• last updated a few seconds ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
LDEV-3315: Add security service and use it in vital entry points.

    • -0
    • +39
    ./src/java/org/lamsfoundation/lams/security/ISecurityDAO.java
    • -0
    • +103
    ./src/java/org/lamsfoundation/lams/security/SecurityDAO.java
  1. … 7 more files in changeset.
LDEV-3315: Clean up roles and paths to secured resources in all modules.

Remove AUTHOR ADMIN role.

  1. … 69 more files in changeset.
file patch02040032.sql was added on branch lams2_head_wildfly on 2014-09-30 13:11:31 +0000

LDEV-3315: Remove AUTHOR ADMIN role.

Allow AUTHOR role to preview lessons.

Allow MONITOR role to edit activities and run Live Edit.

    • binary
    ./src/java/org/lamsfoundation/lams/dbupdates/patch02040032.sql
  1. … 68 more files in changeset.
LDEV-2846: Remove obsolete filters.

  1. … 1 more file in changeset.
LDEV-2846: Remove obsolete filters.

  1. … 2 more files in changeset.
LDEV-3275: Introduce SSO using Undertow mechanisms.

Valves do not exist in Undertow. Another approach had to be used.

In each WAR there is a file in META-INF/service dir which adds a class in request processing chaing.

For Central it is SsoProducer which put the authenticated account into shared session.

All other modules use SsoConsumer which takes the account and puts it into its security context.

In standalone.xml caching of credentials was switched off as it would prevent UniversalLoginModule from putting UserDTO into shared session.

TODO: use a simple pass-all authentication mechanism for static files like images and JS files.

  1. … 9 more files in changeset.
file SsoConsumer.java was initially added on branch lams2_head_wildfly.

file SsoProducer.java was initially added on branch lams2_head_wildfly.

LDEV-2463 Added new method "learnerStrictAuth" available to LoginRequest. It works the same way as "learner" but requires hash to also contain lesson id parameter.

  1. … 2 more files in changeset.
LDEV-3309 Add isUpdateUserDetails parameter for LoginRequest so user details get updated

  1. … 4 more files in changeset.
LDEV-3309 Add isUpdateUserDetails parameter for LoginRequest so user details get updated

  1. … 4 more files in changeset.
LDEV-3308: Use lazy initialisation for Gate collections.

LDEV-3308: Use lazy initialisation for Gate collections.

LDEV-3308 fixed the problem with "Permissions gates are not being enforced"

LDEV-3275: Add dependecies and source code for Undertow.

  1. … 558 more files in changeset.
LDEV-3275: Make LAMS Valve and Session libraries part of plain lams.jar.

In JBoss these libraries had to be externalised as global valves were declared on server, not deployment level, and their code could not be a part of a deployment.

If the same thing is attempted with Undertow, the server will (most probably) require all code referenced by a valve to be available during core start up, i.e. before processing LAMS EAR. Since the valves reference LAMS services and other classes, separation seems difficult to achieve.

In such case valves (in Undertow: HTTP Handlers) will be a part of an deployment and will be declared for each WAR if necessary.

    • -29
    • +0
    ./conf/module_descriptors/valve.module.xml
  1. … 1 more file in changeset.
LDEV-3292: Add an index on Activity table.

file patch02040031.sql was added on branch lams2_head_wildfly on 2014-09-08 08:37:13 +0000

LDEV-3292: Add an index on Activity table.

    • binary
    ./src/java/org/lamsfoundation/lams/dbupdates/patch02040031.sql
LDEV-3292: When looking for an unique LD title to create a lesson, search for LDs with given prefix instead taking all from given workspace folder.

  1. … 1 more file in changeset.
LDEV-3292: When looking for an unique LD title to create a lesson, search for LDs with given prefix instead taking all from given workspace folder.

  1. … 2 more files in changeset.
LDEV-3275: Make LAMS Session JAR a part of EAR instead of WildFly module as it uses other LAMS classes.

  1. … 1 more file in changeset.
LDEV-3293: Further remove LAMS custom cache management.

LDEV-3292: Improve Add Lesson dialog response time:

Fetch all users and filter them afterwards instead of fetchin one by one.

Make some collections lazy or extra-lazy.

  1. … 1 more file in changeset.
LDEV-3292: Improve Add Lesson dialog response time:

Fetch all users and filter them afterwards instead of fetchin one by one.

Make some collections lazy or extra-lazy.

  1. … 1 more file in changeset.
LDEV-3293: Use Hibernate 4 cache. Remove unused cache management from lams_admin.

  1. … 906 more files in changeset.
LDEV-3275: Remove Application Context files which seem obsolete. They have been probably used for testing.

LDEV-3275: Change call parameters as Java 8 warns about misuse of varargs.

LDEV-3293: Use Spring support for Hibernate 4 instead of 3 (session factory and filters).

Use new path for Hibernate DTDs. Make XDoclet generate hbm.xml files with the correct path by providing it a new template.

  1. … 97 more files in changeset.