Min Chen
ba848087f8
Disable IAM feature from 4.4 release.
2014-05-22 18:27:08 -07:00
Min Chen
5d59fc7f5a
Fix RoleBasedQuerySelector to handle new listAll semantics. If
...
listAll=true, show all resources that caller (or impersonater) has
ListEntry access type; otherwise, show all resources that caller (or
impersonater) has UseEntry access type.
2014-04-17 18:06:07 -07:00
Min Chen
da13165743
Change AccountManagerImpl.checkAccess to invoke SecurityChecker
...
interface that takes multiple controlled entities.
2014-04-17 17:53:01 -07:00
Prachi Damle
a509f94544
Adding SecurityChecker list for the ParamProcessWorker
2014-04-04 16:38:29 -07:00
Prachi Damle
897e0d3abe
SecurityChecker can accept multiple ControlledEntity
2014-04-04 16:38:29 -07:00
Prachi Damle
e09f97aa63
Adding support for 'readOnly' access. AccessType.ListEntry introduced.
2014-03-19 11:00:20 -07:00
Min Chen
ae1d6a771b
Remove IAMEntityType to use existing VO interface class to annotate
...
entityType.
2014-03-17 17:19:55 -07:00
Prachi Damle
36c0a4e2c3
Removed the AccessType.UseNetwork - replaced all referrences by AccessType.UseEntry
2014-03-13 15:32:38 -07:00
Min Chen
748c090b29
Fix unapproved licens issue.
2014-03-10 11:27:10 -07:00
Min Chen
48e08fe676
Merge branch 'master' into rbac.
2014-03-06 14:02:20 -08:00
Min Chen
793becf524
CLOUDSTACK-5920: Add some interface methods and constants required by
...
IAM.
2014-03-05 09:40:55 -08:00
Min Chen
d0ae4d9a9f
CLOUDSTACK-5920:Add interface to ControlledEntity to return IAM
...
entity type.
2014-03-05 09:40:55 -08:00
Min Chen
e5d722654a
Rename IAMEntityType.AclGroup and AclPolicy.
2014-03-02 16:06:29 -08:00
Prachi Damle
f41604fc6c
Renaming AclEntityType --> IAMEntityType
2014-02-25 16:43:17 -08:00
Prachi Damle
bbaa742863
Adding annotations to admin commands
2014-02-19 12:22:33 -08:00
Min Chen
586ee74000
Clean up SecurityChecker.AccessType and modify code to use them
...
consistently.
2014-02-14 11:23:05 -08:00
Prachi Damle
1d98ef9821
@ACL and EntityType for FirewallRule commands
2014-01-24 17:06:11 -08:00
Prachi Damle
96a64b933e
- Adding OperateEntry during loading of commands
...
- Replace ListEntry By OperateEntry
- ApiDispatcher should pass on the API name
2014-01-23 17:50:59 -08:00
Min Chen
929fbabaa2
Merge branch 'master' into rbac.
2014-01-17 14:37:08 -08:00
Min Chen
6583cb3800
Add listAclGroupsByAccount to QuerySelector adapters and remove
...
AclProxyService interface.
2014-01-14 16:19:25 -08:00
Min Chen
bae498c89e
Handle search of those entities without db view created using new ACL
...
model.
2014-01-13 21:55:56 -08:00
Min Chen
43f0f901dd
Remove VO and DAO from cloud-engine-schema.
2014-01-10 15:57:39 -08:00
Min Chen
e42a262f6c
Remove old APIs and old security checker plugins. Also use QuerySelector
...
adapater in ACL search routine.
2014-01-10 14:54:31 -08:00
Min Chen
c950651fe2
Use IAMService to implement QuerySelector adapter.
2013-12-26 19:53:49 -08:00
Min Chen
630b7fb4a1
Fix listTemplates issues with new ACL model.
2013-12-20 17:57:44 -08:00
Prachi Damle
7c6f1c14c2
ControlledEntity Interface change to return EntityType and added values to the AclEntityType enum and
2013-12-12 16:31:00 -08:00
Prachi Damle
1a985227b5
Changes to SecurityChecker
2013-12-12 16:30:53 -08:00
Min Chen
6730fa2b47
Fill in implementation of AclService.getGrantedDomains,
...
getGrantedAccounts and getGrantedResources.
2013-12-09 14:08:54 -08:00
Min Chen
a416f6c3c3
Fix API build error based on new DB schema, now only
...
RoleBasedEntityAccessChecker needs to be fixed.
2013-12-06 15:09:00 -08:00
Prachi Damle
cf69731a52
Suring startup load the API permissions from commands.properties and @APICommand annotations
2013-11-25 17:01:56 -08:00
Prachi Damle
f231cec5b7
Loading api permissions from commands.properties during startup
2013-11-25 10:59:12 -08:00
Min Chen
015d06e7fc
Separate all volume related APIs to two Cmd classes based on two
...
response views.
2013-11-22 18:48:20 -08:00
Min Chen
11c0c263f2
QueryChecker interface and ACL search criteria to be used for query api
...
for entities with db views created.
2013-11-22 16:36:38 -08:00
Min Chen
c3baf3ad72
Interface for QueryChecker adapter.
2013-11-21 10:32:26 -08:00
Min Chen
7ed030115e
Updated DB schema and DAO layer classes according to new FS.
2013-11-20 17:32:09 -08:00
Alex Huang
8d62744681
Reformat all source code. Added checkstyle to check the source code
2013-11-20 07:26:53 -08:00
Min Chen
6b8cee5fc9
Fix build error.
2013-10-10 14:11:08 -07:00
Prachi Damle
ec4fa61ae3
Tested ACL for StartVmCmd using the new RoleBasedEntityAccessChecker
2013-10-10 00:46:06 -07:00
Prachi Damle
0b1aaf514f
More logic to Role based checker
2013-10-10 00:43:56 -07:00
Min Chen
2b4703b6e6
Change ListVMsCmd to use new role and entity permission information.
2013-10-09 21:56:52 -07:00
Min Chen
b87b9e5c64
Add Scope to acl_role_permission, remove parent_role_id from acl_role
...
table, and create PermissionScope and AclEntityType enum types.
2013-10-07 16:09:26 -07:00
Prachi Damle
579806440b
Add permission flag to acl_entity_permission
2013-10-07 14:30:15 -07:00
Prachi Damle
385dfc230f
Schema and VO/Dao for Role Permission
2013-10-07 12:33:28 -07:00
Prachi Damle
bb271926fb
WIP AccessChecker plugin
2013-10-01 18:11:30 -07:00
Min Chen
5583506c0c
Add entity permission grant and revoke API.
2013-09-30 17:03:34 -07:00
Min Chen
0be374a796
Add All Apis for ACL Group.
2013-09-27 18:16:18 -07:00
Min Chen
ed22dfef1b
Add transaction handling in AclServiceImpl, and parent role support in
...
createAclRole.
2013-09-27 10:14:13 -07:00
Min Chen
97fd99b09a
Add all Apis for AclRole.
2013-09-26 17:48:29 -07:00
Min Chen
fce2aad23d
WIP For APIs related to ACL Roles.
2013-09-26 11:22:43 -07:00
Min Chen
ddae23c168
Add parent_role_id to acl_role table.
2013-09-23 13:18:57 -07:00