org.nuxeo.runtime.api.login

Class SystemLoginRestrictionManager

java.lang.Object

org.nuxeo.runtime.api.login.SystemLoginRestrictionManager

public class SystemLoginRestrictionManager
extends Object

Manage restrictions for usage of SystemLogin.

The main point is to prevent system login from untrusted remote nuxeo runtime instances.

Restrictions can be adjusted via system properties :

• org.nuxeo.systemlogin.restrict : true/false (default true) ; turns on/off restrictions
• org.nuxeo.systemlogin.trusted.instances : comma separated list of trusted off (default : empty)

Author:

Thierry Delprat

Field Summary

Fields

Modifier and Type	Field and Description
protected List<String>	allowedInstancesForSystemLogin
protected static org.apache.commons.logging.Log	log
static String	REMOTE_SYSTEM_LOGIN_TRUSTED_INSTANCES_PROP
static String	RESTRICT_REMOTE_SYSTEM_LOGIN_PROP
protected Boolean	restrictRemoteSystemLogin
static String	TRUSTED_INSTANCES_SEP

Constructor Summary

Constructors

Constructor and Description
SystemLoginRestrictionManager()

Method Summary

Modifier and Type	Method and Description
List<String>	getAllowedInstanceForSystemLogin()
boolean	isRemoteSystemLoginRestricted()
boolean	isRemoveSystemLoginAllowedForInstance(String instanceId)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

RESTRICT_REMOTE_SYSTEM_LOGIN_PROP

public static final String RESTRICT_REMOTE_SYSTEM_LOGIN_PROP

See Also:

Constant Field Values

REMOTE_SYSTEM_LOGIN_TRUSTED_INSTANCES_PROP

public static final String REMOTE_SYSTEM_LOGIN_TRUSTED_INSTANCES_PROP

See Also:

Constant Field Values

TRUSTED_INSTANCES_SEP

public static final String TRUSTED_INSTANCES_SEP

See Also:

Constant Field Values

log

protected static final org.apache.commons.logging.Log log

restrictRemoteSystemLogin

protected Boolean restrictRemoteSystemLogin

allowedInstancesForSystemLogin

protected List<String> allowedInstancesForSystemLogin

Constructor Detail

SystemLoginRestrictionManager

public SystemLoginRestrictionManager()

Method Detail

isRemoteSystemLoginRestricted

public boolean isRemoteSystemLoginRestricted()

getAllowedInstanceForSystemLogin

public List<String> getAllowedInstanceForSystemLogin()

isRemoveSystemLoginAllowedForInstance

public boolean isRemoveSystemLoginAllowedForInstance(String instanceId)