mirror of
https://github.com/Alfresco/alfresco-community-repo.git
synced 2025-08-07 17:49:17 +00:00
17475: ETHREEOH-3295: Fix to AuthorityMigrationPatch - Forces transaction retry if worker thread reaches child authority before a parent authority - Tested on Kev's 3.1.1 repository with ~20,000 bulk loaded users and ~2,000 Share sites - Now completes in 5 minutes as opposed to 45 17461: ETHREEOH-3268: Added MutableAuthenticationService.isAuthenticationCreationAllowed () to allow conditional display of external user invitation UI 17450: ETHREEOH-2762: Correction to previous fix. Do not generate new name when working copy copied back on check in. 17440: ETHREEOH-3295: Fixed logging in FixNameCrcValuesPatch 17439: ETHREEOH-2762: Improved behaviour when a working copy is copied - Working copy aspect already removed the working copy aspect on copy - Now derives a new name from the node checked out from and a UUID, preserving the extension 17438: ETHREEOH-2690: Fix sequencing of jgroups system property setting - declared dependency between internalEHCacheManager and jgroupsPropertySetter 17436: ETHREEOH-3295: Further performance improvements to AuthorityMigrationPatch - authority created at same time as all its parent associations to save lots of reindexing, as per LDAP sync - multi-threaded BatchProcessor (as used by LDAP sync, FixNameCrcValuesPatch) used to process work in 2 threads in batches of 20, report progress every 100 entries and handle transaction retries - BatchProcessor now promoted to its own package 17394: Fix for license issue in local enterprise builds. - Replace Community with Enterprise in version.properties during enterprise war building 17365: ETHREEOH-3229: Visited and fixed all SearchService result set leaks 17362: ETHREEOH-3254: Eliminate needless ping to LDAP server in LDAPAuthenticationComponentImpl.implementationAllowsGuestLogin() 17348: ETHREEOH-3003: Fix NPE in Hyperic when LicenseDescriptor has null fields 17316: Merged V3.1 to V3.2 17315: ETHREEOH-3092: PersonService won't let you create duplicate persons anymore. 17314: ETHREEOH-3158: Fix RepoServerMgmt to work with external authentication methods - AuthenticationService.getCurrentTicket / getNewTicket now call pre authentication check before issuing a new ticket, thus still allowing ticket enforcement when external authentication is in use. 17312: ETHREEOH-3219: Enable resolution of JMX server password file path on JBoss 5 17299: Merged V3.2 to V3.1 (Record only) 17297: ETHREEOH-1593: Changed name of username cookie and fixed login.jsp to decode it properly 17248: ETHREEOH-1593: alfUser cookie value should be base 64 encoded to allow for non-ASCII characters 17297: ETHREEOH-1593: Changed name of username cookie and fixed login.jsp to decode it properly - thanks Kev! 17292: ETHREEOH-1842: Ticket association with HttpSession IDs tracked so that we don't invalidate a ticket in use by multiple sessions prematurely - AuthenticationService validate, getCurrentTicket, etc. methods now take optional sessionId arguments 17269: Fix failing unit test - reinstate original behaviour of AbstractChainingAuthenticationService.getAuthenticationEnabled() 17268: Fix InvitationService - Runs as system to do privileged AuthenticationService actions git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@18105 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
147 lines
6.3 KiB
Plaintext
147 lines
6.3 KiB
Plaintext
<%--
|
|
* Copyright (C) 2005-2007 Alfresco Software Limited.
|
|
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License
|
|
* as published by the Free Software Foundation; either version 2
|
|
* of the License, or (at your option) any later version.
|
|
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
|
|
* As a special exception to the terms and conditions of version 2.0 of
|
|
* the GPL, you may redistribute this Program in connection with Free/Libre
|
|
* and Open Source Software ("FLOSS") applications as described in Alfresco's
|
|
* FLOSS exception. You should have recieved a copy of the text describing
|
|
* the FLOSS exception, and it is also available here:
|
|
* http://www.alfresco.com/legal/licensing"
|
|
--%>
|
|
|
|
<%@ page import="javax.faces.context.FacesContext" %>
|
|
<%@ page import="javax.transaction.UserTransaction" %>
|
|
<%@ page import="org.springframework.web.context.WebApplicationContext" %>
|
|
<%@ page import="org.springframework.web.context.support.WebApplicationContextUtils" %>
|
|
<%@ page import="org.alfresco.service.transaction.TransactionService" %>
|
|
<%@ page import="org.alfresco.service.cmr.security.PermissionService" %>
|
|
<%@ page import="org.alfresco.service.cmr.security.AuthenticationService" %>
|
|
<%@ page import="org.alfresco.service.cmr.security.PersonService" %>
|
|
<%@ page import="org.alfresco.service.cmr.security.PermissionService" %>
|
|
<%@ page import="org.alfresco.service.cmr.repository.NodeRef" %>
|
|
<%@ page import="org.alfresco.repo.security.authentication.AuthenticationException" %>
|
|
<%@ page import="org.springframework.extensions.config.ConfigService" %>
|
|
<%@ page import="org.alfresco.web.app.servlet.AuthenticationHelper" %>
|
|
<%@ page import="org.alfresco.web.app.servlet.FacesHelper" %>
|
|
<%@ page import="org.alfresco.web.bean.NavigationBean" %>
|
|
<%@ page import="org.alfresco.web.bean.repository.User" %>
|
|
<%@ page import="org.alfresco.web.bean.repository.PreferencesService" %>
|
|
<%@ page import="org.alfresco.web.config.ClientConfigElement" %>
|
|
|
|
<%-- redirect to the web application's appropriate start page --%>
|
|
<%
|
|
// get the start location as configured by the web-client config
|
|
WebApplicationContext context = WebApplicationContextUtils.getRequiredWebApplicationContext(session.getServletContext());
|
|
ConfigService configService = (ConfigService)context.getBean("webClientConfigService");
|
|
ClientConfigElement configElement = (ClientConfigElement)configService.getGlobalConfig().getConfigElement("client");
|
|
String location = configElement.getInitialLocation();
|
|
|
|
AuthenticationService authService = (AuthenticationService)context.getBean("AuthenticationService");
|
|
|
|
// override with the users preference if they have one
|
|
User user = (User)session.getAttribute(AuthenticationHelper.AUTHENTICATION_USER);
|
|
if (user != null)
|
|
{
|
|
UserTransaction tx = ((TransactionService)context.getBean("TransactionService")).getUserTransaction();;
|
|
tx.begin();
|
|
try
|
|
{
|
|
authService.validate(user.getTicket(), session.getId());
|
|
|
|
// ensure construction of the FacesContext before attemping a service call
|
|
FacesContext fc = FacesHelper.getFacesContext(request, response, application);
|
|
String preference = (String)PreferencesService.getPreferences(fc).getValue("start-location");
|
|
if (preference != null)
|
|
{
|
|
location = preference;
|
|
}
|
|
|
|
tx.commit();
|
|
}
|
|
catch (AuthenticationException authErr)
|
|
{
|
|
try { tx.rollback(); } catch (Throwable tex) {}
|
|
|
|
// expired ticket
|
|
AuthenticationService unpAuth = (AuthenticationService)context.getBean("authenticationService");
|
|
unpAuth.invalidateTicket(unpAuth.getCurrentTicket(session.getId()), session.getId());
|
|
unpAuth.clearCurrentSecurityContext();
|
|
}
|
|
catch (Throwable e)
|
|
{
|
|
try { tx.rollback(); } catch (Throwable tex) {}
|
|
}
|
|
}
|
|
else
|
|
{
|
|
UserTransaction tx = ((TransactionService)context.getBean("TransactionService")).getUserTransaction();;
|
|
tx.begin();
|
|
try
|
|
{
|
|
authService.authenticateAsGuest();
|
|
PersonService personService = (PersonService)context.getBean("personService");
|
|
NodeRef guestRef = personService.getPerson(PermissionService.GUEST_AUTHORITY);
|
|
user = new User(authService.getCurrentUserName(), authService.getCurrentTicket(session.getId()), guestRef);
|
|
session.setAttribute(AuthenticationHelper.AUTHENTICATION_USER, user);
|
|
|
|
// ensure construction of the FacesContext before attemping a service call
|
|
FacesContext fc = FacesHelper.getFacesContext(request, response, application);
|
|
String preference = (String)PreferencesService.getPreferences(session).getValue("start-location");
|
|
if (preference != null)
|
|
{
|
|
location = preference;
|
|
}
|
|
session.removeAttribute(AuthenticationHelper.AUTHENTICATION_USER);
|
|
|
|
tx.commit();
|
|
}
|
|
catch (Throwable e)
|
|
{
|
|
try { tx.rollback(); } catch (Throwable tex) {}
|
|
}
|
|
}
|
|
|
|
if (request.getMethod().equalsIgnoreCase("GET"))
|
|
{
|
|
if (NavigationBean.LOCATION_MYALFRESCO.equals(location))
|
|
{
|
|
// Clear previous location - Fixes the issue ADB-61
|
|
FacesContext fc = FacesHelper.getFacesContext(request, response, application);
|
|
if (fc != null)
|
|
{
|
|
NavigationBean navigationBean = (NavigationBean)FacesHelper.getManagedBean(fc, "NavigationBean");
|
|
if (navigationBean != null)
|
|
{
|
|
navigationBean.setLocation(null);
|
|
navigationBean.setToolbarLocation(null);
|
|
}
|
|
}
|
|
// Send redirect
|
|
response.sendRedirect(request.getContextPath() + "/faces/jsp/dashboards/container.jsp");
|
|
}
|
|
else
|
|
{
|
|
response.sendRedirect(request.getContextPath() + "/faces/jsp/browse/browse.jsp");
|
|
}
|
|
}
|
|
// route WebDAV requests
|
|
else if (request.getMethod().equalsIgnoreCase("PROPFIND") ||
|
|
request.getMethod().equalsIgnoreCase("OPTIONS"))
|
|
{
|
|
response.sendRedirect(request.getContextPath() + "/webdav/");
|
|
}
|
|
%> |