Projektstudien

TraceLogger

Basics of Cryptography

Custom JBossAS Login

SOAP Webservice

Role Based Access Control

Introduction

Technologies

Project Structure

Recovery Points

A Walk through the App (I)

A Walk through the App (II)

Installation and Test

Download

A Walk through the App (II)

We are proceeding with the walk through the application, see A Walk through the App (I) for the previous screenshots.

Next we create another snapshot:

Before moving on to the roles tab we review the current state of the useradmin view:

mysql> SELECT snapshot, creationtime, userid, `user`, password, failures, roleid, groupname, description
    -> FROM useradmin 
    -> ORDER BY snapshot, userid, roleid;
+----------+---------------------+--------+-------------+----------------------------------------------+----------+--------+-----------+---------------------------------------------------------------+
| snapshot | creationtime        | userid | user        | password                                     | failures | roleid | groupname | description                                                   |
+----------+---------------------+--------+-------------+----------------------------------------------+----------+--------+-----------+---------------------------------------------------------------+
|        1 | 2015-03-01 00:00:00 |      1 | supertester | iSX8nhg/eOHGBaF5SDl53cBvOTfYXf37Kktiwt4DMQo= |        0 |      1 | appadmin  | Grants administration access to the web application.          |
|        1 | 2015-03-01 00:00:00 |      1 | supertester | iSX8nhg/eOHGBaF5SDl53cBvOTfYXf37Kktiwt4DMQo= |        0 |      2 | appuser   | Indicates a normal webapp user with no administration access. |
|        1 | 2015-03-01 00:00:00 |      2 | tester      | 8PlYV724EZJwTdJ4ViBrkMq7gxyxJAWTKqy93/AQ/8Y= |        0 |      2 | appuser   | Indicates a normal webapp user with no administration access. |
|        2 | 2015-04-08 00:00:00 |      3 | supertester | jXrCjUkOWYeL9xucvmWqfvU4urk5uKT78KsNtioLtIY= |        0 |      1 | appadmin  | Grants administration access to the web application.          |
|        2 | 2015-04-08 00:00:00 |      3 | supertester | jXrCjUkOWYeL9xucvmWqfvU4urk5uKT78KsNtioLtIY= |        0 |      2 | appuser   | Indicates a normal webapp user with no administration access. |
|        2 | 2015-04-08 00:00:00 |     10 | tester      | 8PlYV724EZJwTdJ4ViBrkMq7gxyxJAWTKqy93/AQ/8Y= |        0 |      3 | apptest   | This is a test.                                               |
|       10 | 2015-04-14 17:13:42 |      3 | supertester | jXrCjUkOWYeL9xucvmWqfvU4urk5uKT78KsNtioLtIY= |        0 |      1 | appadmin  | Grants administration access to the web application.          |
|       10 | 2015-04-14 17:13:42 |      3 | supertester | jXrCjUkOWYeL9xucvmWqfvU4urk5uKT78KsNtioLtIY= |        0 |      2 | appuser   | Indicates a normal webapp user with no administration access. |
|       10 | 2015-04-14 17:13:42 |     10 | tester      | 8PlYV724EZJwTdJ4ViBrkMq7gxyxJAWTKqy93/AQ/8Y= |        0 |      3 | apptest   | This is a test.                                               |
|       10 | 2015-04-14 17:13:42 |     11 | New user    | zKBbmav11FXONKrykTj7j1zSmgKo/X/YOXTcBLt7mK4= |        0 |      2 | appuser   | Indicates a normal webapp user with no administration access. |
|       11 | 2015-04-14 17:26:08 |      3 | supertester | jXrCjUkOWYeL9xucvmWqfvU4urk5uKT78KsNtioLtIY= |        0 |      1 | appadmin  | Grants administration access to the web application.          |
|       11 | 2015-04-14 17:26:08 |      3 | supertester | jXrCjUkOWYeL9xucvmWqfvU4urk5uKT78KsNtioLtIY= |        0 |      2 | appuser   | Indicates a normal webapp user with no administration access. |
|       11 | 2015-04-14 17:26:08 |     10 | tester      | 8PlYV724EZJwTdJ4ViBrkMq7gxyxJAWTKqy93/AQ/8Y= |        0 |      3 | apptest   | This is a test.                                               |
|       11 | 2015-04-14 17:26:08 |     11 | New user    | zKBbmav11FXONKrykTj7j1zSmgKo/X/YOXTcBLt7mK4= |        0 |      2 | appuser   | Indicates a normal webapp user with no administration access. |
+----------+---------------------+--------+-------------+----------------------------------------------+----------+--------+-----------+---------------------------------------------------------------+

We have selected the Roles tab:

We would like to change the description of the 'appuser' role:

Again this brings up a modal dialog:

A new incarnation of the 'appuser' role has emerged:

This has caused a copy-on-write for the affected users as well:

mysql> SELECT snapshot, creationtime, userid, `user`, password, failures, roleid, groupname, description
    -> FROM useradmin 
    -> ORDER BY snapshot, userid, roleid;
+----------+---------------------+--------+-------------+----------------------------------------------+----------+--------+-----------+---------------------------------------------------------------+
| snapshot | creationtime        | userid | user        | password                                     | failures | roleid | groupname | description                                                   |
+----------+---------------------+--------+-------------+----------------------------------------------+----------+--------+-----------+---------------------------------------------------------------+
|        1 | 2015-03-01 00:00:00 |      1 | supertester | iSX8nhg/eOHGBaF5SDl53cBvOTfYXf37Kktiwt4DMQo= |        0 |      1 | appadmin  | Grants administration access to the web application.          |
|        1 | 2015-03-01 00:00:00 |      1 | supertester | iSX8nhg/eOHGBaF5SDl53cBvOTfYXf37Kktiwt4DMQo= |        0 |      2 | appuser   | Indicates a normal webapp user with no administration access. |
|        1 | 2015-03-01 00:00:00 |      2 | tester      | 8PlYV724EZJwTdJ4ViBrkMq7gxyxJAWTKqy93/AQ/8Y= |        0 |      2 | appuser   | Indicates a normal webapp user with no administration access. |
|        2 | 2015-04-08 00:00:00 |      3 | supertester | jXrCjUkOWYeL9xucvmWqfvU4urk5uKT78KsNtioLtIY= |        0 |      1 | appadmin  | Grants administration access to the web application.          |
|        2 | 2015-04-08 00:00:00 |      3 | supertester | jXrCjUkOWYeL9xucvmWqfvU4urk5uKT78KsNtioLtIY= |        0 |      2 | appuser   | Indicates a normal webapp user with no administration access. |
|        2 | 2015-04-08 00:00:00 |     10 | tester      | 8PlYV724EZJwTdJ4ViBrkMq7gxyxJAWTKqy93/AQ/8Y= |        0 |      3 | apptest   | This is a test.                                               |
|       10 | 2015-04-14 17:13:42 |      3 | supertester | jXrCjUkOWYeL9xucvmWqfvU4urk5uKT78KsNtioLtIY= |        0 |      1 | appadmin  | Grants administration access to the web application.          |
|       10 | 2015-04-14 17:13:42 |      3 | supertester | jXrCjUkOWYeL9xucvmWqfvU4urk5uKT78KsNtioLtIY= |        0 |      2 | appuser   | Indicates a normal webapp user with no administration access. |
|       10 | 2015-04-14 17:13:42 |     10 | tester      | 8PlYV724EZJwTdJ4ViBrkMq7gxyxJAWTKqy93/AQ/8Y= |        0 |      3 | apptest   | This is a test.                                               |
|       10 | 2015-04-14 17:13:42 |     11 | New user    | zKBbmav11FXONKrykTj7j1zSmgKo/X/YOXTcBLt7mK4= |        0 |      2 | appuser   | Indicates a normal webapp user with no administration access. |
|       11 | 2015-04-14 17:26:08 |     10 | tester      | 8PlYV724EZJwTdJ4ViBrkMq7gxyxJAWTKqy93/AQ/8Y= |        0 |      3 | apptest   | This is a test.                                               |
|       11 | 2015-04-14 17:26:08 |     12 | supertester | jXrCjUkOWYeL9xucvmWqfvU4urk5uKT78KsNtioLtIY= |        0 |      1 | appadmin  | Grants administration access to the web application.          |
|       11 | 2015-04-14 17:26:08 |     12 | supertester | jXrCjUkOWYeL9xucvmWqfvU4urk5uKT78KsNtioLtIY= |        0 |     10 | appuser   | This is the changed appuser role                              |
|       11 | 2015-04-14 17:26:08 |     13 | New user    | zKBbmav11FXONKrykTj7j1zSmgKo/X/YOXTcBLt7mK4= |        0 |     10 | appuser   | This is the changed appuser role                              |
+----------+---------------------+--------+-------------+----------------------------------------------+----------+--------+-----------+---------------------------------------------------------------+

There is much more to show but I would like to conclude the presentation by referring to the section Installation and Test.