[JBoss JIRA] Moved: (GTNWSRP-127) WSRP Identity Propagation users WSRP user context and should use WS-Security
by Chris Laprun (JIRA)
[ https://jira.jboss.org/browse/GTNWSRP-127?page=com.atlassian.jira.plugin.... ]
Chris Laprun moved JBPORTAL-2468 to GTNWSRP-127:
------------------------------------------------
Project: GateIn WSRP (was: JBoss Portal)
Key: GTNWSRP-127 (was: JBPORTAL-2468)
Component/s: (was: Portal WSRP)
> WSRP Identity Propagation users WSRP user context and should use WS-Security
> ----------------------------------------------------------------------------
>
> Key: GTNWSRP-127
> URL: https://jira.jboss.org/browse/GTNWSRP-127
> Project: GateIn WSRP
> Issue Type: Bug
> Environment: EPP 4.3 CP03
> Reporter: Aaron Pestel
> Assignee: Chris Laprun
>
> The current WSRP implementation passes the username via the WSRP user context, which according to the spec is not the purpose of the user context.
> I have created a wiki that offers a potential solution. It involves two jax-rpc handers (one to generate the ws-security header on the consumer and one to parse and authenticate the ws-security header on the producer). In addition, org/jboss/portal/wsrp/producer/RequestProcessor.java needs to be changed to use the authenticated user's context rather than the information passed in the wsrp user context. Source code for these pieces is in the JARs at this wiki: http://community.jboss.org/wiki/JBossEPP43-WSRPwithWS-SecurityandSSL
> Here is the current implementation of RequestProcessor that pulls security information from the WSRP user context, followed by my proposed implementation:
> -------------------------------------------------------------------------------------------
> // fix-me: check that the correct semantics is used.
> private SecurityContext createSecurityContext(final MarkupParams params, final RuntimeContext runtimeContext,
> final org.jboss.portal.wsrp.core.UserContext wsrpUserContext)
> {
> return new SecurityContext()
> {
> public boolean isSecure()
> {
> return params.isSecureClientCommunication();
> }
> public String getAuthType()
> {
> return runtimeContext.getUserAuthentication();
> }
> public String getRemoteUser()
> {
> if (wsrpUserContext != null)
> {
> return wsrpUserContext.getUserContextKey();
> }
> return null;
> }
> public Principal getUserPrincipal()
> {
> return null;
> }
> public boolean isUserInRole(String roleName)
> {
> return wsrpUserContext != null && Tools.isContainedIn(roleName, wsrpUserContext.getUserCategories());
> }
> public boolean isAuthenticated()
> {
> return wsrpUserContext != null;
> }
> };
> }
> -------------------------------------------------------------------------------------------
> -------------------------------------------------------------------------------------------
> // fix-me: check that the correct semantics is used.
> private SecurityContext createSecurityContext(final MarkupParams params, final RuntimeContext runtimeContext,
> final org.jboss.portal.wsrp.core.UserContext wsrpUserContext)
> {
> final Request r = ((org.apache.catalina.connector.Request)(SecurityAssociationValve.activeRequest.get()));
> return new SecurityContext()
> {
> public boolean isSecure()
> {
> return r.isSecure();
> }
> public String getAuthType()
> {
> return r.getAuthType();
> }
> public String getRemoteUser()
> {
> return r.getRemoteUser();
> }
> public Principal getUserPrincipal()
> {
> return r.getUserPrincipal();
> }
> public boolean isUserInRole(String roleName)
> {
> return r.isUserInRole(roleName);
> }
> public boolean isAuthenticated()
> {
> return r.getUserPrincipal() != null;
> }
> };
> }
> -------------------------------------------------------------------------------------------
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
15 years, 5 months
[JBoss JIRA] Created: (GTNWSRP-113) UI improvements in import & export
by Michal Vanco (JIRA)
UI improvements in import & export
----------------------------------
Key: GTNWSRP-113
URL: https://jira.jboss.org/browse/GTNWSRP-113
Project: GateIn WSRP
Issue Type: Bug
Components: Admin GUI
Affects Versions: 2.0.0-Beta03, 2.0.0-Beta01
Reporter: Michal Vanco
Assignee: Chris Laprun
Fix For: 2.0.0-CR01
Attachments: wsrp-consumers-list_changed_actions_column.png, wsrp-export-list_changed_column_width.png, wsrp-export_detail_changed_column_width.png
wsrp-import_changed_column_width:
change width of Import? column - 5% or 50px is enough, table looks much better
wsrp-export_detail_changed_column_width:
change first column width at export detail - 110px
wsrp-export-list_changed_column_width:
change column width at exports list, Has failed portlets? - 100px - table looks much better
wsrp-consumers-list_changed_actions_column:
change column width at consumers list, Actions - 500px or 55% - all actions are at one line (or more if there will be some icons for Import/Export)
Note: screens are with edited widths of columns (proposals) - not current status.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
15 years, 5 months