Package org.ejbca.core.model.authorization

Examples of org.ejbca.core.model.authorization.AuthorizationDeniedException

397
398
399
400
401
402
403
404
405
406
407
    @TransactionAttribute(TransactionAttributeType.REQUIRED)
    @Override
    public void setArchivedStatus(Admin admin, String fingerprint) throws AuthorizationDeniedException {
      if (admin.getAdminType() != Admin.TYPE_INTERNALUSER) {
        throw new AuthorizationDeniedException("Unauthorized");
      }
      CertificateData rev = CertificateData.findByFingerprint(entityManager, fingerprint);
      if (rev != null) {
        rev.setStatus(SecConst.CERT_ARCHIVED);
        if (log.isDebugEnabled()) {
View Full Code Here
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
           
            if(!authorizationSession.isAuthorizedNoLog(admin, AccessRulesConstants.REGULAR_RENEWCA)) {
                Authorizer.throwAuthorizationException(admin, AccessRulesConstants.REGULAR_RENEWCA, null);
            }
            if (!authorizedToCA(admin, caid)) {
                throw new AuthorizationDeniedException("Not authorized to CA");
            }
        } catch (AuthorizationDeniedException e) {
            String msg = intres.getLocalizedMessage("caadmin.notauthorizedtocertreq", Integer.valueOf(caid));
            logSession.log(admin, caid, LogConstants.MODULE_CA, new java.util.Date(), null, null, LogConstants.EVENT_ERROR_NOTAUTHORIZEDTORESOURCE, msg, e);
            throw new AuthorizationDeniedException(msg);
        }

        // Get CA info.
        CAData cadata = null;
        try {
View Full Code Here
788
789
790
791
792
793
794
795
796
797
798
    public byte[] signRequest(Admin admin, int caid, byte[] request, boolean usepreviouskey, boolean createlinkcert) throws AuthorizationDeniedException,
            CADoesntExistsException, CATokenOfflineException {
       if(!authorizationSession.isAuthorizedNoLog(admin, "/super_administrator")) {
            String msg = intres.getLocalizedMessage("caadmin.notauthorizedtocertreq", Integer.valueOf(caid));
            logSession.log(admin, caid, LogConstants.MODULE_CA, new java.util.Date(), null, null, LogConstants.EVENT_ERROR_NOTAUTHORIZEDTORESOURCE, msg);
            throw new AuthorizationDeniedException(msg);
        }
        byte[] returnval = null;
        String caname = "" + caid;
        CAData signedbydata = CAData.findByIdOrThrow(entityManager, Integer.valueOf(caid));
        try {
View Full Code Here
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
        try {
            if(!authorizationSession.isAuthorizedNoLog(admin, AccessRulesConstants.REGULAR_RENEWCA)) {
                Authorizer.throwAuthorizationException(admin, AccessRulesConstants.REGULAR_RENEWCA, null);
            }
            if (!authorizedToCA(admin, caid)) {
                throw new AuthorizationDeniedException("Not authorized to CA");
            }
        } catch (AuthorizationDeniedException e) {
            String msg = intres.getLocalizedMessage("caadmin.notauthorizedtocertresp", Integer.valueOf(caid));
            logSession.log(admin, caid, LogConstants.MODULE_CA, new java.util.Date(), null, null, LogConstants.EVENT_ERROR_NOTAUTHORIZEDTORESOURCE, msg, e);
            throw new AuthorizationDeniedException(msg);
        }

        // Get CA info.
        CAData cadata = CAData.findById(entityManager, Integer.valueOf(caid));
        if (cadata == null) {
View Full Code Here
1049
1050
1051
1052
1053
1054
1055
1056
1057
1058
1059
        // check authorization
        if(!authorizationSession.isAuthorizedNoLog(admin, "/super_administrator")) {
            String msg = intres.getLocalizedMessage("caadmin.notauthorizedtocertresp", cainfo.getName());
            logSession.log(admin, admin.getCaId(), LogConstants.MODULE_CA, new java.util.Date(), null, null, LogConstants.EVENT_ERROR_NOTAUTHORIZEDTORESOURCE,
                    msg);
            throw new AuthorizationDeniedException(msg);
        }

        // Check that CA doesn't already exists
        CAData oldcadata = null;
        int caid = cainfo.getCAId();
View Full Code Here
1321
1322
1323
1324
1325
1326
1327
1328
1329
1330
1331
            CADoesntExistsException, UnsupportedEncodingException, IllegalKeyStoreException {
        // check authorization
        if(!authorizationSession.isAuthorizedNoLog(admin, "/super_administrator")) {
            String msg = intres.getLocalizedMessage("caadmin.notauthorizedtorenew", Integer.valueOf(caid));
            logSession.log(admin, caid, LogConstants.MODULE_CA, new java.util.Date(), null, null, LogConstants.EVENT_ERROR_NOTAUTHORIZEDTORESOURCE, msg);
            throw new AuthorizationDeniedException(msg);
        }

        // Get CA info.
        CAData cadata = CAData.findByIdOrThrow(entityManager, Integer.valueOf(caid));
        CA ca = cadata.getCA();
View Full Code Here
1352
1353
1354
1355
1356
1357
1358
1359
1360
1361
1362
1363
1364
1365
1366
1367
        try {
            if(!authorizationSession.isAuthorizedNoLog(admin, AccessRulesConstants.REGULAR_RENEWCA)) {
                Authorizer.throwAuthorizationException(admin, AccessRulesConstants.REGULAR_RENEWCA, null);
            }
            if (!authorizedToCA(admin, caid)) {
                throw new AuthorizationDeniedException("Not authorized to CA");
            }
        } catch (AuthorizationDeniedException e) {
            String msg = intres.getLocalizedMessage("caadmin.notauthorizedtorenew", Integer.valueOf(caid));
            logSession.log(admin, caid, LogConstants.MODULE_CA, new java.util.Date(), null, null, LogConstants.EVENT_ERROR_NOTAUTHORIZEDTORESOURCE, msg, e);
            throw new AuthorizationDeniedException(msg);
        }

        // Get CA info.
        CAData cadata = null;
        try {
View Full Code Here
1516
1517
1518
1519
1520
1521
1522
1523
1524
1525
1526
    public void revokeCA(Admin admin, int caid, int reason) throws CADoesntExistsException, AuthorizationDeniedException {
        // check authorization
        if(!authorizationSession.isAuthorizedNoLog(admin, "/super_administrator")) {
            String msg = intres.getLocalizedMessage("caadmin.notauthorizedtorevoke", Integer.valueOf(caid));
            logSession.log(admin, caid, LogConstants.MODULE_CA, new java.util.Date(), null, null, LogConstants.EVENT_ERROR_NOTAUTHORIZEDTORESOURCE, msg);
            throw new AuthorizationDeniedException(msg);
        }
        // Get CA info.
        CAData cadata = CAData.findByIdOrThrow(entityManager, Integer.valueOf(caid));
        String issuerdn = cadata.getSubjectDN();
        try {
View Full Code Here
2069
2070
2071
2072
2073
2074
2075
2076
2077
2078
2079
            CATokenAuthenticationFailedException, CATokenOfflineException, ApprovalException, WaitingForApprovalException {
        // Authorize
        if(!authorizationSession.isAuthorizedNoLog(admin, AccessRulesConstants.REGULAR_ACTIVATECA)) {
            String msg = intres.getLocalizedMessage("caadmin.notauthorizedtoactivatetoken", Integer.valueOf(caid));
            logSession.log(admin, caid, LogConstants.MODULE_CA, new java.util.Date(), null, null, LogConstants.EVENT_ERROR_NOTAUTHORIZEDTORESOURCE, msg);
            throw new AuthorizationDeniedException(msg);
        }

        // Check if approvals is required.
        CAInfo cainfo = getCAInfo(admin, caid);
        if (cainfo == null) {
View Full Code Here
2154
2155
2156
2157
2158
2159
2160
2161
2162
2163
2164
    public void deactivateCAToken(Admin admin, int caid) throws AuthorizationDeniedException, EjbcaException {
        // Authorize
        if(!authorizationSession.isAuthorizedNoLog(admin, AccessRulesConstants.REGULAR_ACTIVATECA)) {
            String msg = intres.getLocalizedMessage("caadmin.notauthorizedtodeactivatetoken", Integer.valueOf(caid));
            logSession.log(admin, caid, LogConstants.MODULE_CA, new java.util.Date(), null, null, LogConstants.EVENT_ERROR_NOTAUTHORIZEDTORESOURCE, msg);
            throw new AuthorizationDeniedException(msg);
        }
        if (caid >= 0 && caid <= CAInfo.SPECIALCAIDBORDER) {
          // This should never happen.
          String msg = intres.getLocalizedMessage("caadmin.errordeactivatetoken", Integer.valueOf(caid));
          logSession.log(admin, caid, LogConstants.MODULE_CA, new java.util.Date(), null, null, LogConstants.EVENT_ERROR_CAEDITED, msg);
View Full Code Here
TOP

Related Classes of org.ejbca.core.model.authorization.AuthorizationDeniedException

  • org.ejbca.core.ejb.ca.caadmin.CAAdminSessionBean
  • org.ejbca.core.ejb.ca.caadmin.CaSessionBean
  • org.ejbca.core.ejb.ca.store.CertificateStoreSessionBean
  • org.ejbca.core.ejb.ra.UserAdminSessionBean
  • org.ejbca.core.model.ra.RAAuthorization
  • org.ejbca.core.protocol.ws.EjbcaWS
  • org.ejbca.core.protocol.ws.EjbcaWSHelper
  • org.ejbca.ui.web.admin.cainterface.CertificateProfileDataHandler
  • org.ejbca.ui.web.admin.cainterface.PublisherDataHandler
  • org.ejbca.ui.web.admin.configuration.AuthorizationDataHandler
    • Copyright © 2018 www.massapicom. All rights reserved.
    All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.