Revision: glite-voms-admin-server--release--1.0.5--patch-19
Archive: lorentey@elte.hu--2004
Creator: Karoly Lorentey <lorentey@elte.hu>
Date: Tue Apr 19 19:39:01 CEST 2005
Standard-date: 2005-04-19 17:39:01 GMT
Modified-files: src/org/glite/security/voms/service/Operation.java
    src/org/glite/security/voms/service/request/VOMSRequestSoapBindingImpl.java
New-patches: lorentey@elte.hu--2004/glite-voms-admin-server--release--1.0.5--patch-19
Summary: Add LIST_ANY_REQUEST and DELETE_ANY_REQUEST privileges; use them to lock down the Request interface.
Keywords: 

* src/org/glite/security/voms/service/Operation.java (LIST_ANY_REQUEST, DELETE_ANY_REQUEST):
  New operations.

* src/org/glite/security/voms/service/request/VOMSRequestSoapBindingImpl.java (deleteRequest):
  Also allow deletion if client has the delete-any-request privilege.
  (getRequestsInState, getIncompleteRequests, getPendingRequests, getAllRequests): 
  Deny access unless client has LIST_ANY_REQUEST privileges.
  (getRequest): Deny access unless client is the submitter or has LIST_ANY_REQUEST privilege.