version 1.7, 2002/05/03 21:09:22
|
version 1.25, 2008/12/02 09:02:14
|
|
|
//%//////////////////////////////////////////////////////////////////////////// |
//%LICENSE//////////////////////////////////////////////////////////////// |
// |
|
// Copyright (c) 2000, 2001 BMC Software, Hewlett-Packard Company, IBM, |
|
// The Open Group, Tivoli Systems |
|
// |
|
// Permission is hereby granted, free of charge, to any person obtaining a copy |
|
// of this software and associated documentation files (the "Software"), to |
|
// deal in the Software without restriction, including without limitation the |
|
// rights to use, copy, modify, merge, publish, distribute, sublicense, and/or |
|
// sell copies of the Software, and to permit persons to whom the Software is |
|
// furnished to do so, subject to the following conditions: |
|
// |
|
// THE ABOVE COPYRIGHT NOTICE AND THIS PERMISSION NOTICE SHALL BE INCLUDED IN |
|
// ALL COPIES OR SUBSTANTIAL PORTIONS OF THE SOFTWARE. THE SOFTWARE IS PROVIDED |
|
// "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT |
|
// LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR |
|
// PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT |
|
// HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN |
|
// ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION |
|
// WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. |
|
// |
|
//============================================================================= |
|
// | // |
// Author: Sushma Fernandes, Hewlett Packard Company (sushma_fernandes@hp.com) |
// Licensed to The Open Group (TOG) under one or more contributor license |
|
// agreements. Refer to the OpenPegasusNOTICE.txt file distributed with |
|
// this work for additional information regarding copyright ownership. |
|
// Each contributor licenses this file to you under the OpenPegasus Open |
|
// Source License; you may not use this file except in compliance with the |
|
// License. |
|
// |
|
// Permission is hereby granted, free of charge, to any person obtaining a |
|
// copy of this software and associated documentation files (the "Software"), |
|
// to deal in the Software without restriction, including without limitation |
|
// the rights to use, copy, modify, merge, publish, distribute, sublicense, |
|
// and/or sell copies of the Software, and to permit persons to whom the |
|
// Software is furnished to do so, subject to the following conditions: |
|
// |
|
// The above copyright notice and this permission notice shall be included |
|
// in all copies or substantial portions of the Software. |
|
// |
|
// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS |
|
// OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF |
|
// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. |
|
// IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY |
|
// CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, |
|
// TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE |
|
// SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. |
// | // |
// Modified By: Nag Boranna, Hewlett Packard Company (nagaraja_boranna@hp.com) |
////////////////////////////////////////////////////////////////////////// |
// | // |
//%//////////////////////////////////////////////////////////////////////////// | //%//////////////////////////////////////////////////////////////////////////// |
| |
|
|
// | // |
/////////////////////////////////////////////////////////////////////////////// | /////////////////////////////////////////////////////////////////////////////// |
| |
#include <Pegasus/Common/Destroyer.h> |
|
#include <Pegasus/Common/System.h> | #include <Pegasus/Common/System.h> |
#include <Pegasus/Common/Tracer.h> | #include <Pegasus/Common/Tracer.h> |
#include <Pegasus/Common/PegasusVersion.h> | #include <Pegasus/Common/PegasusVersion.h> |
|
|
Initialize UserManager instance | Initialize UserManager instance |
*/ | */ |
UserManager* UserManager::_instance = 0; | UserManager* UserManager::_instance = 0; |
|
Mutex UserManager::_userManagerMutex; |
| |
// | // |
// Constructor | // Constructor |
|
|
{ | { |
PEG_METHOD_ENTER(TRC_USER_MANAGER, "UserManager::UserManager"); | PEG_METHOD_ENTER(TRC_USER_MANAGER, "UserManager::UserManager"); |
| |
try |
|
{ |
|
_userFileHandler = 0; |
|
|
|
#ifndef PEGASUS_NO_PASSWORDFILE | #ifndef PEGASUS_NO_PASSWORDFILE |
_userFileHandler = new UserFileHandler(); |
_userFileHandler.reset(new UserFileHandler()); |
#endif | #endif |
_authHandler = 0; |
_authHandler.reset(new AuthorizationHandler(repository)); |
_authHandler = new AuthorizationHandler(repository); |
|
} |
|
catch (Exception& e) |
|
{ |
|
if (_userFileHandler) |
|
{ |
|
delete _userFileHandler; |
|
} |
|
if (_authHandler) |
|
{ |
|
delete _authHandler; |
|
} |
|
|
|
PEG_METHOD_EXIT(); |
|
throw e; |
|
} |
|
| |
PEG_METHOD_EXIT(); | PEG_METHOD_EXIT(); |
} | } |
|
|
{ | { |
PEG_METHOD_ENTER(TRC_USER_MANAGER, "UserManager::~UserManager"); | PEG_METHOD_ENTER(TRC_USER_MANAGER, "UserManager::~UserManager"); |
| |
if (_userFileHandler) |
PEG_METHOD_EXIT(); |
{ |
|
delete _userFileHandler; |
|
} |
|
if (_authHandler) |
|
{ |
|
delete _authHandler; |
|
} | } |
| |
PEG_METHOD_EXIT(); |
// |
|
// Terminates the usermanager; |
|
// |
|
void UserManager::destroy() |
|
{ |
|
delete _instance; |
|
_instance = 0; |
} | } |
| |
// | // |
|
|
| |
if (!_instance) | if (!_instance) |
{ | { |
|
AutoMutex lock(_userManagerMutex); |
|
if (!_instance) |
|
{ |
_instance = new UserManager(repository); | _instance = new UserManager(repository); |
} | } |
|
} |
| |
PEG_METHOD_EXIT(); | PEG_METHOD_EXIT(); |
| |
|
|
// | // |
// Add a user | // Add a user |
// | // |
void UserManager::addUser(const String& userName, const String& password) |
void UserManager::addUser( |
|
const String& userName, |
|
const String& password) |
{ | { |
PEG_METHOD_ENTER(TRC_USER_MANAGER, "UserManager::addUser"); | PEG_METHOD_ENTER(TRC_USER_MANAGER, "UserManager::addUser"); |
| |
|
|
// | // |
// Check if the user is a valid system user | // Check if the user is a valid system user |
// | // |
ArrayDestroyer<char> un(userName.allocateCString()); |
if (!System::isSystemUser(userName.getCString())) |
if ( !System::isSystemUser( un.getPointer() ) ) |
|
{ | { |
PEG_METHOD_EXIT(); | PEG_METHOD_EXIT(); |
throw InvalidSystemUser(userName); | throw InvalidSystemUser(userName); |
|
|
// | // |
// Add the user to the password file | // Add the user to the password file |
// | // |
try |
|
{ |
|
_userFileHandler->addUserEntry(userName,password); | _userFileHandler->addUserEntry(userName,password); |
} |
|
catch (Exception& e) |
|
{ |
|
PEG_METHOD_EXIT(); |
|
throw e; |
|
} |
|
#endif | #endif |
| |
PEG_METHOD_EXIT(); | PEG_METHOD_EXIT(); |
|
|
PEG_METHOD_ENTER(TRC_USER_MANAGER, "UserManager::modifyUser"); | PEG_METHOD_ENTER(TRC_USER_MANAGER, "UserManager::modifyUser"); |
| |
#ifndef PEGASUS_NO_PASSWORDFILE | #ifndef PEGASUS_NO_PASSWORDFILE |
try |
|
{ |
|
_userFileHandler->modifyUserEntry(userName, password, newPassword); | _userFileHandler->modifyUserEntry(userName, password, newPassword); |
} |
|
catch (Exception& e) |
|
{ |
|
PEG_METHOD_EXIT(); |
|
throw e; |
|
} |
|
#endif | #endif |
| |
PEG_METHOD_EXIT(); | PEG_METHOD_EXIT(); |
|
|
PEG_METHOD_ENTER(TRC_USER_MANAGER, "UserManager::removeUser"); | PEG_METHOD_ENTER(TRC_USER_MANAGER, "UserManager::removeUser"); |
| |
#ifndef PEGASUS_NO_PASSWORDFILE | #ifndef PEGASUS_NO_PASSWORDFILE |
try |
|
{ |
|
_userFileHandler->removeUserEntry(userName); | _userFileHandler->removeUserEntry(userName); |
} |
|
catch (Exception& e) |
|
{ |
|
PEG_METHOD_EXIT(); |
|
throw e; |
|
} |
|
#endif | #endif |
| |
PEG_METHOD_EXIT(); | PEG_METHOD_EXIT(); |
|
|
PEG_METHOD_ENTER(TRC_USER_MANAGER, "UserManager::getAllUserNames"); | PEG_METHOD_ENTER(TRC_USER_MANAGER, "UserManager::getAllUserNames"); |
| |
#ifndef PEGASUS_NO_PASSWORDFILE | #ifndef PEGASUS_NO_PASSWORDFILE |
try |
|
{ |
|
_userFileHandler->getAllUserNames( userNames ); | _userFileHandler->getAllUserNames( userNames ); |
PEG_METHOD_EXIT(); |
|
} |
|
catch (Exception& e) |
|
{ |
|
throw e; |
|
} |
|
#endif | #endif |
| |
PEG_METHOD_EXIT(); | PEG_METHOD_EXIT(); |
|
|
PEG_METHOD_ENTER(TRC_USER_MANAGER, "UserManager::verifyCIMUser"); | PEG_METHOD_ENTER(TRC_USER_MANAGER, "UserManager::verifyCIMUser"); |
| |
#ifndef PEGASUS_NO_PASSWORDFILE | #ifndef PEGASUS_NO_PASSWORDFILE |
try |
|
{ |
|
if ( _userFileHandler->verifyCIMUser( userName )) | if ( _userFileHandler->verifyCIMUser( userName )) |
{ | { |
PEG_METHOD_EXIT(); | PEG_METHOD_EXIT(); |
return true; | return true; |
} | } |
else |
#endif |
{ |
|
PEG_METHOD_EXIT(); |
|
return false; |
|
} |
|
} |
|
catch (InvalidUser& iu) |
|
{ |
|
PEG_METHOD_EXIT(); |
|
throw iu; |
|
} |
|
catch (Exception& e) |
|
{ |
|
PEG_METHOD_EXIT(); |
|
throw e; |
|
} |
|
#else |
|
PEG_METHOD_EXIT(); | PEG_METHOD_EXIT(); |
return false; | return false; |
#endif |
|
} | } |
| |
// | // |
|
|
PEG_METHOD_ENTER(TRC_USER_MANAGER, "UserManager::verifyCIMUserPassword"); | PEG_METHOD_ENTER(TRC_USER_MANAGER, "UserManager::verifyCIMUserPassword"); |
| |
#ifndef PEGASUS_NO_PASSWORDFILE | #ifndef PEGASUS_NO_PASSWORDFILE |
try |
|
{ |
|
if ( _userFileHandler->verifyCIMUserPassword( userName, password )) | if ( _userFileHandler->verifyCIMUserPassword( userName, password )) |
{ | { |
PEG_METHOD_EXIT(); | PEG_METHOD_EXIT(); |
return true; | return true; |
} | } |
else |
#endif |
{ |
|
PEG_METHOD_EXIT(); |
|
return false; |
|
} |
|
} |
|
catch (InvalidUser& iu) |
|
{ |
|
PEG_METHOD_EXIT(); |
|
throw iu; |
|
} |
|
catch (Exception& e) |
|
{ |
|
PEG_METHOD_EXIT(); |
|
throw e; |
|
} |
|
#else |
|
PEG_METHOD_EXIT(); | PEG_METHOD_EXIT(); |
return false; | return false; |
#endif |
|
} | } |
| |
// | // |
// Verify whether the specified namespace is valid | // Verify whether the specified namespace is valid |
// | // |
Boolean UserManager::verifyNamespace( const String& myNamespace ) |
Boolean UserManager::verifyNamespace(const CIMNamespaceName& myNamespace) |
{ | { |
PEG_METHOD_ENTER(TRC_AUTHORIZATION, "UserManager::verifyNamespace"); | PEG_METHOD_ENTER(TRC_AUTHORIZATION, "UserManager::verifyNamespace"); |
| |
try |
|
{ |
|
if ( _authHandler->verifyNamespace( myNamespace )) | if ( _authHandler->verifyNamespace( myNamespace )) |
{ | { |
PEG_METHOD_EXIT(); | PEG_METHOD_EXIT(); |
|
|
return false; | return false; |
} | } |
} | } |
catch (Exception& e) |
|
{ |
|
PEG_METHOD_EXIT(); |
|
throw e; |
|
} |
|
} |
|
| |
// | // |
// Verify whether the specified operation has authorization | // Verify whether the specified operation has authorization |
|
|
// | // |
Boolean UserManager::verifyAuthorization( | Boolean UserManager::verifyAuthorization( |
const String& userName, | const String& userName, |
const String& nameSpace, |
const CIMNamespaceName& nameSpace, |
const String& cimMethodName) |
const CIMName& cimMethodName) |
{ | { |
PEG_METHOD_ENTER(TRC_AUTHORIZATION, "UserManager::verifyAuthorization"); | PEG_METHOD_ENTER(TRC_AUTHORIZATION, "UserManager::verifyAuthorization"); |
| |
try |
|
{ |
|
if ( _authHandler->verifyAuthorization( | if ( _authHandler->verifyAuthorization( |
userName, nameSpace, cimMethodName ) ) | userName, nameSpace, cimMethodName ) ) |
{ | { |
|
|
return false; | return false; |
} | } |
} | } |
catch (Exception& e) |
|
{ |
|
PEG_METHOD_EXIT(); |
|
throw e; |
|
} |
|
} |
|
| |
// | // |
// Set the authorizations | // Set the authorizations |
// | // |
void UserManager::setAuthorization( | void UserManager::setAuthorization( |
const String& userName, | const String& userName, |
const String& myNamespace, |
const CIMNamespaceName& myNamespace, |
const String& auth) | const String& auth) |
{ | { |
PEG_METHOD_ENTER(TRC_AUTHORIZATION, "UserManager::setAuthorization"); | PEG_METHOD_ENTER(TRC_AUTHORIZATION, "UserManager::setAuthorization"); |
| |
try |
|
{ |
|
_authHandler->setAuthorization( userName, myNamespace, auth ); | _authHandler->setAuthorization( userName, myNamespace, auth ); |
} |
|
catch (Exception& e) |
|
{ |
|
PEG_METHOD_EXIT(); |
|
throw e; |
|
} |
|
| |
PEG_METHOD_EXIT(); | PEG_METHOD_EXIT(); |
} | } |
|
|
// | // |
void UserManager::removeAuthorization( | void UserManager::removeAuthorization( |
const String& userName, | const String& userName, |
const String& myNamespace) |
const CIMNamespaceName& myNamespace) |
{ | { |
PEG_METHOD_ENTER(TRC_AUTHORIZATION, "UserManager::removeAuthorization"); | PEG_METHOD_ENTER(TRC_AUTHORIZATION, "UserManager::removeAuthorization"); |
| |
try |
|
{ |
|
_authHandler->removeAuthorization( userName, myNamespace); | _authHandler->removeAuthorization( userName, myNamespace); |
} |
|
catch (Exception& e) |
|
{ |
|
PEG_METHOD_EXIT(); |
|
throw e; |
|
} |
|
| |
PEG_METHOD_EXIT(); | PEG_METHOD_EXIT(); |
} | } |
|
|
// | // |
String UserManager::getAuthorization( | String UserManager::getAuthorization( |
const String& userName, | const String& userName, |
const String& myNamespace) |
const CIMNamespaceName& myNamespace) |
{ | { |
PEG_METHOD_ENTER(TRC_AUTHORIZATION, "UserManager::getAuthorization"); | PEG_METHOD_ENTER(TRC_AUTHORIZATION, "UserManager::getAuthorization"); |
| |
String auth = String::EMPTY; |
String auth = _authHandler->getAuthorization(userName, myNamespace); |
|
|
try |
|
{ |
|
auth = _authHandler->getAuthorization( userName, myNamespace); |
|
} |
|
catch (Exception& e) |
|
{ |
|
PEG_METHOD_EXIT(); |
|
throw e; |
|
} |
|
| |
PEG_METHOD_EXIT(); | PEG_METHOD_EXIT(); |
| |
|
|
} | } |
| |
PEGASUS_NAMESPACE_END | PEGASUS_NAMESPACE_END |
|
|
|
|