summaryrefslogtreecommitdiff
path: root/qpid/java/broker-plugins/access-control/src
Commit message (Collapse)AuthorAgeFilesLines
* QPID-5980: yet more javadoc fixupsRobert Gemmell2014-08-082-5/+2
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1616796 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5873: [Java Broker] Allow ACL rules to be applied to VirtualHostNode ↵Keith Wall2014-07-041-0/+7
| | | | | | | | | | | objects * ACL rules using the new operation VIRTUALHOSTNODE apply to VHN model objects. * ACL rules using the operation VIRTUALHOST apply to VH model objects for CREATE, UPDATE and DELETE. This is a change from previous version where BROKER operation permission was required. * For HA, VIRTUALHOSTNODE permission is required to perform updates on RemoteReplicationNodes. git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1607868 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5574 : [Java Broker] remove redundant state transitionsRobert Godfrey2014-05-091-8/+1
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1593576 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5754 : [Java Broker] Make state change operations methods rather than ↵Robert Godfrey2014-05-083-65/+56
| | | | | | calls to setDesiredState git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1593264 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5746 : [Java Broker] Split attribute annotations into separate ↵Robert Godfrey2014-05-022-5/+5
| | | | | | annotations for derived and automated, and allow derived attributes to be persisted git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1592030 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5578 : [Java Broker] Use annotation to allow registration of all ↵Robert Godfrey2014-04-306-91/+16
| | | | | | ConfiguredObject types at startup. Use this meta data for REST servlets. Remove unnecessary pluggable factory interfaces git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1591170 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5726 : [Java Broker] Use annotation processing to generate object ↵Robert Godfrey2014-04-283-38/+2
| | | | | | factories and service definitions git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1590547 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5615 : Address review comments from Alex RudyyRobert Godfrey2014-04-251-2/+1
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1590188 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5713 : [Java Broker] Remove non-test references to model singleton, and ↵Robert Godfrey2014-04-201-7/+23
| | | | | | instead treat as an instance variable git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1588794 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5578 : [Java Broker] Tidy up - minimize use of MapValueConverter, make ↵Robert Godfrey2014-04-182-3/+2
| | | | | | constructors consistent across ConfiguredObjects git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1588586 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5698 : [Java Broker] make the lifetimePolicy attribute automatedRobert Godfrey2014-04-151-16/+1
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1587367 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5699 : [Java Broker] Make getAttributeNames() in ↵Robert Godfrey2014-04-141-6/+0
| | | | | | AbstractConfiguredObject return the names based on the annotation metadata, and make the method final git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1587290 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5698 : [Java Broker] make the durable attribute automated, remove ↵Robert Godfrey2014-04-141-24/+19
| | | | | | unused setters git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1587262 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5690 : [Java Broker] Improve mechanisms for validating and reacting to ↵Robert Godfrey2014-04-133-222/+252
| | | | | | changes in configured object attribute values git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1587123 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5686 : [Java Broker] Make handling of parents of ConfiguredObjects ↵Robert Godfrey2014-04-121-1/+1
| | | | | | consistent; perform some refactoring of AbstractConfiguredObject to move functionality into helper classes git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1586910 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5680 : [Java Broker] remove configuration defualt mapsRobert Godfrey2014-04-111-1/+1
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1586783 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5680 : [Java Broker] move configuration defualts to annotationsRobert Godfrey2014-04-111-9/+0
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1586683 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5672 : [Java Broker] move variable interpolation to the configured objectRobert Godfrey2014-04-091-1/+8
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1585979 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5665 : [Java Broker] Unify VirtualHost model and implementation classesRobert Godfrey2014-04-071-1/+1
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1585471 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5615 : [Java Broker] Migrate broker config store to use same API as ↵Robert Godfrey2014-04-046-93/+344
| | | | | | VirtualHost config store git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1584931 13f79535-47bb-0310-9956-ffa450edef68
* NO-JIRA: Merge changes from trunk.Keith Wall2014-03-252-17/+104
|\ | | | | | | | | | | | | | | | | | | Command was: svn merge https://svn.apache.org/repos/asf/qpid/trunk git-svn-id: https://svn.apache.org/repos/asf/qpid/branches/java-broker-bdb-ha2@1581428 13f79535-47bb-0310-9956-ffa450edef68
| * QPID-5634: [Java Broker] Remove support for AccessPlugins at the level of ↵Keith Wall2014-03-212-17/+104
| | | | | | | | | | | | the virtualhost. Introduce supports for ACLs rules that include virtualhost predicate. git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1579986 13f79535-47bb-0310-9956-ffa450edef68
* | QPID-5624: Remove virtualhost xml configuration. Move virtual host ↵Alex Rudyy2014-03-123-22/+14
|/ | | | | | configuration into broker configuration store" git-svn-id: https://svn.apache.org/repos/asf/qpid/branches/java-broker-bdb-ha2@1576732 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5611 : Fix other logging to always use the most current event logger ↵Robert Godfrey2014-03-089-26/+37
| | | | | | held at the broker git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1575547 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5611 : Change the event logger from a singleton to an instanceRobert Godfrey2014-03-0810-73/+70
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1575462 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5611 : [Java Broker] remove LogActorsRobert Godfrey2014-03-072-6/+5
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1575315 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5596 : [Java] Address bugs found by FindBugsRobert Godfrey2014-03-032-3/+2
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1573586 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5567 : Further changes to SecurityMangagerRobert Godfrey2014-02-202-32/+14
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1570239 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5567 : Always Use AccessControllerContext to find the current context ↵Robert Godfrey2014-02-192-120/+224
| | | | | | Subject git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1569934 13f79535-47bb-0310-9956-ffa450edef68
* NO-JIRA : fix typos / spelling errorsRobert Godfrey2014-01-236-7/+7
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1560853 13f79535-47bb-0310-9956-ffa450edef68
* NO-JIRA : [Java] remove empty directories / unused importsRobert Godfrey2014-01-031-1/+0
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1555225 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5163: move generation of the ACL log messages to broker-core alongside ↵Robert Gemmell2013-09-232-29/+1
| | | | | | all the other log message generation git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1525743 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5088 : [Java Broker] Isolate use of AMQShortString and FieldTable to ↵Robert Godfrey2013-08-211-5/+5
| | | | | | 0-8/9/9-1 protocol specific plugins git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1516058 13f79535-47bb-0310-9956-ffa450edef68
* NO-JIRA: add missing licence headers to various java filesRobert Gemmell2013-05-051-0/+20
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1479398 13f79535-47bb-0310-9956-ffa450edef68
* QPID-4753: set vhost SecurityManager _managementMode boolean to equal the ↵Robert Gemmell2013-04-291-1/+4
| | | | | | parent/broker SecurityManager, validate the ACL file during onCreate to ensure it is usable before allowing it to be added git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1477155 13f79535-47bb-0310-9956-ffa450edef68
* QPID-4753: move ACL config from broker attribute to a top level entityAlex Rudyy2013-04-194-49/+116
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1469937 13f79535-47bb-0310-9956-ffa450edef68
* QPID-4678: Add ACL checks to restrict the operations to change broker level ↵Alex Rudyy2013-03-291-0/+7
| | | | | | configuration through the management interfaces git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1462551 13f79535-47bb-0310-9956-ffa450edef68
* QPID-4390: Introduce a configuration store in java broker allowing runtime ↵Alex Rudyy2013-02-197-62/+139
| | | | | | modifications and replace existing xml file configuration with json configuration store git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1447646 13f79535-47bb-0310-9956-ffa450edef68
* QPID-4377: add missing licence headers to various files in the Java treeRobert Gemmell2012-12-111-0/+18
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1420285 13f79535-47bb-0310-9956-ffa450edef68
* QPID-4335, QPID-4353: Refactored broker plugins to use simplified ↵Robert Gemmell2012-10-125-182/+48
| | | | | | | | | | | | | | | | ServiceLoader-based model rather than embedding Felix to use OSGi. Removed the ability to reload security configuration because this feature is not very useful in its current form and was making our code hard to refactor. Modified all tests to use jars rather than classes. This makes them closer to real-world deployments, e.g. the META-INF/services file is read from within the jar. Also moved various system tests from their respective modules into "systests". This removes the need for most modules to depend on systests, thus simplifying our dependency graph. Applied patch from myself, Keith Wall and Phil Harvey <phil@philharveyonline.com> git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1397519 13f79535-47bb-0310-9956-ffa450edef68
* QPID-4334: addressed Keith's review comments. Also moved ↵Keith Wall2012-09-288-88/+211
| | | | | | | | PlainConfigurationTest to the correct package. Applied patch from Philip Harvey <phil@philharveyonline.com>. git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1391431 13f79535-47bb-0310-9956-ffa450edef68
* QPID-4334: removed the firewall plugin and moved its functionality into the ↵Keith Wall2012-09-2823-98/+1524
| | | | | | | | Access Control plugin. Applied patch from Philip Harvey <phil@philharveyonline.com>. git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1391430 13f79535-47bb-0310-9956-ffa450edef68
* QPID-4292: add ACL rule to authorise access to the web management UIKeith Wall2012-09-101-0/+9
| | | | | | | | | | | * added object name MANAGEMENT to represent both JMX and Web Management layers * Change both JMX/Web entry points to permission access with an access management check * Updated examples and docbook * Made Principals serialised to avoid container warnings when Qpid principals are placed within a HttpSession. Work of Robbie Gemmell <robbie@apache.org> and myself. git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1382947 13f79535-47bb-0310-9956-ffa450edef68
* QPID-4236, QPID-4237, QPID-4245: Added group management functionality, and ↵Robert Gemmell2012-08-248-207/+185
| | | | | | | | | | | | | | | | | | | exposed it via the web management interface. Removed group definition functionality from the ACL plugin. The ACL plugin uses groups but no longer defines them. Introduced SubjectCreator as a facade to AuthenticationManager and group management classes. Applied access control to user and group management. Fixed bug in choosing between update and creation in RestServlet. Moved lots of RestTest helper methods to RestTestHelper. Fixed authentication, authorisation, and status logging when using the web ui. Applied patch from Philip Harvey <phil@philharveyonline.com>, Keith Wall and myself. git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1376968 13f79535-47bb-0310-9956-ffa450edef68
* QPID-4042 : [Java Broker] Add SSL Client Auth supportRobert Godfrey2012-06-061-45/+45
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1346817 13f79535-47bb-0310-9956-ffa450edef68
* QPID-3985 : [Java Tests] Fix locale specific testsRobert Godfrey2012-05-071-4/+3
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1335303 13f79535-47bb-0310-9956-ffa450edef68
* QPID-3965: Fix issue with converting ACL content to lower case Applied patch ↵Keith Wall2012-04-273-6/+10
| | | | | | by Oleksandr Rudyy <orudyy@gmail.com>, Phil Harvey <phil@philharveyonline.com> git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1331342 13f79535-47bb-0310-9956-ffa450edef68
* QPID-3843: ensure ACL rule evaluation for the ALL operation accounts for the ↵Robert Gemmell2012-02-162-25/+202
| | | | | | | | object type and properties. Fix length used for property wildcarding checks. Applied patch from Oleksandr Rudyy <orudyy@gmail.com> git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1244934 13f79535-47bb-0310-9956-ffa450edef68
* QPID-3789 : [Java] code tidyupsRobert Godfrey2012-01-296-18/+9
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1237273 13f79535-47bb-0310-9956-ffa450edef68
* NO-JIRA: Encapsulate fields, use private members and accesors (keep ↵Robert Godfrey2012-01-271-1/+1
| | | | | | checkstyle happy) git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1236867 13f79535-47bb-0310-9956-ffa450edef68
View Lorry Controller Status