[midPoint-git] [Evolveum/midpoint] 9ae6f9: Check authorizations after Projector starts

[Viliam Repan]

  Branch: refs/heads/feature/secrets-provider
  Home:   https://github.com/Evolveum/midpoint
  Commit: 9ae6f9c0e4c58cdabf357f4fe6af73fddeaf1948
      https://github.com/Evolveum/midpoint/commit/9ae6f9c0e4c58cdabf357f4fe6af73fddeaf1948
  Author: Pavol Mederly <mederly at evolveum.com>
  Date:   2024-02-08 (Thu, 08 Feb 2024)

  Changed paths:
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/selector/eval/MatchingContext.java
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/selector/spec/AssigneeClause.java
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/selector/spec/DelegatorClause.java
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/selector/spec/OrgRefClause.java
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/selector/spec/OrgRelationClause.java
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/selector/spec/OwnerClause.java
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/selector/spec/ParentClause.java
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/selector/spec/RelatedObjectClause.java
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/selector/spec/RequesterClause.java
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/selector/spec/RoleRelationClause.java
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/selector/spec/SelectorClause.java
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/selector/spec/SubtypeClause.java
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/selector/spec/TenantClause.java
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/selector/spec/ValueSelector.java
    M model/authentication-impl/src/main/java/com/evolveum/midpoint/authentication/impl/authorization/evaluator/MidPointGuiAuthorizationEvaluator.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/controller/ModelController.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/controller/ModelInteractionServiceImpl.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/controller/RawChangesExecutor.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/lens/Clockwork.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/lens/ClockworkClick.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/lens/ClockworkRequestAuthorizer.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/lens/LensContext.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/lens/executor/DeltaExecution.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/lens/projector/Projector.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/security/GuiProfileCompiler.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/tasks/RecomputationActivityHandler.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/tasks/scanner/FocusValidityScanPartialRun.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/trigger/RecomputeTriggerHandler.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/util/ModelImplUtils.java
    M model/model-intest/src/test/java/com/evolveum/midpoint/model/intest/security/TestSecurityBasic.java
    M repo/repo-api/src/main/java/com/evolveum/midpoint/repo/api/ObjectSelectorMatcher.java
    M repo/repo-common/src/main/java/com/evolveum/midpoint/repo/common/query/SelectorMatcher.java
    M repo/security-enforcer-api/src/main/java/com/evolveum/midpoint/security/enforcer/api/AbstractAuthorizationParameters.java
    M repo/security-enforcer-api/src/main/java/com/evolveum/midpoint/security/enforcer/api/AuthorizationParameters.java
    M repo/security-enforcer-api/src/main/java/com/evolveum/midpoint/security/enforcer/api/CompileConstraintsOptions.java
    M repo/security-enforcer-api/src/main/java/com/evolveum/midpoint/security/enforcer/api/ObjectSecurityConstraints.java
    M repo/security-enforcer-api/src/main/java/com/evolveum/midpoint/security/enforcer/api/PositiveNegativeItemPaths.java
    M repo/security-enforcer-api/src/main/java/com/evolveum/midpoint/security/enforcer/api/SecurityEnforcer.java
    M repo/security-enforcer-api/src/main/java/com/evolveum/midpoint/security/enforcer/api/ValueAuthorizationParameters.java
    M repo/security-enforcer-impl/src/main/java/com/evolveum/midpoint/security/enforcer/impl/CompileConstraintsOperation.java
    M repo/security-enforcer-impl/src/main/java/com/evolveum/midpoint/security/enforcer/impl/EnforcerDecisionOperation.java
    M repo/security-enforcer-impl/src/main/java/com/evolveum/midpoint/security/enforcer/impl/EnforcerOperation.java
    M repo/security-enforcer-impl/src/main/java/com/evolveum/midpoint/security/enforcer/impl/SecurityEnforcerImpl.java
    M repo/security-enforcer-impl/src/main/java/com/evolveum/midpoint/security/enforcer/impl/SelectorEvaluation.java

  Log Message:
  -----------
  Check authorizations after Projector starts

This resolves MID-9459.


  Commit: 9a21a1b860a507d69bf3b800790e426772a7ce98
      https://github.com/Evolveum/midpoint/commit/9a21a1b860a507d69bf3b800790e426772a7ce98
  Author: Viliam Repan <vilo.repan at evolveum.com>
  Date:   2024-02-08 (Thu, 08 Feb 2024)

  Changed paths:
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/selector/eval/MatchingContext.java
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/selector/spec/AssigneeClause.java
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/selector/spec/DelegatorClause.java
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/selector/spec/OrgRefClause.java
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/selector/spec/OrgRelationClause.java
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/selector/spec/OwnerClause.java
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/selector/spec/ParentClause.java
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/selector/spec/RelatedObjectClause.java
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/selector/spec/RequesterClause.java
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/selector/spec/RoleRelationClause.java
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/selector/spec/SelectorClause.java
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/selector/spec/SubtypeClause.java
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/selector/spec/TenantClause.java
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/selector/spec/ValueSelector.java
    M model/authentication-impl/src/main/java/com/evolveum/midpoint/authentication/impl/authorization/evaluator/MidPointGuiAuthorizationEvaluator.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/controller/ModelController.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/controller/ModelInteractionServiceImpl.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/controller/RawChangesExecutor.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/lens/Clockwork.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/lens/ClockworkClick.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/lens/ClockworkRequestAuthorizer.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/lens/LensContext.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/lens/executor/DeltaExecution.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/lens/projector/Projector.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/security/GuiProfileCompiler.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/tasks/RecomputationActivityHandler.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/tasks/scanner/FocusValidityScanPartialRun.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/trigger/RecomputeTriggerHandler.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/util/ModelImplUtils.java
    M model/model-intest/src/test/java/com/evolveum/midpoint/model/intest/security/TestSecurityBasic.java
    M repo/repo-api/src/main/java/com/evolveum/midpoint/repo/api/ObjectSelectorMatcher.java
    M repo/repo-common/src/main/java/com/evolveum/midpoint/repo/common/query/SelectorMatcher.java
    M repo/security-enforcer-api/src/main/java/com/evolveum/midpoint/security/enforcer/api/AbstractAuthorizationParameters.java
    M repo/security-enforcer-api/src/main/java/com/evolveum/midpoint/security/enforcer/api/AuthorizationParameters.java
    M repo/security-enforcer-api/src/main/java/com/evolveum/midpoint/security/enforcer/api/CompileConstraintsOptions.java
    M repo/security-enforcer-api/src/main/java/com/evolveum/midpoint/security/enforcer/api/ObjectSecurityConstraints.java
    M repo/security-enforcer-api/src/main/java/com/evolveum/midpoint/security/enforcer/api/PositiveNegativeItemPaths.java
    M repo/security-enforcer-api/src/main/java/com/evolveum/midpoint/security/enforcer/api/SecurityEnforcer.java
    M repo/security-enforcer-api/src/main/java/com/evolveum/midpoint/security/enforcer/api/ValueAuthorizationParameters.java
    M repo/security-enforcer-impl/src/main/java/com/evolveum/midpoint/security/enforcer/impl/CompileConstraintsOperation.java
    M repo/security-enforcer-impl/src/main/java/com/evolveum/midpoint/security/enforcer/impl/EnforcerDecisionOperation.java
    M repo/security-enforcer-impl/src/main/java/com/evolveum/midpoint/security/enforcer/impl/EnforcerOperation.java
    M repo/security-enforcer-impl/src/main/java/com/evolveum/midpoint/security/enforcer/impl/SecurityEnforcerImpl.java
    M repo/security-enforcer-impl/src/main/java/com/evolveum/midpoint/security/enforcer/impl/SelectorEvaluation.java

  Log Message:
  -----------
  Merge remote-tracking branch 'origin/master' into feature/secrets-provider


Compare: https://github.com/Evolveum/midpoint/compare/17bf57e34168...9a21a1b860a5