From e0f2c64ad6360e2ecec983cb5e0a60f812672106 Mon Sep 17 00:00:00 2001
From: wbauer <wbauer@8a26b1a7-26f0-462f-b9ef-d0e30c41f5a4>
Date: Thu, 4 Sep 2008 14:56:54 +0000
Subject: finished access controller, accessed it from command invoker and
 configured everything within onlinebku

git-svn-id: https://joinup.ec.europa.eu/svn/mocca/trunk@14 8a26b1a7-26f0-462f-b9ef-d0e30c41f5a4
---
 .../egiz/bku/online/conf/accessControlConfig.xml   | 98 ++++++++++++++++++++++
 1 file changed, 98 insertions(+)
 create mode 100644 BKUOnline/src/main/resources/at/gv/egiz/bku/online/conf/accessControlConfig.xml

(limited to 'BKUOnline/src/main/resources/at/gv/egiz/bku/online/conf/accessControlConfig.xml')

diff --git a/BKUOnline/src/main/resources/at/gv/egiz/bku/online/conf/accessControlConfig.xml b/BKUOnline/src/main/resources/at/gv/egiz/bku/online/conf/accessControlConfig.xml
new file mode 100644
index 00000000..15d62155
--- /dev/null
+++ b/BKUOnline/src/main/resources/at/gv/egiz/bku/online/conf/accessControlConfig.xml
@@ -0,0 +1,98 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<AccessControl>
+	<Chains>
+		<Chain Id="InputChain">
+			<Rules>
+				<Rule Id="rule-1">
+					<AuthClass>certifiedGovAgency</AuthClass>
+					<AnyPeer />
+					<Action>
+						<RuleAction>allow</RuleAction>
+					</Action>
+					<UserInteraction>confirm</UserInteraction>
+				</Rule>
+				<Rule Id="rule-2">
+					<AuthClass>pseudoanonymous</AuthClass>
+					<AnyPeer />
+					<Action>
+						<ChainRef>Command</ChainRef>
+					</Action>
+					<UserInteraction>none</UserInteraction>
+				</Rule>
+				<Rule Id="rule-3">
+					<AuthClass>anonymous</AuthClass>
+					<IPv4Address>127.0.0.1</IPv4Address>
+					<Action>
+						<ChainRef>Command</ChainRef>
+					</Action>
+					<UserInteraction>none</UserInteraction>
+				</Rule>
+				<Rule Id="rule-4">
+					<AuthClass>anonymous</AuthClass>
+					<DomainName>$.gv.at</DomainName>
+					<Action>
+						<RuleAction>allow</RuleAction>
+					</Action>
+					<UserInteraction>confirm</UserInteraction>
+				</Rule>
+			</Rules>
+		</Chain>
+		<Chain Id="Command">
+			<Rules>
+				<Rule Id="cmd-rule-1">
+					<AuthClass>certified</AuthClass>
+					<AnyPeer />
+					<Command Name="Infobox*">
+						<Param Name="InfoboxIdentifier">IdentityLink</Param>
+						<Param Name="PersonIdentifier">.*</Param>
+					</Command>
+					<Action>
+						<RuleAction>allow</RuleAction>
+					</Action>
+					<UserInteraction>confirm</UserInteraction>
+				</Rule>
+				<Rule Id="cmd-rule-2">
+					<AuthClass>certified</AuthClass>
+					<URL>https://finanzonline.bmf.gv.at/*
+					</URL>
+					<Command Name="InfoboxReadRequest">
+						<Param Name="InfoboxIdentifier">Mandates</Param>
+						<Param Name="PersonIdentifier">.*</Param>
+					</Command>
+					<Action>
+						<RuleAction>allow</RuleAction>
+					</Action>
+					<UserInteraction>info</UserInteraction>
+				</Rule>
+				<Rule Id="cmd-rule-3">
+					<AuthClass>certified</AuthClass>
+					<AnyPeer />
+					<Command Name="InfoboxReadRequest" />
+					<Action>
+						<RuleAction>allow</RuleAction>
+					</Action>
+					<UserInteraction>none</UserInteraction>
+				</Rule>
+				<Rule Id="cmd-rule-4">
+					<AuthClass>anonymous</AuthClass>
+					<AnyPeer />
+					<Command Name="InfoboxReadRequest" />
+					<IPv4Address>127.0.0.1</IPv4Address>
+					<Action>
+						<RuleAction>allow</RuleAction>
+					</Action>
+					<UserInteraction>none</UserInteraction>
+				</Rule>
+			</Rules>
+		</Chain>
+		<Chain Id="OutputChain">
+			<Rules>
+				<Rule Id="out-1">
+					<Action>
+						<RuleAction>allow</RuleAction>
+					</Action>
+				</Rule>
+			</Rules>
+		</Chain>
+	</Chains>
+</AccessControl>
-- 
cgit v1.2.3


From 68b3d73c291753f19d04682306ae67125dbbd431 Mon Sep 17 00:00:00 2001
From: wbauer <wbauer@8a26b1a7-26f0-462f-b9ef-d0e30c41f5a4>
Date: Fri, 5 Sep 2008 11:40:49 +0000
Subject: Adjusted default security settings for BKUOnline

git-svn-id: https://joinup.ec.europa.eu/svn/mocca/trunk@16 8a26b1a7-26f0-462f-b9ef-d0e30c41f5a4
---
 .../egiz/bku/online/conf/accessControlConfig.xml   | 75 ++++++++--------------
 1 file changed, 25 insertions(+), 50 deletions(-)

(limited to 'BKUOnline/src/main/resources/at/gv/egiz/bku/online/conf/accessControlConfig.xml')

diff --git a/BKUOnline/src/main/resources/at/gv/egiz/bku/online/conf/accessControlConfig.xml b/BKUOnline/src/main/resources/at/gv/egiz/bku/online/conf/accessControlConfig.xml
index 15d62155..e12d1abe 100644
--- a/BKUOnline/src/main/resources/at/gv/egiz/bku/online/conf/accessControlConfig.xml
+++ b/BKUOnline/src/main/resources/at/gv/egiz/bku/online/conf/accessControlConfig.xml
@@ -1,39 +1,40 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <AccessControl>
 	<Chains>
+		<!--
+			The input chain defines filters that are applied before command
+			execution
+		-->
 		<Chain Id="InputChain">
 			<Rules>
-				<Rule Id="rule-1">
-					<AuthClass>certifiedGovAgency</AuthClass>
-					<AnyPeer />
+				<!-- there is no command implemented that requires input filtering -->
+				<Rule Id="InputChain-AllowAll">
 					<Action>
 						<RuleAction>allow</RuleAction>
 					</Action>
 					<UserInteraction>confirm</UserInteraction>
 				</Rule>
-				<Rule Id="rule-2">
-					<AuthClass>pseudoanonymous</AuthClass>
-					<AnyPeer />
+			</Rules>
+		</Chain>
+
+		<!--
+			The output chain defines filters that are applied after command
+			execution
+		-->
+		<Chain Id="OutputChain">
+			<Rules>
+				<Rule Id="OutputChain-Egov">
+					<AuthClass>certifiedGovAgency</AuthClass>
 					<Action>
-						<ChainRef>Command</ChainRef>
+						<RuleAction>allow</RuleAction>
 					</Action>
-					<UserInteraction>none</UserInteraction>
+					<UserInteraction>confirm</UserInteraction>
 				</Rule>
-				<Rule Id="rule-3">
+				<Rule Id="OutputChain-Command">
 					<AuthClass>anonymous</AuthClass>
-					<IPv4Address>127.0.0.1</IPv4Address>
 					<Action>
 						<ChainRef>Command</ChainRef>
 					</Action>
-					<UserInteraction>none</UserInteraction>
-				</Rule>
-				<Rule Id="rule-4">
-					<AuthClass>anonymous</AuthClass>
-					<DomainName>$.gv.at</DomainName>
-					<Action>
-						<RuleAction>allow</RuleAction>
-					</Action>
-					<UserInteraction>confirm</UserInteraction>
 				</Rule>
 			</Rules>
 		</Chain>
@@ -44,7 +45,7 @@
 					<AnyPeer />
 					<Command Name="Infobox*">
 						<Param Name="InfoboxIdentifier">IdentityLink</Param>
-						<Param Name="PersonIdentifier">.*</Param>
+						<Param Name="PersonIdentifier">derived</Param>
 					</Command>
 					<Action>
 						<RuleAction>allow</RuleAction>
@@ -52,42 +53,16 @@
 					<UserInteraction>confirm</UserInteraction>
 				</Rule>
 				<Rule Id="cmd-rule-2">
-					<AuthClass>certified</AuthClass>
-					<URL>https://finanzonline.bmf.gv.at/*
-					</URL>
-					<Command Name="InfoboxReadRequest">
-						<Param Name="InfoboxIdentifier">Mandates</Param>
-						<Param Name="PersonIdentifier">.*</Param>
+					<AuthClass>anonymous</AuthClass>
+					<Command Name="Infobox.*">
+						<Param Name="InfoboxIdentifier">IdentityLink</Param>
 					</Command>
 					<Action>
-						<RuleAction>allow</RuleAction>
+						<RuleAction>deny</RuleAction>
 					</Action>
 					<UserInteraction>info</UserInteraction>
 				</Rule>
 				<Rule Id="cmd-rule-3">
-					<AuthClass>certified</AuthClass>
-					<AnyPeer />
-					<Command Name="InfoboxReadRequest" />
-					<Action>
-						<RuleAction>allow</RuleAction>
-					</Action>
-					<UserInteraction>none</UserInteraction>
-				</Rule>
-				<Rule Id="cmd-rule-4">
-					<AuthClass>anonymous</AuthClass>
-					<AnyPeer />
-					<Command Name="InfoboxReadRequest" />
-					<IPv4Address>127.0.0.1</IPv4Address>
-					<Action>
-						<RuleAction>allow</RuleAction>
-					</Action>
-					<UserInteraction>none</UserInteraction>
-				</Rule>
-			</Rules>
-		</Chain>
-		<Chain Id="OutputChain">
-			<Rules>
-				<Rule Id="out-1">
 					<Action>
 						<RuleAction>allow</RuleAction>
 					</Action>
-- 
cgit v1.2.3


From 14d74dd27c32a02b5301a0755f3fe174d7e3c9f6 Mon Sep 17 00:00:00 2001
From: wbauer <wbauer@8a26b1a7-26f0-462f-b9ef-d0e30c41f5a4>
Date: Fri, 5 Sep 2008 12:05:55 +0000
Subject: added file headers

git-svn-id: https://joinup.ec.europa.eu/svn/mocca/trunk@17 8a26b1a7-26f0-462f-b9ef-d0e30c41f5a4
---
 .../at/gv/egiz/bku/online/conf/accessControlConfig.xml       | 12 ++++++++++++
 1 file changed, 12 insertions(+)

(limited to 'BKUOnline/src/main/resources/at/gv/egiz/bku/online/conf/accessControlConfig.xml')

diff --git a/BKUOnline/src/main/resources/at/gv/egiz/bku/online/conf/accessControlConfig.xml b/BKUOnline/src/main/resources/at/gv/egiz/bku/online/conf/accessControlConfig.xml
index e12d1abe..69b45d1b 100644
--- a/BKUOnline/src/main/resources/at/gv/egiz/bku/online/conf/accessControlConfig.xml
+++ b/BKUOnline/src/main/resources/at/gv/egiz/bku/online/conf/accessControlConfig.xml
@@ -1,4 +1,16 @@
 <?xml version="1.0" encoding="UTF-8"?>
+<!--
+    Copyright 2008 Federal Chancellery Austria and Graz University of
+    Technology Licensed under the Apache License, Version 2.0 (the
+    "License"); you may not use this file except in compliance with the
+    License. You may obtain a copy of the License at
+    http://www.apache.org/licenses/LICENSE-2.0 Unless required by
+    applicable law or agreed to in writing, software distributed under the
+    License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
+    CONDITIONS OF ANY KIND, either express or implied. See the License for
+    the specific language governing permissions and limitations under the
+    License.
+  -->
 <AccessControl>
 	<Chains>
 		<!--
-- 
cgit v1.2.3


From a3361b40aa8f92849c50db27e349e17b87bebb1e Mon Sep 17 00:00:00 2001
From: wbauer <wbauer@8a26b1a7-26f0-462f-b9ef-d0e30c41f5a4>
Date: Tue, 9 Sep 2008 12:40:52 +0000
Subject: improved security handling and added shutdown handler

git-svn-id: https://joinup.ec.europa.eu/svn/mocca/trunk@27 8a26b1a7-26f0-462f-b9ef-d0e30c41f5a4
---
 .../main/resources/at/gv/egiz/bku/online/conf/accessControlConfig.xml  | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

(limited to 'BKUOnline/src/main/resources/at/gv/egiz/bku/online/conf/accessControlConfig.xml')

diff --git a/BKUOnline/src/main/resources/at/gv/egiz/bku/online/conf/accessControlConfig.xml b/BKUOnline/src/main/resources/at/gv/egiz/bku/online/conf/accessControlConfig.xml
index 69b45d1b..f8d1411c 100644
--- a/BKUOnline/src/main/resources/at/gv/egiz/bku/online/conf/accessControlConfig.xml
+++ b/BKUOnline/src/main/resources/at/gv/egiz/bku/online/conf/accessControlConfig.xml
@@ -54,8 +54,7 @@
 			<Rules>
 				<Rule Id="cmd-rule-1">
 					<AuthClass>certified</AuthClass>
-					<AnyPeer />
-					<Command Name="Infobox*">
+					<Command Name="Infobox.*">
 						<Param Name="InfoboxIdentifier">IdentityLink</Param>
 						<Param Name="PersonIdentifier">derived</Param>
 					</Command>
-- 
cgit v1.2.3