Package com.esri.gpt.framework.security.principal

Examples of com.esri.gpt.framework.security.principal.Groups

511
512
513
514
515
516
517
518
519
520
521
522
* @throws SQLException if a database communication exception occurs
*/
private void removeUserFromGroups(User user)
  throws CredentialPolicyException, IdentityException, NamingException, SQLException {
  try {
    Groups grps = user.getGroups();
    for(Group g : grps.values()){
      removeUserFromGroup(user, g.getDistinguishedName());
    }
 
  } finally {
  }
View Full Code Here
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
  getQueryFunctions().readUserProfile(dirContext,user);
  user.setName(user.getProfile().getUsername());
 
  // read groups, set authenticated roles
  getQueryFunctions().readUserGroups(dirContext,user);
  Groups userGroups = user.getGroups();
  Roles configuredRoles = getConfiguration().getIdentityConfiguration().getConfiguredRoles();
  RoleSet authenticatedRoles = user.getAuthenticationStatus().getAuthenticatedRoles();
  for (Role role: configuredRoles.values()) {
    if (userGroups.containsKey(role.getDistinguishedName())) {
      authenticatedRoles.addAll(role.getFullRoleSet());
    }
  }
  user.getAuthenticationStatus().setWasAuthenticated(true);
 
  // ensure membership if a targeted metadata management group was specified
  if (targetedGroupDN.length() > 0) {
    if (!userGroups.containsKey(targetedGroupDN)) {
      user.getAuthenticationStatus().reset();
      throw new AuthenticationException("Invalid credentials, not a member of the supplied group.");
    }
  }
 
View Full Code Here
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
    String sUsername = credentials.getUsername();
   
    // check for a metadata management login: username@@group
    int nIdx = sUsername.indexOf("@@");
    if (nIdx != -1) {
      Groups mmGroups = getConfiguration().getIdentityConfiguration().getMetadataManagementGroups();
      if ((mmGroups != null) && (mmGroups.size() > 0)) {
        String sMmUser = Val.chkStr(sUsername.substring(0,nIdx));
        String sMmGroup = Val.chkStr(sUsername.substring(nIdx+2));
        if ((sMmUser.length() > 0) && (sMmGroup.length() > 0)) {
          for (Group group: mmGroups.values()) {
            if (sMmGroup.equalsIgnoreCase(group.getName())) {
              sUsername = sMmUser;
              credentials.setTargetedGroupDN(group.getDistinguishedName());
            }
          }
View Full Code Here
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
* @param filter the group search filter for ldap
* @return the list of groups matching filter
* @throws NamingException if an LDAP naming exception occurs
*/
protected Groups readGroups(DirContext dirContext,String filter) throws NamingException{ 
  Groups groups = new Groups();
  NamingEnumeration<SearchResult> enSearch = null;
  try{
    LdapGroupProperties groupProps = getConfiguration().getGroupProperties();
    String sNameAttribute = groupProps.getGroupDisplayNameAttribute();
      String sBaseDN = groupProps.getGroupSearchDIT();
      String sFilter = groupProps.returnGroupNameSearchFilter(filter);
      SearchControls controls = new SearchControls();
      controls.setSearchScope(SearchControls.SUBTREE_SCOPE);
      if (sNameAttribute.length() > 0) {
        String[] aReturn = new String[1];
        aReturn[0] = sNameAttribute;
        controls.setReturningAttributes(aReturn);
      }
     
      enSearch = dirContext.search(sBaseDN,sFilter,controls);
      try {
        while (enSearch.hasMore()) {
          SearchResult result = (SearchResult)enSearch.next();
          String sDN = buildFullDN(result.getName(),sBaseDN);
          if (sDN.length() > 0) {
            String sName = "";
            if (sNameAttribute.length() > 0) {
              Attribute attrName = result.getAttributes().get(sNameAttribute);
              if ((attrName != null) && (attrName.size() > 0)) {
                sName = Val.chkStr(attrName.get(0).toString());
              }
            }

              Group group = new Group();
              group.setDistinguishedName(sDN);
              group.setKey(group.getDistinguishedName());
              group.setName(sName);
              groups.add(group);
          }
        }
      } catch (PartialResultException pre) {
        LogUtil.getLogger().finer(pre.toString());
      } catch (LimitExceededException lee) {
View Full Code Here
85
86
87
88
89
90
91
92
93
94
   * Builds the list of candidate access.
   * @param context the active request context
   */
  public void buildAllGroups(RequestContext context) {
    _list.clear();
    Groups groups = Publisher.buildSelectableGroups(context);
    for (Group g : groups.values()) {
      _list.add(new SelectItem(g.getKey(), g.getName()));
    }
  }
View Full Code Here
249
250
251
252
253
254
255
256
257
258
259
260
  /*User selectableUser = new User();
    selectableUser.setDistinguishedName("*");
    idAdapter.readUserGroups(selectableUser);
    selectableGroups = selectableUser.getGroups();*/
   
  Groups groups = idAdapter.readGroups(filter);
  for (Group g : groups.values()){
    if(isAddAttributeRequest){
      try{
        idAdapter.addAttribute(g.getDistinguishedName(), attributeName, attributeValue);
      }catch(AttributeInUseException aiue){
        // TODO : do nothing if attribute exists ? or overwrite ?
View Full Code Here
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
  usersJson += " ] , ";
 
  usersJson += " \"userDn\" : \"" + user.getDistinguishedName() + " \" , ";
 
  String groupsJson = " \"groups\" : [";
  Groups groups = user.getGroups();
  groups.sort();
  boolean firstGroup = true;
  for (Group group : groups.values()) {
    String gkey = Val.chkStr(group.getKey());
    String name = Val.chkStr(group.getName());
    String dn = Val.chkStr(group.getDistinguishedName());
    if(!firstGroup) {
      groupsJson += ",";
    }else{
      firstGroup = false;
    }
    groupsJson += " { \"key\" : \"" + Val.escapeStrForJson(gkey) + "\" , \"name\" : \"" + Val.escapeStrForJson(name) + "\" , \"dn\" : \"" + Val.escapeStrForJson(dn) + "\" }";
  }
  groupsJson += " ] , ";

  String rolesJson = " \"selectableRoles\" : [";
  Roles roles = buildSelectableRoles(context);
  sortedKeys=new ArrayList<String>(roles.keySet());
  Collections.sort(sortedKeys);
  boolean firstRole = true;
  for(int i=0; i <sortedKeys.size(); i++){
    Role role = roles.get(sortedKeys.get(i));
    String roleDn = Val.chkStr(role.getDistinguishedName());
    String roleKey = Val.chkStr(role.getKey());
    String roleName = msgBroker.retrieveMessage(Val.chkStr(role.getResKey()));
    if(!role.isManage()) continue;
    boolean hasRole = false;
    for (Group group : groups.values()){
      String groupDn = Val.chkStr(group.getDistinguishedName());
      if(roleDn.equals(groupDn)){
        hasRole = true;
        break;
      }
View Full Code Here
638
639
640
641
642
643
644
645
646
647
648
649
* @param groupDn group distingushed name
* @return true if managed user role is same as groupDn
*/
protected boolean checkRole(User user,String groupDn){
  boolean isSelf = false;
  Groups groups = user.getGroups();
  for (Group group : groups.values()){
    String dn = Val.chkStr(group.getDistinguishedName());
    if(dn.equals(groupDn)){
      isSelf = true;
      break;
    }
View Full Code Here
145
146
147
148
149
150
151
152
153
154
155
  }

  // check for an assign Acl request
  if (sAction.equalsIgnoreCase("assignAcl")) {
    ArrayList<String> acl = getActionCriteria().getMetadataAccessPolicy();
    Groups groups = Publisher.buildSelectableGroups(getRequestContext());
    // if (acl != null && acl.size() > 0) {
    executeAssignAcl(adminDao, uuids, groups, acl);
    // }
  }
 
View Full Code Here
200
201
202
203
204
205
206
207
208
209
210
  }

  // check for an assign Acl request
  if (sAction.equalsIgnoreCase("assignAcl")) {
    ArrayList<String> selectedGroups = getActionCriteria().getMetadataAccessPolicy();
    Groups groups = Publisher.buildSelectableGroups(getRequestContext());
    if (selectedGroups != null && selectedGroups.size() > 0) {
      MetadataAcl acl = new MetadataAcl(getRequestContext());
      nRows = adminDao.updateAcl(getPublisher(), queryCriteria, acl.buildAclGroups(groups, selectedGroups));
    } else {
      nRows = adminDao.updateAcl(getPublisher(), queryCriteria, null);
View Full Code Here
TOP

Related Classes of com.esri.gpt.framework.security.principal.Groups

  • com.esri.gpt.catalog.management.MmdActionRequest
  • com.esri.gpt.control.publication.SelectableGroups
  • com.esri.gpt.framework.security.identity.IdentityConfiguration
  • com.esri.gpt.framework.security.identity.ldap.LdapClient
  • com.esri.gpt.framework.security.identity.ldap.LdapIdentityAdapter
  • com.esri.gpt.framework.security.identity.ldap.LdapQueryFunctions
  • com.esri.gpt.framework.security.metadata.MetadataAcl
  • com.esri.gpt.server.identity.ManageUserServlet
    • Copyright © 2018 www.massapicom. All rights reserved.
    All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.