Write security umbrella

[jamoore]

Like (#200 -- the read umbrella ticket) there needs to be a catch all write permissions ticket for various changes. This is it.

Write security is split into System-Types writing (#156) and everything else (i.e. in general obeying permissions on updates.)

[jmoore]

r787 tightens the coupling between

• OmeroInterceptor, which passes transient and detached instances to
• SecuritySystem, which is initialized by
• EventHandler

There are some difficulties in left over flushes. These should be addressed by the next round of changesets (refactoring UpdateImpl & UpdateFilter).

[jmoore]

r788 (which belongs with r787) reworks the Hibernate listener system. GlobalListener is renamed to EventLogListener (it's current function) because attempts to make a single listener the end-all-be-all is too difficult. Instead EventListenerFactoryBean was introduced (this could have been done in XML but that's too messy) to speficy how we want to do event listening.

EventMethodInterceptor was also introduced to debug and disable various interfaces (using AOP).

Finally, SaveOrUpdateEventListener was required as a partner for MergeEventListener (content mostly copied -- needs refactoring) because internal changes (that is, to active Hibernate objects) were being "saved" and not "merged". This will continue to be true, and, in fact, SaveEventListener and UpdateEventListener need to be equally controlled.

[jmoore]

r790 introduces several tests that need to be extended (and pass) for this to be successful. Other tests are also needed, though. This ends the r784 to r792 reports for this ticket.

[jmoore]

r811 works out many of the bugs of write security. UpdateImpl was further cleaned of cruft, an Enum bug from MergeEventListener and lots of work on OmeroInterceptor including refactoring and documentation.

Note: The security tokens and actions of #235 / r812 belong with these changes but have their own ticket.

[jmoore]

r828 moves UPDATE check (callback to SecuritySystem to ACLEventListener.

[jmoore]

r895 significantly reworks the client-side write tests. They still need work but are now very manageable.

[jmoore]

r929 reworks the client-side tests.

[jmoore]

r941 further reworks test.

[jmoore]

r984 closes. All tests are now passing or covered by other tickets.

More tests can be written under #378.