.sailing.domain.igtimiadapter.User
2019-03-29 16:36:01 +01:00
Steffen Jacobs 44b25298cf Bug 4796: added method getAllIgtimiAccountsWithSecurity to
SailingServiceImpl + AccountWithSecurityDTO for secured igtimi account
dto
2019-03-29 15:49:28 +01:00
Steffen Jacobs dd9d945be5 Bug 4796: Added panel refresh for IgtimiAccountsPanel when the user logs
out and in
2019-03-29 15:29:48 +01:00
Steffen Jacobs 10edc0d373 adjusted warning message to show permission error when resize operation
was not successful + fixed typo
2019-03-29 14:35:01 +01:00
Steffen Jacobs 2f05d66469 Improved javadoc in LocalStorageServiceImpl 2019-03-29 14:34:26 +01:00
Steffen Jacobs 64b0332229 added DefaultActions.UPDATE action to server actions 2019-03-29 14:34:11 +01:00
Steffen Jacobs 4f941b560d Bug 4954: added permission check for file_storage:update for method
resizeImage
2019-03-29 11:59:31 +01:00
Steffen Jacobs 943509eb5e Merge branch 'permission-vertical' of ssh://trac@sapsailing.com/home/trac/git into permission-vertical 2019-03-29 11:56:49 +01:00
Steffen Jacobs f2110374a3 Bug 4954: added permission SecuredDomainType.FILE_STORAGE 2019-03-29 11:56:40 +01:00
Steffen Jacobs 84fc403791 Bug 4954: added automatic disabling of RaceSimulationOverlay in the
RaceMap if the current user does not have the SIMULATOR permission to
see it
2019-03-29 11:18:09 +01:00
Steffen Jacobs 2073633721 Bug 4954: added SIMULATOR permission to SailingViewerRole 2019-03-29 11:15:27 +01:00
Steffen Jacobs c3e97165a9 Bug 4954: added permission SIMULATOR and permission check simulator:read
in SailingServiceImpl.getSimulatorResults(LegIdentifier)
2019-03-29 11:14:44 +01:00
Steffen Jacobs 66824ae2cc fixed XMLExportTest 2019-03-28 18:26:40 +01:00
Steffen Jacobs 67c3b10468 Bug 4959: added Event ID to regatta invitations dialog + QR Code 2019-03-28 17:41:19 +01:00
Steffen Jacobs f41f63e7a9 Bug 4913: added "throws UnauthorizedException" for all methods in
UserManagementService
2019-03-28 16:40:21 +01:00
Steffen Jacobs 1c1fb97e4b Bug 4913: added license information which got lost during copying 2019-03-28 16:32:36 +01:00
Steffen Jacobs 0512a87c96 Bug 4913: added "throws UnauthorizedException" for all methods in
DataMiningService
2019-03-28 16:27:37 +01:00
Steffen Jacobs b9f5c00028 Merge branch 'permission-vertical' of ssh://trac@sapsailing.com/home/trac/git into permission-vertical 2019-03-28 16:20:00 +01:00
Steffen Jacobs b3150b83a5 Bug 4913: removed wrapping of UnauthorizedException in
SecurityServiceImpl.checkPermissionAndDeleteOwnershipForObjectRemoval
2019-03-28 16:19:50 +01:00
Steffen Jacobs aaae3f84d7 Bug 4913: added "throws UnauthorizedException" for method in DispatchRPC 2019-03-28 16:19:10 +01:00
Steffen Jacobs c7e28a460d Bug 4913: added UnauthorizedException to SerializationDummy 2019-03-28 15:09:40 +01:00
Steffen Jacobs b88bd4d66a Bug 4913: added source code for
org.apache.shiro.authz.UnauthorizedException and related classes
2019-03-28 15:09:39 +01:00
Steffen Jacobs dd2bfc19db Bug 4913: added "throws UnauthorizedException" for all methods in
SailingService
2019-03-28 15:09:37 +01:00
Steffen Jacobs 0e5d4538d9 Bug 4386: added check for existence of user group when creating a new
user
2019-03-28 14:09:58 +01:00
Steffen Jacobs 073865da6c Bug 4386: added check to prevent creation of user groups with an already
existing name in front end
2019-03-28 13:29:23 +01:00
Steffen Jacobs f00997c513 Bug 4386: added correct error notification in front end + formatting 2019-03-28 12:55:11 +01:00
Steffen Jacobs 406cec1d14 Bug 4386: added check to prevent creation of user groups with an already
existing name -> make user group names unique
2019-03-28 12:52:45 +01:00
Steffen Jacobs 77e65bebf3 Bug 4954: added permission check for regatta:read for method
getCompetitorDescriptors in SailingServiceImpl
2019-03-27 17:41:03 +01:00
Steffen Jacobs 8f82a892fc Bug 4954: changed permission check in getScoreCorrections from
regatta:update to regatta:read
2019-03-27 17:12:31 +01:00
Steffen Jacobs 78383c64f4 Bug 4914: added permission check for Export-as-XML functionality in
Leaderboards in Backend in XmlExportServlet. Check leaderboard:read and
filter by trackedrace:read
2019-03-27 15:47:41 +01:00
Steffen Jacobs a6868a7679 Bug 4954: added permission check for regatta:update for method
getScoreCorrections in SailingServiceImpl
2019-03-27 15:05:55 +01:00
Steffen Jacobs db0921f301 removed permission check in getRace since it is not callable from
outside and only used internally and by a race fetcher
2019-03-27 12:01:31 +01:00
Steffen Jacobs cbcbf399c6 Bug 4954: updated permission check in linkBoatToCompetitorForRace to
only check for leaderboard:update and not trackedrace:update
2019-03-27 11:59:32 +01:00
Steffen Jacobs 3644e888af Bug 4954: updated permission check in both
setCompetitorRegistrationsInRaceLog methods to only check for
leaderboard:update and not trackedrace:update
2019-03-27 11:58:28 +01:00
Steffen Jacobs 462fb58ee9 Bug 4954: removed permission checks in startRaceLogTracking, since they
are already done in PermissionAwareRaceTrackingHandler
2019-03-27 11:56:49 +01:00
Steffen Jacobs 7855791b97 Bug 4954: updated permission check in updateSuppressedMarkPassings to
only check for leaderboard:update and not competitor:read
2019-03-27 11:54:33 +01:00
Steffen Jacobs f3047531ad Bug 4954: updated permission check in updateFixedMarkPassing to only
check for leaderboard:update and not competitor:read
2019-03-27 11:53:49 +01:00
Steffen Jacobs 1d190fb04d Bug 4954: updated permission check in unlinkBoatFromCompetitorForRace to
only check for leaderboard:update and not competitor:read
2019-03-27 11:52:48 +01:00
Steffen Jacobs 0efddad84c Bug 4954: updated permission check in setEliminatedCompetitors to only
check for leaderboard:update and not competitor:read
2019-03-27 11:51:45 +01:00
Steffen Jacobs 3892436990 removed method getServerInfo from SailingService and unnecessary
interface ServerInfoRetriever, since the server info is available via
user service anyway.
2019-03-27 11:49:42 +01:00
Steffen Jacobs 09ade6d199 refactored FE to use ServerInfoDTO from user service instead of loading
it seperately.
2019-03-27 11:48:38 +01:00
Steffen Jacobs c03c118f9a added check if user exists to UserCreationDialog in AdminConsole 2019-03-20 18:52:56 +01:00
Steffen Jacobs 77666d4fb3 added permission check for serverinfo:update for method
stopReplicatingFromMaster
2019-03-20 16:47:31 +01:00
Steffen Jacobs dc2be1cdd6 added permission check for serverinfo:update for method
stopSingleReplicaInstance
2019-03-20 16:46:59 +01:00
Steffen Jacobs 3dadf78ef9 added permission check for serverinfo:update for method stopAllReplicas 2019-03-20 16:46:23 +01:00
Steffen Jacobs 3f91ad8320 added permission check for serverinfo:update for method
startReplicatingFromMaster
2019-03-20 16:45:43 +01:00
Steffen Jacobs 93a1d6a712 added permission check for serverinfo:update for method
setFileStorageServiceProperties
2019-03-20 16:44:57 +01:00
Steffen Jacobs bd6d662083 added permission check for serverinfo:update for method
setActiveFileStorageService
2019-03-20 16:44:10 +01:00
Steffen Jacobs 75ba6fcdbb added permission check for serverinfo:update for method
removeSailingServers
2019-03-20 16:42:03 +01:00
Steffen Jacobs 719c07c1b0 added permission check for serverinfo:update for method
removeResultImportURLs
2019-03-20 16:40:52 +01:00
Steffen Jacobs bad98c58b2 added permission check for leaderboard:update and competitor:read for
method updateSuppressedMarkPassings
2019-03-20 16:19:02 +01:00
Steffen Jacobs 817391616a added permission check for leaderboard:update and competitor:read for
method updateFixedMarkPassing
2019-03-20 16:17:13 +01:00
Steffen Jacobs 0cad2329b8 added permission check for leaderboard:update and competitor:read for
method unlinkBoatFromCompetitorForRace
2019-03-20 16:15:12 +01:00
Steffen Jacobs 529afa4c0c added permission checks for leaderboard:update and trackedrace:update
for method startRaceLogTracking
2019-03-20 16:01:27 +01:00
Steffen Jacobs adb7fb8861 added permission check for leaderboard:update for method
setTrackingTimes
2019-03-20 15:59:48 +01:00
Steffen Jacobs 37c7f6b977 added permission check for trackedrace:update for method
setStartTimeReceivedForRace
2019-03-20 15:58:00 +01:00
Steffen Jacobs 45ad0f9da2 added permission check for leaderboard:update for method
setStartTimeAndProcedure
2019-03-20 15:56:33 +01:00
Steffen Jacobs e990526717 added permission check for leaderboard:update for method
setFinishingAndEndTime
2019-03-20 15:54:45 +01:00
Steffen Jacobs fba841a6ff added permission check for leaderboard:update and competitor:read for
method setEliminatedCompetitors
2019-03-20 15:37:26 +01:00
Steffen Jacobs fa550c92e2 added permission check for leaderboard:update for method
setCompetitorRegistrationsInRegattaLog
2019-03-20 15:35:04 +01:00
Steffen Jacobs 9fbb386928 added permission check for leaderboard:update and trackedrace:update for
method setCompetitorRegistrationsInRaceLog
2019-03-20 15:33:43 +01:00
Steffen Jacobs 7c386d5c95 added permission check for leaderboard:update and boat:read for method
setBoatRegistrationsInRegattaLog
2019-03-20 15:29:18 +01:00
Steffen Jacobs 0f4e6fec62 added permission check for leaderboard:update for second
revokeRaceAndRegattaLogEvents method
2019-03-20 15:27:29 +01:00
Steffen Jacobs d6f3a3e12b added permission check for leaderboard:update for method
revokeRaceAndRegattaLogEvents
2019-03-20 15:25:51 +01:00
Steffen Jacobs 0b500d7695 added correct exception 2019-03-20 15:22:01 +01:00
Steffen Jacobs b3c1e8adf5 added permission check for leaderboard:update for method
revokeMarkDefinitionEventInRegattaLog
2019-03-20 15:21:21 +01:00
Steffen Jacobs f2306ea014 added permission check for leaderboard:update for method removeMarkFix 2019-03-20 15:13:32 +01:00
Steffen Jacobs 379c7890af added permission check for leaderboard:update for method reloadRaceLog 2019-03-20 15:11:46 +01:00
Steffen Jacobs 87c42a2b44 added permission check for leaderboard:read for method
prepareForSlicingOfRace
2019-03-20 15:08:52 +01:00
Steffen Jacobs 47029f2859 added permission check for leaderboard:update for method pingMark 2019-03-20 15:06:57 +01:00
Steffen Jacobs a4f6016407 added permission check for trackedrace:update for method
linkBoatToCompetitorForRace
2019-03-20 15:03:29 +01:00
Steffen Jacobs 618d9876c5 added permission check for leaderboard:update for method
linkBoatToCompetitorForRace
2019-03-20 14:57:06 +01:00
Steffen Jacobs 069b8d88e2 added permission check for event:read, leaderboard:update and
regatta:update for method inviteCompetitorsForTrackingViaEmail
2019-03-20 14:54:30 +01:00
Steffen Jacobs 385ac3ddbb added permission check for event:read and leaderboard:read and
regatta:update for method inviteBuoyTenderViaEmail
2019-03-20 14:51:11 +01:00