CVS log for pegasus/src/Pegasus/Server/CIMOperationRequestAuthorizer.cpp
	Help

Request diff between arbitrary revisions

BUG#: 9676
TITLE: TASK-PEP317_pullop-branch.Mergeout from head of tree 10 March 2014

DESCRIPTION: This is mergout out to bring up to date this branch. From
previous mergeout

BUG#: 9219

TITLE:Infrastructure for a web based administration interface

DESCRIPTION:

PEP#: 317
TITLE: TASK-PEP317_pullop-branch Merge Out from head of tree effective 21 Nov 2013.

DESCRIPTION:

PEP#: 362
TITLE: Restful and CIM-RS webadmin,

DESCRIPTION:

PEP#: 362
TITLE: Webadmin and Restful Services

DESCRIPTION:

Syc with Head branch

PEP#: 362
TITLE: Webadmin and Restful Services

DESCRIPTION:

Syc with Head branch

BUG#: 9812
TITLE: Exclude UserAuthProvider and UserManager code for PAM builds

DESCRIPTION:

BUG#: 9999
TITLE: TASK_317-Pull Operations update.

DESCRIPTION: This update brings this branch back in line with the current
head of tree and cleans up a number of outstanding issues in the code.  Note
That there are still a lot of outstanding issues being worked on.

BUG#: 9628
TITLE: PEGASUS_ASSERT used in places where PEGASUS_UNREACHABLE should be used

DESCRIPTION:

BUG#: 8123
TITLE: Update copyright/license text

DESCRIPTION:

Fixing trailing spaces in copyright/license text

BUG#: 8123
TITLE: Update Coyright/License text

DESCRIPTION:

Adding the new copyright/license text to almost all files

BUG#: 7854
TITLE: PEP# 316 - Replace PEG_TRACE_STRING with PEG_TRACE

DESCRIPTION: Replace PEG_TRACE_STRING with PEG_TRACE

PEP#: 328
TITLE: Solaris Porting

DESCRIPTION: Ongoing Solaris Porting

BUG#:7721
TITLE: Trace Level checking - first block - Pegasus/Server

DESCRIPTION:

BUG#: 7238
TITLE: Move thread language logic from Message to CIMMessage
DESCRIPTION: Clean up the Message class, move language logic to CIMMessage, and clean up the Thread::setLanguage logic.

BUG#: 5625
TITLE: Error message for namespace authorization does not contain username
DESCRIPTION: Updated the namespace authorization message to include username

BUG#:5739
PEP#:284
TITLE: remove OS400 code

DESCRIPTION: Port Pegasus to i5/PASE platform: Step one, remove obsolete OS400 code

BUG#: 6306
TITLE: Initialization of String objects to String::EMPTY is unnecessary
DESCRIPTION: Remove redundant object initializations.

BUG#: 6297
TITLE: Some source files no longer meet chksrc requirements
DESCRIPTION: Format according to the coding conventions.

BUG#:6255
TITLE: CIMOperationRequestAuthorizer fails to build when PEGASUS_ENABLE_USERGROUP_AUTHORIZATION is enabled

DESCRIPTION:

BUG#:6207
TITLE: Performance - make OpenPegasus use its more efficent Trace macros

DESCRIPTION:

BUG#: 6056
TITLE: Authorization failure messages should include username

DESCRIPTION: Updated the related messages to include username. Updated the tests.

BUG#: 5850
TITLE: Source files do not meet chksrc requirements
DESCRIPTION: Remove tab characters and author names and shorten lines that are wider than 80 characters.

BUG#:5821
TITLE: Check enableRemotePrivilegedUserAccess before/at authentication

DESCRIPTION:

BUG#:5599
TITLE: Avoid double search through user database on each request

DESCRIPTION:

BUG#: 5351
TITLE: Inconsistent interpretation of boolean type configuration values
DESCRIPTION: Use a case-insensitive interpretation for all boolean configuration values.

BUG#:5278
TITLE: zOS - update security hooks in OpenPegasus code base

DESCRIPTION:

BUG#: 5163
TITLE: Promote authType and userName members in CIMMessage hierarchy
DESCRIPTION: Remove message-specific logic by consolidating the authType and userName members in superclasses.

PEP#: 233
TITLE: Updated Embedded Instance Support branch

DESCRIPTION:

- Merged with latest code from 2.5.1

- Modified ObjectNormalizer to use a CIMOMHandle instead of the repository and to normalize the instances in an embedded instance property.

BUG#: 4691
TITLE: Update Licenses to 2006

DESCRIPTION: Updates most of the licenses to 2006. The slp_client directories are excluded for the moment pending discussion. This change has passed unit and system tests.  Note that this changes just about EVERY file in Pegasus.

PEP#: 244
TITLE: Pegasus Server Profile support

DESCRIPTION:

- Merge branch with latest changes from trunk
- Cache repository info in Interop provider for much faster response times during ElementConformsToProfile operations

BUG#: 4644
TITLE: ContentLanguages and AcceptLanguages classes should be named ContentLanguageList and AcceptLanguageList
DESCRIPTION: Rename the ContentLanguages and AcceptLanguages classes to ContentLanguageList and AcceptLanguageList to indicate that they are not specific to the HTTP protocol.

BUG#: 4307
TITLE: Buffer class optimization

DESCRIPTION: New Buffer class and usage.

BUG#: 4200
TITLE: Performance Optimizations

DESCRIPTION: Replaced internal uses of Array<char> with Buffer.

BUG#: 2656
TITLE: License statement update to 2005

DESCRIPTION: All .h, .cpp and the wql, cql, compile *.l and *.y files along
with the .java files in providermanager2/jmpi updated to use the license
statement in doc/license.txt
Tested on windows and visual test of all diffs.

BUG#: 2297
TITLE: 'Types' changes

DESCRIPTION: Changes for typedef'ing Sint8 to be a 'signed char'.

BUG#: 2211
TITLE: Memory leak in CIMOperationRequestDecoder in error cases

DESCRIPTION: CIMOperationRequestDecoder, CIMExportRequestDecoder and CIMOperationRequestAuthorizer modules were leaking the request pointer whenever an error response was being sent. Changed the request pointer to be an AutoPtr in these modules to fix this.

BUG#: 2196
TITLE: Copyright update

DESCRIPTION: Update all .cpp and .h files for new license and
update the doc/license.txt file.  Note that there were also
a couple of files that had to be fixed because they had violated
the comments rules (ex. blank line at head of file or in the case of
xmlwriter.cpp a comment line //=========  which drove the strip
function nuts.  These were fixed.  This has been compiled and tested
on windows.

BUG#: 2183
TITLE: Multiple responses returned in some error cases

DESCRIPTION: The CIMOperationRequestAuthorizer was missing return statements after an error response is sent, causing the code to flow through to a point where another response was being sent. The missing return statements have been added.

PEP#: 135
TITLE: OperationContext Enhancements

DESCRIPTION:
Made changes to obtain "username" and "acceptLanguages" from the
operationContext.

PEP#:101
TITLE: AutoPtr enhancements
DESCRIPTION: Plz refer PEP101 for details.

PEP#: 142
TITLE: HP[Nag] User Groups based authorization

DESCRIPTION: Added user groups based authorization support to Pegasus. This is an additional authorization mechanism that gives an administrator a simple, overriding control over which users may perform CIM operations. To enable this feature, define the compile time flag PEGASUS_ENABLE_USERGROUP_AUTHORIZATION and set the config property authorizedUserGroups to one or more valid user groups on the system. (This feature is not fully implemented on Windows, just a skeleton is defined for isGroupMember() function in systemWindows.cpp file.)

Bug 1145: OS/400 Specific Changes

PEP 55 Update license on source files to current license text and date

Bug 745: OS/400 Authentication Changes

IBM-CC, PEP58, R2.3: Reduce object creation for globalization

merge with 2.3 localized code

IBM:HR,PEP58,R2.3:Globalization Changes

g10n changes merged

IBM-CC, PEP58, R2.3 - Globalization changes

HP-RK Bugzilla 309 (Authentication Failure return wrong error message).

HP-RK Bugzilla 244 (Incorrect coupling of remote privileged access and namespace authorization).

IBM-CC: Bug 173, OS/400 porting changes

YZ-HP:fixed defect--cimprovider returns incorrect error.

HP-[CAKG] respond correctly to POST requests

HP-[CAKG] API Review: CIMName modifications

HP-RK Update license header.

*** empty log message ***

converted some classes back to MessageQueue from MessageQueueService in order to reduce idle threads.

HP-RK Added PGErrorDetail messages to HTTP error responses.

HP-RK Changed the MessageQueue::getQueueName() method from virtual to non-virtual, and removed that method definition from all the subclasses.  To make sure that the MessageQueue class gets the queue name value, the default value for the queue name parameter to the MessageQueue constructor was removed.  Constants were defined in Constants.h for all the queue names currently used in Pegasus.  The places where those queue names were being used for lookup were also changed to use the constants.

HP-RK Modified the CIMOperationResponseMessage class and its subclasses to contain a CIMException instead of a CIMStatusCode and String description.  This allows extra information in a CIMException, such as file name and line number, to be carried internally throughout the system.

HP-RK Add some support for ExecQuery in the server.

HP-RK Add some support for ExecQuery in the server.  Clean up the client response that indicates the operation is unsupported.

HP-RK Define a common location (Common/Constants.h) for Pegasus server constants.  Define an initial set of these constants.

HP-RK Consolidate formatting of error responses in XmlWriter.

HP-RK Massive changes in XmlWriter to eliminate redundant memory copies.  Also lots of cleanup.

fixes and hacks in usage of asynchronous queues within cimoprequestdispatcher

 lots of changes to support mixing of legacy and async messages in queues

SF-HP NB-HP Changed the authorizer to include checks for privileged user access.

MessageQueueService integration

added #include <Pegasus/Common/Config.h> to fix Linux build

HP-Nag: Created CIMOperationRequestAuthorizer queue and moved Authorization verification code from CIMOperationRequestDecoder queue to this new queue. Modified CIMServer.cpp to create CIMOperationRequestAuthorizer queue only when authorization is enabled. Also modified CIMRequestMessagesin CIMMessage.h to include userName to make it available to the CIMOperationRequestDispatcher.