Commit Graph

141 Commits

Author SHA1 Message Date
Robert von Burg 0c68006f77 [Minor] Use ScheduledExecutor for session timeout and persistence 2017-09-22 17:00:59 +02:00
Robert von Burg c11f01afeb [Fix] Fixed Session TTL not being respected in some cases 2017-09-19 13:45:29 +02:00
Robert von Burg 16862070e0 [New] Added import REST API to Inspector 2017-08-28 17:11:03 +02:00
Robert von Burg 76b2fd2eb2 [New] Added add REST API for root elements to inspector 2017-08-28 12:46:03 +02:00
Robert von Burg a27e9a2999 [Project] Set new snapshot version 1.6.0-SNAPSHOT 2017-08-24 14:11:29 +02:00
Robert von Burg c174d8c28a [Fix] Sort types in inspector 2017-08-21 13:08:22 +02:00
Robert von Burg 3f28d9aa9f [New] Allow to set if type is allowed in QueryParser 2017-08-18 11:48:09 +02:00
Robert von Burg 2863a5746b [Fix] Fixed wrong filtering of resources 2017-08-18 09:46:54 +02:00
Robert von Burg 5efb426f10 [New] Added remove REST api for root elements 2017-08-17 14:42:20 +02:00
Robert von Burg c79f1d6ae6 [Fix] Returning 401 if session is invalid, 403 for privilege 2017-07-26 15:15:20 +02:00
Robert von Burg 1183000520 [Major] Implemented privilege checking for DAO
Now the PrivilegeConfig.xml must include:

	<Policies>
		<Policy name="ModelPrivilege"
class="li.strolch.runtime.privilege.ModelPrivilege" />
	</Policies>

And PrivilegeRoles.xml must include:

	<Role>
		<Privilege name="GetResource" policy="ModelPrivilege">
			<AllAllowed>true</AllAllowed>
		</Privilege>
		<Privilege name="GetOrder" policy="ModelPrivilege">
			<AllAllowed>true</AllAllowed>
		</Privilege>
		<Privilege name="GetActivity" policy="ModelPrivilege">
			<AllAllowed>true</AllAllowed>
		</Privilege>
		<Privilege name="AddResource" policy="ModelPrivilege">
			<AllAllowed>true</AllAllowed>
		</Privilege>
		<Privilege name="AddOrder" policy="ModelPrivilege">
			<AllAllowed>true</AllAllowed>
		</Privilege>
		<Privilege name="AddActivity" policy="ModelPrivilege">
			<AllAllowed>true</AllAllowed>
		</Privilege>
		<Privilege name="UpdateResource" policy="ModelPrivilege">
			<AllAllowed>true</AllAllowed>
		</Privilege>
		<Privilege name="UpdateOrder" policy="ModelPrivilege">
			<AllAllowed>true</AllAllowed>
		</Privilege>
		<Privilege name="UpdateActivity" policy="ModelPrivilege">
			<AllAllowed>true</AllAllowed>
		</Privilege>
		<Privilege name="RemoveResource" policy="ModelPrivilege">
			<AllAllowed>true</AllAllowed>
		</Privilege>
		<Privilege name="RemoveOrder" policy="ModelPrivilege">
			<AllAllowed>true</AllAllowed>
		</Privilege>
		<Privilege name="RemoveActivity" policy="ModelPrivilege">
			<AllAllowed>true</AllAllowed>
		</Privilege>
	</Role>
2017-07-24 20:07:10 +02:00
Robert von Burg a214853e94 [Major] Inspector can now update StrolchElements from JSON/XML 2017-07-05 15:07:51 +02:00
Robert von Burg ad8f0220e9 [Project] filter all property files 2017-06-20 15:38:46 +02:00
Robert von Burg 08631498dc [Major] Creating LogMessages for exceptions in Migrations, TX, Execution 2017-06-14 15:54:58 +02:00
Robert von Burg 8cec401ec0 [New] Added methods to ResponseUtil 2017-06-01 12:42:08 +02:00
Reto Breitenmoser a3b7a08aaf [Minor] set default memory for jersey entity logging 2017-05-30 14:26:03 +02:00
Robert von Burg 96771b40ba [Project] Update to Jersey 2.25.1 2017-05-26 11:37:38 +02:00
Robert von Burg 603703f681 [Minor] Added ResponseUtil.toResponse() override 2017-05-23 13:16:18 +02:00
Robert von Burg 4c9e66876a [Major] Privilege passwords are now salted! 2017-05-22 14:37:48 +02:00
Robert von Burg f87c42f399 [Project] switched tests to use logback-classic 2017-05-22 09:50:48 +02:00
Robert von Burg 3622339896 [Major] Total refactoring of StrolchElementVisitor hierarchy 2017-05-17 09:20:27 +02:00
Robert von Burg eedc587bed [Minor] Added identity visitors to queries, eliminating NoStrategy usage 2017-05-05 09:59:17 +02:00
Robert von Burg b325e77197 [Minor] Updated to latest versions of external dependencies 2017-04-03 09:56:42 +02:00
Robert von Burg 8e06ccb7e1 [Minor] Don't log exceptions if user fails to auth 2017-03-09 11:07:39 +01:00
Robert von Burg 1102f34d18 [Minor] Don't log stack trace if certificate does not exist 2017-03-08 17:51:49 +01:00
Robert von Burg e4e35e5392 [Fix] AuthenticationRequestFilter now has priority AUTHENTICATION 2017-03-06 17:27:44 +01:00
Robert von Burg e0149cc4b0 [Major] Removed many visitors and implemented proper visitor pattern... 2017-03-02 16:52:50 +01:00
Robert von Burg cf5f717a69 [New] Added JsonServiceResult constructors 2017-03-01 01:42:38 +01:00
Robert von Burg 70e4214915 [Fix] Fixing CORS not working for cordova apps 2017-03-01 01:41:59 +01:00
Robert von Burg e27a0969ee [Major] Changes in FlatJsonVisitor 2017-02-27 17:25:24 +01:00
Robert von Burg c89e04a356 [Major] Moved *ToFlat and *FromFlat Json Visitors to strolch model 2017-02-27 14:11:49 +01:00
Martin Voigt 6466157c90 [minor] use execpetion message instead of empty text, if no restrictable is given for unauthorized access (#2) 2017-02-20 13:21:57 +01:00
Robert von Burg 0852557aaa [New] Added ResponseUtil.toResponse(ServiceResult) 2017-02-20 12:13:51 +01:00
Robert von Burg 0e5176df62 [Major] Inspector now has offset/limit for queries 2017-02-08 20:16:05 +01:00
Robert von Burg b70106260a [Fix] Fix bugs in formatting to JSON 2017-02-08 15:43:23 +01:00
Robert von Burg 753806f672 [New] Added inspector REST api for activities 2017-02-02 12:55:59 +01:00
Robert von Burg 90d9dead32 [Major] Refactored code for REST Inspector to use gson 2017-02-02 12:34:46 +01:00
Robert von Burg 1d25a2a46b [Major] Json Tags are now in Tags.Json and are drinking camel-case 2017-02-02 11:58:59 +01:00
Robert von Burg 905db8c297 [Project] Set new version 1.5.0-SNAPSHOT 2016-11-03 12:07:38 +01:00
Robert von Burg bff0215510 [Major] Refactored the DurationExecutionTimer to not be singleton
Once again it is clear how bad singletons are. One test killed the
timer, thus all other tests failed. Now the DelayedExecutionTimer is
retrieved from the ExecutionHandler and is called DelayedExecutionTimer
with a default implementation of SimpleDurationExecutionTimer
instantiated by the EventBasedExecutionHandler
2016-10-11 14:59:52 +02:00
Robert von Burg 992f3966dc [New] Rewrote the Paging class to use offset/limit
Also returns next, previous and last offsets. Added helper method to
create a REST Response from a page in ResponseUtil
2016-10-07 11:55:08 +02:00
Robert von Burg 2b701d5d74 [Fix] Fixed json object not marshalled in AuthenticationService 2016-10-05 17:03:01 +02:00
Robert von Burg 7a537e7886 [Major] REST APIs are supposed to be plural 2016-09-30 10:13:22 +02:00
Robert von Burg dd227c65d0 [Major] Refactored SystemAction in privileges
Simplified the API, removed the privileged user - now always use the
agent system user for running system actions. One method has no return
value and one has a return value. Now it is easy to perform a system
action using:

    runAsAgent(ctx -> {
      // do work			
    });

    String result = runAsAgentWithResult(ctx -> {
      // do work
      return "done";
    });

    // execute a SystemAction
    runAsAgent(action);

    // execute a SystemActionWithResult
    String result = runAsAgentWithResult(actionWithResult);
2016-09-29 12:26:27 +02:00
Robert von Burg dc0a34dc9d [Project] Set new snapshot version 1.4.0-SNAPSHOT 2016-09-22 11:33:15 +02:00
Robert von Burg bda16a0f80 [Project] Updated project for deployment to Maven Central 2016-09-22 09:37:55 +02:00
Robert von Burg 813c7bc13d [Minor] Added JsonElement service argument result objects 2016-09-19 21:19:51 +02:00
Robert von Burg 6d65064117 [New] Allow for optional parameters in to flat json 2016-09-17 17:20:45 +02:00
Robert von Burg 2fe9f74be8 [Project] Extended documentation with policies and transactions 2016-09-16 10:58:47 +02:00
Robert von Burg b8834b9b82 [Major] Refactored to not use JAXB in PrivilegeUsersService 2016-09-08 20:06:38 +02:00