mirror of
https://github.com/Alfresco/alfresco-community-repo.git
synced 2025-07-07 18:25:23 +00:00
20954: Calendar Dashlet updates. Fixes: ALF-2907 (meeting workspace issue) 20968: Minor VersionableAspect fix to onDeleteNode policy firing (follow-on for r19507) 20981: Removed Install Jammer installers from V3.3.3 20982: AVMTestSuite - run PurgeTestP after AVMServiceTest (investigating ALF-3611) 20997: Fix for ALF-2605 - updated share-config-custom.xml.sample and removed obsolete extension files 21030: Pulled XAMConnector AMP into main 3.3SP3 codeline. Apart from build changes (incl. EOL), there are no repo changes. 21032: StoreSelector passes through NodeContentContext allowing stores access to node information 21036: Fix ALF-245: Can't delete space that contains "translation without content" - Delete triggers 'unmakeTranslation' - Empty translations are marked with sys:temporary before being deleted 21051: More on fix ALF-245. Reduced complexity by not deleting empty translations twice 21064: Merged V3.3 to V3.3-BUG_FIX 20898: Merged HEAD to V3.3 20724: AVMTestSuite - temporarily comment out PurgeTestP - TODO: investigate intermittent test failure 20903: Incremented version revision 20921: AVM - fix purge store so that vr nodes are actually orphaned (ALF-3627) 20952: Fix for ALF-3704: Module conflict - Alfresco web client config property page missing metadata. This is application of a fix made to the config service in a hotfix. The change provides a deterministic load order for config files loaded via the ConfigBootstrap spring bean. More importantly it means that config files loaded by modules on different machines in a cluster load in the same order. The forms client and AWE config files have been updated to take advantage of the new loading order. 21061: Merged PATCHES/V3.1.2 to V3.3 (RECORD ONLY) 20890: ALF-3687: Apply LUCENE-1383 patch to Lucene 2.1.0 to reduce memory leaks from ThreadLocals 20891: ALF-3687: Build classpath fix 20892: Incremented version label 21062: Merged PATCHES/V3.2.1 to V3.3 20897: (RECORD ONLY) Incremented version label 20901: (RECORD ONLY) ALF-3740: Merged V3.3 to PATCHES/V3.2.1 20524: VersionMigrator - option to run as scheduled job (ALF-1000) 20904: (RECORD ONLY) ALF-3732: Merged PATCHES/V3.2.r to PATCHES/V3.2.1 19803: ALF-558: File servers (CIFS / FTP / NFS) can now handle concurrent write operations on Alfresco repository - ContentDiskDriver / AVMDiskDriver now use retrying transactions for write operations - Disable EagerContentStoreCleaner on ContentDiskDriver / AVMDiskDriver closeFile() operations so that they may be retried after rollback (Sony zero byte problem) - Allow manual association of AVM ContentData with nodes so that closeFile() may be retried - Propagation of new argument through AVM interfaces 20905: (RECORD ONLY) ALF-3732: Rolled back the now unnecessary reference()/dereference() stuff from ALF-558 20906: (RECORD ONLY) ALF-3732: Merged DEV/V3.3-BUG-FIX to PATCHES/V3.2.1 20623: Fix for ALF-3188 : Access Denied when updating doc via CIFS 20907: (RECORD ONLY) ALF-3732: Merged V3.3 to PATCHES/V3.2.1 20173: Propagate IOExceptions from retryable write transactions in AlfrescoDiskDriver 20950: ALF-3779: Upgrades on large repositories from v2.1 and v2.2 were failing on MySQL due to "The total number of locks exceeds the lock table size" errors - Solution was to add support for new --BEGIN TXN and --END TXN comments and execute LOCK TABLES statements in the same transaction as large INSERT - SELECT statements. 20990: ALF-3789: Concurrency issues with InMemoryTicketComponentImpl - Previous ETHREEOH-1842 method of caching web session 'ref counts' against tickets could cause tickets to unpredictably fall out of the transactional cache - Rolled back original ETHREEOH-1842 fix. Would be too much overhead to keep these ref counts consistent across a cluster. - Instead, avoid invalidating tickets on web session timeout and only do it on explicit log out. - Now tickets maintained in non-transactional shared cache so they can't drop out unpredictably - Logic for ticket inactivity timeout caching improved so that it should work across a cluster 20991: (RECORD ONLY) Incremented version label 20993: ALF-3789: Fixed Spring configuration backward compatibily issue with previous fix - Ticket cache bean name restored to ticketsCache. This is actually now a non-transactional cache. - Also externalized parameters so that they can now be controlled by alfresco-global.properties without any bean overrides authentication.ticket.ticketsExpire=false authentication.ticket.expiryMode=AFTER_FIXED_TIME authentication.ticket.validDuration=PT1H 20994: Eclipse classpath fixes for unit testing after ant build 21057: ALF-3592: PassthruCifsAuthenticator now auto-creates / imports users who do not already exist in Alfresco - At least one of the following properties must be true for this to happen synchronization.autoCreatePeopleOnLogin synchronization.syncWhenMissingPeopleLogIn - Also improved debug logging of unknown passthru domains 21063: Merged PATCHES/V3.2.r to V3.3 21037: ALF-3793: Final attempt at realigning saved XForm data with a modified Schema - removeRemovedNodes / insertUpdatedNodes / insertPrototypeNodes replaced by a one stop recursive process that builds a new instance tree from scratch - Nodes copied over in correct order - Missing nodes added in and extra nodes discarded - Prototype nodes appended at appropriate points 21038: (RECORD ONLY) Incremented version label git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@21065 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
180 lines
5.2 KiB
Java
180 lines
5.2 KiB
Java
/*
|
|
* Copyright (C) 2005-2010 Alfresco Software Limited.
|
|
*
|
|
* This file is part of Alfresco
|
|
*
|
|
* Alfresco is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU Lesser General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* Alfresco is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU Lesser General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General Public License
|
|
* along with Alfresco. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
package org.alfresco.service.cmr.security;
|
|
|
|
import java.util.Set;
|
|
|
|
import org.alfresco.repo.security.authentication.AuthenticationException;
|
|
import org.alfresco.service.Auditable;
|
|
import org.alfresco.service.PublicService;
|
|
|
|
/**
|
|
* The authentication service defines the API for managing authentication information
|
|
* against a user id.
|
|
*
|
|
* @author Andy Hind
|
|
*/
|
|
@PublicService
|
|
public interface AuthenticationService
|
|
{
|
|
/**
|
|
* Is an authentication enabled or disabled?
|
|
*/
|
|
@Auditable(parameters = {"userName"})
|
|
public boolean getAuthenticationEnabled(String userName) throws AuthenticationException;
|
|
|
|
/**
|
|
* Carry out an authentication attempt. If successful the user is set to the current user.
|
|
* The current user is a part of the thread context.
|
|
*
|
|
* @param userName the username
|
|
* @param password the passowrd
|
|
* @throws AuthenticationException
|
|
*/
|
|
@Auditable(parameters = {"userName", "password"}, recordable = {true, false})
|
|
public void authenticate(String userName, char[] password) throws AuthenticationException;
|
|
|
|
/**
|
|
* Authenticate as the guest user. This may not be allowed and throw an exception.
|
|
*
|
|
* @throws AuthenticationException
|
|
*/
|
|
@Auditable
|
|
public void authenticateAsGuest() throws AuthenticationException;
|
|
|
|
/**
|
|
* Check if Guest user authentication is allowed.
|
|
*
|
|
* @return true if Guest user authentication is allowed, false otherwise
|
|
*/
|
|
@Auditable
|
|
public boolean guestUserAuthenticationAllowed();
|
|
|
|
/**
|
|
* Check if the given authentication exists.
|
|
*
|
|
* @param userName the username
|
|
* @return Returns <tt>true</tt> if the authentication exists
|
|
*/
|
|
@Auditable(parameters = {"userName"})
|
|
public boolean authenticationExists(String userName);
|
|
|
|
/**
|
|
* Get the name of the currently authenticated user.
|
|
*
|
|
* @return
|
|
* @throws AuthenticationException
|
|
*/
|
|
@Auditable
|
|
public String getCurrentUserName() throws AuthenticationException;
|
|
|
|
/**
|
|
* Invalidate any tickets held by the user.
|
|
*/
|
|
@Auditable(parameters = {"userName"})
|
|
public void invalidateUserSession(String userName) throws AuthenticationException;
|
|
|
|
/**
|
|
* Invalidate a single ticket by ID
|
|
*
|
|
* @param ticket
|
|
* @throws AuthenticationException
|
|
*/
|
|
@Auditable(parameters = {"ticket"}, recordable = {false})
|
|
public void invalidateTicket(String ticket) throws AuthenticationException;
|
|
|
|
/**
|
|
* Validate a ticket. Set the current user name accordingly.
|
|
*
|
|
* @param ticket
|
|
* @throws AuthenticationException
|
|
*/
|
|
@Auditable(parameters = {"ticket"}, recordable = {false})
|
|
public void validate(String ticket) throws AuthenticationException;
|
|
|
|
/**
|
|
* Get the current ticket as a string
|
|
* @return
|
|
*/
|
|
@Auditable
|
|
public String getCurrentTicket();
|
|
|
|
/**
|
|
* Get a new ticket as a string
|
|
* @return
|
|
*/
|
|
@Auditable
|
|
public String getNewTicket();
|
|
|
|
/**
|
|
* Remove the current security information
|
|
*/
|
|
@Auditable
|
|
public void clearCurrentSecurityContext();
|
|
|
|
/**
|
|
* Is the current user the system user?
|
|
*/
|
|
@Auditable
|
|
public boolean isCurrentUserTheSystemUser();
|
|
|
|
/**
|
|
* Get the domain to which this instance of an authentication service applies.
|
|
*
|
|
* @return The domain name
|
|
*/
|
|
@Auditable
|
|
public Set<String> getDomains();
|
|
|
|
/**
|
|
* Does this instance alow user to be created?
|
|
*/
|
|
@Auditable
|
|
public Set<String> getDomainsThatAllowUserCreation();
|
|
|
|
/**
|
|
* Does this instance allow users to be deleted?
|
|
*/
|
|
@Auditable
|
|
public Set<String> getDomainsThatAllowUserDeletion();
|
|
|
|
/**
|
|
* Does this instance allow users to update their passwords?
|
|
*/
|
|
@Auditable
|
|
public Set<String> getDomiansThatAllowUserPasswordChanges();
|
|
|
|
/**
|
|
* Gets a set of user names who should be considered 'administrators' by default.
|
|
*
|
|
* @return a set of user names
|
|
*/
|
|
@Auditable
|
|
public Set<String> getDefaultAdministratorUserNames();
|
|
|
|
/**
|
|
* Gets a set of user names who should be considered 'guests' by default.
|
|
*
|
|
* @return a set of user names
|
|
*/
|
|
@Auditable
|
|
public Set<String> getDefaultGuestUserNames();
|
|
}
|
|
|