Axel Uhl
d19bd2a7f3
"migrate" SERVER object also after receiving initial load, ensuring that a newly created server group is used for the SERVER object's group ownership
2020-02-13 18:41:31 +01:00
Axel Uhl
3a2a1c947a
re-use existing method to create a user group in SecurityServiceImpl with replication
2020-02-13 17:50:10 +01:00
Axel Uhl
ab11635966
compute the UUID for the new server group once and not as part of the create operation
2020-02-13 17:44:32 +01:00
Axel Uhl
75bd23f840
fixed bug: initial server group creation must not use "store" as captured object in the operation;
...
otherwise, the entire SecurityServiceImpl object will be serialized
which fails
2020-02-13 17:36:44 +01:00
Steffen Schaefer
341abf655f
Bug 5195: Several adjustments to ensure consistent usage of
...
RoleDefinitions for RolePrototypes in the security model to prevent
incompatible usages of objects that effectively represent the same
RoleDefinition.
2020-02-11 13:04:30 +01:00
Axel Uhl
91033f1b25
improved logging for initial load in SecurityServiceImpl
2020-02-06 08:43:26 +01:00
Axel Uhl
9ab246433c
fixed logging
2020-02-04 10:06:05 +01:00
Axel Uhl
99a04487b1
bug5193: adjusting server group in UserStore after receiving initial load
2020-02-03 18:47:06 +01:00
Axel Uhl
56df584d17
Merge branch 'master' into bug5085
2020-01-16 09:17:55 +01:00
Axel Uhl
ddf94e9bb3
added GET/PUT requests for ownerships and ACLs
2020-01-15 18:03:29 +01:00
Steffen Schaefer
4c866c4097
Merge branch 'master' into bug5085
2020-01-08 08:43:20 +01:00
Axel Uhl
aacc30ef55
bug5171: avoid concurrent modification exception when deleting user
2020-01-07 11:01:59 +01:00
Axel Uhl
1c4f74fb00
Merge branch 'master' into bug5085
2019-12-18 10:10:15 +01:00
Axel Uhl
62935b588f
introduced new parameter markPropertiesGroupOwnership for CourseConfigurationResource.createCourseTemplate and createCourse
2019-12-17 19:09:54 +01:00
Axel Uhl
4b69e93292
fixed NPE in TrackedRaceWithContext.getRelativeScoreForCompetitor in case one or more competitors don't have a score in a race, such as a medal race
2019-12-16 15:33:07 +01:00
Axel Uhl
944a7e5873
Merge branch 'master' into bug5085
2019-12-13 12:28:16 +01:00
Axel Uhl
53f61a2e7a
added more test data; factored the -tenant suffix into a constant
2019-11-25 17:24:51 +01:00
Steffen Schaefer
4b80c18f98
Merge branch 'master' into bug5085
...
Conflicts:
java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/client/StringMessages.java
java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/client/StringMessages.properties
java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/client/StringMessages_de.properties
java/com.sap.sse.security.ui/src/main/java/com/sap/sse/security/ui/client/i18n/StringMessages.properties
2019-11-11 14:55:56 +01:00
Axel Uhl
83ddb13865
bug5048: integrated CrossDomainStorage with UserService; not tested yet...
2019-11-08 13:10:57 +01:00
Axel Uhl
d69bf17769
renamed sharedAcrossSubdomains to sharedAcrossSubdomainsOf
2019-11-05 23:52:16 +01:00
Axel Uhl
31f0e719f1
bug4903: introduce new system property security.sharedAcrossSubdomains and replicate through SecurityService
2019-11-05 18:07:36 +01:00
Steffen Schaefer
11a75b2e8c
Bug 5085: Renamed WithQualifiedObjectIdentifier.getType to
...
WithQualifiedObjectIdentifier.getPermissionType
2019-08-13 10:37:33 +02:00
Steffen Jacobs
02b59ca833
Bug 5080: added convenience method to the SecurityService which calls
...
hasCurrentUserMetaPermissionsOfRoleDefinitionWithQualification for each
RoleDefinition in a set of RoleDefinitions.
2019-06-27 14:19:08 +02:00
Axel Uhl
82786a38ae
fixed initialization of AccessControlStore internal structures after initial load;
...
the userToOwnership and userGroupToOwnership structures weren't
correctly filled because of a missing call to
internalSetOwnershipAndMapUserAndUserGroupToOwnership for cleanly
updating the internal structures. This caused problems when deleting
users or groups in replication scenarios.
Change-Id: I656090242d40e9792a46835440eaf6865f3434a7
2019-06-27 00:24:29 +02:00
Steffen Schaefer
2a0f5cdca7
Merge branch 'master' into bug5047
2019-05-29 10:09:18 +02:00
Steffen Schaefer
b330981b40
Bug 5047: Simplified the various map and filter methods in
...
SecurityService by removing the redundant HasPermissions parameter. This
can now be obtained from the given WithQualifiedObjectIdentifier values.
2019-05-29 10:00:53 +02:00
Steffen Schaefer
9f965a9218
Bug 5040: Improved permission check in MasterDataResource and reduced
...
code duplication by introducing
SecurityService.checkCurrentUserServerPermission
2019-05-27 10:36:18 +02:00
Steffen Jacobs
aabb0da7b8
Bug 5040: fixed server permission check
2019-05-21 14:27:34 +02:00
Steffen Jacobs
4d6196b096
Bug 5040: added method to check if user has a server permission to
...
SecurityService
2019-05-16 17:19:46 +02:00
Axel Uhl
e83bea13bd
fixed create permission checks for Expedition Device Configurations
2019-04-27 12:17:09 +02:00
Benjamin Barth
fe9eb4c3d7
bug4994 Display name of owned object is now passed to SecurityService
2019-04-15 14:15:19 +02:00
Steffen Schaefer
70a9de04b5
Replaced several functional interfaces in com.sap.sse.common.Util with
...
their Java 8 counterpart
2019-04-11 12:57:36 +02:00
Steffen Schaefer
c1a640daeb
Bug 4986: Implemented meta permission check with ownership lookup in
...
SecurityService
2019-04-11 09:18:37 +02:00
Steffen Schaefer
6a52392c87
Bug 4983: Ensures that migrated users don't have the server group set as
...
owner. This is now consistent to newly created users.
2019-04-10 14:21:03 +02:00
Kai Börnert
90ece8d2c8
bug4978 remove default tenant being set in the low level api preventing
...
null group owners
2019-04-09 18:09:03 +02:00
Steffen Schaefer
278018e6fc
Fixed potential NPE when managing ACLs for the null group
2019-04-01 15:15:40 +02:00
Steffen Schaefer
f8af4c5e39
Bug 4961: Produce a nicer error on failing permission checks due to
...
using an identifier which is already taken by another existing instance.
2019-04-01 12:01:07 +02:00
Steffen Jacobs
9e16206522
Bug 4933: added method
...
setOwnershipWithoutCheckPermissionForObjectCreationAndRevertOnError with
different overloading similar to commit
5a43660474
2019-03-29 18:32:10 +01:00
Steffen Jacobs
4067fe9fed
Bug 4933: refactored
...
setOwnershipCheckPermissionForObjectCreationAndRevertOnError and related
methods to reduce code duplication
2019-03-29 18:09:02 +01:00
Steffen Jacobs
5a43660474
Bug 4933: added method
...
setOwnershipWithoutCheckPermissionForObjectCreationAndRevertOnError that
allows to set t he ownership and revert on error for creating an object
without checking SERVER:CREATE_OBJECT
2019-03-29 18:04:13 +01:00
Steffen Jacobs
b3150b83a5
Bug 4913: removed wrapping of UnauthorizedException in
...
SecurityServiceImpl.checkPermissionAndDeleteOwnershipForObjectRemoval
2019-03-28 16:19:50 +01:00
Steffen Schaefer
f832d34b53
Bug 4912: No result importer URL types are shown if the user may not
...
READ any associated URL
2019-03-27 09:25:37 +01:00
Steffen Schaefer
b1b0eafa3f
Renamed methods in SecurityService having "any" in their name to
...
explicitly distinct this case from the any check available via
PermissionChecker
2019-03-27 09:14:35 +01:00
Steffen Schaefer
20031b7454
Bug 4912: Implemented more server-side permission checks regarding
...
result importer URLs (WIP)
2019-03-27 09:11:42 +01:00
Steffen Schaefer
5daf0b99aa
Fixed NPE
2019-03-25 14:14:56 +01:00
Steffen Schaefer
6214b25615
Initial RoleDefinitions are now made public by an ACL entry instead of
...
granting explicit permissions for the <all> user
2019-03-25 14:11:13 +01:00
Kai Börnert
bc4282cd8b
bug4905 cleanup qualified roles
2019-03-14 12:45:00 +01:00
Steffen Jacobs
b8519da010
fixed pruning for competitors and boats
2019-03-07 17:52:07 +01:00
Steffen Schaefer
8038361ae2
The initial RoleDefinitions are now readable by the <all> user
2019-03-07 14:24:30 +01:00
Steffen Schaefer
5a9e086958
Replaced ActionWithResult with Callable
2019-03-07 13:21:57 +01:00