org.nuxeo.runtime.api.login
Class SystemLoginRestrictionManager

java.lang.Object
  org.nuxeo.runtime.api.login.SystemLoginRestrictionManager

public class SystemLoginRestrictionManager
extends Object

Manage restrictions for usage of SystemLogin.

The main point is to prevent system login from untrusted remote nuxeo runtime instances.

Restrictions can be adjusted via system properties :

• org.nuxeo.systemlogin.restrict : true/false (default true) ; turns on/off restrictions
• org.nuxeo.systemlogin.trusted.instances : comma separated list of trusted off (default : empty)

Author:

Thierry Delprat

Field Summary

static String	REMOTE_SYSTEM_LOGIN_TRUSTED_INSTANCES_PROP
static String	RESTRICT_REMOTE_SYSTEM_LOGIN_PROP
static String	TRUSTED_INSTANCES_SEP

Constructor Summary

SystemLoginRestrictionManager()

Method Summary

List<String>	getAllowedInstanceForSystemLogin()
boolean	isRemoteSystemLoginRestricted()
boolean	isRemoveSystemLoginAllowedForInstance(String instanceId)

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

RESTRICT_REMOTE_SYSTEM_LOGIN_PROP

public static final String RESTRICT_REMOTE_SYSTEM_LOGIN_PROP

See Also:

Constant Field Values

REMOTE_SYSTEM_LOGIN_TRUSTED_INSTANCES_PROP

public static final String REMOTE_SYSTEM_LOGIN_TRUSTED_INSTANCES_PROP

See Also:

Constant Field Values

TRUSTED_INSTANCES_SEP

public static final String TRUSTED_INSTANCES_SEP

See Also:

Constant Field Values

Constructor Detail

SystemLoginRestrictionManager

public SystemLoginRestrictionManager()

Method Detail

isRemoteSystemLoginRestricted

public boolean isRemoteSystemLoginRestricted()

getAllowedInstanceForSystemLogin

public List<String> getAllowedInstanceForSystemLogin()

isRemoveSystemLoginAllowedForInstance

public boolean isRemoveSystemLoginAllowedForInstance(String instanceId)