Axel Uhl
89e8bef9c8
Revert "removed PluginNature from our OSGi bundles; they are not Eclipse plugins";
...
according to https://bugs.eclipse.org/bugs/show_bug.cgi?id=544977#c21 the
scenario of using the ManifestBuilder without setting the PluginNature is
not a supported scenario. Besides, it doesn't help to get rid of the new
Eclipse warning regarding non-exported packages.
This reverts commit 063484e29f .
2019-05-28 21:54:20 +02:00
Axel Uhl
063484e29f
removed PluginNature from our OSGi bundles; they are not Eclipse plugins
2019-05-27 22:53:30 +02:00
Axel Uhl
2e81eb6f52
Merge remote-tracking branch 'server/master' into bug4821
...
Change-Id: Ieaa9f39a52b67b5c9b1cbabe40419a06c7f9d8e1
2019-05-09 09:38:52 +02:00
Steffen Schaefer
ba3e1cf1b0
Bug 4986: Added test case to verify that meta permission check with
...
ownership lookup works for a wildcard of the action part
2019-04-11 09:39:00 +02:00
Steffen Schaefer
a28e504807
Bug 4986: Implemented test cases for meta permission check with dynamic
...
ownership lookup. One test case still fails because multiple keys aren't
resolved to distinct permissions, yet. This means, it isn't possible to
get a distinct ownership for the permission check.
2019-04-11 09:18:32 +02:00
Steffen Schaefer
cfa4d4d784
Bug 4986: Added test case to verify meta permission check with explicit
...
ownership before implementing ownerships lookup
2019-04-11 09:18:26 +02:00
Steffen Schaefer
b1b0eafa3f
Renamed methods in SecurityService having "any" in their name to
...
explicitly distinct this case from the any check available via
PermissionChecker
2019-03-27 09:14:35 +01:00
Steffen Schaefer
663ce6c1a4
Fixed test failure
2019-03-27 08:30:59 +01:00
Axel Uhl
c4f31460a7
fixed getIdentifier implementation of RoleDefinition/RolePrototype;
...
added tests; remove default constructor from
TypeRelativeObjectIdentifier to avoid confusion; introduced a custom
field serializer instead and use it in QualifiedObjectIdentifierImpl's
custom field serializers.
Change-Id: If6057c21771a8488581ef9f6b401e09ec1b6a8cc
2019-02-27 17:30:09 +01:00
Axel Uhl
ca52320c98
added another failing test for RoleDefinition.getIdentifier management
...
Change-Id: I706e120e86782f95884813a8e62382b870c09d7b
2019-02-27 17:04:01 +01:00
Kai Börnert
3a65aa40c3
Ensure that already escaped identifiers that are stored in the Database
...
will not be escaped again on loading, adjusted test to contain some of
the original offenders
2019-02-21 13:15:48 +01:00
Axel Uhl
d8ffb5ae7f
permission checks for null objects now always pass; some renames and tests
...
Change-Id: I3e5fe27646efd7eb170af6857b647b9aa7da5583
2019-02-20 15:49:11 +01:00
Steffen Schaefer
f1bce79592
Moved several classes from com.sap.sse.security to
...
com.sap.sse.security.interface to allow
com.sap.sse.security.userstore.mongodb to to depend on
com.sap.sse.security anymore
2019-02-14 08:27:28 +01:00
Steffen Schaefer
3868019c0d
Default creation tenant isn't set on user creation anymore. This helps
...
to resolve issues with the creation order of Users and UserGroups as
well as migration issues. In addition this simplifies the setup of
several test cases.
2019-02-11 16:10:13 +01:00
Kai Börnert
8e0effbd78
fixed wrong bundle dependencies
2019-02-11 15:51:55 +01:00
Kai Börnert
24fcdca713
fixed SecurityService being used before existing, fixed hacky way the
...
SecurityServer used Acticator.setSecurityService, fixed deadlock, when
not yet fully constructed SecurityService tried to load the
ReplicatingCache, which requires a working SecurityService to start.
2019-02-07 18:18:58 +01:00
Steffen Schaefer
27338103d4
Fixed test by doing a proper setup of UserStore and
...
AccessControlStoreImpl which includes loading of stored data
2019-02-04 19:00:32 +01:00
Steffen Schaefer
9e25974761
Code formatting change only
2019-01-29 15:42:20 +01:00
Steffen Schaefer
0ccb55daad
Implemented initial unit tests for permission checks for RoleDefinitions
...
associated to UserGroups
2019-01-29 15:40:00 +01:00
Steffen Schaefer
ce4fc5eb04
Extended security DTO model to include RoleDefinitions associated to
...
groups. These will be needed by permission checks.
2019-01-29 14:52:21 +01:00
Steffen Schaefer
42ea70f2aa
Merge branch 'master' into permission-vertical
...
Conflicts:
java/com.sap.sailing.domain.persistence/META-INF/MANIFEST.MF
java/com.sap.sailing.domain.swisstimingadapter.persistence/META-INF/MANIFEST.MF
java/com.sap.sailing.domain.swisstimingadapter.test/META-INF/MANIFEST.MF
java/com.sap.sailing.domain.tractracadapter.persistence/META-INF/MANIFEST.MF
java/com.sap.sailing.server.replication.test/META-INF/MANIFEST.MF
java/com.sap.sailing.server.testsupport/META-INF/MANIFEST.MF
java/com.sap.sailing.server/META-INF/MANIFEST.MF
java/com.sap.sse.security.persistence/META-INF/MANIFEST.MF
java/com.sap.sse.security.test/META-INF/MANIFEST.MF
java/com.sap.sse.security.userstore.mongodb/META-INF/MANIFEST.MF
2019-01-28 09:58:30 +01:00
Axel Uhl
878e5d9dd2
upgraded the MongoDB driver to version 3.6.4; upgraded target platform
...
Change-Id: I621d4af6d3a3b0bcbf70310f731153cacfecebfc
2019-01-25 16:46:46 +01:00
Steffen Schaefer
f0cb402863
Clear all security collections in UserStoreWithPersistenceTest to fix
...
several failing test cases
2019-01-24 11:54:00 +01:00
Steffen Schaefer
b246f872ad
Explicitly loading users (not loaded automatically anymore) in several
...
test cases to fix test failures
2019-01-24 11:52:55 +01:00
Steffen Schaefer
ddda0835d7
LoginTest needs to also clear existing sessions to work
...
deterministically
2019-01-24 11:51:25 +01:00
Kai Börnert
deeb4bd01a
simplify tests to not reload all users from db at setup
2019-01-22 16:49:02 +01:00
Kai Börnert
8bac619d5e
changed clearState to properly reinitialize all security related
...
services to the state a clean server startup would create
2019-01-17 15:06:20 +01:00
Kai Börnert
6b09b095f0
adjusted non Selenium Tests to userStore startup changes
2019-01-17 12:12:36 +01:00
Steffen Schaefer
c315d811e7
Removed method parameter by introducing specific handling for
...
ExpeditionDeviceConfiguration that has the server name included in the
type relative object identifier
2018-12-19 09:52:34 +01:00
Thomas Wiese
475356f8b8
Merge branch 'permission-vertical' into bug4813
...
# Conflicts:
# java/com.sap.sailing.domain.swisstimingadapter.persistence/src/com/sap/sailing/domain/swisstimingadapter/persistence/impl/SwissTimingAdapterPersistenceImpl.java
# java/com.sap.sailing.server.gateway/src/com/sap/sailing/server/gateway/jaxrs/api/EventsResource.java
2018-12-18 13:32:12 +01:00
Kai Börnert
cd2eafc80e
adjusted securityservice to allow different ownerTenant for
...
createSimpleUser than the default one.
2018-12-18 10:08:53 +01:00
Thomas Wiese
30fd1965a3
bug 4813: fixed some gwt problems
2018-12-17 18:51:41 +01:00
Thomas Wiese
a387055f95
bug 4813: building the identifier for permissions checks is now be done
...
by supporting a TypeRelativeObjectIdentifer object that has to be built
by domain objects
2018-12-17 15:49:44 +01:00
Steffen Schaefer
1e00d2d194
Merge branch 'master' into permission-vertical
...
# Conflicts:
# java/com.sap.sailing.domain.persistence/META-INF/MANIFEST.MF
# java/com.sap.sailing.domain.racelogtrackingadapter/META-INF/MANIFEST.MF
# java/com.sap.sailing.domain.swisstimingadapter.persistence/META-INF/MANIFEST.MF
# java/com.sap.sailing.domain.swisstimingadapter.persistence/src/com/sap/sailing/domain/swisstimingadapter/persistence/impl/SwissTimingAdapterPersistenceImpl.java
# java/com.sap.sailing.domain.swisstimingadapter.test/META-INF/MANIFEST.MF
# java/com.sap.sailing.domain.tractracadapter.persistence/META-INF/MANIFEST.MF
# java/com.sap.sailing.domain.tractracadapter.persistence/src/com/sap/sailing/domain/tractracadapter/persistence/impl/MongoObjectFactoryImpl.java
# java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/server/DataMiningServiceImpl.java
# java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/server/SailingServiceImpl.java
# java/com.sap.sailing.polars.datamining/META-INF/MANIFEST.MF
# java/com.sap.sailing.server.gateway.test/src/com/sap/sailing/server/gateway/test/jaxrs/AbstractJaxRsApiTest.java
# java/com.sap.sailing.server.interface/src/com/sap/sailing/server/interfaces/RacingEventService.java
# java/com.sap.sailing.server.replication.test/META-INF/MANIFEST.MF
# java/com.sap.sailing.server.replication.test/src/com/sap/sailing/server/replication/test/TrackRaceReplicationTest.java
# java/com.sap.sailing.server.test/src/com/sap/sailing/server/test/TaggingServiceTest.java
# java/com.sap.sailing.server.testsupport/META-INF/MANIFEST.MF
# java/com.sap.sailing.server/META-INF/MANIFEST.MF
# java/com.sap.sailing.server/src/com/sap/sailing/server/impl/Activator.java
# java/com.sap.sailing.server/src/com/sap/sailing/server/impl/RacingEventServiceImpl.java
# java/com.sap.sailing.server/src/com/sap/sailing/server/tagging/TaggingServiceImpl.java
# java/com.sap.sse.mail.replication.testsupport/src/com/sap/sse/mail/replication/testsupport/AbstractMailServiceReplicationTest.java
# java/com.sap.sse.security.test/META-INF/MANIFEST.MF
# java/com.sap.sse.security.test/src/com/sap/sse/security/jaxrs/api/SecurityResourceTest.java
# java/com.sap.sse.security.test/src/com/sap/sse/security/test/UserStoreWithPersistenceTest.java
# java/com.sap.sse.security.userstore.mongodb/META-INF/MANIFEST.MF
# java/com.sap.sse.security.userstore.mongodb/src/com/sap/sse/security/userstore/mongodb/MongoObjectFactory.java
# java/com.sap.sse.security.userstore.mongodb/src/com/sap/sse/security/userstore/mongodb/impl/DomainObjectFactoryImpl.java
# java/com.sap.sse.security.userstore.mongodb/src/com/sap/sse/security/userstore/mongodb/impl/MongoObjectFactoryImpl.java
# java/com.sap.sse.security/src/com/sap/sse/security/impl/SecurityServiceImpl.java
2018-12-17 14:36:37 +01:00
Axel Uhl
0d83637a2e
fixed failing test by passing and later removing the InheritableThreadLocals
...
Change-Id: Ib0fd099f40b2dd47d8283220fd77512e01bf7320
2018-12-13 11:44:05 +01:00
Axel Uhl
48f1fb9ce5
bug4821: starting with a simple failing test case
...
Change-Id: Idb035da306b0d4f8bc0f99b6a32b53f6b4f40e8d
2018-12-12 17:21:33 +01:00
Thomas Wiese
534dca5186
bug 4813: clean method names in HasPermissions to distinguish between object or type relative identifers as parameter
2018-12-12 09:05:43 +01:00
Axel Uhl
9a08f9c9e9
fixed various DB handling after Mongo 3.x upgrade; made *.security.replication.test an eclipse-test-plugin
...
Change-Id: Ibbe80a15b6adce78c457a81009d387dbd74d9186
2018-12-11 12:56:50 +01:00
Axel Uhl
914be75f91
warning-free workspace after upgrading to MongoDB 3.x APIs, eliminating deprecation issues
...
Change-Id: I9773b899e140871f5fa4b865ca6d2116bf73c642
2018-12-10 23:22:20 +01:00
Axel Uhl
4dd9f10e2c
removed further deprecations by switching imports from junit.* to org.junit
2018-12-10 03:46:28 +01:00
Axel Uhl
d8c2cf8cd3
upgraded target platform to newer MongoDB driver from org.eclipse.orbit;
...
A 3.x driver is required to connect to Microsoft Azure Cosmos. Upgrading
the target platform accordingly requires further upgrades, including Hamcrest
and JUnit libraries. This, in turn, deprecates or obsoletes numerous APIs,
parts of which that caused compilation *errors* I've replaced by their new
counterparts. Several more warnings still remain and need to be tackled by
replacing the usages to their new counterparts.
2018-12-10 03:00:59 +01:00
Thomas Wiese
09e0f12fbc
bug 4813: use concrete object instead of typerelative identifier to
...
build QualifiedObjectIdentifiers by delegation to the identiferstrategy
of the permissions type
2018-12-07 14:09:57 +01:00
Thomas Wiese
b965882121
bug 4813: add getPermissionForObject-method to accept domain object.
...
Setting the corresponding method based on
typerelativeObjetctIdentigfiers to deprecated.
Continued transition to type based id determination for
SecureDomainTypes SEVRER and MEDIA_TRACK.
2018-12-06 14:21:03 +01:00
Thomas Wiese
669bcea2b4
bug 4813: remove generics from HasPermissions
2018-12-05 17:54:07 +01:00
Thomas Wiese
b2930b1b8e
bug 4813: First draft for defining identifier strategy in HasPermissions
...
for SecuredDomainTypes and SecureSecurityTypes to hide complexity and
create a single point of responsibilty for identiferAsString-Logic.
2018-12-04 12:46:19 +01:00
Kai Börnert
561a938a65
further restructuring of dto classes
2018-11-29 14:56:25 +01:00
Kai Börnert
00b9193818
fixes for serialisation
2018-11-28 13:33:16 +01:00
Kai Börnert
3d49644443
cleaned up dtos a little
2018-11-28 09:49:33 +01:00
Kai Börnert
9774654679
split of client and server side data classes
2018-11-28 08:22:47 +01:00
Steffen Jacobs
f57a984a6d
renamed 'getOtherUsersHaveRole'-method in UserStore to
...
'getExistingQualificationsForRoleDefinition'
2018-11-13 09:16:24 +01:00