Uploaded image for project: 'Kylin'
  1. Kylin
  2. KYLIN-2960

Support user/group and role authentication for LDAP

    XMLWordPrintableJSON

    Details

    • Type: New Feature
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: v2.3.0
    • Component/s: Security
    • Labels:
    • Flags:
      Patch

      Description

      Currently, the user authentication interface that was provided by kylin to the third party only supports user and role authentication. However only user and group have authentication function when we use the LDAP authentication. In fact the authentication for user and role and the authentication for user and group have the same functional characteristics between different appplication system. So we should submit a new feature that it support the authentication for user and role and the authentication for user and group when the LDAP authentication was enabled.

      We supplied the checkPermission interface to implement the new feature. In the interface we set user groups information to the userRoles parameter when the LDAP was enabled, on the contrary we set user roles information to the userRoles parameter. The interface is as following:
      /**

      • Checks if a user has permission on an entity.
      • @param user
      • @param userRoles
      • @param entityType String constants defined in AclEntityType
      • @param entityUuid
      • @param permission
      • @return true if has permission
        */
        abstract public boolean checkPermission(String user, List<String> userRoles, //
        String entityType, String entityUuid, Permission permission);

        Attachments

          Activity

            People

            • Assignee:
              Aron.tao Jiatao Tao
              Reporter:
              peng.jianhua peng.jianhua
            • Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: