Commit Graph

1552 Commits

Author SHA1 Message Date
Robert von Burg e076ced839 [New] Added UsernameFromCertificatePrivilege policy 2015-03-15 11:03:37 +01:00
Robert von Burg 6ccb4425cc [New] changed session ID to be a UUID 2015-03-15 11:03:23 +01:00
Robert von Burg 8e75a7651a [Bugfix] fixed exception formatting bug in StringHelper 2015-03-15 11:02:57 +01:00
Robert von Burg e0b2f32b4f [New] Added UserSession querying and modifying 2015-03-14 21:24:18 +01:00
Robert von Burg 2ee0d2fb4e [New] Added UserSession querying and modifying 2015-03-14 21:23:10 +01:00
Robert von Burg c2f4d7468b [Major] changed Certificate to use Date and not long 2015-03-14 21:22:20 +01:00
Robert von Burg 85e34cabe1 [Minor] synchronized submodule ch.eitchnet.privilege 2015-03-14 00:20:17 +01:00
Robert von Burg 9870513beb [New] Added new param "privilegeConflictResolution"
- privilegeConflictResolution is used to configure how conflicts of
privileges on multiple roles are handled.
- Implemented is STRICT where if a privilege with the same name exists
on a role used by the same user occurs, then an exception is thrown.
- Next is MERGE where if a conflict occurs, then the privileges are
merged: allAllowed overrides, allow and deny list are merged
2015-03-14 00:18:59 +01:00
Robert von Burg 33041f2b06 [Major] refactored privileges returned on LoginResult 2015-03-12 22:59:12 +01:00
Robert von Burg 7ff8ba6779 [Bugfix] Fixed bad parsing of Allow on multiple privileges per Role 2015-03-12 18:31:14 +01:00
Robert von Burg 819ae53708 [Minor] added missing PrivilegePolicies:
<Policy name="RoleAccessPrivilege"
    class="ch.eitchnet.privilege.policy.RoleAccessPrivilege" />
<Policy name="UserAccessPrivilege" 
    class="ch.eitchnet.privilege.policy.UserAccessPrivilege" />
2015-03-12 18:05:46 +01:00
Robert von Burg 5ffc03f115 [Minor] removed reference to non existing role PrivilegAdmin in users 2015-03-12 18:01:02 +01:00
Robert von Burg fa3fe89237 [Minor] removed requirement for PrivilegeAdmin role in priv. handler 2015-03-12 17:44:46 +01:00
Robert von Burg 5675027f6c [Minor] removed the PrivilegeAdmin role from all PrivilegeModel.xml 2015-03-12 17:43:42 +01:00
Robert von Burg fa40671b8c [Major] removed the need for a role PrivilegeAdmin - now use privileges
- this solves the situation where a user might be allowed to add a user
with a specific role, but not change a role and other such use cases

Now there are privileges for every use case with two new
PrivilegePolicies:
- RoleAccessPrivilege
- UserAccessPrivilege
both of these policies expect a ch.eitchnet.utils.collections.Tuple as
privilege value. The Tuple is a simple wrapper for two values: first and
second. Each privilege has its own requirement on the actual values

Special privilege actions:
- PrivilegeAction -> privilege vlaue: String
  - Persist (required Allow)
  - Reload (required Allow)
  - GetPolicies (required Allow)

Role specific privileges:
- PrivilegeGetRole -> privilege value: Tuple(null, newRole)
- PrivilegeAddRole -> privilege value: Tuple(null, newRole)
- PrivilegeRemoveRole -> privilege value: Tuple(null, newRole)
- PrivilegeModifyRole -> privilege value: Tuple(oldRole, newRole)

Use specific privileges:
- PrivilegeGetUser -> privilege value: Tuple(null, newUser)
- PrivilegeAddUser -> privilege value: Tuple(null, newUser)
- PrivilegeRemoveUser -> privilege value: Tuple(null, newUser)
- PrivilegeModifyUser -> privilege value: Tuple(oldUser, newUser)
  - NOTE: without modifying roles, only fields and properties!
- PrivilegeAddRoleToUser -> privilege value: Tuple(oldUser, roleName)
- PrivilegeRemoveRoleFromUser -> privilege value: Tuple(oldUser,
	roleName)
2015-03-12 17:32:06 +01:00
Robert von Burg 638cebe01e [New] Added new Tuple to collections 2015-03-12 13:18:20 +01:00
Robert von Burg 5602f56c15 [Major] allow user to change their own locale incl. auto persist 2015-03-08 21:44:35 +01:00
Robert von Burg a3d76d4cd8 [Major] allow user to change their own locale incl. auto persist 2015-03-08 21:44:21 +01:00
Robert von Burg 86895c7aa5 [New] Implemented Rest API for user management 2015-03-08 20:51:46 +01:00
Robert von Burg 5ef43eaebe [Major] All methods in PrivilegeHandler now return a value after op
- also fixed JAXB (un)marshalling of list values on UserRep and RoleRep
2015-03-08 20:51:10 +01:00
Robert von Burg 3136049bda [Minor] Updated ch.eitchnet.privilege submodule 2015-03-08 13:39:45 +01:00
Robert von Burg eeb3356372 [Minor] fixed broken test 2015-03-08 13:39:27 +01:00
Robert von Burg f774cfb4d5 [New] Added rest services for privilege management
- not yet all services are implemented
- not yet tested
2015-03-08 13:38:59 +01:00
Robert von Burg 5940a345d4 [Major] refactoring Privilege
- All reps are now JAXB enabled
- replaced addOrReplace with add and repalace methods
- added some more tests
2015-03-08 13:38:15 +01:00
Robert von Burg 07f009b7ff [New] Added XmlKeyValue for key value pairs in JAXB 2015-03-08 13:36:49 +01:00
Robert von Burg a434c42198 [Project] refactored setVersion.sh script 2015-03-06 11:54:00 +01:00
Robert von Burg 5b97cb3462 [Project] fixed setVersion.sh to properly versionize eitchnet projects 2015-03-05 22:43:31 +01:00
Robert von Burg 2371cd7853 [Minor] ch.eitchnet.utils version is a propery for easier versioning 2015-03-05 22:42:49 +01:00
Robert von Burg 83740b59e2 [Minor] ch.eitchnet.utils version is a propery for easier versioning 2015-03-05 22:42:17 +01:00
Reto Breitenmoser c770550d40 Pulled down update to submodule_dir 2015-03-05 18:28:42 +01:00
Reto Breitenmoser 34c85825bf [Project] updated version to 1.1.0-SNAPSHOT 2015-03-02 21:36:33 +01:00
Robert von Burg 28a6e24842 [Minor] fixing broken service tests 2015-03-02 20:44:35 +01:00
Reto Breitenmoser dc7ff55820 [Project] updated to 1.0.0 utils 2015-03-02 20:42:41 +01:00
Reto Breitenmoser 7b6282dd23 [Project] updated utils version 2015-03-02 20:37:43 +01:00
Robert von Burg f3d877e7a3 [Project] updated submodule commits 2015-03-02 20:32:00 +01:00
Reto Breitenmoser c1d77fee38 [Project] fixed version of utils 2015-03-02 20:30:40 +01:00
Reto Breitenmoser b5fac57dd8 [Minor] updated version to 1.1.0-SNAPSHOT 2015-03-02 19:46:13 +01:00
Reto Breitenmoser 5b462c6140 [Minor] updated version to 1.0.0 from utils 2015-03-02 19:34:55 +01:00
Robert von Burg f0de30d701 [Project] allow pushing of new version as well 2015-03-02 14:33:13 +01:00
Robert von Burg e961aa8cd3 [Project] Bumped version from 1.2.0-SNAPSHOT to 1.1.0-SNAPSHOT 2015-03-02 14:29:34 +01:00
Robert von Burg 18155a5284 [Project] Bumped version from 1.1.0-SNAPSHOT to 1.2.0-SNAPSHOT
- but don’t push!
2015-03-02 14:29:19 +01:00
Robert von Burg 460c26126e [Project] Bumped version from 1.1.0-SNAPSHOT to 1.2.0-SNAPSHOT 2015-03-02 14:28:18 +01:00
Robert von Burg 6ae5512db3 [Project] setVersion.sh can now also commit 2015-03-02 14:27:35 +01:00
Robert von Burg ce7cd45974 [Minor] added validating using SSH for pushing before releasing 2015-03-02 14:14:14 +01:00
Robert von Burg ee93472214 [Minor] when pushing tags first push modules 2015-03-02 13:53:24 +01:00
Robert von Burg 52e06f1818 [Project] Bumped version to 1.1.0-SNAPSHOT 2015-03-02 13:43:45 +01:00
Robert von Burg 09966937c9 [Project] Bumped version to 1.1.0-SNAPSHOT 2015-03-02 13:43:06 +01:00
Robert von Burg 10554b53d3 [Project] Bumped version to 1.1.0-SNAPSHOT 2015-03-02 13:43:06 +01:00
Robert von Burg a28dec47fd [Project] Bumped version to 1.1.0-SNAPSHOT 2015-03-02 13:43:06 +01:00
Robert von Burg aa2f55fa53 [New] Refactored XML import and export model
- added allowInclude for recursive parsing of xml importing
- ModelStatistics is now JAXB capable
- added handling of absolute paths
2015-02-28 20:44:26 +01:00