[midPoint-git] [Evolveum/midpoint] d88238: Authorization phase (work in progress)

[Radovan Semancik]

  Branch: refs/heads/master
  Home:   https://github.com/Evolveum/midpoint
  Commit: d88238ee5eda2c6e1d6bd4ba5a002900faa3235e
      https://github.com/Evolveum/midpoint/commit/d88238ee5eda2c6e1d6bd4ba5a002900faa3235e
  Author: Radovan Semancik <radovan.semancik at evolveum.com>
  Date:   2014-04-28 (Mon, 28 Apr 2014)

  Changed paths:
    M gui/admin-gui/src/main/java/com/evolveum/midpoint/web/security/MidPointGuiAuthorizationEvaluator.java
    M infra/schema/src/main/resources/xml/ns/public/common/common-2a.xsd
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/controller/ModelController.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/lens/ChangeExecutor.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/security/SpringAuthenticationInjectorInterceptor.java
    M model/model-intest/src/test/java/com/evolveum/midpoint/model/intest/TestSecurity.java
    M model/model-intest/src/test/resources/common/role-pirate.xml
    M model/model-intest/src/test/resources/logback-test.xml
    A model/model-intest/src/test/resources/security/role-readonly-deep-exec.xml
    A model/model-intest/src/test/resources/security/role-readonly-exec.xml
    A model/model-intest/src/test/resources/security/role-readonly-req-exec.xml
    A model/model-intest/src/test/resources/security/role-readonly-req.xml
    A model/model-intest/src/test/resources/security/role-self-req.xml
    M model/workflow-impl/src/main/java/com/evolveum/midpoint/wf/util/MiscDataUtil.java
    M repo/security-api/src/main/java/com/evolveum/midpoint/security/api/Authorization.java
    R repo/security-api/src/main/java/com/evolveum/midpoint/security/api/ItemSecurityConstraints.java
    M repo/security-api/src/main/java/com/evolveum/midpoint/security/api/ObjectSecurityConstraints.java
    M repo/security-api/src/main/java/com/evolveum/midpoint/security/api/SecurityEnforcer.java
    A repo/security-impl/src/main/java/com/evolveum/midpoint/security/impl/ItemSecurityConstraintsImpl.java
    A repo/security-impl/src/main/java/com/evolveum/midpoint/security/impl/ObjectSecurityConstraintsImpl.java
    M repo/security-impl/src/main/java/com/evolveum/midpoint/security/impl/SecurityEnforcerImpl.java

  Log Message:
  -----------
  Authorization phase (work in progress)


  Commit: 01613dca533c83d64d11cc38d0ca2c8b9d185e61
      https://github.com/Evolveum/midpoint/commit/01613dca533c83d64d11cc38d0ca2c8b9d185e61
  Author: Radovan Semancik <radovan.semancik at evolveum.com>
  Date:   2014-04-28 (Mon, 28 Apr 2014)

  Changed paths:
    M gui/admin-gui/src/main/java/com/evolveum/midpoint/web/security/MidPointGuiAuthorizationEvaluator.java
    A infra/prism/src/main/java/com/evolveum/midpoint/prism/query/AllFilter.java
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/util/ObjectQueryUtil.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/controller/ModelController.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/controller/ModelUtils.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/lens/Clockwork.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/lens/ContextFactory.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/lens/LensContext.java
    M model/model-intest/src/test/java/com/evolveum/midpoint/model/intest/TestSecurity.java
    A model/model-intest/src/test/resources/security/role-prop-read-some-modify-some-req-exec.xml
    M repo/security-api/src/main/java/com/evolveum/midpoint/security/api/ObjectSecurityConstraints.java
    M repo/security-api/src/main/java/com/evolveum/midpoint/security/api/SecurityEnforcer.java
    M repo/security-impl/src/main/java/com/evolveum/midpoint/security/impl/ItemSecurityConstraintsImpl.java
    M repo/security-impl/src/main/java/com/evolveum/midpoint/security/impl/ObjectSecurityConstraintsImpl.java
    A repo/security-impl/src/main/java/com/evolveum/midpoint/security/impl/PhaseDecisionImpl.java
    M repo/security-impl/src/main/java/com/evolveum/midpoint/security/impl/SecurityEnforcerImpl.java

  Log Message:
  -----------
  Implementing authorization phases


  Commit: 9839d25d4930113fa1e183354c321a5634106d32
      https://github.com/Evolveum/midpoint/commit/9839d25d4930113fa1e183354c321a5634106d32
  Author: Radovan Semancik <radovan.semancik at evolveum.com>
  Date:   2014-04-28 (Mon, 28 Apr 2014)

  Changed paths:
    M infra/prism/src/main/java/com/evolveum/midpoint/prism/PrismContainerDefinition.java
    M infra/prism/src/main/java/com/evolveum/midpoint/prism/schema/DomToSchemaProcessor.java
    M infra/schema/src/main/resources/xml/ns/public/common/common-2a.xsd

  Log Message:
  -----------
  Adding owner criteria to authorization spec. Also fixes related to complex type referencing itself.


  Commit: f85037713d0a91155b2559379716f9bfeacd1f3d
      https://github.com/Evolveum/midpoint/commit/f85037713d0a91155b2559379716f9bfeacd1f3d
  Author: Radovan Semancik <radovan.semancik at evolveum.com>
  Date:   2014-04-28 (Mon, 28 Apr 2014)

  Changed paths:
    M gui/admin-gui/src/main/java/com/evolveum/midpoint/web/security/MidPointGuiAuthorizationEvaluator.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/controller/ModelController.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/lens/ChangeExecutor.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/lens/Clockwork.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/security/SpringAuthenticationInjectorInterceptor.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/security/UserProfileServiceImpl.java
    M model/model-intest/src/test/java/com/evolveum/midpoint/model/intest/TestSecurity.java
    A model/model-intest/src/test/resources/security/role-self-accounts-read.xml
    M model/workflow-impl/src/main/java/com/evolveum/midpoint/wf/util/MiscDataUtil.java
    A repo/security-api/src/main/java/com/evolveum/midpoint/security/api/OwnerResolver.java
    M repo/security-api/src/main/java/com/evolveum/midpoint/security/api/SecurityEnforcer.java
    M repo/security-api/src/main/java/com/evolveum/midpoint/security/api/UserProfileService.java
    M repo/security-impl/src/main/java/com/evolveum/midpoint/security/impl/SecurityEnforcerImpl.java

  Log Message:
  -----------
  Untested support for owner in authorization statements.


  Commit: 1b42ff29c902b23fbfaf5c9b1f181c0c42d60866
      https://github.com/Evolveum/midpoint/commit/1b42ff29c902b23fbfaf5c9b1f181c0c42d60866
  Author: Radovan Semancik <radovan.semancik at evolveum.com>
  Date:   2014-04-28 (Mon, 28 Apr 2014)

  Changed paths:
    M gui/admin-gui/src/main/java/com/evolveum/midpoint/web/page/admin/users/component/OrgTreeProvider.java
    M gui/admin-gui/src/main/java/com/evolveum/midpoint/web/page/admin/users/component/TreeTablePanel.java
    M infra/prism/src/main/java/com/evolveum/midpoint/prism/parser/QueryConvertor.java
    M infra/prism/src/main/java/com/evolveum/midpoint/prism/query/OrgFilter.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/expr/MidpointFunctionsImpl.java
    M model/model-intest/src/test/java/com/evolveum/midpoint/model/intest/AbstractInitializedModelIntegrationTest.java
    M model/model-test/src/main/java/com/evolveum/midpoint/model/test/AbstractModelIntegrationTest.java
    M repo/repo-api/src/main/java/com/evolveum/midpoint/repo/api/RepositoryService.java
    M repo/repo-cache/src/main/java/com/evolveum/midpoint/repo/cache/RepositoryCache.java
    M repo/repo-sql-impl-test/src/test/java/com/evolveum/midpoint/repo/sql/CleanupTest.java
    M repo/repo-sql-impl-test/src/test/java/com/evolveum/midpoint/repo/sql/OrgStructTest.java
    M repo/repo-sql-impl-test/src/test/java/com/evolveum/midpoint/repo/sql/QueryInterpreterTest.java
    M repo/repo-sql-impl/src/main/java/com/evolveum/midpoint/repo/sql/SqlAuditServiceImpl.java
    M repo/repo-sql-impl/src/main/java/com/evolveum/midpoint/repo/sql/SqlBaseService.java
    M repo/repo-sql-impl/src/main/java/com/evolveum/midpoint/repo/sql/SqlRepositoryServiceImpl.java
    M repo/repo-sql-impl/src/main/java/com/evolveum/midpoint/repo/sql/query/OrgFilterQuery.java
    M repo/repo-sql-impl/src/main/java/com/evolveum/midpoint/repo/sql/query/restriction/OrgRestriction.java

  Log Message:
  -----------
  Merge branch 'master' of github.com:Evolveum/midpoint


Compare: https://github.com/Evolveum/midpoint/compare/e9a5796dfa6f...1b42ff29c902