Commit Graph
264 Commits
Author SHA1 Message Date
Steffen Jacobs e44d6a9f5a Merge branch 'permission-vertical' into bug4895 2019-03-08 16:37:42 +01:00
Steffen Jacobs d180073a26 Bug 4397: added READ_PUBLIC action to UserRole 2019-03-07 17:10:57 +01:00
Steffen Jacobs e97390326e Bug 4937: moved READ_PUBLIC to SecuredSecurityType and removed
CompetitorAndBoatAction accordingly.
2019-03-07 17:04:07 +01:00
Steffen Schaefer 0eb25a2a45 Merge branch 'permission-vertical' into bug4895 2019-03-07 11:19:30 +01:00
Steffen Jacobs 2a382a76e7 Bug 4933: Removed grant/revoke permissions 2019-03-07 10:52:45 +01:00
Steffen Schaefer 6f37b5178e Merge branch 'permission-vertical' into bug4895 2019-03-07 09:23:31 +01:00
Steffen Jacobs fc6ef56af3 added RolesAndPermissionsForUserDTO + method in UserManagementService to
retrieve it for a given user name
2019-03-06 17:58:27 +01:00
Axel Uhl 4ad7872967 trying to include DeviceConfiguration UUID handling in Race Manager App
Change-Id: Iee95cf0ce14c340018b369621a7d50c5a90f4150
2019-03-01 18:06:55 +01:00
Axel Uhl d5f979ca8f make TypeRelativeObjectIdentifier's field final
Change-Id: I0ec6944b44df0dee07114615bdfc7705dbc7b8ee
2019-02-27 18:31:33 +01:00
Axel Uhl c4f31460a7 fixed getIdentifier implementation of RoleDefinition/RolePrototype;
added tests; remove default constructor from
TypeRelativeObjectIdentifier to avoid confusion; introduced a custom
field serializer instead and use it in QualifiedObjectIdentifierImpl's
custom field serializers.

Change-Id: If6057c21771a8488581ef9f6b401e09ec1b6a8cc
2019-02-27 17:30:09 +01:00
Axel Uhl ca52320c98 added another failing test for RoleDefinition.getIdentifier management
Change-Id: I706e120e86782f95884813a8e62382b870c09d7b
2019-02-27 17:04:01 +01:00
Axel Uhl 46c8d8c441 removed trailing blanks
Change-Id: Ie789db21a660ca7869804f3a1c2a0caf40ace858
2019-02-27 12:19:57 +01:00
Axel Uhl b5bfdf6f73 Merge remote-tracking branch 'server/permission-vertical' into permission-vertical
Change-Id: If8f68ba771d9dc17b57c4312b13787cc0588f6fa
2019-02-21 13:25:31 +01:00
Axel Uhl 7bfddc6926 refactored User-related methods on SecurityService to avoid sending User objects through replication operations;
this way, no patching of the userGroupProvider property after
de-serialization is necessary, and no replacement of a User object in
the UserStore should ever happen.

Change-Id: I23a8ae53b6a53ca89a2a0b8a11dc779f4034db57
2019-02-21 13:21:04 +01:00
Kai Börnert 3a65aa40c3 Ensure that already escaped identifiers that are stored in the Database
will not be escaped again on loading, adjusted test to contain some of
the original offenders
2019-02-21 13:15:48 +01:00
Steffen Schaefer 8db23f6d0f Moderator now also has DETAIL_TIMER permission 2019-02-21 10:47:21 +01:00
Steffen Jacobs 033f5a0a65 added FORCE_OVERWRITE_PASSWORD action to UserActions to allow 2019-02-21 10:45:44 +01:00
Axel Uhl e64e708008 expose userGroupProvider property on User; align in UserStoreImpl for de-serialized copies
Change-Id: I0d520d2b8d19ceb2405d1c1c289d0f839600eb6f
2019-02-20 19:08:13 +01:00
Steffen Jacobs c3fe829b65 added WildcardPermissionWithSecurityDTO and used it in UserDTO 2019-02-14 16:28:23 +01:00
Steffen Jacobs 711a21a647 added RoleWithSecurityDTO and used it in UserDTO 2019-02-14 16:10:50 +01:00
Steffen Schaefer 11e03bc36e Adjusted initial permissions of PredefinedRoles to be consistent with
the current permission model
2019-02-12 15:31:01 +01:00
Benjamin Barth 07decf4dda bug4393 Changed required permissions when using a related secure type 2019-02-07 17:03:02 +01:00
Steffen Schaefer 8653707307 Added parameter names 2019-02-07 08:51:53 +01:00
Steffen Schaefer 244b61f9f9 Added JavaDocs 2019-02-07 08:47:11 +01:00
Steffen Schaefer 221e1cac38 Removed unnecessary null check 2019-02-07 08:32:13 +01:00
Steffen Jacobs b231c5cff2 Bug 4816: made SecuredSecurityTypes.DATA_MINING an action of Server 2019-02-05 19:00:42 +01:00
Steffen Schaefer fda9b5ff94 Changed the definition of a public server to be defined by
sailing_viewer role associated to the server group with forAll=true
2019-02-04 14:33:49 +01:00
Steffen Schaefer 4d1bb9c441 Improved toString of UserImpl and UserGroupImpl 2019-02-04 09:21:58 +01:00
Steffen Schaefer c8ad3a4053 Fixed NPE 2019-01-29 15:39:06 +01:00
Steffen Schaefer 0f74b0d275 Included RoleDefinitions associated to UserGroups in permission checks 2019-01-29 15:38:44 +01:00
Steffen Schaefer a412252d6d Removed code duplication by extracting a common method 2019-01-29 14:53:17 +01:00
Steffen Schaefer ce4fc5eb04 Extended security DTO model to include RoleDefinitions associated to
groups. These will be needed by permission checks.
2019-01-29 14:52:21 +01:00
Steffen Schaefer 15d73c711c Removed empty line 2019-01-28 17:18:53 +01:00
Steffen Schaefer 73b377a6cd Merge branch 'master' into permission-vertical
Conflicts:
	java/com.sap.sailing.server/src/com/sap/sailing/server/impl/RacingEventServiceImpl.java
	java/com.sap.sse.security/src/com/sap/sse/security/impl/SecurityServiceImpl.java
2019-01-24 09:41:58 +01:00
Benjamin Barth 25f6b45820 First preparations for RoleDefinitions on UserGroups 2019-01-22 18:00:42 +01:00
Benjamin Barth 35aa0fd670 bug4865 Implemented editing of ownerships and ACLs for local server 2019-01-11 17:55:25 +01:00
Kai Börnert f6979e0dbc removed obsolete possibly wrong code 2019-01-10 15:21:14 +01:00
Kai Börnert 5597b7f4d0 Merge branch 'permission-vertical' into bug4813
Conflicts:
	java/com.sap.sse.security.common/src/com/sap/sse/security/shared/impl/PermissionAndRoleAssociation.java
	java/com.sap.sse.security.userstore.mongodb/src/com/sap/sse/security/userstore/mongodb/impl/Activator.java
	java/com.sap.sse.security/src/com/sap/sse/security/impl/SecurityServiceImpl.java
2019-01-08 12:03:11 +01:00
Kai Börnert 1361b7ad74 added permission-association 2019-01-07 16:15:11 +01:00
Kai Börnert bccad276d8 ensure toString returns always the same string for the same
WildcardPermission
2019-01-07 16:14:46 +01:00
Steffen Schaefer 01402229a3 Code formatting only 2018-12-19 16:17:22 +01:00
Steffen Schaefer 976b901f11 Unified permission handling in client and server 2018-12-19 10:23:40 +01:00
Steffen Schaefer c315d811e7 Removed method parameter by introducing specific handling for
ExpeditionDeviceConfiguration that has the server name included in the
type relative object identifier
2018-12-19 09:52:34 +01:00
Steffen Schaefer 637d6edda8 Added the possibility to use TypeRelativeObjectIdentifier with
WildcardPermissionBuilder
2018-12-19 08:46:36 +01:00
Steffen Schaefer 43b6d155e4 Merge branch 'permission-vertical' into bug4813
Conflicts:
	java/com.sap.sse.security.common/src/com/sap/sse/security/shared/dto/UserDTO.java
2018-12-19 08:31:18 +01:00
Steffen Schaefer 4eaa69cec4 Further reduced size of security relevant objects 2018-12-18 19:27:56 +01:00
Steffen Schaefer 43b0bca40a Removed unnecessary generic 2018-12-18 19:27:54 +01:00
Kai Börnert ac5597a621 added missing null check in equals 2018-12-18 18:35:51 +01:00
Thomas Wiese 1fcdd6fc66 bug 4813: fix PermissionAndRoleAssociation to build
TypeRelativeObjectIdentifier
2018-12-18 14:21:41 +01:00
Kai Börnert 18df63ac5c added missing this in StrippedUserDTO 2018-12-18 14:03:54 +01:00