001// --------------------------------------------------------------------------------
002// Copyright 2002-2024 Echo Three, LLC
003//
004// Licensed under the Apache License, Version 2.0 (the "License");
005// you may not use this file except in compliance with the License.
006// You may obtain a copy of the License at
007//
008//     http://www.apache.org/licenses/LICENSE-2.0
009//
010// Unless required by applicable law or agreed to in writing, software
011// distributed under the License is distributed on an "AS IS" BASIS,
012// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
013// See the License for the specific language governing permissions and
014// limitations under the License.
015// --------------------------------------------------------------------------------
016
017package com.echothree.control.user.security.server.command;
018
019import com.echothree.control.user.security.common.form.CreatePartySecurityRoleTemplateRoleForm;
020import com.echothree.model.control.party.common.PartyTypes;
021import com.echothree.model.control.security.common.SecurityRoleGroups;
022import com.echothree.model.control.security.common.SecurityRoles;
023import com.echothree.model.control.security.server.control.SecurityControl;
024import com.echothree.model.control.security.server.logic.PartySecurityRoleTemplateLogic;
025import com.echothree.model.data.security.server.entity.PartySecurityRoleTemplate;
026import com.echothree.model.data.security.server.entity.PartySecurityRoleTemplateRole;
027import com.echothree.model.data.security.server.entity.SecurityRole;
028import com.echothree.model.data.security.server.entity.SecurityRoleGroup;
029import com.echothree.model.data.user.common.pk.UserVisitPK;
030import com.echothree.util.common.message.ExecutionErrors;
031import com.echothree.util.common.validation.FieldDefinition;
032import com.echothree.util.common.validation.FieldType;
033import com.echothree.util.common.command.BaseResult;
034import com.echothree.util.server.control.BaseSimpleCommand;
035import com.echothree.util.server.control.CommandSecurityDefinition;
036import com.echothree.util.server.control.PartyTypeDefinition;
037import com.echothree.util.server.control.SecurityRoleDefinition;
038import com.echothree.util.server.persistence.Session;
039import java.util.Arrays;
040import java.util.Collections;
041import java.util.List;
042
043public class CreatePartySecurityRoleTemplateRoleCommand
044        extends BaseSimpleCommand<CreatePartySecurityRoleTemplateRoleForm> {
045    
046    private final static CommandSecurityDefinition COMMAND_SECURITY_DEFINITION;
047    private final static List<FieldDefinition> FORM_FIELD_DEFINITIONS;
048    
049    static {
050        COMMAND_SECURITY_DEFINITION = new CommandSecurityDefinition(Collections.unmodifiableList(Arrays.asList(
051                new PartyTypeDefinition(PartyTypes.UTILITY.name(), null),
052                new PartyTypeDefinition(PartyTypes.EMPLOYEE.name(), Collections.unmodifiableList(Arrays.asList(
053                        new SecurityRoleDefinition(SecurityRoleGroups.PartySecurityRoleTemplateRole.name(), SecurityRoles.Create.name())
054                        )))
055                )));
056        
057        FORM_FIELD_DEFINITIONS = Collections.unmodifiableList(Arrays.asList(
058                new FieldDefinition("PartySecurityRoleTemplateName", FieldType.ENTITY_NAME, true, null, null),
059                new FieldDefinition("SecurityRoleGroupName", FieldType.ENTITY_NAME, true, null, null),
060                new FieldDefinition("SecurityRoleName", FieldType.ENTITY_NAME, false, null, null)
061                ));
062    }
063    
064    /** Creates a new instance of CreatePartySecurityRoleTemplateRoleCommand */
065    public CreatePartySecurityRoleTemplateRoleCommand(UserVisitPK userVisitPK, CreatePartySecurityRoleTemplateRoleForm form) {
066        super(userVisitPK, form, COMMAND_SECURITY_DEFINITION, FORM_FIELD_DEFINITIONS, false);
067    }
068    
069    @Override
070    protected BaseResult execute() {
071        var securityControl = Session.getModelController(SecurityControl.class);
072        String partySecurityRoleTemplateName = form.getPartySecurityRoleTemplateName();
073        PartySecurityRoleTemplate partySecurityRoleTemplate = securityControl.getPartySecurityRoleTemplateByName(partySecurityRoleTemplateName);
074        
075        if(partySecurityRoleTemplate != null) {
076            String securityRoleGroupName = form.getSecurityRoleGroupName();
077            SecurityRoleGroup securityRoleGroup = securityControl.getSecurityRoleGroupByName(securityRoleGroupName);
078            
079            if(securityRoleGroup != null) {
080                String securityRoleName = form.getSecurityRoleName();
081
082                if(securityRoleName == null) {
083                    List<SecurityRole> securityRoles = securityControl.getSecurityRoles(securityRoleGroup);
084
085                    // Pass 1: Check for duplicates.
086                    for(var securityRole : securityRoles) {
087                        PartySecurityRoleTemplateRole partySecurityRoleTemplateRole = securityControl.getPartySecurityRoleTemplateRole(partySecurityRoleTemplate,
088                                securityRole);
089
090                        if(partySecurityRoleTemplateRole != null) {
091                            addExecutionError(ExecutionErrors.DuplicatePartySecurityRoleTemplateRole.name(), partySecurityRoleTemplateName, securityRoleGroupName,
092                                    securityRole.getLastDetail().getSecurityRoleName());
093                            break;
094                        }
095                    }
096
097                    // Pass 2: Add Security Roles if there were no errors.
098                    if(!hasExecutionErrors()) {
099                        securityRoles.forEach((securityRole) -> {
100                            PartySecurityRoleTemplateLogic.getInstance().createPartySecurityRoleTemplateRole(partySecurityRoleTemplate, securityRole, getPartyPK());
101                        });
102                    }
103                } else {
104                    SecurityRole securityRole = securityControl.getSecurityRoleByName(securityRoleGroup, securityRoleName);
105
106                    if(securityRole != null) {
107                        PartySecurityRoleTemplateRole partySecurityRoleTemplateRole = securityControl.getPartySecurityRoleTemplateRole(partySecurityRoleTemplate,
108                                securityRole);
109
110                        if(partySecurityRoleTemplateRole == null) {
111                            PartySecurityRoleTemplateLogic.getInstance().createPartySecurityRoleTemplateRole(partySecurityRoleTemplate, securityRole, getPartyPK());
112                        } else {
113                            addExecutionError(ExecutionErrors.DuplicatePartySecurityRoleTemplateRole.name(), partySecurityRoleTemplateName, securityRoleGroupName,
114                                    securityRoleName);
115                        }
116                    } else {
117                        addExecutionError(ExecutionErrors.UnknownSecurityRoleName.name(), securityRoleGroupName, securityRoleName);
118                    }
119                }
120            } else {
121                addExecutionError(ExecutionErrors.UnknownSecurityRoleGroupName.name(), securityRoleGroupName);
122            }
123        } else {
124            addExecutionError(ExecutionErrors.UnknownPartySecurityRoleTemplateName.name(), partySecurityRoleTemplateName);
125        }
126        
127        return null;
128    }
129    
130}