eclipse-sailing-analytics/sailing-analytics
1
0 Fork 0
mirror of https://github.com/eclipse-sailing-analytics/sailing-analytics.git synced 2026-11-09 12:31:00 +00:00
Code Activity
48,882 Commits 290 Branches 292 Tags
b2af511ca5b71767da7cd9ff434bb925df8fdcd6
Commit Graph
588 Commits
Author SHA1 Message Date
Benjamin Barth ce16cdc17f Merge branch 'permission-vertical' into bug4994 2019-04-18 10:18:10 +02:00
Axel Uhl 523d12b9a4 prefer POST body parameters for create_user, specifically for password 
Change-Id: I3c7790f08874ab0e8681ad4cdd29541a1a151f91
 2019-04-17 16:36:12 +02:00
Benjamin Barth fe9eb4c3d7 bug4994 Display name of owned object is now passed to SecurityService 2019-04-15 14:15:19 +02:00
Steffen Schaefer 70a9de04b5 Replaced several functional interfaces in com.sap.sse.common.Util with 
their Java 8 counterpart
 2019-04-11 12:57:36 +02:00
Steffen Schaefer c1a640daeb Bug 4986: Implemented meta permission check with ownership lookup in 
SecurityService
 2019-04-11 09:18:37 +02:00
Steffen Schaefer 6a52392c87 Bug 4983: Ensures that migrated users don't have the server group set as 
owner. This is now consistent to newly created users.
 2019-04-10 14:21:03 +02:00
Kai Börnert 90ece8d2c8 bug4978 remove default tenant being set in the low level api preventing 
null group owners
 2019-04-09 18:09:03 +02:00
Steffen Schaefer 4e433e2f98 Bug 4963: Replicator actions are now part of the SERVER security type 2019-04-03 13:15:53 +02:00
Steffen Schaefer 497008bd93 Bug 4963: Moved REPLICATOR security type to SecuredSecurityTypes as it 
is part of SSE and not the sailing domain
 2019-04-03 11:18:30 +02:00
Steffen Schaefer 9f3c5e9dda Bug 4963: ReplicationMasterDescriptor is now aware of a bearer token. 
The token is currently not given to remote calls and UI fields are
added.
 2019-04-03 09:15:23 +02:00
Steffen Schaefer 58021d970f Bug 4963: bearer token resolution is now skipped if no username or 
password is given
 2019-04-03 09:07:34 +02:00
Steffen Schaefer dba8cb7606 Bug 4963: Moved the logic to resolve a bearer token for a remote server 
from SailingServiceImpl to a newly created util. This allows us to reuse
this functionality in other services later.
 2019-04-03 09:01:21 +02:00
Steffen Schaefer 278018e6fc Fixed potential NPE when managing ACLs for the null group 2019-04-01 15:15:40 +02:00
Steffen Schaefer f8af4c5e39 Bug 4961: Produce a nicer error on failing permission checks due to 
using an identifier which is already taken by another existing instance.
 2019-04-01 12:01:07 +02:00
Steffen Jacobs 9e16206522 Bug 4933: added method 
setOwnershipWithoutCheckPermissionForObjectCreationAndRevertOnError with
different overloading similar to commit
5a43660474
 2019-03-29 18:32:10 +01:00
Steffen Jacobs 4067fe9fed Bug 4933: refactored 
setOwnershipCheckPermissionForObjectCreationAndRevertOnError and related
methods to reduce code duplication
 2019-03-29 18:09:02 +01:00
Steffen Jacobs 5a43660474 Bug 4933: added method 
setOwnershipWithoutCheckPermissionForObjectCreationAndRevertOnError that
allows to set t he ownership and revert on error for creating an object
without checking SERVER:CREATE_OBJECT
 2019-03-29 18:04:13 +01:00
Steffen Jacobs b3150b83a5 Bug 4913: removed wrapping of UnauthorizedException in 
SecurityServiceImpl.checkPermissionAndDeleteOwnershipForObjectRemoval
 2019-03-28 16:19:50 +01:00
Steffen Schaefer f832d34b53 Bug 4912: No result importer URL types are shown if the user may not 
READ any associated URL
 2019-03-27 09:25:37 +01:00
Steffen Schaefer b1b0eafa3f Renamed methods in SecurityService having "any" in their name to 
explicitly distinct this case from the any check available via
PermissionChecker
 2019-03-27 09:14:35 +01:00
Steffen Schaefer 20031b7454 Bug 4912: Implemented more server-side permission checks regarding 
result importer URLs (WIP)
 2019-03-27 09:11:42 +01:00
Steffen Schaefer 5daf0b99aa Fixed NPE 2019-03-25 14:14:56 +01:00
Steffen Schaefer 6214b25615 Initial RoleDefinitions are now made public by an ACL entry instead of 
granting explicit permissions for the <all> user
 2019-03-25 14:11:13 +01:00
Axel Uhl 90b62dbe6b added TODOs regarding autocourse; added missing documentation for remove_access_token 
Change-Id: I73a0c6da432c5682c311d6e404a586a5807e7f11
 2019-03-21 18:15:31 +01:00
Kai Börnert bc4282cd8b bug4905 cleanup qualified roles 2019-03-14 12:45:00 +01:00
Steffen Jacobs c756a4b456 fixed permission check /user in REST API 2019-03-08 10:06:57 +01:00
Steffen Jacobs b8519da010 fixed pruning for competitors and boats 2019-03-07 17:52:07 +01:00
Steffen Jacobs a2c7303c16 Bug 4933: added READ_PUBLIC permission checks for retrieving users in 
back end in UserManagementService and SecurityResource
 2019-03-07 17:23:37 +01:00
Steffen Schaefer 8038361ae2 The initial RoleDefinitions are now readable by the <all> user 2019-03-07 14:24:30 +01:00
Steffen Schaefer 5a9e086958 Replaced ActionWithResult with Callable 2019-03-07 13:21:57 +01:00
Steffen Schaefer 8a7821d121 Users now get a user role for newly created groups including the tenant 
automatically created upon user creation. This allows users to give
others sailing_viewer or user role qualified for their groups. In
addition, users are now consistently owned by themselves but have no
group owner. Also, the user role associations automatically created on
user/group creation are now owned by the user itself.
 2019-02-28 17:04:34 +01:00
Steffen Jacobs fc72cc4b56 Bug 4926: added null checks to prevent NPE when handling ACLs for the 
null user
group
 2019-02-28 11:07:29 +01:00
Axel Uhl 6da1db658e bug4923: fixing NPE for setting ownership with null tenant owner 
Change-Id: I1122bd05f1973a4f36dac7b8d42f6326f9153196
 2019-02-27 10:59:09 +01:00
Axel Uhl 80e40b420c fixed typo in variable name 
Change-Id: Iff1bb77f0adf26eae068b21885da139c8ea2badb
 2019-02-27 10:48:43 +01:00
Axel Uhl 2bfac5896c added security checks for Expedition "all-in-one" import 
Change-Id: Ib216d66358108eea6c85d4e8e5c30dd90df96f24
 2019-02-26 23:23:07 +01:00
Axel Uhl 1f39eeb28a don't serialize User for internalUpdateUserProperties but use username 
Change-Id: Ib5b627b6c6b7cdb9458295e9f91b3a49767ea9e7
 2019-02-22 18:17:38 +01:00
Axel Uhl 1ed6aa7672 formatting only 
Change-Id: I4339298169d92cf58cb975f8b987ee7bcd874970
 2019-02-22 11:56:47 +01:00
Axel Uhl 9dc02945b4 switched userstore.mongodb bundle to Java-8 (why was it on 7 in the first place?) 
Change-Id: Iaf49f243dad6fcce8b16bdea0b2e53a945bb7f2e
 2019-02-22 11:05:04 +01:00
Axel Uhl 2e79fec4c9 Merge remote-tracking branch 'server/permission-vertical' into permission-vertical 
Change-Id: I7af29c81073dace74c130a2715b85052a26e0030
 2019-02-21 17:11:40 +01:00
Axel Uhl 27e1e5c64c don't try to send validation mail if base URL or e-mail address are null 
Change-Id: I13b695cf14010b0efd31b33161179c984b29a709
 2019-02-21 17:00:33 +01:00
Steffen Jacobs 6a7a8f4463 added setDefaultOwnerhsip method in SecurityService 2019-02-21 15:30:02 +01:00
Steffen Jacobs e01d450bb8 also copy roles associated to the group when copying users and role 
associations
 2019-02-21 15:30:00 +01:00
Kai Börnert f788685d58 Merge branch 'permission-vertical' of ssh://trac@sapsailing.com/home/trac/git into permission-vertical 2019-02-21 15:03:57 +01:00
Steffen Schaefer f728d9abe3 Removed solved FIXME 2019-02-21 15:01:03 +01:00
Kai Börnert 375b156a76 improved wording of ownership check log messages 2019-02-21 14:52:18 +01:00
Axel Uhl b5bfdf6f73 Merge remote-tracking branch 'server/permission-vertical' into permission-vertical 
Change-Id: If8f68ba771d9dc17b57c4312b13787cc0588f6fa
 2019-02-21 13:25:31 +01:00
Axel Uhl 7bfddc6926 refactored User-related methods on SecurityService to avoid sending User objects through replication operations; 
this way, no patching of the userGroupProvider property after
de-serialization is necessary, and no replacement of a User object in
the UserStore should ever happen.

Change-Id: I23a8ae53b6a53ca89a2a0b8a11dc779f4034db57
 2019-02-21 13:21:04 +01:00
Steffen Schaefer 20ab3e0b06 Renamed method 2019-02-21 08:48:47 +01:00
Steffen Schaefer 6e34168370 Implemented convenience method 
SecurityService.cleanOwnershipAndAclOnObjectRemoval to be used in cases
where security related information needs to be cleared for a object to
be removed
 2019-02-21 08:33:31 +01:00
Axel Uhl d8ffb5ae7f permission checks for null objects now always pass; some renames and tests 
Change-Id: I3e5fe27646efd7eb170af6857b647b9aa7da5583
 2019-02-20 15:49:11 +01:00