openutils-svn

[Openutils-svn] SF.net SVN: openutils: [430] trunk/openutils-hibernate-security/src/main/ java/it/openutils/hibernate/security/aop/AOPSecurity.java

[<fc...@us...>]

Revision: 430
          http://openutils.svn.sourceforge.net/openutils/?rev=430&view=rev
Author:   fcarone
Date:     2007-09-10 02:37:30 -0700 (Mon, 10 Sep 2007)

Log Message:
-----------
use generics for methods

Modified Paths:
--------------
    trunk/openutils-hibernate-security/src/main/java/it/openutils/hibernate/security/aop/AOPSecurity.java

Modified: trunk/openutils-hibernate-security/src/main/java/it/openutils/hibernate/security/aop/AOPSecurity.java
===================================================================
--- trunk/openutils-hibernate-security/src/main/java/it/openutils/hibernate/security/aop/AOPSecurity.java	2007-09-03 08:31:00 UTC (rev 429)
+++ trunk/openutils-hibernate-security/src/main/java/it/openutils/hibernate/security/aop/AOPSecurity.java	2007-09-10 09:37:30 UTC (rev 430)
@@ -125,7 +125,7 @@
      * Sets the securedDAOs.
      * @param securedDAOs the securedDAOs to set
      */
-    public void setSecuredDAOs(List securedDAOs)
+    public void setSecuredDAOs(List<String> securedDAOs)
     {
         this.securedDAOs = securedDAOs;
     }


This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

[Openutils-svn] SF.net SVN: openutils: [642] trunk/openutils-hibernate-security/src/main/ java/it/openutils/hibernate/security/aop/AOPSecurity.java

[<fc...@us...>]

Revision: 642
          http://openutils.svn.sourceforge.net/openutils/?rev=642&view=rev
Author:   fcarone
Date:     2008-02-19 09:42:20 -0800 (Tue, 19 Feb 2008)

Log Message:
-----------
conservative logging

Modified Paths:
--------------
    trunk/openutils-hibernate-security/src/main/java/it/openutils/hibernate/security/aop/AOPSecurity.java

Modified: trunk/openutils-hibernate-security/src/main/java/it/openutils/hibernate/security/aop/AOPSecurity.java
===================================================================
--- trunk/openutils-hibernate-security/src/main/java/it/openutils/hibernate/security/aop/AOPSecurity.java	2008-02-19 16:01:18 UTC (rev 641)
+++ trunk/openutils-hibernate-security/src/main/java/it/openutils/hibernate/security/aop/AOPSecurity.java	2008-02-19 17:42:20 UTC (rev 642)
@@ -97,17 +97,19 @@
 
         if (rules.isEmpty())
         {
-            String grantedRoles = StringUtils.EMPTY;
-            for (int i = 0; i < authorities.length; i++)
+            if (log.isWarnEnabled())
             {
-                grantedRoles += authorities[i].getAuthority() + " ";
+                String grantedRoles = StringUtils.EMPTY;
+                for (int i = 0; i < authorities.length; i++)
+                {
+                    grantedRoles += authorities[i].getAuthority() + " ";
+                }
+                log.warn("Access is denied on " + entity + ", for user {} with roles {}", SecurityContextHolder
+                    .getContext()
+                    .getAuthentication()
+                    .getPrincipal()
+                    .toString(), grantedRoles);
             }
-            log.warn("Access is denied on " + entity + ", for user {} with roles {}", SecurityContextHolder
-                .getContext()
-                .getAuthentication()
-                .getPrincipal()
-                .toString(), grantedRoles);
-
             throw new SecurityException("Access denied");
         }
 
@@ -142,7 +144,6 @@
         this.securedDAOs = securedDAOs;
     }
 
-
     /**
      * Sets the enabled.
      * @param enabled the enabled to set


This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

[Openutils-svn] SF.net SVN: openutils: [652] trunk/openutils-hibernate-security/src/main/ java/it/openutils/hibernate/security/aop/AOPSecurity.java

[<fc...@us...>]

Revision: 652
          http://openutils.svn.sourceforge.net/openutils/?rev=652&view=rev
Author:   fcarone
Date:     2008-02-20 02:20:34 -0800 (Wed, 20 Feb 2008)

Log Message:
-----------
Better warning log when no rules are found.

Modified Paths:
--------------
    trunk/openutils-hibernate-security/src/main/java/it/openutils/hibernate/security/aop/AOPSecurity.java

Modified: trunk/openutils-hibernate-security/src/main/java/it/openutils/hibernate/security/aop/AOPSecurity.java
===================================================================
--- trunk/openutils-hibernate-security/src/main/java/it/openutils/hibernate/security/aop/AOPSecurity.java	2008-02-20 10:02:28 UTC (rev 651)
+++ trunk/openutils-hibernate-security/src/main/java/it/openutils/hibernate/security/aop/AOPSecurity.java	2008-02-20 10:20:34 UTC (rev 652)
@@ -104,7 +104,7 @@
                 {
                     grantedRoles += authorities[i].getAuthority() + " ";
                 }
-                log.warn("Access is denied on " + entity + ", for user {} with roles {}", SecurityContextHolder
+                log.warn("No rules found. Access is denied on " + entity + ", for user {} with roles {}", SecurityContextHolder
                     .getContext()
                     .getAuthentication()
                     .getPrincipal()


This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

[Openutils-svn] SF.net SVN: openutils: [656] trunk/openutils-hibernate-security/src/main/ java/it/openutils/hibernate/security/aop/AOPSecurity.java

[<fc...@us...>]

Revision: 656
          http://openutils.svn.sourceforge.net/openutils/?rev=656&view=rev
Author:   fcarone
Date:     2008-02-20 02:38:11 -0800 (Wed, 20 Feb 2008)

Log Message:
-----------
code formatted

Modified Paths:
--------------
    trunk/openutils-hibernate-security/src/main/java/it/openutils/hibernate/security/aop/AOPSecurity.java

Modified: trunk/openutils-hibernate-security/src/main/java/it/openutils/hibernate/security/aop/AOPSecurity.java
===================================================================
--- trunk/openutils-hibernate-security/src/main/java/it/openutils/hibernate/security/aop/AOPSecurity.java	2008-02-20 10:27:15 UTC (rev 655)
+++ trunk/openutils-hibernate-security/src/main/java/it/openutils/hibernate/security/aop/AOPSecurity.java	2008-02-20 10:38:11 UTC (rev 656)
@@ -104,11 +104,10 @@
                 {
                     grantedRoles += authorities[i].getAuthority() + " ";
                 }
-                log.warn("No rules found. Access is denied on " + entity + ", for user {} with roles {}", SecurityContextHolder
-                    .getContext()
-                    .getAuthentication()
-                    .getPrincipal()
-                    .toString(), grantedRoles);
+                log.warn(
+                    "No rules found. Access is denied on " + entity + ", for user {} with roles {}",
+                    SecurityContextHolder.getContext().getAuthentication().getPrincipal().toString(),
+                    grantedRoles);
             }
             throw new SecurityException("Access denied");
         }


This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

[Openutils-svn] SF.net SVN: openutils: [675] trunk/openutils-hibernate-security/src/main/ java/it/openutils/hibernate/security/aop/AOPSecurity.java

[<fc...@us...>]

Revision: 675
          http://openutils.svn.sourceforge.net/openutils/?rev=675&view=rev
Author:   fcarone
Date:     2008-02-21 06:46:24 -0800 (Thu, 21 Feb 2008)

Log Message:
-----------
Use FieldUtils to get fields.

Modified Paths:
--------------
    trunk/openutils-hibernate-security/src/main/java/it/openutils/hibernate/security/aop/AOPSecurity.java

Modified: trunk/openutils-hibernate-security/src/main/java/it/openutils/hibernate/security/aop/AOPSecurity.java
===================================================================
--- trunk/openutils-hibernate-security/src/main/java/it/openutils/hibernate/security/aop/AOPSecurity.java	2008-02-21 14:31:05 UTC (rev 674)
+++ trunk/openutils-hibernate-security/src/main/java/it/openutils/hibernate/security/aop/AOPSecurity.java	2008-02-21 14:46:24 UTC (rev 675)
@@ -93,7 +93,7 @@
         }
 
         String entity = filter.getClass().getCanonicalName();
-        List<SecurityRule> rules = securityRuleManager.getRulesForRoles(entity, roles);
+        List<SecurityRule> rules = securityRuleManager.getRulesForRoles(filter, roles);
 
         if (rules.isEmpty())
         {


This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

[Openutils-svn] SF.net SVN: openutils: [687] trunk/openutils-hibernate-security/src/main/ java/it/openutils/hibernate/security/aop/AOPSecurity.java

[<fc...@us...>]

Revision: 687
          http://openutils.svn.sourceforge.net/openutils/?rev=687&view=rev
Author:   fcarone
Date:     2008-02-25 01:15:35 -0800 (Mon, 25 Feb 2008)

Log Message:
-----------
new config variable for denyIfNoRulesFound added

Modified Paths:
--------------
    trunk/openutils-hibernate-security/src/main/java/it/openutils/hibernate/security/aop/AOPSecurity.java

Modified: trunk/openutils-hibernate-security/src/main/java/it/openutils/hibernate/security/aop/AOPSecurity.java
===================================================================
--- trunk/openutils-hibernate-security/src/main/java/it/openutils/hibernate/security/aop/AOPSecurity.java	2008-02-22 16:13:02 UTC (rev 686)
+++ trunk/openutils-hibernate-security/src/main/java/it/openutils/hibernate/security/aop/AOPSecurity.java	2008-02-25 09:15:35 UTC (rev 687)
@@ -48,6 +48,8 @@
      */
     private Logger log = LoggerFactory.getLogger(AOPSecurity.class);
 
+    private boolean denyIfNoRulesFound = true;
+
     private SecurityRuleManager securityRuleManager;
 
     private List<String> securedDAOs;
@@ -105,11 +107,20 @@
                     grantedRoles += authorities[i].getAuthority() + " ";
                 }
                 log.warn(
-                    "No rules found. Access is denied on " + entity + ", for user {} with roles {}",
+                    "No rules found for " + entity + ", user {} with roles {}",
                     SecurityContextHolder.getContext().getAuthentication().getPrincipal().toString(),
                     grantedRoles);
             }
-            throw new SecurityException("Access denied");
+            if (denyIfNoRulesFound)
+            {
+                log.debug("denyIfNoRulesFound is true, denying access.");
+                throw new SecurityException("Access denied");
+            }
+            else
+            {
+                log.debug("denyIfNoRulesFound is false, allowing access.");
+                return pjp.proceed();
+            }
         }
 
         Filter hibernateFilter = securityRuleManager.getEntityFilterFromRules(entity, rules);
@@ -151,4 +162,14 @@
     {
         this.enabled = enabled;
     }
+
+
+    /**
+     * Sets the denyIfNoRulesFound.
+     * @param denyIfNoRulesFound the denyIfNoRulesFound to set
+     */
+    public void setDenyIfNoRulesFound(boolean denyIfNoRulesFound)
+    {
+        this.denyIfNoRulesFound = denyIfNoRulesFound;
+    }
 }


This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.