Changeset 976 for trunk/grails-app/conf

Timestamp:

Oct 21, 2010, 5:28:04 PM (10 years ago)

Author:

robert@…

Message:

Authentication and authorization for studies is added, according to ticket 118

Location:

trunk/grails-app/conf

Files:

• BaseFilters.groovy (modified) (1 diff)
• BootStrap.groovy (modified) (3 diffs)
• BootStrapStudies.groovy (modified) (3 diffs)
• Config.groovy (modified) (2 diffs)

trunk/grails-app/conf/BaseFilters.groovy

@@ -29 +29 @@
                         }
                 }
+
         }
 }

trunk/grails-app/conf/BootStrap.groovy

@@ -6 +6 @@
 import org.codehaus.groovy.grails.commons.GrailsApplication
 import grails.util.GrailsUtil
-import org.nmcdsp.plugins.aaaa.SecUser
+import dbnp.authentication.*
 
 
@@ -26 +26 @@
                 System.setProperty('user.timezone', 'CET')
 
-                def user = SecUser.findByUsername('user') ?: new SecUser(
+                def adminRole = SecRole.findByAuthority( 'ROLE_ADMIN' ) ?: new SecRole( authority: 'ROLE_ADMIN' ).save()
+
+                def user = SecUser.findByUsername('user') ?: new SecUser(
                            username: 'user',
-                           password: springSecurityService.encodePassword('useR123!'),
-                           enabled: true).save(failOnError: true)
+                           password: springSecurityService.encodePassword( 'useR123!', 'user' ),
+                           email: 'user@dbnp.org',
+                           userConfirmed: true, adminConfirmed: true).save(failOnError: true)
 
                 def userAdmin = SecUser.findByUsername('admin') ?: new SecUser(
                                 username: 'admin',
-                                password: springSecurityService.encodePassword('admiN123!'),
-                                enabled: true).save(failOnError: true)
+                                password: springSecurityService.encodePassword( 'admiN123!', 'admin' ),
+                                email: 'admin@dbnp.org',
+                                userConfirmed: true, adminConfirmed: true).save(failOnError: true)
+
+                // Make the admin user an administrator
+                SecUserSecRole.create userAdmin, adminRole, true
 
                 def userTest = SecUser.findByUsername('test') ?: new SecUser(
                                 username: 'test',
-                                password: springSecurityService.encodePassword('testT123!'),
-                                enabled: true).save(failOnError: true)
-                
-                println "Done with SpringSecurity bootstrap, created [user, admin, test]."
+                                password: springSecurityService.encodePassword( 'useR123!', 'test' ),
+                                email: 'test@dbnp.org',
+                            userConfirmed: true, adminConfirmed: true).save(failOnError: true)
+
+                println "Done with SpringSecurity bootstrap, created [user, admin, test]."
 
                 // If there are no templates yet in the database
@@ -81 +89 @@
                                 } else {
                                         // general study boostrapping
-                                        BootStrapStudies.addExampleStudies(user)
+                                        BootStrapStudies.addExampleStudies(user, userAdmin)
                                 }
                         }

trunk/grails-app/conf/BootStrapStudies.groovy

@@ -21 +21 @@
          */
 
-        public static void addExampleStudies(org.nmcdsp.plugins.aaaa.SecUser owner) {
+        public static void addExampleStudies(dbnp.authentication.SecUser owner, dbnp.authentication.SecUser otherUser ) {
 
                 // Look up the used ontologies which should be in the database by now
@@ -171 +171 @@
                         ecCode:"2007117.c",
                         startDate: Date.parse('yyyy-MM-dd','2008-01-02'),
-                        owner: owner
+                        owner: owner,
+                        readers: [otherUser]
                 ).with { if (!validate()) { errors.each { println it} } else save()}
 
@@ -378 +379 @@
                         ecCode:"unknown",
                         startDate: Date.parse('yyyy-MM-dd','2008-01-14'),
-                        owner: owner
+                        owner: owner,
+                        writers: [otherUser]
                 )
                 .setFieldValue( 'Description', "Human study performed at RRI; centres involved: RRI, IFR, TUM, Maastricht U." )

trunk/grails-app/conf/Config.groovy

@@ -157 +157 @@
 
 // Needed for the Spring Security Core plugin:
-grails.plugins.springsecurity.userLookup.userDomainClassName = 'org.nmcdsp.plugins.aaaa.SecUser'
-grails.plugins.springsecurity.userLookup.authorityJoinClassName = 'org.nmcdsp.plugins.aaaa.SecUserSecRole'
-grails.plugins.springsecurity.authority.className = 'org.nmcdsp.plugins.aaaa.SecRole'
+grails.plugins.springsecurity.userLookup.userDomainClassName = 'dbnp.authentication.SecUser'
+grails.plugins.springsecurity.userLookup.authorityJoinClassName = 'dbnp.authentication.SecUserSecRole'
+grails.plugins.springsecurity.authority.className = 'dbnp.authentication.SecRole'
+grails.plugins.springsecurity.password.algorithm = 'SHA-256'
+grails.plugins.springsecurity.password.encodeHashAsBase64 = true
+grails.plugins.springsecurity.dao.reflectionSaltSourceProperty = 'username' // Use the persons username as salt for encryption
+grails.plugins.springsecurity.securityConfigType = grails.plugins.springsecurity.SecurityConfigType.Annotation
+
+// Make sure the different controllers provided by springsecurity.ui are only accessible by administrators
+// NB: the RegisterController is used for forgotten passwords. It should be accessible by anyone
+grails.plugins.springsecurity.controllerAnnotations.staticRules = [
+    '/user/**': ['ROLE_ADMIN'],
+    '/role/**': ['ROLE_ADMIN'],
+    '/aclclass/**': ['ROLE_ADMIN'],
+    '/aclentry/**': ['ROLE_ADMIN'],
+    '/aclobjectidentity/**': ['ROLE_ADMIN'],
+    '/aclsid/**': ['ROLE_ADMIN'],
+    '/persistentlogin/**': ['ROLE_ADMIN'],
+    '/registrationcode/**': ['ROLE_ADMIN'],
+    '/requestmap/**': ['ROLE_ADMIN'],
+    '/securityinfo/**': ['ROLE_ADMIN']
+]
+
+
+// Needed for sending emails
+grails {
+    mail {
+        host = "smtp.gmail.com"
+        port = 465
+        username = "gscfproject@gmail.com"
+        password = "gscf2010"
+        props = [
+            "mail.smtp.auth":"true",
+            "mail.smtp.socketFactory.port": '465',
+            "mail.smtp.socketFactory.class": "javax.net.ssl.SSLSocketFactory",
+            "mail.smtp.socketFactory.fallback": "false"
+        ]
+    }
+}
 
 // The OAuth consumer key and secret variables are currently replaced by Jeroen's Continuous Integration script.
@@ -173 +209 @@
         }
 }
+