October 2012 - Nuiton-web-commits - mailman.cloud.codelutin.com

r227 - in trunk/nuiton-security/src: main/java/org/nuiton/web/security site/apt
by echatellier＠users.nuiton.org 19 Oct '12

19 Oct '12

Author: echatellier Date: 2012-10-19 15:11:36 +0200 (Fri, 19 Oct 2012) New Revision: 227 Url: http://nuiton.org/repositories/revision/nuiton-web/227 Log: Use ; separator because , is part of shiro synthax Modified: trunk/nuiton-security/src/main/java/org/nuiton/web/security/TopiaSecurityRealm.java trunk/nuiton-security/src/site/apt/index.apt Modified: trunk/nuiton-security/src/main/java/org/nuiton/web/security/TopiaSecurityRealm.java =================================================================== --- trunk/nuiton-security/src/main/java/org/nuiton/web/security/TopiaSecurityRealm.java 2012-10-19 08:42:55 UTC (rev 226) +++ trunk/nuiton-security/src/main/java/org/nuiton/web/security/TopiaSecurityRealm.java 2012-10-19 13:11:36 UTC (rev 227) @@ -66,7 +66,8 @@ if (subs[2].equals("perm")) { if (subs[1].equals(permission)) { String perms = props.getProperty(prop); - String[] permTab = perms.split("\\s*\\,\\s*"); + // use ; separator because shiro use , + String[] permTab = perms.split("\\s*\\;\\s*"); for (String perm : permTab) { result.addStringPermission(perm); if (log.isDebugEnabled()) { Modified: trunk/nuiton-security/src/site/apt/index.apt =================================================================== --- trunk/nuiton-security/src/site/apt/index.apt 2012-10-19 08:42:55 UTC (rev 226) +++ trunk/nuiton-security/src/site/apt/index.apt 2012-10-19 13:11:36 UTC (rev 227) @@ -99,7 +99,7 @@ topia.security.permission.<category>=categoryname topia.security.permission.<category>.<permission>.name=permissionname -topia.security.permission.<category>.<permission>.perm=permission, urlpermissions +topia.security.permission.<category>.<permission>.perm=permission; urlpermissions -------------------------------------------------------------------------------- The configuration define two url, loginurl and logouturl used to redirect user @@ -121,15 +121,15 @@ topia.security.permission.global=Global topia.security.permission.global.index.name=Index -topia.security.permission.global.index.perm=index:read, url:/, url:index.action +topia.security.permission.global.index.perm=index:read; url:/,index.action topia.security.permission.global.search.name=Rechercher -topia.security.permission.global.search.perm=search:read, url:user:search.action +topia.security.permission.global.search.perm=search:read; url:user:search.action topia.security.permission.global.placesread.name=Emplacements -topia.security.permission.global.placesread.perm=places:read, url:user:places.action +topia.security.permission.global.placesread.perm=places:read; url:user:places.action topia.security.permission.misc=Divers topia.security.permission.misc.deco.name=Decoration -topia.security.permission.misc.deco.perm=url:css, url:images, url:js +topia.security.permission.misc.deco.perm=url:css; url:images; url:js topia.security.permission.misc.admin.name=Admin topia.security.permission.misc.admin.perm=* --------------------------------------------------------------------------------

1 0

r226 - in trunk/nuiton-security/src/main/java/org/nuiton/web/security: . actions
by echatellier＠users.nuiton.org 19 Oct '12

19 Oct '12

Author: echatellier Date: 2012-10-19 10:42:55 +0200 (Fri, 19 Oct 2012) New Revision: 226 Url: http://nuiton.org/repositories/revision/nuiton-web/226 Log: Correction de la redirection apr?\195?\168s login sur la page demand?\195?\169e. La methode "shiro" marche plus :( Added: trunk/nuiton-security/src/main/java/org/nuiton/web/security/SecuritySubjectFactory.java Modified: trunk/nuiton-security/src/main/java/org/nuiton/web/security/SecurityShiroFilter.java trunk/nuiton-security/src/main/java/org/nuiton/web/security/TopiaSecurityRealm.java trunk/nuiton-security/src/main/java/org/nuiton/web/security/actions/LoginAction.java Modified: trunk/nuiton-security/src/main/java/org/nuiton/web/security/SecurityShiroFilter.java =================================================================== --- trunk/nuiton-security/src/main/java/org/nuiton/web/security/SecurityShiroFilter.java 2012-10-18 15:00:51 UTC (rev 225) +++ trunk/nuiton-security/src/main/java/org/nuiton/web/security/SecurityShiroFilter.java 2012-10-19 08:42:55 UTC (rev 226) @@ -14,17 +14,12 @@ import org.apache.commons.logging.LogFactory; import org.apache.shiro.SecurityUtils; import org.apache.shiro.authc.UsernamePasswordToken; -import org.apache.shiro.mgt.SecurityManager; -import org.apache.shiro.mgt.SubjectFactory; import org.apache.shiro.realm.Realm; import org.apache.shiro.session.Session; -import org.apache.shiro.subject.PrincipalCollection; import org.apache.shiro.subject.Subject; -import org.apache.shiro.subject.SubjectContext; import org.apache.shiro.web.mgt.DefaultWebSecurityManager; import org.apache.shiro.web.servlet.AbstractShiroFilter; -import org.apache.shiro.web.subject.WebSubjectContext; -import org.apache.shiro.web.subject.support.WebDelegatingSubject; +import org.apache.shiro.web.session.mgt.DefaultWebSessionManager; import org.nuiton.topia.TopiaContext; import org.nuiton.topia.TopiaContextFactory; import org.nuiton.topia.TopiaException; @@ -32,7 +27,7 @@ import org.nuiton.util.ApplicationConfig; import org.nuiton.web.SecurityDAOHelper; -public class SecurityShiroFilter extends AbstractShiroFilter implements SubjectFactory { +public class SecurityShiroFilter extends AbstractShiroFilter { private static final Log log = LogFactory.getLog(SecurityShiroFilter.class); @@ -41,6 +36,8 @@ public static final String ROOT_CONTEXT_CONTEXT = SecurityShiroFilter.class.getName() + "#" + TopiaContext.class.getName(); protected static final String ANON_LOGIN = "anonymous"; + + public static final String SESSION_SAVED_URL = "savedUrl"; protected ApplicationConfig config; @@ -66,10 +63,12 @@ if (log.isInfoEnabled()) { log.info("Overriding shiro realms"); } + Realm realm = new TopiaSecurityRealm(rootContext, config); DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager(realm); + securityManager.setSubjectFactory(new SecuritySubjectFactory()); + securityManager.setSessionManager(new DefaultWebSessionManager()); setSecurityManager(securityManager); - securityManager.setSubjectFactory(this); SecurityUtils.setSecurityManager(securityManager); } @@ -130,7 +129,14 @@ if (log.isDebugEnabled()) { log.debug("User is NOT permitted to access " + perm); } + // anon n'est pas considéré comme authenticated if (ANON_LOGIN.equals(subjectUser.getPrincipal())) { + if (log.isDebugEnabled()) { + log.debug("Redirecting user to login page"); + } + // save request and redirect to login + Session session = subjectUser.getSession(); + session.setAttribute(SESSION_SAVED_URL, ((HttpServletRequest)servletRequest).getRequestURL().toString()); ((HttpServletResponse)servletResponse).sendRedirect(config.getOption("topia.security.loginurl")); } else { ((HttpServletResponse)servletResponse).sendError(401, "Not authorized to access " + uri); @@ -152,29 +158,6 @@ } } } - - @Override - public Subject createSubject(SubjectContext context) { - /*if (!(context instanceof WebSubjectContext)) { - return super.createSubject(context); - }*/ - WebSubjectContext wsc = (WebSubjectContext) context; - SecurityManager securityManager = wsc.resolveSecurityManager(); - Session session = wsc.resolveSession(); - boolean sessionEnabled = wsc.isSessionCreationEnabled(); - PrincipalCollection principals = wsc.resolvePrincipals(); - boolean authenticated = wsc.resolveAuthenticated(); - - // dans le cas du module securité, on va dire que non - if (authenticated && ANON_LOGIN.equals(principals.getPrimaryPrincipal())) { - authenticated = false; - } - - String host = wsc.resolveHost(); - ServletRequest request = wsc.resolveServletRequest(); - ServletResponse response = wsc.resolveServletResponse(); - - return new WebDelegatingSubject(principals, authenticated, host, session, sessionEnabled, - request, response, securityManager); - } + + } Added: trunk/nuiton-security/src/main/java/org/nuiton/web/security/SecuritySubjectFactory.java =================================================================== --- trunk/nuiton-security/src/main/java/org/nuiton/web/security/SecuritySubjectFactory.java (rev 0) +++ trunk/nuiton-security/src/main/java/org/nuiton/web/security/SecuritySubjectFactory.java 2012-10-19 08:42:55 UTC (rev 226) @@ -0,0 +1,41 @@ +package org.nuiton.web.security; + +import javax.servlet.ServletRequest; +import javax.servlet.ServletResponse; + +import org.apache.shiro.mgt.SecurityManager; +import org.apache.shiro.session.Session; +import org.apache.shiro.subject.PrincipalCollection; +import org.apache.shiro.subject.Subject; +import org.apache.shiro.subject.SubjectContext; +import org.apache.shiro.web.mgt.DefaultWebSubjectFactory; +import org.apache.shiro.web.subject.WebSubjectContext; +import org.apache.shiro.web.subject.support.WebDelegatingSubject; + +public class SecuritySubjectFactory extends DefaultWebSubjectFactory { + + @Override + public Subject createSubject(SubjectContext context) { + if (!(context instanceof WebSubjectContext)) { + return super.createSubject(context); + } + WebSubjectContext wsc = (WebSubjectContext) context; + SecurityManager securityManager = wsc.resolveSecurityManager(); + Session session = wsc.resolveSession(); + boolean sessionEnabled = wsc.isSessionCreationEnabled(); + PrincipalCollection principals = wsc.resolvePrincipals(); + boolean authenticated = wsc.resolveAuthenticated(); + + // dans le cas du module securité, on va dire que non + if (authenticated && SecurityShiroFilter.ANON_LOGIN.equals(principals.getPrimaryPrincipal())) { + authenticated = false; + } + + String host = wsc.resolveHost(); + ServletRequest request = wsc.resolveServletRequest(); + ServletResponse response = wsc.resolveServletResponse(); + + return new WebDelegatingSubject(principals, authenticated, host, session, sessionEnabled, + request, response, securityManager); + } +} Property changes on: trunk/nuiton-security/src/main/java/org/nuiton/web/security/SecuritySubjectFactory.java ___________________________________________________________________ Added: svn:keywords + Author Date Id Revision HeadURL Modified: trunk/nuiton-security/src/main/java/org/nuiton/web/security/TopiaSecurityRealm.java =================================================================== --- trunk/nuiton-security/src/main/java/org/nuiton/web/security/TopiaSecurityRealm.java 2012-10-18 15:00:51 UTC (rev 225) +++ trunk/nuiton-security/src/main/java/org/nuiton/web/security/TopiaSecurityRealm.java 2012-10-19 08:42:55 UTC (rev 226) @@ -55,7 +55,7 @@ for (String permission : role.getPermissions()) { //result.addStringPermission(permission); if (log.isDebugEnabled()) { - log.debug(" - add permission : " + permission); + log.debug("- add permission : " + permission); } for (String prop : props.stringPropertyNames()) { @@ -70,7 +70,7 @@ for (String perm : permTab) { result.addStringPermission(perm); if (log.isDebugEnabled()) { - log.debug(" - add string permission : " + perm); + log.debug(" string permission : " + perm); } } } Modified: trunk/nuiton-security/src/main/java/org/nuiton/web/security/actions/LoginAction.java =================================================================== --- trunk/nuiton-security/src/main/java/org/nuiton/web/security/actions/LoginAction.java 2012-10-18 15:00:51 UTC (rev 225) +++ trunk/nuiton-security/src/main/java/org/nuiton/web/security/actions/LoginAction.java 2012-10-19 08:42:55 UTC (rev 226) @@ -2,6 +2,7 @@ import static org.nuiton.i18n.I18n._; +import javax.servlet.ServletRequest; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; @@ -14,11 +15,13 @@ import org.apache.shiro.authc.LockedAccountException; import org.apache.shiro.authc.UnknownAccountException; import org.apache.shiro.authc.UsernamePasswordToken; +import org.apache.shiro.session.Session; import org.apache.shiro.subject.Subject; import org.apache.shiro.web.util.SavedRequest; import org.apache.shiro.web.util.WebUtils; import org.apache.struts2.interceptor.ServletRequestAware; import org.apache.struts2.interceptor.ServletResponseAware; +import org.nuiton.web.security.SecurityShiroFilter; public class LoginAction extends AbstractAction implements ServletRequestAware, ServletResponseAware { @@ -64,6 +67,18 @@ UsernamePasswordToken token = new UsernamePasswordToken(login, password); currentUser.login(token); result = SUCCESS; + + // marche pas :( + //SavedRequest savedRequest = WebUtils.getAndClearSavedRequest(request); + Session session = currentUser.getSession(); + String requestURL = (String)session.getAttribute(SecurityShiroFilter.SESSION_SAVED_URL); + if (request != null) { // can be + if (log.isDebugEnabled()) { + log.debug("Redirecting to saved url " + requestURL); + } + session.removeAttribute(SecurityShiroFilter.SESSION_SAVED_URL); + response.sendRedirect(requestURL); + } } catch (UnknownAccountException ex) { addActionError(_("Identifiant ou mot de passe invalide !")); log.warn("Unknow user account", ex); @@ -85,16 +100,8 @@ log.warn("Authentication error", ex); result = input(); } - - SavedRequest savedRequest = WebUtils.getAndClearSavedRequest(request); - if (savedRequest != null) { // can be - response.sendRedirect(savedRequest.getRequestUrl()); - } } return result; } - - - }

1 0

r225 - trunk/nuiton-security/src/main/java/org/nuiton/web/security
by echatellier＠users.nuiton.org 18 Oct '12

18 Oct '12

Author: echatellier Date: 2012-10-18 17:00:51 +0200 (Thu, 18 Oct 2012) New Revision: 225 Url: http://nuiton.org/repositories/revision/nuiton-web/225 Log: Ajout d'un flag system pour donner tous les droits ?\195?\160 tous les utilisateurs Modified: trunk/nuiton-security/src/main/java/org/nuiton/web/security/TopiaSecurityRealm.java Modified: trunk/nuiton-security/src/main/java/org/nuiton/web/security/TopiaSecurityRealm.java =================================================================== --- trunk/nuiton-security/src/main/java/org/nuiton/web/security/TopiaSecurityRealm.java 2012-10-18 14:47:26 UTC (rev 224) +++ trunk/nuiton-security/src/main/java/org/nuiton/web/security/TopiaSecurityRealm.java 2012-10-18 15:00:51 UTC (rev 225) @@ -90,6 +90,11 @@ } } + // si la securité est desactivee, + if (config.getOptionAsBoolean("topia.security.disable")) { + result.addStringPermission("*"); + } + // ajout de l'url de login et logout quand meme !!! result.addStringPermission("url" + config.getOption("topia.security.loginurl").replace('/', ':')); result.addStringPermission("url" + config.getOption("topia.security.logouturl").replace('/', ':'));

1 0

r224 - trunk
by echatellier＠users.nuiton.org 18 Oct '12

18 Oct '12

Author: echatellier Date: 2012-10-18 16:47:26 +0200 (Thu, 18 Oct 2012) New Revision: 224 Url: http://nuiton.org/repositories/revision/nuiton-web/224 Log: fixes #2366: Update to struts 2.3.4.1 fixes #2367: Update to topia 2.7 Modified: trunk/pom.xml Modified: trunk/pom.xml =================================================================== --- trunk/pom.xml 2012-10-18 14:43:55 UTC (rev 223) +++ trunk/pom.xml 2012-10-18 14:47:26 UTC (rev 224) @@ -257,7 +257,7 @@ <nuitonUtilsVersion>2.6.3</nuitonUtilsVersion> <nuitonI18nPluginVersion>${nuitonI18nVersion}</nuitonI18nPluginVersion> - <topiaVersion>2.6.10</topiaVersion> + <topiaVersion>2.7</topiaVersion>  <tapestryVersion>5.2.4</tapestryVersion> @@ -268,7 +268,7 @@ <gwtPluginVersion>2.2.0</gwtPluginVersion>  - <struts2Version>2.3.4</struts2Version> + <struts2Version>2.3.4.1</struts2Version> <shiroVersion>1.2.1</shiroVersion> <servletApiVersion>2.5</servletApiVersion>

1 0

r223 - in trunk: . nuiton-gwt nuiton-security
by echatellier＠users.nuiton.org 18 Oct '12

18 Oct '12

Author: echatellier Date: 2012-10-18 16:43:55 +0200 (Thu, 18 Oct 2012) New Revision: 223 Url: http://nuiton.org/repositories/revision/nuiton-web/223 Log: merge security module into trunk refs #2363 fixes #2364, #2365 Added: trunk/nuiton-security/ Modified: trunk/ trunk/nuiton-gwt/ trunk/nuiton-gwt/pom.xml trunk/pom.xml Property changes on: trunk ___________________________________________________________________ Added: svn:mergeinfo + /branches/nuiton-web-1.11-security:210-222 Property changes on: trunk/nuiton-gwt ___________________________________________________________________ Modified: svn:ignore - *.iml target + *.iml target .classpath .project .settings Modified: trunk/nuiton-gwt/pom.xml =================================================================== --- trunk/nuiton-gwt/pom.xml 2012-10-18 14:28:45 UTC (rev 222) +++ trunk/nuiton-gwt/pom.xml 2012-10-18 14:43:55 UTC (rev 223) @@ -46,7 +46,7 @@  <groupId>org.nuiton.i18n</groupId> - <artifactId>maven-i18n-plugin</artifactId> + <artifactId>i18n-maven-plugin</artifactId> <executions> <execution> <id>scan-gwt-java-source</id> Property changes on: trunk/nuiton-security ___________________________________________________________________ Added: svn:ignore + target .classpath .project .settings Modified: trunk/pom.xml =================================================================== --- trunk/pom.xml 2012-10-18 14:28:45 UTC (rev 222) +++ trunk/pom.xml 2012-10-18 14:43:55 UTC (rev 223) @@ -23,6 +23,7 @@ <module>nuiton-tapestry</module> <module>nuiton-rss</module> <module>nuiton-gwt</module> + <module>nuiton-security</module> </modules> <dependencyManagement> @@ -171,6 +172,18 @@ </exclusion> </exclusions> </dependency> + +  + <dependency> + <groupId>org.apache.shiro</groupId> + <artifactId>shiro-core</artifactId> + <version>${shiroVersion}</version> + </dependency> + <dependency> + <groupId>org.apache.shiro</groupId> + <artifactId>shiro-web</artifactId> + <version>${shiroVersion}</version> + </dependency> </dependencies> @@ -240,8 +253,8 @@  <projectId>nuiton-web</projectId> - <nuitonI18nVersion>2.4.1</nuitonI18nVersion> - <nuitonUtilsVersion>2.4.8</nuitonUtilsVersion> + <nuitonI18nVersion>2.5</nuitonI18nVersion> + <nuitonUtilsVersion>2.6.3</nuitonUtilsVersion> <nuitonI18nPluginVersion>${nuitonI18nVersion}</nuitonI18nPluginVersion> <topiaVersion>2.6.10</topiaVersion> @@ -257,6 +270,7 @@  <struts2Version>2.3.4</struts2Version> + <shiroVersion>1.2.1</shiroVersion> <servletApiVersion>2.5</servletApiVersion> <jettyVersion>${jettyPluginVersion}</jettyVersion> <windstoneVersion>0.9.10-hudson-24</windstoneVersion> @@ -287,7 +301,7 @@ <plugin> <groupId>org.nuiton.i18n</groupId> - <artifactId>maven-i18n-plugin</artifactId> + <artifactId>i18n-maven-plugin</artifactId> <version>${nuitonI18nPluginVersion}</version> </plugin> @@ -297,6 +311,11 @@ <version>${gwtPluginVersion}</version> </plugin> + <plugin> + <groupId>org.nuiton.eugene</groupId> + <artifactId>eugene-maven-plugin</artifactId> + <version>2.5</version> + </plugin> </plugins> </pluginManagement>

1 0

r222 - in branches/nuiton-web-1.11-security/nuiton-security/src/main: java/org/nuiton/web/security/actions resources/WEB-INF/security
by echatellier＠users.nuiton.org 18 Oct '12

18 Oct '12

Author: echatellier Date: 2012-10-18 16:28:45 +0200 (Thu, 18 Oct 2012) New Revision: 222 Url: http://nuiton.org/repositories/revision/nuiton-web/222 Log: Add div and class for css style Modified: branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/actions/AbstractAction.java branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/actions/UserAction.java branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/login.jsp branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/role-permissions.jsp branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/role.jsp branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/user-roles.jsp branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/user.jsp Modified: branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/actions/AbstractAction.java =================================================================== --- branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/actions/AbstractAction.java 2012-10-18 14:28:15 UTC (rev 221) +++ branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/actions/AbstractAction.java 2012-10-18 14:28:45 UTC (rev 222) @@ -8,6 +8,7 @@ import org.apache.struts2.util.ServletContextAware; import org.nuiton.topia.TopiaContext; import org.nuiton.util.ApplicationConfig; +import org.nuiton.web.security.SecurityShiroFilter; import com.opensymphony.xwork2.ActionSupport; @@ -27,8 +28,8 @@ @Override public void setServletContext(ServletContext context) { - config = (ApplicationConfig)context.getAttribute("ApplicationConfig"); - rootContext = (TopiaContext)context.getAttribute("rootContext"); + config = (ApplicationConfig)context.getAttribute(SecurityShiroFilter.APP_CONFIG_CONTEXT); + rootContext = (TopiaContext)context.getAttribute(SecurityShiroFilter.ROOT_CONTEXT_CONTEXT); } /** Modified: branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/actions/UserAction.java =================================================================== --- branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/actions/UserAction.java 2012-10-18 14:28:15 UTC (rev 221) +++ branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/actions/UserAction.java 2012-10-18 14:28:45 UTC (rev 222) @@ -9,8 +9,6 @@ import org.nuiton.web.security.SecurityUserDAO; import org.nuiton.web.security.SecurityUserImpl; -import com.opensymphony.xwork2.Preparable; - public class UserAction extends AbstractAction { /** serialVersionUID. */ Modified: branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/login.jsp =================================================================== --- branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/login.jsp 2012-10-18 14:28:15 UTC (rev 221) +++ branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/login.jsp 2012-10-18 14:28:45 UTC (rev 222) @@ -7,16 +7,18 @@ </head> <body> - - <h1>Authentification requise</h1> + + <div class="security-div"> + <h1>Authentification requise</h1> + + <h2>Connexion</h2> - <h2>Connexion</h2> - - <s:form action="login" namespace="/security"> - <s:actionerror /> - <s:textfield label="Identifiant" name="login" /> - <s:password label="Mot de passe" name="password" /> - <s:submit label="Connexion" /> - </s:form> + <s:form action="login" namespace="/security" class="security-form"> + <s:actionerror /> + <s:textfield label="Identifiant" name="login" /> + <s:password label="Mot de passe" name="password" /> + <s:submit label="Connexion" /> + </s:form> + </div> </body> </html> \ No newline at end of file Modified: branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/role-permissions.jsp =================================================================== --- branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/role-permissions.jsp 2012-10-18 14:28:15 UTC (rev 221) +++ branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/role-permissions.jsp 2012-10-18 14:28:45 UTC (rev 222) @@ -8,58 +8,62 @@ <body> - <h1>Sécurité</h1> + <div class="security-div"> - <h2>Permissions des rôles</h2> + <h1>Sécurité</h1> - <form action="<s:url action="role-permissions" namespace="/security" />" method="post"> - <s:iterator value="roles"> - <input type="hidden" name="roleIds" value="<s:property value="topiaId" />" /> - </s:iterator> - <table class="secu-roletable"> - <tr> - <td class="empty" /> + <h2>Permissions des rôles</h2> + + <form action="<s:url action="role-permissions" namespace="/security" />" method="post" class="security-form"> <s:iterator value="roles"> - <td><a href="<s:url action='role!input' namespace='/security'> - <s:param name="roleId"><s:property value="topiaId" /></s:param> - </s:url>"> - <s:property value="name" /> - </a></td> + <input type="hidden" name="roleIds" value="<s:property value="topiaId" />" /> </s:iterator> - </tr> - <s:iterator value="categories.keys" var="category"> - <s:set name="categoryName" value="categories.get(#category)" /> + <table class="security-table"> <tr> - <th colspan="<s:property value="roles.size() + 1" />"><s:property value="#categoryName" /></th> + <td class="security-empty" /> + <s:iterator value="roles"> + <td><a href="<s:url action='role!input' namespace='/security'> + <s:param name="roleId"><s:property value="topiaId" /></s:param> + </s:url>"> + <s:property value="name" /> + </a></td> + </s:iterator> </tr> - <s:iterator value="categoryPermissions.get(#category)" var="categoryPermission"> - <s:set name="permissionName" value="permissions.get(#categoryPermission)" /> - <tr> - <td><s:property value="#permissionName" /></td> - <s:iterator value="roles" var="role"> - <td><input type="checkbox" name="permissions-<s:property value="topiaId" />" - value="<s:property value="#categoryPermission"/>" - <s:if test="#role.permissions.contains(#categoryPermission)" > - checked="checked" - </s:if> /></td> + <s:iterator value="categories.keys" var="category"> + <s:set name="categoryName" value="categories.get(#category)" /> + <tr> + <th colspan="<s:property value="roles.size() + 1" />"><s:property value="#categoryName" /></th> + </tr> + <s:iterator value="categoryPermissions.get(#category)" var="categoryPermission"> + <s:set name="permissionName" value="permissions.get(#categoryPermission)" /> + <tr> + <td><s:property value="#permissionName" /></td> + <s:iterator value="roles" var="role"> + <td><input type="checkbox" name="permissions-<s:property value="topiaId" />" + value="<s:property value="#categoryPermission"/>" + <s:if test="#role.permissions.contains(#categoryPermission)" > + checked="checked" + </s:if> /></td> + </s:iterator> + </tr> </s:iterator> - </tr> </s:iterator> - </s:iterator> - </table> - <input type="submit" value="Valider" /> - </form> + </table> + <input type="submit" value="Valider" /> + </form> + + <h2>Gestion</h2> + + <div class="secu-newuser"> + <a href="<s:url action='user-roles!input' namespace='/security' />">Rôles des utilisateurs</a> + </div> + <div class="secu-newuser"> + <a href="<s:url action='user!input' namespace='/security' />">Nouvel utilisateur</a> + </div> + <div class="secu-newrole"> + <a href="<s:url action='role!input' namespace='/security' />">Nouveau rôle</a> + </div> + </div> - <h2>Gestion</h2> - - <div class="secu-newuser"> - <a href="<s:url action='user-roles!input' namespace='/security' />">Rôles des utilisateurs</a> - </div> - <div class="secu-newuser"> - <a href="<s:url action='user!input' namespace='/security' />">Nouvel utilisateur</a> - </div> - <div class="secu-newrole"> - <a href="<s:url action='role!input' namespace='/security' />">Nouveau rôle</a> - </div> </body> </html> \ No newline at end of file Modified: branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/role.jsp =================================================================== --- branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/role.jsp 2012-10-18 14:28:15 UTC (rev 221) +++ branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/role.jsp 2012-10-18 14:28:45 UTC (rev 222) @@ -7,16 +7,19 @@ </head> <body> + + <div class="security-div"> + <h1>Sécurité</h1> + + <h2>Nouveau Rôle</h2> - <h1>Sécurité</h1> - - <h2>Role</h2> + <s:form action="role" namespace="/security" class="security-form"> + <s:actionerror /> + <s:hidden name="roleId" value="%{role.topiaId}" /> + <s:textfield label="Nom" name="role.name" value="%{role.name}"/> + <s:submit label="Valider" /> + </s:form> + </div> - <s:form action="role" namespace="/security"> - <s:actionerror /> - <s:hidden name="roleId" value="%{role.topiaId}" /> - <s:textfield label="Nom" name="role.name" value="%{role.name}"/> - <s:submit label="Valider" /> - </s:form> </body> </html> \ No newline at end of file Modified: branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/user-roles.jsp =================================================================== --- branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/user-roles.jsp 2012-10-18 14:28:15 UTC (rev 221) +++ branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/user-roles.jsp 2012-10-18 14:28:45 UTC (rev 222) @@ -8,69 +8,71 @@ <body> - <h1>Sécurité</h1> - - <h2>Rôles des utilisateurs</h2> + <div class="security-div"> + <h1>Sécurité</h1> - <form action="<s:url action="user-roles" namespace="/security" />" method="post"> - <table class="secu-roletable"> - <tr> - <td colspan="2" class="empty"/> - <s:if test="!roles.empty"> - <th colspan="<s:property value="roles.size()" />">Rôles</th> - </s:if> - </tr> - <tr> - <td colspan="2" class="empty"/> - <s:iterator value="roles"> - <td> - <a href="<s:url action='role!input' namespace='/security'> - <s:param name="roleId"><s:property value="topiaId" /></s:param> - </s:url>"> - <s:property value="name" /> - </a> - </td> - </s:iterator> - </tr> - <s:iterator value="users" var="user" status="userStatus"> - <input type="hidden" name="userIds" value="<s:property value="topiaId" />" /> + <h2>Rôles des utilisateurs</h2> + + <form action="<s:url action="user-roles" namespace="/security" />" method="post" class="security-form"> + <table class="security-table"> <tr> - <s:if test="#userStatus.first"> - <th rowspan="<s:property value="users.size()" />" class="vertical">Utilisateurs</th> + <td colspan="2" class="security-empty"/> + <s:if test="!roles.empty"> + <th colspan="<s:property value="roles.size()" />">Rôles</th> </s:if> - <td> - <a href="<s:url action='user!input' namespace='/security'> - <s:param name="userId"><s:property value="topiaId" /></s:param> - </s:url>"> - <s:property value="login" /> - </a> - </td> - <s:iterator value="roles" var="role"> + </tr> + <tr> + <td colspan="2" class="security-empty"/> + <s:iterator value="roles"> <td> - - <input id="<s:property value="#user.topiaId" /><s:property value="#user.topiaId" />" - type="checkbox" name="roles-<s:property value="#user.topiaId" />" value="<s:property value="#role.topiaId" />" - <s:if test="#user.securityRole.contains(#role)" > - checked="checked" - </s:if> /> + <a href="<s:url action='role!input' namespace='/security'> + <s:param name="roleId"><s:property value="topiaId" /></s:param> + </s:url>"> + <s:property value="name" /> + </a> </td> </s:iterator> </tr> - </s:iterator> - </table> - <input type="submit" value="Valider" /> - </form> - - <h2>Gestion</h2> - - <div class="secu-newuser"> - <a href="<s:url action='role-permissions!input' namespace='/security' />">Permissions des rôles</a> + <s:iterator value="users" var="user" status="userStatus"> + <input type="hidden" name="userIds" value="<s:property value="topiaId" />" /> + <tr> + <s:if test="#userStatus.first"> + <th rowspan="<s:property value="users.size()" />" class="vertical">Utilisateurs</th> + </s:if> + <td> + <a href="<s:url action='user!input' namespace='/security'> + <s:param name="userId"><s:property value="topiaId" /></s:param> + </s:url>"> + <s:property value="login" /> + </a> + </td> + <s:iterator value="roles" var="role"> + <td> + + <input id="<s:property value="#user.topiaId" /><s:property value="#user.topiaId" />" + type="checkbox" name="roles-<s:property value="#user.topiaId" />" value="<s:property value="#role.topiaId" />" + <s:if test="#user.securityRole.contains(#role)" > + checked="checked" + </s:if> /> + </td> + </s:iterator> + </tr> + </s:iterator> + </table> + <input type="submit" value="Valider" /> + </form> + + <h2>Gestion</h2> + + <div class="secu-newuser"> + <a href="<s:url action='role-permissions!input' namespace='/security' />">Permissions des rôles</a> + </div> + <div class="secu-newuser"> + <a href="<s:url action='user!input' namespace='/security' />">Nouvel utilisateur</a> + </div> + <div class="secu-newrole"> + <a href="<s:url action='role!input' namespace='/security' />">Nouveau rôle</a> + </div> </div> - <div class="secu-newuser"> - <a href="<s:url action='user!input' namespace='/security' />">Nouvel utilisateur</a> - </div> - <div class="secu-newrole"> - <a href="<s:url action='role!input' namespace='/security' />">Nouveau rôle</a> - </div> </body> </html> \ No newline at end of file Modified: branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/user.jsp =================================================================== --- branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/user.jsp 2012-10-18 14:28:15 UTC (rev 221) +++ branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/user.jsp 2012-10-18 14:28:45 UTC (rev 222) @@ -8,14 +8,17 @@ <body> - <h1>Sécurité</h1> + <div class="security-div"> + <h1>Sécurité</h1> - <s:form action="user" namespace="/security"> - <s:actionerror /> - <s:hidden name="userId" value="%{user.topiaId}" /> - <s:textfield label="Identifiant" name="user.login" value="%{user.login}"/> - <s:password label="Mot de passe" name="user.password" value="%{user.password}" /> - <s:submit label="Valider" /> - </s:form> + <h2>Nouvel utilisateur</h2> + <s:form action="user" namespace="/security" class="security-form"> + <s:actionerror /> + <s:hidden name="userId" value="%{user.topiaId}" /> + <s:textfield label="Identifiant" name="user.login" value="%{user.login}"/> + <s:password label="Mot de passe" name="user.password" value="%{user.password}" /> + <s:submit label="Valider" /> + </s:form> + </div> </body> </html> \ No newline at end of file

1 0

r221 - branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security
by echatellier＠users.nuiton.org 18 Oct '12

18 Oct '12

Author: echatellier Date: 2012-10-18 16:28:15 +0200 (Thu, 18 Oct 2012) New Revision: 221 Url: http://nuiton.org/repositories/revision/nuiton-web/221 Log: Fix non connected anonymous connected user Modified: branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/SecurityShiroFilter.java branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/TopiaSecurityRealm.java Modified: branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/SecurityShiroFilter.java =================================================================== --- branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/SecurityShiroFilter.java 2012-10-18 14:27:48 UTC (rev 220) +++ branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/SecurityShiroFilter.java 2012-10-18 14:28:15 UTC (rev 221) @@ -12,11 +12,19 @@ import org.apache.commons.logging.Log; import org.apache.commons.logging.LogFactory; +import org.apache.shiro.SecurityUtils; import org.apache.shiro.authc.UsernamePasswordToken; +import org.apache.shiro.mgt.SecurityManager; +import org.apache.shiro.mgt.SubjectFactory; import org.apache.shiro.realm.Realm; +import org.apache.shiro.session.Session; +import org.apache.shiro.subject.PrincipalCollection; import org.apache.shiro.subject.Subject; +import org.apache.shiro.subject.SubjectContext; import org.apache.shiro.web.mgt.DefaultWebSecurityManager; import org.apache.shiro.web.servlet.AbstractShiroFilter; +import org.apache.shiro.web.subject.WebSubjectContext; +import org.apache.shiro.web.subject.support.WebDelegatingSubject; import org.nuiton.topia.TopiaContext; import org.nuiton.topia.TopiaContextFactory; import org.nuiton.topia.TopiaException; @@ -24,40 +32,45 @@ import org.nuiton.util.ApplicationConfig; import org.nuiton.web.SecurityDAOHelper; -public class SecurityShiroFilter extends AbstractShiroFilter { +public class SecurityShiroFilter extends AbstractShiroFilter implements SubjectFactory { private static final Log log = LogFactory.getLog(SecurityShiroFilter.class); + public static final String APP_CONFIG_CONTEXT = SecurityShiroFilter.class.getName() + "#" + ApplicationConfig.class.getName(); + + public static final String ROOT_CONTEXT_CONTEXT = SecurityShiroFilter.class.getName() + "#" + TopiaContext.class.getName(); + protected static final String ANON_LOGIN = "anonymous"; + protected ApplicationConfig config; + + protected TopiaContext rootContext; + @Override public void init() throws Exception { // get config from context - ApplicationConfig config = (ApplicationConfig)getServletContext().getAttribute("ApplicationConfig"); + config = (ApplicationConfig)getServletContext().getAttribute(APP_CONFIG_CONTEXT); if (config == null) { - throw new IllegalArgumentException("No ApplicationConfig attribute found in servlet context"); + throw new IllegalArgumentException("No APP_CONFIG_CONTEXT attribute found in servlet context"); } // get topia root context config.setOption(TopiaContextFactory.CONFIG_PERSISTENCE_CLASSES, SecurityDAOHelper.getImplementationClassesAsString()); Properties props = config.getFlatOptions(); - TopiaContext rootContext = TopiaContextFactory.getContext(props); + rootContext = TopiaContextFactory.getContext(props); initSchema(rootContext); - getServletContext().setAttribute("rootContext", rootContext); + getServletContext().setAttribute(ROOT_CONTEXT_CONTEXT, rootContext); // see http://shiro.apache.org/configuration.html#Configuration-ProgrammaticConfig… if (log.isInfoEnabled()) { log.info("Overriding shiro realms"); } - //DefaultWebEnvironment env = new DefaultWebEnvironment(); Realm realm = new TopiaSecurityRealm(rootContext, config); DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager(realm); setSecurityManager(securityManager); - /*FilterChainResolver resolver = getFilterChainResolver(); - if (resolver != null) { - setFilterChainResolver(resolver); - }*/ + securityManager.setSubjectFactory(this); + SecurityUtils.setSecurityManager(securityManager); } protected static void initSchema(TopiaContext rootContext) throws TopiaException { @@ -103,6 +116,10 @@ // get permission String uri = ((HttpServletRequest)servletRequest).getRequestURI(); String perm = "url" + uri.replace('/', ':'); + // cas de la permission url: qui est equivalente a url:* + if (perm.endsWith(":")) { + perm += "/"; + } if (subjectUser.isPermitted(perm)) { if (log.isDebugEnabled()) { @@ -114,10 +131,50 @@ log.debug("User is NOT permitted to access " + perm); } if (ANON_LOGIN.equals(subjectUser.getPrincipal())) { - ((HttpServletResponse)servletResponse).sendRedirect("/security/login.action"); + ((HttpServletResponse)servletResponse).sendRedirect(config.getOption("topia.security.loginurl")); } else { ((HttpServletResponse)servletResponse).sendError(401, "Not authorized to access " + uri); } } } + + @Override + public void destroy() { + super.destroy(); + + if (rootContext != null) { + try { + rootContext.closeContext(); + } catch (TopiaException ex) { + if (log.isErrorEnabled()) { + log.error("Can't close root context", ex); + } + } + } + } + + @Override + public Subject createSubject(SubjectContext context) { + /*if (!(context instanceof WebSubjectContext)) { + return super.createSubject(context); + }*/ + WebSubjectContext wsc = (WebSubjectContext) context; + SecurityManager securityManager = wsc.resolveSecurityManager(); + Session session = wsc.resolveSession(); + boolean sessionEnabled = wsc.isSessionCreationEnabled(); + PrincipalCollection principals = wsc.resolvePrincipals(); + boolean authenticated = wsc.resolveAuthenticated(); + + // dans le cas du module securité, on va dire que non + if (authenticated && ANON_LOGIN.equals(principals.getPrimaryPrincipal())) { + authenticated = false; + } + + String host = wsc.resolveHost(); + ServletRequest request = wsc.resolveServletRequest(); + ServletResponse response = wsc.resolveServletResponse(); + + return new WebDelegatingSubject(principals, authenticated, host, session, sessionEnabled, + request, response, securityManager); + } } Modified: branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/TopiaSecurityRealm.java =================================================================== --- branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/TopiaSecurityRealm.java 2012-10-18 14:27:48 UTC (rev 220) +++ branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/TopiaSecurityRealm.java 2012-10-18 14:28:15 UTC (rev 221) @@ -1,8 +1,5 @@ package org.nuiton.web.security; -import java.util.ArrayList; -import java.util.Arrays; -import java.util.Collection; import java.util.Properties; import org.apache.commons.lang3.StringUtils; @@ -94,8 +91,8 @@ } // ajout de l'url de login et logout quand meme !!! - result.addStringPermission("url:security:login.action"); - result.addStringPermission("url:security:logout.action"); + result.addStringPermission("url" + config.getOption("topia.security.loginurl").replace('/', ':')); + result.addStringPermission("url" + config.getOption("topia.security.logouturl").replace('/', ':')); } catch (Exception ex) {

1 0

r220 - in branches/nuiton-web-1.11-security/nuiton-security/src: . site site/apt site/resources site/resources/img
by echatellier＠users.nuiton.org 18 Oct '12

18 Oct '12

Author: echatellier Date: 2012-10-18 16:27:48 +0200 (Thu, 18 Oct 2012) New Revision: 220 Url: http://nuiton.org/repositories/revision/nuiton-web/220 Log: Add documentation Added: branches/nuiton-web-1.11-security/nuiton-security/src/site/ branches/nuiton-web-1.11-security/nuiton-security/src/site/apt/ branches/nuiton-web-1.11-security/nuiton-security/src/site/apt/index.apt branches/nuiton-web-1.11-security/nuiton-security/src/site/resources/ branches/nuiton-web-1.11-security/nuiton-security/src/site/resources/img/ branches/nuiton-web-1.11-security/nuiton-security/src/site/resources/img/permissions.png branches/nuiton-web-1.11-security/nuiton-security/src/site/resources/img/roles.png branches/nuiton-web-1.11-security/nuiton-security/src/site/site.xml Added: branches/nuiton-web-1.11-security/nuiton-security/src/site/apt/index.apt =================================================================== --- branches/nuiton-web-1.11-security/nuiton-security/src/site/apt/index.apt (rev 0) +++ branches/nuiton-web-1.11-security/nuiton-security/src/site/apt/index.apt 2012-10-18 14:27:48 UTC (rev 220) @@ -0,0 +1,181 @@ +~~~ +~~ #%L +~~ Nuiton Web :: Nuiton Security +~~ +~~ $Id: index.apt 152 2011-12-01 17:16:59Z athimel $ +~~ $HeadURL: http://svn.nuiton.org/svn/nuiton-web/trunk/nuiton-struts2/src/site/apt/inde… $ +~~ %% +~~ Copyright (C) 2012 CodeLutin, Chatellier Eric +~~ %% +~~ This program is free software: you can redistribute it and/or modify +~~ it under the terms of the GNU Lesser General Public License as +~~ published by the Free Software Foundation, either version 3 of the +~~ License, or (at your option) any later version. +~~ +~~ This program is distributed in the hope that it will be useful, +~~ but WITHOUT ANY WARRANTY; without even the implied warranty of +~~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +~~ GNU General Lesser Public License for more details. +~~ +~~ You should have received a copy of the GNU General Lesser Public +~~ License along with this program. If not, see +~~ <http://www.gnu.org/licenses/lgpl-3.0.html>. +~~ #L% +~~~ + + ---- + Nuiton Web Security + ---- + ---- + 2012-10-18 + ---- + + This document decribe how to add nuiton-web security module in an existing + web application. + +Application Config + + Module configuration is based on {{{http://maven-site.nuiton.org/nuiton-utils/nuiton-utils/apidocs/org/nuiton/util/ApplicationConfig.html}ApplicationConfig}} + class. An instance of this class must be set into ServletContext in order + to security module to use it. + + For example, on your application ServletContextListener, just add this kind + of code: + +-------------------------------------------------------------------------------- +@Override +public void contextInitialized(ServletContextEvent sce) { + + // add application config in servlet context for security module filter + ApplicationConfig config = ...; + sce.getServletContext().setAttribute(SecurityShiroFilter.APP_CONFIG_CONTEXT, config); +} +-------------------------------------------------------------------------------- + +Filter + + This next step to do is it add a Filter into the web.xml file: + +-------------------------------------------------------------------------------- +<filter> + <filter-name>ShiroFilter</filter-name> + <filter-class>org.nuiton.web.security.SecurityShiroFilter</filter-class> +</filter> + +<filter-mapping> + <filter-name>ShiroFilter</filter-name> + <url-pattern>/*</url-pattern> + <dispatcher>REQUEST</dispatcher> + <dispatcher>FORWARD</dispatcher> + <dispatcher>INCLUDE</dispatcher> + <dispatcher>ERROR</dispatcher> +</filter-mapping> +-------------------------------------------------------------------------------- + +ToPIA configuration + + The security module use ToPIA as his persistence layer. The configuration + must contains the hibernate configuration used to connect to database. + + For example for a PostgreSQL database: + +-------------------------------------------------------------------------------- +hibernate.dialect=org.hibernate.dialect.PostgreSQLDialect +hibernate.connection.url=jdbc:postgresql://localhost/mydbname +hibernate.connection.username=myuser +hibernate.connection.password=mypass +-------------------------------------------------------------------------------- + +Permission configuration + + The last step to do is to configure the permissions list and urls used by the + application. + + Here is the syntax: + +-------------------------------------------------------------------------------- +topia.security.loginurl=/security/login.action +topia.security.logouturl=/security/logout.action + +topia.security.permission.<category>=categoryname +topia.security.permission.<category>.<permission>.name=permissionname +topia.security.permission.<category>.<permission>.perm=permission, urlpermissions +-------------------------------------------------------------------------------- + + The configuration define two url, loginurl and logouturl used to redirect user + when he is not authenticated or he want to unlog. + + Next, there is the permission list divided by category. Each category has + a display name and a permissions list. Each permissions has also a display + name and a list of shiro permission. + + Shiro permission are composed of normal shiro permission and url permissions + used by module to filter access to requested page for current authentified + shiro subject. + + Here is an example of configuration: + +-------------------------------------------------------------------------------- +topia.security.loginurl=/security/login.action +topia.security.logouturl=/security/logout.action + +topia.security.permission.global=Global +topia.security.permission.global.index.name=Index +topia.security.permission.global.index.perm=index:read, url:/, url:index.action +topia.security.permission.global.search.name=Rechercher +topia.security.permission.global.search.perm=search:read, url:user:search.action +topia.security.permission.global.placesread.name=Emplacements +topia.security.permission.global.placesread.perm=places:read, url:user:places.action + +topia.security.permission.misc=Divers +topia.security.permission.misc.deco.name=Decoration +topia.security.permission.misc.deco.perm=url:css, url:images, url:js +topia.security.permission.misc.admin.name=Admin +topia.security.permission.misc.admin.perm=* +-------------------------------------------------------------------------------- + +Screenshots + + Here is a couple of screenshot showing how library permission and role + management look like: + +* Role management + +[img/roles.png] Roles management + +* Permissions management + +[img/permissions.png] Permissions management + +Maven + + As of 1.12 version, this module comes with his own jsp, your don't have to + write it yourself. This jsps can be extracted during build using maven with + following plugin configuration: + +-------------------------------------------------------------------------------- +<plugin> + <groupId>org.apache.maven.plugins</groupId> + <artifactId>maven-dependency-plugin</artifactId> + <executions> + <execution> + <phase>generate-resources</phase> + <goals> + <goal>unpack</goal> + </goals> + <configuration> + <artifactItems> + <artifactItem> + <groupId>org.nuiton.web</groupId> + <artifactId>nuiton-security</artifactId> + <version>1.12</version> + <type>jar</type> + </artifactItem> + </artifactItems> + <includes>WEB-INF/security/*</includes> + <outputDirectory>${project.build.directory}/${project.build.finalName}</outputDirectory> + </configuration> + </execution> + </executions> +</plugin> +-------------------------------------------------------------------------------- \ No newline at end of file Added: branches/nuiton-web-1.11-security/nuiton-security/src/site/resources/img/permissions.png =================================================================== (Binary files differ) Property changes on: branches/nuiton-web-1.11-security/nuiton-security/src/site/resources/img/permissions.png ___________________________________________________________________ Added: svn:mime-type + image/png Added: branches/nuiton-web-1.11-security/nuiton-security/src/site/resources/img/roles.png =================================================================== (Binary files differ) Property changes on: branches/nuiton-web-1.11-security/nuiton-security/src/site/resources/img/roles.png ___________________________________________________________________ Added: svn:mime-type + image/png Added: branches/nuiton-web-1.11-security/nuiton-security/src/site/site.xml =================================================================== (Binary files differ) Property changes on: branches/nuiton-web-1.11-security/nuiton-security/src/site/site.xml ___________________________________________________________________ Added: svn:mime-type + application/xml

1 0

r219 - in branches/nuiton-web-1.11-security/nuiton-security/src/main: java/org/nuiton/web/security java/org/nuiton/web/security/actions resources resources/WEB-INF/security xmi
by echatellier＠users.nuiton.org 17 Oct '12

17 Oct '12

Author: echatellier Date: 2012-10-17 16:58:08 +0200 (Wed, 17 Oct 2012) New Revision: 219 Url: http://nuiton.org/repositories/revision/nuiton-web/219 Log: Update permission management for roles Modified: branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/SecurityShiroFilter.java branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/TopiaSecurityRealm.java branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/actions/RoleAction.java branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/actions/RolePermissionsAction.java branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/actions/UserAction.java branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/actions/UserRolesAction.java branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/role-permissions.jsp branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/user-roles.jsp branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/struts.xml branches/nuiton-web-1.11-security/nuiton-security/src/main/xmi/security.properties branches/nuiton-web-1.11-security/nuiton-security/src/main/xmi/security.zargo Modified: branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/SecurityShiroFilter.java =================================================================== --- branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/SecurityShiroFilter.java 2012-10-16 16:31:45 UTC (rev 218) +++ branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/SecurityShiroFilter.java 2012-10-17 14:58:08 UTC (rev 219) @@ -12,7 +12,7 @@ import org.apache.commons.logging.Log; import org.apache.commons.logging.LogFactory; -import org.apache.shiro.SecurityUtils; +import org.apache.shiro.authc.UsernamePasswordToken; import org.apache.shiro.realm.Realm; import org.apache.shiro.subject.Subject; import org.apache.shiro.web.mgt.DefaultWebSecurityManager; @@ -28,6 +28,8 @@ private static final Log log = LogFactory.getLog(SecurityShiroFilter.class); + protected static final String ANON_LOGIN = "anonymous"; + @Override public void init() throws Exception { @@ -49,15 +51,15 @@ log.info("Overriding shiro realms"); } //DefaultWebEnvironment env = new DefaultWebEnvironment(); - Realm topiaSecurityRealm = new TopiaSecurityRealm(rootContext, config); - DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager(topiaSecurityRealm); + Realm realm = new TopiaSecurityRealm(rootContext, config); + DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager(realm); setSecurityManager(securityManager); /*FilterChainResolver resolver = getFilterChainResolver(); if (resolver != null) { setFilterChainResolver(resolver); }*/ } - + protected static void initSchema(TopiaContext rootContext) throws TopiaException { TopiaContext transaction = rootContext.beginTransaction(); boolean testTable = TopiaUtil.isSchemaExist(transaction, SecurityUserImpl.class.getName()); @@ -67,6 +69,14 @@ log.info("Create database schema"); } rootContext.createSchema(); + + // create anon user + TopiaContext transaction2 = rootContext.beginTransaction(); + SecurityUserDAO securityUserDAO = SecurityDAOHelper.getSecurityUserDAO(transaction2); + SecurityUser anonUser = securityUserDAO.create(); + anonUser.setLogin(ANON_LOGIN); + transaction2.commitTransaction(); + transaction2.closeContext(); } else { if (log.isDebugEnabled()) { log.debug("Table SecurityUser found, skip schema creation"); @@ -85,27 +95,29 @@ log.debug("Testing permission for user " + subjectUser.getPrincipal()); } + // to have permission, a user must be authenticated + if (!subjectUser.isAuthenticated()) { + subjectUser.login(new UsernamePasswordToken(ANON_LOGIN, "")); + } + // get permission String uri = ((HttpServletRequest)servletRequest).getRequestURI(); - String perm = "url:" + uri; + String perm = "url" + uri.replace('/', ':'); + if (subjectUser.isPermitted(perm)) { if (log.isDebugEnabled()) { log.debug("User is permitted to access " + perm); } super.doFilterInternal(servletRequest, servletResponse, chain); - } else if (uri.equals("/security/login.action") - || uri.startsWith("/js/") - || uri.startsWith("/img/") - || uri.startsWith("/css/")) { - if (log.isDebugEnabled()) { - log.debug("Temp allowing static access " + uri); - } - super.doFilterInternal(servletRequest, servletResponse, chain); } else { if (log.isDebugEnabled()) { log.debug("User is NOT permitted to access " + perm); } - ((HttpServletResponse)servletResponse).sendRedirect("/security/login.action"); + if (ANON_LOGIN.equals(subjectUser.getPrincipal())) { + ((HttpServletResponse)servletResponse).sendRedirect("/security/login.action"); + } else { + ((HttpServletResponse)servletResponse).sendError(401, "Not authorized to access " + uri); + } } } } Modified: branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/TopiaSecurityRealm.java =================================================================== --- branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/TopiaSecurityRealm.java 2012-10-16 16:31:45 UTC (rev 218) +++ branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/TopiaSecurityRealm.java 2012-10-17 14:58:08 UTC (rev 219) @@ -1,5 +1,11 @@ package org.nuiton.web.security; +import java.util.ArrayList; +import java.util.Arrays; +import java.util.Collection; +import java.util.Properties; + +import org.apache.commons.lang3.StringUtils; import org.apache.commons.logging.Log; import org.apache.commons.logging.LogFactory; import org.apache.shiro.authc.AuthenticationException; @@ -16,9 +22,6 @@ import org.nuiton.topia.TopiaRuntimeException; import org.nuiton.util.ApplicationConfig; import org.nuiton.web.SecurityDAOHelper; -import org.nuiton.web.security.SecurityUser; -import org.nuiton.web.security.SecurityUserDAO; -import org.nuiton.web.security.SecurityUserImpl; public class TopiaSecurityRealm extends AuthorizingRealm { @@ -36,11 +39,12 @@ @Override protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) { - String login = (String) principals.getPrimaryPrincipal(); + SimpleAuthorizationInfo result = null; - SimpleAuthorizationInfo result = null; + Properties props = config.getFlatOptions(); TopiaContext transaction = null; try { + String login = (String) principals.getPrimaryPrincipal(); transaction = rootContext.beginTransaction(); SecurityUserDAO securityUserDAO = SecurityDAOHelper.getSecurityUserDAO(transaction); @@ -50,15 +54,49 @@ SecurityUser securityUser = securityUserDAO.findByLogin(login); result = new SimpleAuthorizationInfo(); - for (SecurityRole role : securityUser.getRoles()) { + for (SecurityRole role : securityUser.getSecurityRole()) { for (String permission : role.getPermissions()) { - result.addStringPermission(permission); + //result.addStringPermission(permission); if (log.isDebugEnabled()) { log.debug(" - add permission : " + permission); } + + for (String prop : props.stringPropertyNames()) { + if (prop.startsWith("topia.security.permission.")) { + String endProp = StringUtils.removeStart(prop, "topia.security.permission."); + String[] subs = endProp.split("\\."); + if (subs.length == 3) { + if (subs[2].equals("perm")) { + if (subs[1].equals(permission)) { + String perms = props.getProperty(prop); + String[] permTab = perms.split("\\s*\\,\\s*"); + for (String perm : permTab) { + result.addStringPermission(perm); + if (log.isDebugEnabled()) { + log.debug(" - add string permission : " + perm); + } + } + } + } + } + } + } } } + // si seul l'utilisateur anon existe + // on lui offre une promotion + if (login.equals(SecurityShiroFilter.ANON_LOGIN) && securityUserDAO.count() == 1) { + result.addStringPermission("*"); + if (log.isDebugEnabled()) { + log.debug("Grant all rigth (*) because no user exists"); + } + } + + // ajout de l'url de login et logout quand meme !!! + result.addStringPermission("url:security:login.action"); + result.addStringPermission("url:security:logout.action"); + } catch (Exception ex) { } finally { @@ -70,7 +108,7 @@ } } } - + return result; } @@ -79,8 +117,12 @@ UsernamePasswordToken usernamePasswordToken = (UsernamePasswordToken) token; String login = usernamePasswordToken.getUsername(); - char[] password = usernamePasswordToken.getPassword(); + //char[] password = usernamePasswordToken.getPassword(); + if (log.isDebugEnabled()) { + log.debug("doGetAuthenticationInfo for login : " + login); + } + AuthenticationInfo result = null; TopiaContext transaction = null; try { @@ -88,40 +130,16 @@ SecurityUserDAO securityUserDAO = SecurityDAOHelper.getSecurityUserDAO(transaction); SecurityUser securityUser = securityUserDAO.findByLogin(login); - - if (securityUser == null) { - long count = securityUserDAO.count(); - // si il n'y a aucun utilisateur, le premier utilisateur - // devient un power user, super admin de la mort - if (count == 0) { - if (log.isDebugEnabled()) { - log.debug("Creating new admin user with login : " + login); - } - SecurityRoleDAO securityRoleDAO = SecurityDAOHelper.getSecurityRoleDAO(transaction); - - securityUser = securityUserDAO.create(); - securityUser.setLogin(login); - securityUser.setPassword(String.valueOf(password)); - - // on lui attribut tous les droits - SecurityRole role = securityRoleDAO.create(); - role.setName("admin"); - role.addPermissions("*:*"); - securityUser.addRoles(role); - - transaction.commitTransaction(); + if (securityUser != null) { + if (login.equals(SecurityShiroFilter.ANON_LOGIN)) { + result = new SimpleAuthenticationInfo(securityUser.getLogin(), + "", getName()); } else { - if (log.isDebugEnabled()) { - log.debug(count + " accounts found"); - } + result = new SimpleAuthenticationInfo(securityUser.getLogin(), + securityUser.getPassword(), getName()); } } - if (securityUser != null) { - result = new SimpleAuthenticationInfo(securityUser.getLogin(), - securityUser.getPassword(), getName()); - } - } catch (TopiaException ex) { throw new TopiaRuntimeException(ex); } finally { Modified: branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/actions/RoleAction.java =================================================================== --- branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/actions/RoleAction.java 2012-10-16 16:31:45 UTC (rev 218) +++ branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/actions/RoleAction.java 2012-10-17 14:58:08 UTC (rev 219) @@ -4,6 +4,7 @@ import org.nuiton.topia.TopiaContext; import org.nuiton.topia.TopiaException; import org.nuiton.topia.TopiaRuntimeException; +import org.nuiton.web.SecurityDAOHelper; import org.nuiton.web.security.SecurityRole; import org.nuiton.web.security.SecurityRoleDAO; import org.nuiton.web.security.SecurityRoleImpl; @@ -39,6 +40,7 @@ try { TopiaContext transaction = rootContext.beginTransaction(); + securityRoleDAO = SecurityDAOHelper.getSecurityRoleDAO(transaction); if (role.getTopiaId() == null) { securityRoleDAO.create(role); } else { Modified: branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/actions/RolePermissionsAction.java =================================================================== --- branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/actions/RolePermissionsAction.java 2012-10-16 16:31:45 UTC (rev 218) +++ branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/actions/RolePermissionsAction.java 2012-10-17 14:58:08 UTC (rev 219) @@ -1,7 +1,6 @@ package org.nuiton.web.security.actions; import java.util.ArrayList; -import java.util.Arrays; import java.util.Collection; import java.util.HashMap; import java.util.List; @@ -13,7 +12,6 @@ import org.nuiton.web.SecurityDAOHelper; import org.nuiton.web.security.SecurityRole; import org.nuiton.web.security.SecurityRoleDAO; -import org.nuiton.web.security.SecurityUser; import org.nuiton.web.security.SecurityUserDAO; public class RolePermissionsAction extends AbstractAction { @@ -31,12 +29,10 @@ protected Map<String, String> permissions; /** Id categories with permissions ids. */ protected Map<String, Collection<String>> categoryPermissions; - /** Id permission with permissions strings. */ - protected Map<String, Collection<String>> shiroPerms; protected List<SecurityRole> roles; - protected List<String> userIds; + protected List<String> roleIds; @Override public String input() throws Exception { @@ -48,7 +44,7 @@ categories = new HashMap<String, String>(); permissions = new HashMap<String, String>(); categoryPermissions = new HashMap<String, Collection<String>>(); - shiroPerms = new HashMap<String, Collection<String>>(); + Properties props = config.getFlatOptions(); for (String prop : props.stringPropertyNames()) { if (prop.startsWith("topia.security.permission.")) { @@ -56,22 +52,19 @@ String[] subs = endProp.split("\\."); if (subs.length == 1) { categories.put(subs[0], props.getProperty(prop)); - } else if (subs.length == 2) { - String perms = props.getProperty(prop); - String[] permTab = perms.split("\\s*\\.\\s*"); - Collection<String> permList = Arrays.asList(permTab); - shiroPerms.put(subs[0], permList); } else if (subs.length == 3) { - // name - String name = props.getProperty(prop); - permissions.put(subs[1], name); - // association - Collection<String> categoryPermissionCol = categoryPermissions.get(subs[0]); - if (categoryPermissionCol == null) { - categoryPermissionCol = new ArrayList<String>(); - categoryPermissions.put(subs[0], categoryPermissionCol); + if (subs[2].equals("name")) { + // name + String name = props.getProperty(prop); + permissions.put(subs[1], name); + // association + Collection<String> categoryPermissionCol = categoryPermissions.get(subs[0]); + if (categoryPermissionCol == null) { + categoryPermissionCol = new ArrayList<String>(); + categoryPermissions.put(subs[0], categoryPermissionCol); + } + categoryPermissionCol.add(subs[1]); } - categoryPermissionCol.add(subs[1]); } } } @@ -94,26 +87,28 @@ return categoryPermissions; } + public void setRoleIds(List<String> roleIds) { + this.roleIds = roleIds; + } + @Override public String execute() throws Exception { String result = super.execute(); - if (userIds == null) { + if (roleIds == null) { result = input(); } else { try { TopiaContext transaction = rootContext.beginTransaction(); - securityUserDAO = SecurityDAOHelper.getSecurityUserDAO(transaction); securityRoleDAO = SecurityDAOHelper.getSecurityRoleDAO(transaction); - for (String userId : userIds) { - SecurityUser securityUser = securityUserDAO.findByTopiaId(userId); - securityUser.clearRoles(); + for (String roleId : roleIds) { + SecurityRole securityRole = securityRoleDAO.findByTopiaId(roleId); + securityRole.clearPermissions(); - String[] roleIds = getParameters("roles-" + userId); - if (roleIds != null) { - for (String roleId : roleIds) { - SecurityRole secuRole = securityRoleDAO.findByTopiaId(roleId); - securityUser.addRoles(secuRole); + String[] permissions = getParameters("permissions-" + roleId); + if (permissions != null) { + for (String permission : permissions) { + securityRole.addPermissions(permission); } } } Modified: branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/actions/UserAction.java =================================================================== --- branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/actions/UserAction.java 2012-10-16 16:31:45 UTC (rev 218) +++ branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/actions/UserAction.java 2012-10-17 14:58:08 UTC (rev 219) @@ -9,6 +9,8 @@ import org.nuiton.web.security.SecurityUserDAO; import org.nuiton.web.security.SecurityUserImpl; +import com.opensymphony.xwork2.Preparable; + public class UserAction extends AbstractAction { /** serialVersionUID. */ Modified: branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/actions/UserRolesAction.java =================================================================== --- branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/actions/UserRolesAction.java 2012-10-16 16:31:45 UTC (rev 218) +++ branches/nuiton-web-1.11-security/nuiton-security/src/main/java/org/nuiton/web/security/actions/UserRolesAction.java 2012-10-17 14:58:08 UTC (rev 219) @@ -60,13 +60,13 @@ securityRoleDAO = SecurityDAOHelper.getSecurityRoleDAO(transaction); for (String userId : userIds) { SecurityUser securityUser = securityUserDAO.findByTopiaId(userId); - securityUser.clearRoles(); + securityUser.clearSecurityRole(); String[] roleIds = getParameters("roles-" + userId); if (roleIds != null) { for (String roleId : roleIds) { SecurityRole secuRole = securityRoleDAO.findByTopiaId(roleId); - securityUser.addRoles(secuRole); + securityUser.addSecurityRole(secuRole); } } } Modified: branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/role-permissions.jsp =================================================================== --- branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/role-permissions.jsp 2012-10-16 16:31:45 UTC (rev 218) +++ branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/role-permissions.jsp 2012-10-17 14:58:08 UTC (rev 219) @@ -12,25 +12,36 @@ <h2>Permissions des rôles</h2> - <form action="<s:url action="user-roles" namespace="/security" />" method="post"> + <form action="<s:url action="role-permissions" namespace="/security" />" method="post"> + <s:iterator value="roles"> + <input type="hidden" name="roleIds" value="<s:property value="topiaId" />" /> + </s:iterator> <table class="secu-roletable"> <tr> <td class="empty" /> <s:iterator value="roles"> - <td><s:property value="name" /></td> + <td><a href="<s:url action='role!input' namespace='/security'> + <s:param name="roleId"><s:property value="topiaId" /></s:param> + </s:url>"> + <s:property value="name" /> + </a></td> </s:iterator> </tr> <s:iterator value="categories.keys" var="category"> <s:set name="categoryName" value="categories.get(#category)" /> <tr> - <td colspan="<s:property value="roles.size() + 1" />"><s:property value="#categoryName" /></td> + <th colspan="<s:property value="roles.size() + 1" />"><s:property value="#categoryName" /></th> </tr> <s:iterator value="categoryPermissions.get(#category)" var="categoryPermission"> <s:set name="permissionName" value="permissions.get(#categoryPermission)" /> <tr> <td><s:property value="#permissionName" /></td> - <s:iterator value="roles"> - <td><input type="checkbox" value="" /></td> + <s:iterator value="roles" var="role"> + <td><input type="checkbox" name="permissions-<s:property value="topiaId" />" + value="<s:property value="#categoryPermission"/>" + <s:if test="#role.permissions.contains(#categoryPermission)" > + checked="checked" + </s:if> /></td> </s:iterator> </tr> </s:iterator> Modified: branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/user-roles.jsp =================================================================== --- branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/user-roles.jsp 2012-10-16 16:31:45 UTC (rev 218) +++ branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/user-roles.jsp 2012-10-17 14:58:08 UTC (rev 219) @@ -33,7 +33,7 @@ </s:iterator> </tr> <s:iterator value="users" var="user" status="userStatus"> - <input type="hidden" name="userIds" value="<s:property value="topiaId" />" /> + <input type="hidden" name="userIds" value="<s:property value="topiaId" />" /> <tr> <s:if test="#userStatus.first"> <th rowspan="<s:property value="users.size()" />" class="vertical">Utilisateurs</th> @@ -47,9 +47,10 @@ </td> <s:iterator value="roles" var="role"> <td> + <input id="<s:property value="#user.topiaId" /><s:property value="#user.topiaId" />" type="checkbox" name="roles-<s:property value="#user.topiaId" />" value="<s:property value="#role.topiaId" />" - <s:if test="#user.roles.contains(#role)" > + <s:if test="#user.securityRole.contains(#role)" > checked="checked" </s:if> /> </td> Modified: branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/struts.xml =================================================================== --- branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/struts.xml 2012-10-16 16:31:45 UTC (rev 218) +++ branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/struts.xml 2012-10-17 14:58:08 UTC (rev 219) @@ -15,7 +15,7 @@ <action name="role-permissions" class="org.nuiton.web.security.actions.RolePermissionsAction"> <result name="input">/WEB-INF/security/role-permissions.jsp</result> <result name="success" type="redirectAction"> - <param name="actionName">user-roles</param> + <param name="actionName">role-permissions</param> </result> </action> <action name="role" class="org.nuiton.web.security.actions.RoleAction"> Modified: branches/nuiton-web-1.11-security/nuiton-security/src/main/xmi/security.properties =================================================================== --- branches/nuiton-web-1.11-security/nuiton-security/src/main/xmi/security.properties 2012-10-16 16:31:45 UTC (rev 218) +++ branches/nuiton-web-1.11-security/nuiton-security/src/main/xmi/security.properties 2012-10-17 14:58:08 UTC (rev 219) @@ -1,2 +1,3 @@ model.tagvalue.String=text -org.nuiton.web.security.SecurityUser.attribute.roles.tagvalue.lazy=false \ No newline at end of file +org.nuiton.web.security.SecurityUser.attribute.securityRole.tagvalue.lazy=false +org.nuiton.web.security.SecurityRole.attribute.permissions.tagvalue.lazy=false Modified: branches/nuiton-web-1.11-security/nuiton-security/src/main/xmi/security.zargo =================================================================== (Binary files differ)

1 0

r218 - branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security
by echatellier＠users.nuiton.org 16 Oct '12

16 Oct '12

Author: echatellier Date: 2012-10-16 18:31:45 +0200 (Tue, 16 Oct 2012) New Revision: 218 Url: http://nuiton.org/repositories/revision/nuiton-web/218 Log: Update view Added: branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/role-permissions.jsp Modified: branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/user-roles.jsp branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/user.jsp Added: branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/role-permissions.jsp =================================================================== --- branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/role-permissions.jsp (rev 0) +++ branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/role-permissions.jsp 2012-10-16 16:31:45 UTC (rev 218) @@ -0,0 +1,54 @@ +<%@ page language="java" contentType="text/html; charset=utf-8" pageEncoding="utf-8"%> +<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> +<%@taglib uri="/struts-tags" prefix="s" %> +<html xmlns="http://www.w3.org/1999/xhtml"> + <head> + <title>Sécurité</title> + </head> + + <body> + + <h1>Sécurité</h1> + + <h2>Permissions des rôles</h2> + + <form action="<s:url action="user-roles" namespace="/security" />" method="post"> + <table class="secu-roletable"> + <tr> + <td class="empty" /> + <s:iterator value="roles"> + <td><s:property value="name" /></td> + </s:iterator> + </tr> + <s:iterator value="categories.keys" var="category"> + <s:set name="categoryName" value="categories.get(#category)" /> + <tr> + <td colspan="<s:property value="roles.size() + 1" />"><s:property value="#categoryName" /></td> + </tr> + <s:iterator value="categoryPermissions.get(#category)" var="categoryPermission"> + <s:set name="permissionName" value="permissions.get(#categoryPermission)" /> + <tr> + <td><s:property value="#permissionName" /></td> + <s:iterator value="roles"> + <td><input type="checkbox" value="" /></td> + </s:iterator> + </tr> + </s:iterator> + </s:iterator> + </table> + <input type="submit" value="Valider" /> + </form> + + <h2>Gestion</h2> + + <div class="secu-newuser"> + <a href="<s:url action='user-roles!input' namespace='/security' />">Rôles des utilisateurs</a> + </div> + <div class="secu-newuser"> + <a href="<s:url action='user!input' namespace='/security' />">Nouvel utilisateur</a> + </div> + <div class="secu-newrole"> + <a href="<s:url action='role!input' namespace='/security' />">Nouveau rôle</a> + </div> + </body> +</html> \ No newline at end of file Modified: branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/user-roles.jsp =================================================================== --- branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/user-roles.jsp 2012-10-16 15:25:59 UTC (rev 217) +++ branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/user-roles.jsp 2012-10-16 16:31:45 UTC (rev 218) @@ -10,7 +10,7 @@ <h1>Sécurité</h1> - <h2>Permission</h2> + <h2>Rôles des utilisateurs</h2> <form action="<s:url action="user-roles" namespace="/security" />" method="post"> <table class="secu-roletable"> @@ -63,10 +63,13 @@ <h2>Gestion</h2> <div class="secu-newuser"> - <a href="<s:url action='secu-user!input' namespace='/secu' />">Nouvel utilisateur</a> + <a href="<s:url action='role-permissions!input' namespace='/security' />">Permissions des rôles</a> </div> + <div class="secu-newuser"> + <a href="<s:url action='user!input' namespace='/security' />">Nouvel utilisateur</a> + </div> <div class="secu-newrole"> - <a href="<s:url action='secu-role!input' namespace='/secu' />">Nouveau rôle</a> + <a href="<s:url action='role!input' namespace='/security' />">Nouveau rôle</a> </div> </body> </html> \ No newline at end of file Modified: branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/user.jsp =================================================================== --- branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/user.jsp 2012-10-16 15:25:59 UTC (rev 217) +++ branches/nuiton-web-1.11-security/nuiton-security/src/main/resources/WEB-INF/security/user.jsp 2012-10-16 16:31:45 UTC (rev 218) @@ -10,7 +10,7 @@ <h1>Sécurité</h1> - <s:form action="secu-user" namespace="/secu"> + <s:form action="user" namespace="/security"> <s:actionerror /> <s:hidden name="userId" value="%{user.topiaId}" /> <s:textfield label="Identifiant" name="user.login" value="%{user.login}"/>

1 0