summaryrefslogtreecommitdiffstats
path: root/base/server/cms/src/org
diff options
context:
space:
mode:
authorEndi S. Dewata <edewata@redhat.com>2017-04-20 16:30:18 +0200
committerEndi S. Dewata <edewata@redhat.com>2017-04-24 20:41:10 +0200
commitfdcb514b0711f10eab47c81837138192207e44b4 (patch)
tree9eb5f899a595e7206c72dead83824f9692a2eaee /base/server/cms/src/org
parent0de8be3084c4ccf23c2850331f86fc067e7c8383 (diff)
downloadpki-fdcb514b0711f10eab47c81837138192207e44b4.tar.gz
pki-fdcb514b0711f10eab47c81837138192207e44b4.tar.xz
pki-fdcb514b0711f10eab47c81837138192207e44b4.zip
Added AuthzSuccessEvent.
A new AuthzSuccessEvent class of has been added to encapsulate the AUTHZ_SUCCESS events. https://pagure.io/dogtagpki/issue/2641 Change-Id: I2f45fb2c3ba8acdc82777644cf4ad0ec2eff35a5
Diffstat (limited to 'base/server/cms/src/org')
-rw-r--r--base/server/cms/src/org/dogtagpki/server/rest/ACLInterceptor.java27
1 files changed, 13 insertions, 14 deletions
diff --git a/base/server/cms/src/org/dogtagpki/server/rest/ACLInterceptor.java b/base/server/cms/src/org/dogtagpki/server/rest/ACLInterceptor.java
index 331bae160..490eaed7c 100644
--- a/base/server/cms/src/org/dogtagpki/server/rest/ACLInterceptor.java
+++ b/base/server/cms/src/org/dogtagpki/server/rest/ACLInterceptor.java
@@ -47,6 +47,7 @@ import com.netscape.certsrv.base.EBaseException;
import com.netscape.certsrv.base.ForbiddenException;
import com.netscape.certsrv.logging.AuditEvent;
import com.netscape.certsrv.logging.ILogger;
+import com.netscape.certsrv.logging.event.AuthzSuccessEvent;
import com.netscape.cms.realm.PKIPrincipal;
/**
@@ -189,15 +190,14 @@ public class ACLInterceptor implements ContainerRequestFilter {
// If still not available, it's unprotected, allow request.
if (!authzRequired) {
CMS.debug("ACLInterceptor: No ACL mapping; authz not required.");
- // store a message in the signed audit log file
- auditMessage = CMS.getLogMessage(
- AuditEvent.AUTHZ_SUCCESS_INFO,
+
+ audit(new AuthzSuccessEvent(
auditSubjectID,
ILogger.SUCCESS,
null, //resource
null, //operation
- LOGGING_MISSING_ACL_MAPPING + ":" + auditInfo); //info
- audit(auditMessage);
+ LOGGING_MISSING_ACL_MAPPING + ":" + auditInfo)); //info
+
return;
}
@@ -230,14 +230,14 @@ public class ACLInterceptor implements ContainerRequestFilter {
// If no property defined, allow request.
if (value == null) {
CMS.debug("ACLInterceptor: No ACL configuration.");
- // store a message in the signed audit log file
- auditMessage = CMS.getLogMessage(
- AuditEvent.AUTHZ_SUCCESS_INFO,
+
+ audit(new AuthzSuccessEvent(
auditSubjectID,
ILogger.SUCCESS,
null, //resource
null, //operation
- LOGGING_NO_ACL_ACCESS_ALLOWED + ":" + auditInfo);
+ LOGGING_NO_ACL_ACCESS_ALLOWED + ":" + auditInfo));
+
return;
}
@@ -317,15 +317,14 @@ public class ACLInterceptor implements ContainerRequestFilter {
}
// Allow request.
- // store a message in the signed audit log file
- auditMessage = CMS.getLogMessage(
- AuditEvent.AUTHZ_SUCCESS_INFO,
+
+ audit(new AuthzSuccessEvent(
auditSubjectID,
ILogger.SUCCESS,
values[0], // resource
values[1], // operation
- auditInfo);
- audit(auditMessage);
+ auditInfo));
+
return;
}