mirror of https://github.com/OpenIdentityPlatform/OpenDJ.git

lutoff
12.18.2007 c1405673acad68e2233b152fec84409b0af36994
refs
author lutoff <lutoff@localhost>
Thursday, July 12, 2007 10:18 +0200
committer lutoff <lutoff@localhost>
Thursday, July 12, 2007 10:18 +0200
commitc1405673acad68e2233b152fec84409b0af36994
tree 3876c6d877403ce745cae465341012039a8f95c3 tree | zip | gz
parent bfea75144d5ab667e4d6a7a153909ae2efd23daf view | diff
fix for issue #1217
Privilege checks are done in the JmxClientConnection code. Due to
JMX design choice (See chapter 13.4.3,page 210 of the JMX Specification,
version 1.4 Final Release - http://jcp.org/en/jsr/detail?id=160)
JMX_NOTIFY privilege cannot be checked when a remote client adds a
Listener. For this reason, we have chosen to allow JMX
connection only if the user has the JMX_READ privilege (at least).
The JMX_READ privilege is now also check during connection establishment.

Some clean up is also added in PrivilegeTestCase.java
1 files added
6 files modified
2234 ■■■■■ changed files
opends/src/server/org/opends/server/messages/ProtocolMessages.java 69 ●●●●● diff | view | raw | blame | history
opends/src/server/org/opends/server/protocols/jmx/JmxClientConnection.java 228 ●●●●● diff | view | raw | blame | history
opends/src/server/org/opends/server/protocols/jmx/RmiAuthenticator.java 20 ●●●●● diff | view | raw | blame | history
opends/tests/unit-tests-testng/src/server/org/opends/server/protocols/jmx/JmxConnectTest.java 127 ●●●● diff | view | raw | blame | history
opends/tests/unit-tests-testng/src/server/org/opends/server/protocols/jmx/JmxPrivilegeTestCase.java 1692 ●●●●● diff | view | raw | blame | history
opends/tests/unit-tests-testng/src/server/org/opends/server/protocols/jmx/postConnectedDisconnectTest.java 66 ●●●●● diff | view | raw | blame | history
opends/tests/unit-tests-testng/src/server/org/opends/server/types/PrivilegeTestCase.java 32 ●●●●● diff | view | raw | blame | history