summaryrefslogtreecommitdiff
path: root/qpid/java/broker-plugins/access-control/src/test
Commit message (Collapse)AuthorAgeFilesLines
* QPID-6481: Move java source tree to top levelAlex Rudyy2015-04-1512-2178/+0
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1673693 13f79535-47bb-0310-9956-ffa450edef68
* QPID-6450 : [Java Broker] Allow separate model configuration threads for ↵Robert Godfrey2015-03-132-0/+3
| | | | | | each virtual host node git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1666609 13f79535-47bb-0310-9956-ffa450edef68
* Merge from trunkKeith Wall2015-03-121-22/+14
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/branches/QPID-6262-JavaBrokerNIO@1666200 13f79535-47bb-0310-9956-ffa450edef68
* Add sync/async varients to most ACO methodsKeith Wall2015-03-091-1/+4
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/branches/QPID-6262-JavaBrokerNIO@1665306 13f79535-47bb-0310-9956-ffa450edef68
* QPID-6295 : [Java Broker] Allow ACL configuration file to be stored as a ↵Robert Godfrey2015-01-023-25/+7
| | | | | | data:// URL inside the config git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1648994 13f79535-47bb-0310-9956-ffa450edef68
* QPID-6126: [Java Tests] Prevent the new ACLFileAccessControlProviderImplTest ↵Keith Wall2014-10-021-1/+2
| | | | | | failin on Mac OS X git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1628983 13f79535-47bb-0310-9956-ffa450edef68
* QPID-6126: Add ability to validate CO attributes on creation, transit COs ↵Alex Rudyy2014-10-011-0/+79
| | | | | | into ERRORED state if exception occurs on recovery, allow ERRORED CO restart after remediation of configuration problem git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1628867 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5873: [Java Broker] Allow ACL rules to be applied to VirtualHostNode ↵Keith Wall2014-07-041-0/+7
| | | | | | | | | | | objects * ACL rules using the new operation VIRTUALHOSTNODE apply to VHN model objects. * ACL rules using the operation VIRTUALHOST apply to VH model objects for CREATE, UPDATE and DELETE. This is a change from previous version where BROKER operation permission was required. * For HA, VIRTUALHOSTNODE permission is required to perform updates on RemoteReplicationNodes. git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1607868 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5754 : [Java Broker] Make state change operations methods rather than ↵Robert Godfrey2014-05-081-0/+2
| | | | | | calls to setDesiredState git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1593264 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5578 : [Java Broker] Use annotation to allow registration of all ↵Robert Godfrey2014-04-302-14/+13
| | | | | | ConfiguredObject types at startup. Use this meta data for REST servlets. Remove unnecessary pluggable factory interfaces git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1591170 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5713 : [Java Broker] Remove non-test references to model singleton, and ↵Robert Godfrey2014-04-201-7/+23
| | | | | | instead treat as an instance variable git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1588794 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5665 : [Java Broker] Unify VirtualHost model and implementation classesRobert Godfrey2014-04-071-1/+1
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1585471 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5615 : [Java Broker] Migrate broker config store to use same API as ↵Robert Godfrey2014-04-041-11/+26
| | | | | | VirtualHost config store git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1584931 13f79535-47bb-0310-9956-ffa450edef68
* NO-JIRA: Merge changes from trunk.Keith Wall2014-03-252-17/+104
|\ | | | | | | | | | | | | | | | | | | Command was: svn merge https://svn.apache.org/repos/asf/qpid/trunk git-svn-id: https://svn.apache.org/repos/asf/qpid/branches/java-broker-bdb-ha2@1581428 13f79535-47bb-0310-9956-ffa450edef68
| * QPID-5634: [Java Broker] Remove support for AccessPlugins at the level of ↵Keith Wall2014-03-212-17/+104
| | | | | | | | | | | | the virtualhost. Introduce supports for ACLs rules that include virtualhost predicate. git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1579986 13f79535-47bb-0310-9956-ffa450edef68
* | QPID-5624: Remove virtualhost xml configuration. Move virtual host ↵Alex Rudyy2014-03-122-20/+13
|/ | | | | | configuration into broker configuration store" git-svn-id: https://svn.apache.org/repos/asf/qpid/branches/java-broker-bdb-ha2@1576732 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5611 : Fix other logging to always use the most current event logger ↵Robert Godfrey2014-03-084-13/+19
| | | | | | held at the broker git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1575547 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5611 : Change the event logger from a singleton to an instanceRobert Godfrey2014-03-084-28/+39
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1575462 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5611 : [Java Broker] remove LogActorsRobert Godfrey2014-03-071-3/+2
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1575315 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5567 : Further changes to SecurityMangagerRobert Godfrey2014-02-201-2/+2
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1570239 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5567 : Always Use AccessControllerContext to find the current context ↵Robert Godfrey2014-02-191-113/+207
| | | | | | Subject git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1569934 13f79535-47bb-0310-9956-ffa450edef68
* NO-JIRA : fix typos / spelling errorsRobert Godfrey2014-01-233-4/+4
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1560853 13f79535-47bb-0310-9956-ffa450edef68
* NO-JIRA : [Java] remove empty directories / unused importsRobert Godfrey2014-01-031-1/+0
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1555225 13f79535-47bb-0310-9956-ffa450edef68
* QPID-5088 : [Java Broker] Isolate use of AMQShortString and FieldTable to ↵Robert Godfrey2013-08-211-5/+5
| | | | | | 0-8/9/9-1 protocol specific plugins git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1516058 13f79535-47bb-0310-9956-ffa450edef68
* NO-JIRA: add missing licence headers to various java filesRobert Gemmell2013-05-051-0/+20
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1479398 13f79535-47bb-0310-9956-ffa450edef68
* QPID-4753: move ACL config from broker attribute to a top level entityAlex Rudyy2013-04-191-23/+11
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1469937 13f79535-47bb-0310-9956-ffa450edef68
* QPID-4678: Add ACL checks to restrict the operations to change broker level ↵Alex Rudyy2013-03-291-0/+7
| | | | | | configuration through the management interfaces git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1462551 13f79535-47bb-0310-9956-ffa450edef68
* QPID-4390: Introduce a configuration store in java broker allowing runtime ↵Alex Rudyy2013-02-192-11/+80
| | | | | | modifications and replace existing xml file configuration with json configuration store git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1447646 13f79535-47bb-0310-9956-ffa450edef68
* QPID-4335, QPID-4353: Refactored broker plugins to use simplified ↵Robert Gemmell2012-10-121-42/+6
| | | | | | | | | | | | | | | | ServiceLoader-based model rather than embedding Felix to use OSGi. Removed the ability to reload security configuration because this feature is not very useful in its current form and was making our code hard to refactor. Modified all tests to use jars rather than classes. This makes them closer to real-world deployments, e.g. the META-INF/services file is read from within the jar. Also moved various system tests from their respective modules into "systests". This removes the need for most modules to depend on systests, thus simplifying our dependency graph. Applied patch from myself, Keith Wall and Phil Harvey <phil@philharveyonline.com> git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1397519 13f79535-47bb-0310-9956-ffa450edef68
* QPID-4334: addressed Keith's review comments. Also moved ↵Keith Wall2012-09-282-1/+96
| | | | | | | | PlainConfigurationTest to the correct package. Applied patch from Philip Harvey <phil@philharveyonline.com>. git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1391431 13f79535-47bb-0310-9956-ffa450edef68
* QPID-4334: removed the firewall plugin and moved its functionality into the ↵Keith Wall2012-09-287-1/+550
| | | | | | | | Access Control plugin. Applied patch from Philip Harvey <phil@philharveyonline.com>. git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1391430 13f79535-47bb-0310-9956-ffa450edef68
* QPID-4292: add ACL rule to authorise access to the web management UIKeith Wall2012-09-101-0/+9
| | | | | | | | | | | * added object name MANAGEMENT to represent both JMX and Web Management layers * Change both JMX/Web entry points to permission access with an access management check * Updated examples and docbook * Made Principals serialised to avoid container warnings when Qpid principals are placed within a HttpSession. Work of Robbie Gemmell <robbie@apache.org> and myself. git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1382947 13f79535-47bb-0310-9956-ffa450edef68
* QPID-4236, QPID-4237, QPID-4245: Added group management functionality, and ↵Robert Gemmell2012-08-243-91/+138
| | | | | | | | | | | | | | | | | | | exposed it via the web management interface. Removed group definition functionality from the ACL plugin. The ACL plugin uses groups but no longer defines them. Introduced SubjectCreator as a facade to AuthenticationManager and group management classes. Applied access control to user and group management. Fixed bug in choosing between update and creation in RestServlet. Moved lots of RestTest helper methods to RestTestHelper. Fixed authentication, authorisation, and status logging when using the web ui. Applied patch from Philip Harvey <phil@philharveyonline.com>, Keith Wall and myself. git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1376968 13f79535-47bb-0310-9956-ffa450edef68
* QPID-4042 : [Java Broker] Add SSL Client Auth supportRobert Godfrey2012-06-061-45/+45
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1346817 13f79535-47bb-0310-9956-ffa450edef68
* QPID-3985 : [Java Tests] Fix locale specific testsRobert Godfrey2012-05-071-4/+3
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1335303 13f79535-47bb-0310-9956-ffa450edef68
* QPID-3965: Fix issue with converting ACL content to lower case Applied patch ↵Keith Wall2012-04-272-5/+10
| | | | | | by Oleksandr Rudyy <orudyy@gmail.com>, Phil Harvey <phil@philharveyonline.com> git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1331342 13f79535-47bb-0310-9956-ffa450edef68
* QPID-3843: ensure ACL rule evaluation for the ALL operation accounts for the ↵Robert Gemmell2012-02-161-21/+199
| | | | | | | | object type and properties. Fix length used for property wildcarding checks. Applied patch from Oleksandr Rudyy <orudyy@gmail.com> git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1244934 13f79535-47bb-0310-9956-ffa450edef68
* QPID-3703: ACL test improvementsKeith Wall2011-12-201-2/+203
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1221518 13f79535-47bb-0310-9956-ffa450edef68
* QPID-3641: ACLV2 Simplifications and Improvements for Java BrokerKeith Wall2011-11-241-1/+0
| | | | | | | | | | | | | Improvements and simplifications to ACL V2 for the Java Broker: 1) Removed 'EXECUTE' operation (we now just have ACCESS and UPDATE like C++ broker) 2) Enable users with management rights for a procedure to complete that procedure without matching AMQP rights (configurable) 3) Fix up system tests (make clearer, remove need for lots of support files) 4) Fix disparity in DENY_LOG and DENY-LOG values between brokers. 5) Get rid of transitive/expand permission rules Work from Robbie Gemmell and myself. git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1205782 13f79535-47bb-0310-9956-ffa450edef68
* QPID-3310 - Principal/Subject refactoring.Robert Gemmell2011-07-133-214/+490
| | | | | | | | | | Refactoring to the connection/session objects to pass the Subject from Authentication tier to Access tier, rather than just the Principal. Change the access-control to be able to make access decisions based on Groups from the Authentication tier whilst retaining support for groups declared within the ACL file itself. Improve unit tests. Applied patch by Keith Wall <keith.wall@gmail.com> git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1146079 13f79535-47bb-0310-9956-ffa450edef68
* QPID-2632 : Applied patch from Andrew Kennedy. To convert RST and PPT to ↵Martin Ritchie2010-06-041-3/+3
| | | | | | QTCs not IBBCs git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@951341 13f79535-47bb-0310-9956-ffa450edef68
* QPID-2632 : Ensure additional broker unit tests extend IBBCMartin Ritchie2010-06-031-9/+6
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@951157 13f79535-47bb-0310-9956-ffa450edef68
* QPID-2542: Implement ACL checking as OSGi pluginRobert Gemmell2010-05-312-0/+487
Applied patch from Andrew Kennedy <andrew.international@gmail.com> git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@949783 13f79535-47bb-0310-9956-ffa450edef68