Package org.exist.security

Examples of org.exist.security.Subject

273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
            // map's the path if a mapping is specified in the descriptor
            path = descriptor.mapPath(path);
        }

        // third, authenticate the user
        final Subject user = authenticate(request, response);
        if (user == null) {
            // You now get a challenge if there is no user
            // response.sendError(HttpServletResponse.SC_FORBIDDEN,
            // "Permission denied: unknown user " + "or password");
            return;
        }

        // fourth, process the request
        DBBroker broker = null;
        try {
            broker = getPool().get(user);
            srvREST.doHead(broker, request, response, path);
        } catch (final BadRequestException e) {
            if (response.isCommitted()) {
                throw new ServletException(e.getMessage(), e);
            }
            response.sendError(HttpServletResponse.SC_BAD_REQUEST, e.getMessage());

        } catch (final PermissionDeniedException e) {
            // If the current user is the Default User and they do not have permission
            // then send a challenge request to prompt the client for a username/password.
            // Else return a FORBIDDEN Error
            if (user != null && user.equals(getDefaultUser())) {
                getAuthenticator().sendChallenge(request, response);
            } else {
                response.sendError(HttpServletResponse.SC_FORBIDDEN, e.getMessage());
            }
        } catch (final NotFoundException e) {
View Full Code Here
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
            // map's the path if a mapping is specified in the descriptor
            path = descriptor.mapPath(path);
        }

        // third, authenticate the user
        final Subject user = authenticate(request, response);
        if (user == null) {
            // You now get a challenge if there is no user
            // response.sendError(HttpServletResponse.SC_FORBIDDEN,
            // "Permission denied: unknown user " + "or password");
            return;
        }

        // fourth, process the request
        DBBroker broker = null;
        try {
            broker = getPool().get(user);
            srvREST.doDelete(broker, path, request, response);
        } catch (final PermissionDeniedException e) {
            // If the current user is the Default User and they do not have permission
            // then send a challenge request to prompt the client for a username/password.
            // Else return a FORBIDDEN Error
            if (user != null && user.equals(getDefaultUser())) {
                getAuthenticator().sendChallenge(request, response);
            } else {
                response.sendError(HttpServletResponse.SC_FORBIDDEN, e.getMessage());
            }
        } catch (final NotFoundException e) {
View Full Code Here
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
            // map's the path if a mapping is specified in the descriptor
            path = descriptor.mapPath(path);
        }

        // third, authenticate the user
        final Subject user = authenticate(request, response);
        if (user == null) {
            // You now get a challenge if there is no user
            // response.sendError(HttpServletResponse.SC_FORBIDDEN,
            // "Permission denied: unknown user " + "or password");
            return;
        }

        // fourth, process the request
        DBBroker broker = null;
        try {
            broker = getPool().get(user);

            // Route the request
            if (path.indexOf(SOAPServer.WEBSERVICE_MODULE_EXTENSION) > -1) {
                // SOAP Server
                srvSOAP.doPost(broker, request, response, path);
            } else {
                // REST Server
                srvREST.doPost(broker, request, response, path);
            }
        } catch (final PermissionDeniedException e) {
            // If the current user is the Default User and they do not have permission
            // then send a challenge request to prompt the client for a username/password.
            // Else return a FORBIDDEN Error
            if (user != null && user.equals(getDefaultUser())) {
                getAuthenticator().sendChallenge(request, response);
            } else {
                response.sendError(HttpServletResponse.SC_FORBIDDEN, e.getMessage());
            }
        } catch (final EXistException e) {
View Full Code Here
168
169
170
171
172
173
174
175
176
177
178
179
180
      pool = BrokerPool.getInstance();
    } catch (final EXistException e) {
      throw new ServletException(e.getMessage(), e);
    }

    Subject user = pool.getSecurityManager().getGuestSubject();

    Subject requestUser = HttpAccount.getUserFromServletRequest(request);
        if (requestUser != null)
          {user = requestUser;}

        // Retrieve username / password from HTTP request attributes
        final String userParam = (String) request.getAttribute("xslt.user");
View Full Code Here
75
76
77
78
79
80
81
82
83
84
85
        String resourcePath = null;
       
        final DatabaseResources databaseResources = new DatabaseResources(brokerPool);
       
        //UNDERSTAND: why using guest account, it can be disabled
        final Subject user = brokerPool.getSecurityManager().getGuestSubject();
       
        if( xri.getNamespace() !=null ){
           
            // XML Schema search
            LOG.debug("Searching namespace '"+xri.getNamespace()+"' in database from "+collection+"...");
View Full Code Here
55
56
57
58
59
60
61
62
63
64
65
            return;
        }

        synchronized (waitingSystemTasks) {
            DBBroker broker = null;
            Subject oldUser = null;
            try {
                broker = pool.get(null);
                oldUser = broker.getSubject();
                broker.setSubject(pool.getSecurityManager().getSystemSubject());
                while (!waitingSystemTasks.isEmpty()) {
View Full Code Here
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
       
        final Sequence password = getArgument(1).eval(contextSequence, contextItem);
        final String username = usernameResult.getStringValue();
       
        final SecurityManager sm = broker.getBrokerPool().getSecurityManager();
        Subject user;
        try {
            user = sm.authenticate(username, password.getStringValue());
        } catch(final AuthenticationException e) {
            final XPathException exception = new XPathException(this, "Authentication failed", e);
            logger.error("Authentication failed for [" + username + "] because of [" + e.getMessage() + "].", exception);
            throw exception;
        }

        final Subject oldUser = context.getEffectiveUser();
        try {
            logger.info("Setting the effective user to: [" + username + "]");
            broker.setSubject(user);
            return getArgument(2).eval(contextSequence, contextItem);
        } finally {
            logger.info("Returning the effective user to: [" + oldUser.getName() + "]");
            broker.setSubject(oldUser);
        }
    }
View Full Code Here
101
102
103
104
105
106
107
108
109
110
111
            //START TEMP - Whilst we can remove the group from the user
            //we cannot update the user because we do not have sufficient permissions
            //in the real world we should not be able to do either. The modelling of group
            //membership as a concern of user data is wrong! Should follow Unix approach.
            //see XMLDBAddUserToGroup also
            final Subject currentSubject = context.getBroker().getSubject();
            try {
                //escalate
                context.getBroker().setSubject(sm.getSystemSubject());

                //perform action
View Full Code Here
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
    public Sequence eval(Sequence args[], Sequence contextSequence) throws XPathException {

        final String groupName = args[0].getStringValue();

        final DBBroker broker = context.getBroker();
        final Subject currentUser = broker.getSubject();

        if(currentUser.hasGroup(groupName)) {
            return BooleanValue.TRUE;
        } else if(currentUser.hasDbaRole()) {
            final SecurityManager sm = broker.getBrokerPool().getSecurityManager();
            final Group group = sm.getGroup(groupName);
            return BooleanValue.valueOf(group != null);
        } else {
            throw new XPathException("You do not have permission to determine if the group exists");
View Full Code Here
1240
1241
1242
1243
1244
1245
1246
1247
1248
1249
1250
        FullXmldbURI fullURI = null;
        final BrokerPool pool = broker.getBrokerPool();
        final TransactionManager transact = pool.getTransactionManager();
        Txn txn = null;
        LOG.info("Storing configuration " + collection.getURI() + "/" + uri);
        final Subject currentUser = broker.getSubject();
       
        try {
            broker.setSubject(pool.getSecurityManager().getSystemSubject());
            txn = transact.beginTransaction();
            txn.acquireLock(collection.getLock(), Lock.WRITE_LOCK);
View Full Code Here
TOP

Related Classes of org.exist.security.Subject

  • org.exist.atom.http.AtomServlet
  • org.exist.backup.SystemImport
  • org.exist.collections.CollectionRemovalTest
  • org.exist.config.Configurator
  • org.exist.deadlocks.GetReleaseBrokerDeadlocks$EnterServiceMode
  • org.exist.deadlocks.GetReleaseBrokerDeadlocks$GetRelease
  • org.exist.dom.DocumentImplTest
  • org.exist.extensions.exquery.restxq.impl.RestXqServlet
  • org.exist.http.AuditTrailSessionListener
  • org.exist.http.servlets.BasicAuthenticator
    • Copyright © 2018 www.massapicom. All rights reserved.
    All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.