Commit Graph
187 Commits
Author SHA1 Message Date
Axel Uhl 89e8bef9c8 Revert "removed PluginNature from our OSGi bundles; they are not Eclipse plugins";
according to https://bugs.eclipse.org/bugs/show_bug.cgi?id=544977#c21 the
scenario of using the ManifestBuilder without setting the PluginNature is
not a supported scenario. Besides, it doesn't help to get rid of the new
Eclipse warning regarding non-exported packages.

This reverts commit 063484e29f.
2019-05-28 21:54:20 +02:00
Axel Uhl 063484e29f removed PluginNature from our OSGi bundles; they are not Eclipse plugins 2019-05-27 22:53:30 +02:00
Axel Uhl 2e81eb6f52 Merge remote-tracking branch 'server/master' into bug4821
Change-Id: Ieaa9f39a52b67b5c9b1cbabe40419a06c7f9d8e1
2019-05-09 09:38:52 +02:00
Steffen Schaefer ba3e1cf1b0 Bug 4986: Added test case to verify that meta permission check with
ownership lookup works for a wildcard of the action part
2019-04-11 09:39:00 +02:00
Steffen Schaefer a28e504807 Bug 4986: Implemented test cases for meta permission check with dynamic
ownership lookup. One test case still fails because multiple keys aren't
resolved to distinct permissions, yet. This means, it isn't possible to
get a distinct ownership for the permission check.
2019-04-11 09:18:32 +02:00
Steffen Schaefer cfa4d4d784 Bug 4986: Added test case to verify meta permission check with explicit
ownership before implementing ownerships lookup
2019-04-11 09:18:26 +02:00
Steffen Schaefer b1b0eafa3f Renamed methods in SecurityService having "any" in their name to
explicitly distinct this case from the any check available via
PermissionChecker
2019-03-27 09:14:35 +01:00
Steffen Schaefer 663ce6c1a4 Fixed test failure 2019-03-27 08:30:59 +01:00
Axel Uhl c4f31460a7 fixed getIdentifier implementation of RoleDefinition/RolePrototype;
added tests; remove default constructor from
TypeRelativeObjectIdentifier to avoid confusion; introduced a custom
field serializer instead and use it in QualifiedObjectIdentifierImpl's
custom field serializers.

Change-Id: If6057c21771a8488581ef9f6b401e09ec1b6a8cc
2019-02-27 17:30:09 +01:00
Axel Uhl ca52320c98 added another failing test for RoleDefinition.getIdentifier management
Change-Id: I706e120e86782f95884813a8e62382b870c09d7b
2019-02-27 17:04:01 +01:00
Kai Börnert 3a65aa40c3 Ensure that already escaped identifiers that are stored in the Database
will not be escaped again on loading, adjusted test to contain some of
the original offenders
2019-02-21 13:15:48 +01:00
Axel Uhl d8ffb5ae7f permission checks for null objects now always pass; some renames and tests
Change-Id: I3e5fe27646efd7eb170af6857b647b9aa7da5583
2019-02-20 15:49:11 +01:00
Steffen Schaefer f1bce79592 Moved several classes from com.sap.sse.security to
com.sap.sse.security.interface to allow
com.sap.sse.security.userstore.mongodb to to depend on
com.sap.sse.security anymore
2019-02-14 08:27:28 +01:00
Steffen Schaefer 3868019c0d Default creation tenant isn't set on user creation anymore. This helps
to resolve issues with the creation order of Users and UserGroups as
well as migration issues. In addition this simplifies the setup of
several test cases.
2019-02-11 16:10:13 +01:00
Kai Börnert 8e0effbd78 fixed wrong bundle dependencies 2019-02-11 15:51:55 +01:00
Kai Börnert 24fcdca713 fixed SecurityService being used before existing, fixed hacky way the
SecurityServer used Acticator.setSecurityService, fixed deadlock, when
not yet fully constructed SecurityService tried to load the
ReplicatingCache, which requires a working SecurityService to start.
2019-02-07 18:18:58 +01:00
Steffen Schaefer 27338103d4 Fixed test by doing a proper setup of UserStore and
AccessControlStoreImpl which includes loading of stored data
2019-02-04 19:00:32 +01:00
Steffen Schaefer 9e25974761 Code formatting change only 2019-01-29 15:42:20 +01:00
Steffen Schaefer 0ccb55daad Implemented initial unit tests for permission checks for RoleDefinitions
associated to UserGroups
2019-01-29 15:40:00 +01:00
Steffen Schaefer ce4fc5eb04 Extended security DTO model to include RoleDefinitions associated to
groups. These will be needed by permission checks.
2019-01-29 14:52:21 +01:00
Steffen Schaefer 42ea70f2aa Merge branch 'master' into permission-vertical
Conflicts:
	java/com.sap.sailing.domain.persistence/META-INF/MANIFEST.MF
	java/com.sap.sailing.domain.swisstimingadapter.persistence/META-INF/MANIFEST.MF
	java/com.sap.sailing.domain.swisstimingadapter.test/META-INF/MANIFEST.MF
	java/com.sap.sailing.domain.tractracadapter.persistence/META-INF/MANIFEST.MF
	java/com.sap.sailing.server.replication.test/META-INF/MANIFEST.MF
	java/com.sap.sailing.server.testsupport/META-INF/MANIFEST.MF
	java/com.sap.sailing.server/META-INF/MANIFEST.MF
	java/com.sap.sse.security.persistence/META-INF/MANIFEST.MF
	java/com.sap.sse.security.test/META-INF/MANIFEST.MF
	java/com.sap.sse.security.userstore.mongodb/META-INF/MANIFEST.MF
2019-01-28 09:58:30 +01:00
Axel Uhl 878e5d9dd2 upgraded the MongoDB driver to version 3.6.4; upgraded target platform
Change-Id: I621d4af6d3a3b0bcbf70310f731153cacfecebfc
2019-01-25 16:46:46 +01:00
Steffen Schaefer f0cb402863 Clear all security collections in UserStoreWithPersistenceTest to fix
several failing test cases
2019-01-24 11:54:00 +01:00
Steffen Schaefer b246f872ad Explicitly loading users (not loaded automatically anymore) in several
test cases to fix test failures
2019-01-24 11:52:55 +01:00
Steffen Schaefer ddda0835d7 LoginTest needs to also clear existing sessions to work
deterministically
2019-01-24 11:51:25 +01:00
Kai Börnert deeb4bd01a simplify tests to not reload all users from db at setup 2019-01-22 16:49:02 +01:00
Kai Börnert 8bac619d5e changed clearState to properly reinitialize all security related
services to the state a clean server startup would create
2019-01-17 15:06:20 +01:00
Kai Börnert 6b09b095f0 adjusted non Selenium Tests to userStore startup changes 2019-01-17 12:12:36 +01:00
Steffen Schaefer c315d811e7 Removed method parameter by introducing specific handling for
ExpeditionDeviceConfiguration that has the server name included in the
type relative object identifier
2018-12-19 09:52:34 +01:00
Thomas Wiese 475356f8b8 Merge branch 'permission-vertical' into bug4813
# Conflicts:
#	java/com.sap.sailing.domain.swisstimingadapter.persistence/src/com/sap/sailing/domain/swisstimingadapter/persistence/impl/SwissTimingAdapterPersistenceImpl.java
#	java/com.sap.sailing.server.gateway/src/com/sap/sailing/server/gateway/jaxrs/api/EventsResource.java
2018-12-18 13:32:12 +01:00
Kai Börnert cd2eafc80e adjusted securityservice to allow different ownerTenant for
createSimpleUser than the default one.
2018-12-18 10:08:53 +01:00
Thomas Wiese 30fd1965a3 bug 4813: fixed some gwt problems 2018-12-17 18:51:41 +01:00
Thomas Wiese a387055f95 bug 4813: building the identifier for permissions checks is now be done
by supporting a TypeRelativeObjectIdentifer object that has to be built
by domain objects
2018-12-17 15:49:44 +01:00
Steffen Schaefer 1e00d2d194 Merge branch 'master' into permission-vertical
# Conflicts:
#	java/com.sap.sailing.domain.persistence/META-INF/MANIFEST.MF
#	java/com.sap.sailing.domain.racelogtrackingadapter/META-INF/MANIFEST.MF
#	java/com.sap.sailing.domain.swisstimingadapter.persistence/META-INF/MANIFEST.MF
#	java/com.sap.sailing.domain.swisstimingadapter.persistence/src/com/sap/sailing/domain/swisstimingadapter/persistence/impl/SwissTimingAdapterPersistenceImpl.java
#	java/com.sap.sailing.domain.swisstimingadapter.test/META-INF/MANIFEST.MF
#	java/com.sap.sailing.domain.tractracadapter.persistence/META-INF/MANIFEST.MF
#	java/com.sap.sailing.domain.tractracadapter.persistence/src/com/sap/sailing/domain/tractracadapter/persistence/impl/MongoObjectFactoryImpl.java
#	java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/server/DataMiningServiceImpl.java
#	java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/server/SailingServiceImpl.java
#	java/com.sap.sailing.polars.datamining/META-INF/MANIFEST.MF
#	java/com.sap.sailing.server.gateway.test/src/com/sap/sailing/server/gateway/test/jaxrs/AbstractJaxRsApiTest.java
#	java/com.sap.sailing.server.interface/src/com/sap/sailing/server/interfaces/RacingEventService.java
#	java/com.sap.sailing.server.replication.test/META-INF/MANIFEST.MF
#	java/com.sap.sailing.server.replication.test/src/com/sap/sailing/server/replication/test/TrackRaceReplicationTest.java
#	java/com.sap.sailing.server.test/src/com/sap/sailing/server/test/TaggingServiceTest.java
#	java/com.sap.sailing.server.testsupport/META-INF/MANIFEST.MF
#	java/com.sap.sailing.server/META-INF/MANIFEST.MF
#	java/com.sap.sailing.server/src/com/sap/sailing/server/impl/Activator.java
#	java/com.sap.sailing.server/src/com/sap/sailing/server/impl/RacingEventServiceImpl.java
#	java/com.sap.sailing.server/src/com/sap/sailing/server/tagging/TaggingServiceImpl.java
#	java/com.sap.sse.mail.replication.testsupport/src/com/sap/sse/mail/replication/testsupport/AbstractMailServiceReplicationTest.java
#	java/com.sap.sse.security.test/META-INF/MANIFEST.MF
#	java/com.sap.sse.security.test/src/com/sap/sse/security/jaxrs/api/SecurityResourceTest.java
#	java/com.sap.sse.security.test/src/com/sap/sse/security/test/UserStoreWithPersistenceTest.java
#	java/com.sap.sse.security.userstore.mongodb/META-INF/MANIFEST.MF
#	java/com.sap.sse.security.userstore.mongodb/src/com/sap/sse/security/userstore/mongodb/MongoObjectFactory.java
#	java/com.sap.sse.security.userstore.mongodb/src/com/sap/sse/security/userstore/mongodb/impl/DomainObjectFactoryImpl.java
#	java/com.sap.sse.security.userstore.mongodb/src/com/sap/sse/security/userstore/mongodb/impl/MongoObjectFactoryImpl.java
#	java/com.sap.sse.security/src/com/sap/sse/security/impl/SecurityServiceImpl.java
2018-12-17 14:36:37 +01:00
Axel Uhl 0d83637a2e fixed failing test by passing and later removing the InheritableThreadLocals
Change-Id: Ib0fd099f40b2dd47d8283220fd77512e01bf7320
2018-12-13 11:44:05 +01:00
Axel Uhl 48f1fb9ce5 bug4821: starting with a simple failing test case
Change-Id: Idb035da306b0d4f8bc0f99b6a32b53f6b4f40e8d
2018-12-12 17:21:33 +01:00
Thomas Wiese 534dca5186 bug 4813: clean method names in HasPermissions to distinguish between object or type relative identifers as parameter 2018-12-12 09:05:43 +01:00
Axel Uhl 9a08f9c9e9 fixed various DB handling after Mongo 3.x upgrade; made *.security.replication.test an eclipse-test-plugin
Change-Id: Ibbe80a15b6adce78c457a81009d387dbd74d9186
2018-12-11 12:56:50 +01:00
Axel Uhl 914be75f91 warning-free workspace after upgrading to MongoDB 3.x APIs, eliminating deprecation issues
Change-Id: I9773b899e140871f5fa4b865ca6d2116bf73c642
2018-12-10 23:22:20 +01:00
Axel Uhl 4dd9f10e2c removed further deprecations by switching imports from junit.* to org.junit 2018-12-10 03:46:28 +01:00
Axel Uhl d8c2cf8cd3 upgraded target platform to newer MongoDB driver from org.eclipse.orbit;
A 3.x driver is required to connect to Microsoft Azure Cosmos. Upgrading
the target platform accordingly requires further upgrades, including Hamcrest
and JUnit libraries. This, in turn, deprecates or obsoletes numerous APIs,
parts of which that caused compilation *errors* I've replaced by their new
counterparts. Several more warnings still remain and need to be tackled by
replacing the usages to their new counterparts.
2018-12-10 03:00:59 +01:00
Thomas Wiese 09e0f12fbc bug 4813: use concrete object instead of typerelative identifier to
build QualifiedObjectIdentifiers by delegation to the identiferstrategy
of the permissions type
2018-12-07 14:09:57 +01:00
Thomas Wiese b965882121 bug 4813: add getPermissionForObject-method to accept domain object.
Setting the corresponding method based on
typerelativeObjetctIdentigfiers to deprecated.
Continued transition to type based id determination for
SecureDomainTypes SEVRER and MEDIA_TRACK.
2018-12-06 14:21:03 +01:00
Thomas Wiese 669bcea2b4 bug 4813: remove generics from HasPermissions 2018-12-05 17:54:07 +01:00
Thomas Wiese b2930b1b8e bug 4813: First draft for defining identifier strategy in HasPermissions
for SecuredDomainTypes and SecureSecurityTypes to hide complexity and
create a single point of responsibilty for identiferAsString-Logic.
2018-12-04 12:46:19 +01:00
Kai Börnert 561a938a65 further restructuring of dto classes 2018-11-29 14:56:25 +01:00
Kai Börnert 00b9193818 fixes for serialisation 2018-11-28 13:33:16 +01:00
Kai Börnert 3d49644443 cleaned up dtos a little 2018-11-28 09:49:33 +01:00
Kai Börnert 9774654679 split of client and server side data classes 2018-11-28 08:22:47 +01:00
Steffen Jacobs f57a984a6d renamed 'getOtherUsersHaveRole'-method in UserStore to
'getExistingQualificationsForRoleDefinition'
2018-11-13 09:16:24 +01:00