diff options
author | Endi Sukma Dewata <edewata@redhat.com> | 2012-10-10 04:38:05 -0500 |
---|---|---|
committer | Endi Sukma Dewata <edewata@redhat.com> | 2012-11-08 11:20:05 -0500 |
commit | cb209df95c4dee11f2a912e20b417fa3bc41c88f (patch) | |
tree | b50824cdfd3bc4ec3db905b94ef7750d9ff74844 /base/common/src/com/netscape/certsrv/cert/CertResource.java | |
parent | 906acfd2c82d195a7c55a2af7c4d7abe8ed2655a (diff) | |
download | pki-cb209df95c4dee11f2a912e20b417fa3bc41c88f.tar.gz pki-cb209df95c4dee11f2a912e20b417fa3bc41c88f.tar.xz pki-cb209df95c4dee11f2a912e20b417fa3bc41c88f.zip |
Added ACLInterceptor.
Previously ACL checking was done in PKIRealm by matching the URL.
This code has been replaced by ACLInterceptor which will intercept
RESTEasy method invocations. This allows more precise mapping of
REST methods to ACL entries in acl.ldif.
Ticket #287
Diffstat (limited to 'base/common/src/com/netscape/certsrv/cert/CertResource.java')
-rw-r--r-- | base/common/src/com/netscape/certsrv/cert/CertResource.java | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/base/common/src/com/netscape/certsrv/cert/CertResource.java b/base/common/src/com/netscape/certsrv/cert/CertResource.java index 1d5958824..53e06ca6e 100644 --- a/base/common/src/com/netscape/certsrv/cert/CertResource.java +++ b/base/common/src/com/netscape/certsrv/cert/CertResource.java @@ -10,6 +10,7 @@ import javax.ws.rs.Produces; import javax.ws.rs.QueryParam; import javax.ws.rs.core.MediaType; +import com.netscape.certsrv.acls.ACLMapping; import com.netscape.certsrv.dbs.certdb.CertId; @Path("") @@ -44,17 +45,20 @@ public interface CertResource { @Path("agent/certs/{id}/revoke-ca") @Consumes({ MediaType.APPLICATION_XML, MediaType.APPLICATION_JSON }) @Produces({ MediaType.APPLICATION_XML, MediaType.APPLICATION_JSON }) + @ACLMapping("agent.certs") public CertRequestInfo revokeCACert(@PathParam("id") CertId id, CertRevokeRequest request); @POST @Path("agent/certs/{id}/revoke") @Consumes({ MediaType.APPLICATION_XML, MediaType.APPLICATION_JSON }) @Produces({ MediaType.APPLICATION_XML, MediaType.APPLICATION_JSON }) + @ACLMapping("agent.certs") public CertRequestInfo revokeCert(@PathParam("id") CertId id, CertRevokeRequest request); @POST @Path("agent/certs/{id}/unrevoke") @Consumes({ MediaType.APPLICATION_XML, MediaType.APPLICATION_JSON }) @Produces({ MediaType.APPLICATION_XML, MediaType.APPLICATION_JSON }) + @ACLMapping("agent.certs") public CertRequestInfo unrevokeCert(@PathParam("id") CertId id, CertUnrevokeRequest request); } |