Rework SecuritySystem

[jamoore]

The SecuritySystem can be substantially simplified and have a good deal of its logic hidden now that its API is stabilizing. It has accumulated too many responsibilities (like being the holder for thread context rather than event context). As well, #326 requires serializable, read-only event context state.

Work items:

• Add ome.security.basic package (possibly ome.services.security.basic)
• Move BasicSecuritySystem to *.basic
• Move ThreadLocalEventContext to *.basic or have *.basic.CurrentDetails implement EventContext
• Add all needed methods to EventContext
• Make SimpleEventContext serializable
• Add getEventContext to StatefulServiceInterface
• Add EventContext.copy()
• Add SecuritySystem.getEventContext()
• Add SecuritySystem.getSecurityRoles() (Serializable)
• Add IAdmin.getSecurityRoles()
• Refactor some of EventHandler to SessionHandler
• Add SecuritySystem.getInternal().getACLEventListener() and co. (remove allow* and throw* from API) or BasicSecuritySystem as FactoryBean
• Remove attempted save from setCurrentDetails and instead pass in the readOnly status

[jmoore]

More work items:

• Update utests.SecuritySystemTest (esp! managedDetails)
• Possible SecuritySystemCallback interface (for event listeners, interceptor, ...)
  ( ? with methods that take this ? )
• rename login to setLogin, setCurrentDetails to load (similar for logout,unload)

[jmoore]

And cleanup items:

• Remove OneTimeTokens (in line with privileged/tainted documentation)

[jmoore]

Also possible to remove lockCandidates from SecuritySystem and instead have the events and the interceptor work together via EventSource.getInterceptor().

[jmoore]

r939 begins this process.

• Makes EventLog and EventDiff global (system) types (meta.ome.xml)
• Removes Permissions and filters from global (system) types (mapping.vm)
• Removes Permissions from data.vm and common/build.xml
• Fixes null pointers (due to null details due to null permissions) where needed
• Switched to StatelessSession for saving EventLogs (EventHandler)
• Refactored (simpliciation and fixed EventLogs) CurrentDetails
• Minor Locking fixes -- no locking system types (since no permissions)
• Minor Details fixes -- nulls are always replaced
• Minor TypesImpl fix -- for creating enumerations. (Needs work)

The access to the EventLogs via SecuritySystem will need to be removed with the final reworking.