Commit Graph
335 Commits
Author SHA1 Message Date
Axel Uhl d19bd2a7f3 "migrate" SERVER object also after receiving initial load, ensuring that a newly created server group is used for the SERVER object's group ownership 2020-02-13 18:41:31 +01:00
Axel Uhl 3a2a1c947a re-use existing method to create a user group in SecurityServiceImpl with replication 2020-02-13 17:50:10 +01:00
Axel Uhl ab11635966 compute the UUID for the new server group once and not as part of the create operation 2020-02-13 17:44:32 +01:00
Axel Uhl 75bd23f840 fixed bug: initial server group creation must not use "store" as captured object in the operation;
otherwise, the entire SecurityServiceImpl object will be serialized
which fails
2020-02-13 17:36:44 +01:00
Steffen Schaefer 341abf655f Bug 5195: Several adjustments to ensure consistent usage of
RoleDefinitions for RolePrototypes in the security model to prevent
incompatible usages of objects that effectively represent the same
RoleDefinition.
2020-02-11 13:04:30 +01:00
Axel Uhl 91033f1b25 improved logging for initial load in SecurityServiceImpl 2020-02-06 08:43:26 +01:00
Axel Uhl 9ab246433c fixed logging 2020-02-04 10:06:05 +01:00
Axel Uhl 99a04487b1 bug5193: adjusting server group in UserStore after receiving initial load 2020-02-03 18:47:06 +01:00
Axel Uhl 56df584d17 Merge branch 'master' into bug5085 2020-01-16 09:17:55 +01:00
Axel Uhl ddf94e9bb3 added GET/PUT requests for ownerships and ACLs 2020-01-15 18:03:29 +01:00
Steffen Schaefer 4c866c4097 Merge branch 'master' into bug5085 2020-01-08 08:43:20 +01:00
Axel Uhl aacc30ef55 bug5171: avoid concurrent modification exception when deleting user 2020-01-07 11:01:59 +01:00
Axel Uhl 1c4f74fb00 Merge branch 'master' into bug5085 2019-12-18 10:10:15 +01:00
Axel Uhl 62935b588f introduced new parameter markPropertiesGroupOwnership for CourseConfigurationResource.createCourseTemplate and createCourse 2019-12-17 19:09:54 +01:00
Axel Uhl 4b69e93292 fixed NPE in TrackedRaceWithContext.getRelativeScoreForCompetitor in case one or more competitors don't have a score in a race, such as a medal race 2019-12-16 15:33:07 +01:00
Axel Uhl 944a7e5873 Merge branch 'master' into bug5085 2019-12-13 12:28:16 +01:00
Axel Uhl 53f61a2e7a added more test data; factored the -tenant suffix into a constant 2019-11-25 17:24:51 +01:00
Steffen Schaefer 4b80c18f98 Merge branch 'master' into bug5085
Conflicts:
	java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/client/StringMessages.java
	java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/client/StringMessages.properties
	java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/client/StringMessages_de.properties
	java/com.sap.sse.security.ui/src/main/java/com/sap/sse/security/ui/client/i18n/StringMessages.properties
2019-11-11 14:55:56 +01:00
Axel Uhl 83ddb13865 bug5048: integrated CrossDomainStorage with UserService; not tested yet... 2019-11-08 13:10:57 +01:00
Axel Uhl d69bf17769 renamed sharedAcrossSubdomains to sharedAcrossSubdomainsOf 2019-11-05 23:52:16 +01:00
Axel Uhl 31f0e719f1 bug4903: introduce new system property security.sharedAcrossSubdomains and replicate through SecurityService 2019-11-05 18:07:36 +01:00
Steffen Schaefer 11a75b2e8c Bug 5085: Renamed WithQualifiedObjectIdentifier.getType to
WithQualifiedObjectIdentifier.getPermissionType
2019-08-13 10:37:33 +02:00
Steffen Jacobs 02b59ca833 Bug 5080: added convenience method to the SecurityService which calls
hasCurrentUserMetaPermissionsOfRoleDefinitionWithQualification for each
RoleDefinition in a set of RoleDefinitions.
2019-06-27 14:19:08 +02:00
Axel Uhl 82786a38ae fixed initialization of AccessControlStore internal structures after initial load;
the userToOwnership and userGroupToOwnership structures weren't
correctly filled because of a missing call to
internalSetOwnershipAndMapUserAndUserGroupToOwnership for cleanly
updating the internal structures. This caused problems when deleting
users or groups in replication scenarios.

Change-Id: I656090242d40e9792a46835440eaf6865f3434a7
2019-06-27 00:24:29 +02:00
Steffen Schaefer 2a0f5cdca7 Merge branch 'master' into bug5047 2019-05-29 10:09:18 +02:00
Steffen Schaefer b330981b40 Bug 5047: Simplified the various map and filter methods in
SecurityService by removing the redundant HasPermissions parameter. This
can now be obtained from the given WithQualifiedObjectIdentifier values.
2019-05-29 10:00:53 +02:00
Steffen Schaefer 9f965a9218 Bug 5040: Improved permission check in MasterDataResource and reduced
code duplication by introducing
SecurityService.checkCurrentUserServerPermission
2019-05-27 10:36:18 +02:00
Steffen Jacobs aabb0da7b8 Bug 5040: fixed server permission check 2019-05-21 14:27:34 +02:00
Steffen Jacobs 4d6196b096 Bug 5040: added method to check if user has a server permission to
SecurityService
2019-05-16 17:19:46 +02:00
Axel Uhl e83bea13bd fixed create permission checks for Expedition Device Configurations 2019-04-27 12:17:09 +02:00
Benjamin Barth fe9eb4c3d7 bug4994 Display name of owned object is now passed to SecurityService 2019-04-15 14:15:19 +02:00
Steffen Schaefer 70a9de04b5 Replaced several functional interfaces in com.sap.sse.common.Util with
their Java 8 counterpart
2019-04-11 12:57:36 +02:00
Steffen Schaefer c1a640daeb Bug 4986: Implemented meta permission check with ownership lookup in
SecurityService
2019-04-11 09:18:37 +02:00
Steffen Schaefer 6a52392c87 Bug 4983: Ensures that migrated users don't have the server group set as
owner. This is now consistent to newly created users.
2019-04-10 14:21:03 +02:00
Kai Börnert 90ece8d2c8 bug4978 remove default tenant being set in the low level api preventing
null group owners
2019-04-09 18:09:03 +02:00
Steffen Schaefer 278018e6fc Fixed potential NPE when managing ACLs for the null group 2019-04-01 15:15:40 +02:00
Steffen Schaefer f8af4c5e39 Bug 4961: Produce a nicer error on failing permission checks due to
using an identifier which is already taken by another existing instance.
2019-04-01 12:01:07 +02:00
Steffen Jacobs 9e16206522 Bug 4933: added method
setOwnershipWithoutCheckPermissionForObjectCreationAndRevertOnError with
different overloading similar to commit
5a43660474
2019-03-29 18:32:10 +01:00
Steffen Jacobs 4067fe9fed Bug 4933: refactored
setOwnershipCheckPermissionForObjectCreationAndRevertOnError and related
methods to reduce code duplication
2019-03-29 18:09:02 +01:00
Steffen Jacobs 5a43660474 Bug 4933: added method
setOwnershipWithoutCheckPermissionForObjectCreationAndRevertOnError that
allows to set t he ownership and revert on error for creating an object
without checking SERVER:CREATE_OBJECT
2019-03-29 18:04:13 +01:00
Steffen Jacobs b3150b83a5 Bug 4913: removed wrapping of UnauthorizedException in
SecurityServiceImpl.checkPermissionAndDeleteOwnershipForObjectRemoval
2019-03-28 16:19:50 +01:00
Steffen Schaefer f832d34b53 Bug 4912: No result importer URL types are shown if the user may not
READ any associated URL
2019-03-27 09:25:37 +01:00
Steffen Schaefer b1b0eafa3f Renamed methods in SecurityService having "any" in their name to
explicitly distinct this case from the any check available via
PermissionChecker
2019-03-27 09:14:35 +01:00
Steffen Schaefer 20031b7454 Bug 4912: Implemented more server-side permission checks regarding
result importer URLs (WIP)
2019-03-27 09:11:42 +01:00
Steffen Schaefer 5daf0b99aa Fixed NPE 2019-03-25 14:14:56 +01:00
Steffen Schaefer 6214b25615 Initial RoleDefinitions are now made public by an ACL entry instead of
granting explicit permissions for the <all> user
2019-03-25 14:11:13 +01:00
Kai Börnert bc4282cd8b bug4905 cleanup qualified roles 2019-03-14 12:45:00 +01:00
Steffen Jacobs b8519da010 fixed pruning for competitors and boats 2019-03-07 17:52:07 +01:00
Steffen Schaefer 8038361ae2 The initial RoleDefinitions are now readable by the <all> user 2019-03-07 14:24:30 +01:00
Steffen Schaefer 5a9e086958 Replaced ActionWithResult with Callable 2019-03-07 13:21:57 +01:00