diff options
| author | Ade Lee <alee@redhat.com> | 2014-06-11 23:50:00 +0800 |
|---|---|---|
| committer | Ade Lee <alee@redhat.com> | 2014-06-13 03:04:06 +0800 |
| commit | e399ad4a78a8a9b931c643f94190e441e767f22b (patch) | |
| tree | d69d8519067b0c8f119cbad04d93869423644db4 /base/common/src/com/netscape/certsrv/request | |
| parent | 68f401a044c4d1065681a5c988513ef8f590feb8 (diff) | |
| download | pki-e399ad4a78a8a9b931c643f94190e441e767f22b.tar.gz pki-e399ad4a78a8a9b931c643f94190e441e767f22b.tar.xz pki-e399ad4a78a8a9b931c643f94190e441e767f22b.zip | |
Fix identities for security data storage, retrieval and generation
For the new security data storage and retrieval, and for symmetric
key generation, we need to store the identity of the agent that is
requesting and approving each operation, both in the ldap record
and in the audit logs. (Tickets 806 and 807)
This patch also adds required logic to check that the owner of the
recovery request is the same agent that retrieves the key. It also
adds missing audit log constants for symmmetric key generation so that
they will show up in the audit log.
Diffstat (limited to 'base/common/src/com/netscape/certsrv/request')
| -rw-r--r-- | base/common/src/com/netscape/certsrv/request/IRequest.java | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/base/common/src/com/netscape/certsrv/request/IRequest.java b/base/common/src/com/netscape/certsrv/request/IRequest.java index f9c442754..885cb72a6 100644 --- a/base/common/src/com/netscape/certsrv/request/IRequest.java +++ b/base/common/src/com/netscape/certsrv/request/IRequest.java @@ -293,6 +293,9 @@ public interface IRequest extends Serializable { public final static String ATTR_SOURCE_ID = "requestSourceId"; public final static String ATTR_REQUEST_TYPE = "requestType"; + /* for async recovery */ + public final static String ATTR_APPROVE_AGENTS = "approvingAgents"; + /* * Other attributes stored in the attribute set */ |