| com.pentaho.security |
|
| Java Source File Name | Type | Comment |
| HttpSessionReuseDetectionFilter.java | Class | Detects when an HTTP session which contains a logged-in user (as indicated by
request.getRemoteUser()) is attempting to authenticate again
without logging out. |
| ProPentahoLogoutHandler.java | Class | Pentaho behavior that should be invoked when a web user logs out. |
| RequestParameterAuthenticationFilter.java | Class | Processes Request Parameter authorization, putting the result
into the SecurityContextHolder.
In summary, this filter looks for request parameters with the userid/password
If authentication is successful, the resulting
Authentication object
will be placed into the SecurityContextHolder.
If authentication fails and ignoreFailure is false
(the default), an
AuthenticationEntryPoint implementation is
called. |
| RequestParameterFilterEntryPoint.java | Class | Used by the SecurityEnforcementFilter to commence
authentication via the
BasicProcessingFilter .
Once a user agent is authenticated using Request Parameter authentication, logout
requires that the browser be closed or an unauthorized (401) header be
sent. |
| SecurityParameterProvider.java | Class | |
| SecurityStartupFilter.java | Class | |
| SecurityUtils.java | Class | A utility class with several static methods that are used to
either bind the Authentication to the IPentahoSession, retrieve
the Authentication from the IPentahoSession, and other various helper
functions. |
| UserDetailsRoleListService.java | Class | |
| UserRoleListService.java | Interface | |