org.nuxeo.runtime.api.login
Class SystemLoginRestrictionManager

java.lang.Object
  org.nuxeo.runtime.api.login.SystemLoginRestrictionManager

public class SystemLoginRestrictionManager
extends java.lang.Object

Manage restrictions for usage of SystemLogin.

The main point is to prevent system login from untrusted remote nuxeo runtime instances.

Restrictions can be adjusted via system properties :

• org.nuxeo.systemlogin.restrict : true/false (default true) ; turns on/off restrictions
• org.nuxeo.systemlogin.trusted.instances : comma separated list of trusted off (default : empty)

Author:

Thierry Delprat

Field Summary

static java.lang.String	REMOTE_SYSTEM_LOGIN_TRUSTED_INSTANCES_PROP
static java.lang.String	RESTRICT_REMOTE_SYSTEM_LOGIN_PROP
static java.lang.String	TRUSTED_INSTANCES_SEP

Constructor Summary

SystemLoginRestrictionManager()

Method Summary

java.util.List<java.lang.String>	getAllowedInstanceForSystemLogin()
boolean	isRemoteSystemLoginRestricted()
boolean	isRemoveSystemLoginAllowedForInstance(java.lang.String instanceId)

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

RESTRICT_REMOTE_SYSTEM_LOGIN_PROP

public static final java.lang.String RESTRICT_REMOTE_SYSTEM_LOGIN_PROP

See Also:

Constant Field Values

REMOTE_SYSTEM_LOGIN_TRUSTED_INSTANCES_PROP

public static final java.lang.String REMOTE_SYSTEM_LOGIN_TRUSTED_INSTANCES_PROP

See Also:

Constant Field Values

TRUSTED_INSTANCES_SEP

public static final java.lang.String TRUSTED_INSTANCES_SEP

See Also:

Constant Field Values

Constructor Detail

SystemLoginRestrictionManager

public SystemLoginRestrictionManager()

Method Detail

isRemoteSystemLoginRestricted

public boolean isRemoteSystemLoginRestricted()

getAllowedInstanceForSystemLogin

public java.util.List<java.lang.String> getAllowedInstanceForSystemLogin()

isRemoveSystemLoginAllowedForInstance

public boolean isRemoveSystemLoginAllowedForInstance(java.lang.String instanceId)