001// --------------------------------------------------------------------------------
002// Copyright 2002-2026 Echo Three, LLC
003//
004// Licensed under the Apache License, Version 2.0 (the "License");
005// you may not use this file except in compliance with the License.
006// You may obtain a copy of the License at
007//
008//     http://www.apache.org/licenses/LICENSE-2.0
009//
010// Unless required by applicable law or agreed to in writing, software
011// distributed under the License is distributed on an "AS IS" BASIS,
012// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
013// See the License for the specific language governing permissions and
014// limitations under the License.
015// --------------------------------------------------------------------------------
016
017package com.echothree.control.user.security.server.command;
018
019import com.echothree.control.user.security.common.form.CreatePartySecurityRoleTemplateRoleForm;
020import com.echothree.model.control.party.common.PartyTypes;
021import com.echothree.model.control.security.common.SecurityRoleGroups;
022import com.echothree.model.control.security.common.SecurityRoles;
023import com.echothree.model.control.security.server.control.SecurityControl;
024import com.echothree.model.control.security.server.logic.PartySecurityRoleTemplateLogic;
025import com.echothree.model.data.user.common.pk.UserVisitPK;
026import com.echothree.util.common.message.ExecutionErrors;
027import com.echothree.util.common.validation.FieldDefinition;
028import com.echothree.util.common.validation.FieldType;
029import com.echothree.util.common.command.BaseResult;
030import com.echothree.util.server.control.BaseSimpleCommand;
031import com.echothree.util.server.control.CommandSecurityDefinition;
032import com.echothree.util.server.control.PartyTypeDefinition;
033import com.echothree.util.server.control.SecurityRoleDefinition;
034import java.util.List;
035import javax.enterprise.context.Dependent;
036import javax.inject.Inject;
037
038@Dependent
039public class CreatePartySecurityRoleTemplateRoleCommand
040        extends BaseSimpleCommand<CreatePartySecurityRoleTemplateRoleForm> {
041    
042    private final static CommandSecurityDefinition COMMAND_SECURITY_DEFINITION;
043    private final static List<FieldDefinition> FORM_FIELD_DEFINITIONS;
044    
045    static {
046        COMMAND_SECURITY_DEFINITION = new CommandSecurityDefinition(List.of(
047                new PartyTypeDefinition(PartyTypes.UTILITY.name(), null),
048                new PartyTypeDefinition(PartyTypes.EMPLOYEE.name(), List.of(
049                        new SecurityRoleDefinition(SecurityRoleGroups.PartySecurityRoleTemplateRole.name(), SecurityRoles.Create.name())
050                ))
051        ));
052        
053        FORM_FIELD_DEFINITIONS = List.of(
054                new FieldDefinition("PartySecurityRoleTemplateName", FieldType.ENTITY_NAME, true, null, null),
055                new FieldDefinition("SecurityRoleGroupName", FieldType.ENTITY_NAME, true, null, null),
056                new FieldDefinition("SecurityRoleName", FieldType.ENTITY_NAME, false, null, null)
057        );
058    }
059
060    @Inject
061    SecurityControl securityControl;
062
063    @Inject
064    PartySecurityRoleTemplateLogic partySecurityRoleTemplateLogic;
065
066    
067    /** Creates a new instance of CreatePartySecurityRoleTemplateRoleCommand */
068    public CreatePartySecurityRoleTemplateRoleCommand() {
069        super(COMMAND_SECURITY_DEFINITION, FORM_FIELD_DEFINITIONS, false);
070    }
071    
072    @Override
073    protected BaseResult execute() {
074        var partySecurityRoleTemplateName = form.getPartySecurityRoleTemplateName();
075        var partySecurityRoleTemplate = securityControl.getPartySecurityRoleTemplateByName(partySecurityRoleTemplateName);
076        
077        if(partySecurityRoleTemplate != null) {
078            var securityRoleGroupName = form.getSecurityRoleGroupName();
079            var securityRoleGroup = securityControl.getSecurityRoleGroupByName(securityRoleGroupName);
080            
081            if(securityRoleGroup != null) {
082                var securityRoleName = form.getSecurityRoleName();
083
084                if(securityRoleName == null) {
085                    var securityRoles = securityControl.getSecurityRoles(securityRoleGroup);
086
087                    // Pass 1: Check for duplicates.
088                    for(var securityRole : securityRoles) {
089                        var partySecurityRoleTemplateRole = securityControl.getPartySecurityRoleTemplateRole(partySecurityRoleTemplate,
090                                securityRole);
091
092                        if(partySecurityRoleTemplateRole != null) {
093                            addExecutionError(ExecutionErrors.DuplicatePartySecurityRoleTemplateRole.name(), partySecurityRoleTemplateName, securityRoleGroupName,
094                                    securityRole.getLastDetail().getSecurityRoleName());
095                            break;
096                        }
097                    }
098
099                    // Pass 2: Add Security Roles if there were no errors.
100                    if(!hasExecutionErrors()) {
101                        securityRoles.forEach((securityRole) -> {
102                            partySecurityRoleTemplateLogic.createPartySecurityRoleTemplateRole(partySecurityRoleTemplate, securityRole, getPartyPK());
103                        });
104                    }
105                } else {
106                    var securityRole = securityControl.getSecurityRoleByName(securityRoleGroup, securityRoleName);
107
108                    if(securityRole != null) {
109                        var partySecurityRoleTemplateRole = securityControl.getPartySecurityRoleTemplateRole(partySecurityRoleTemplate,
110                                securityRole);
111
112                        if(partySecurityRoleTemplateRole == null) {
113                            partySecurityRoleTemplateLogic.createPartySecurityRoleTemplateRole(partySecurityRoleTemplate, securityRole, getPartyPK());
114                        } else {
115                            addExecutionError(ExecutionErrors.DuplicatePartySecurityRoleTemplateRole.name(), partySecurityRoleTemplateName, securityRoleGroupName,
116                                    securityRoleName);
117                        }
118                    } else {
119                        addExecutionError(ExecutionErrors.UnknownSecurityRoleName.name(), securityRoleGroupName, securityRoleName);
120                    }
121                }
122            } else {
123                addExecutionError(ExecutionErrors.UnknownSecurityRoleGroupName.name(), securityRoleGroupName);
124            }
125        } else {
126            addExecutionError(ExecutionErrors.UnknownPartySecurityRoleTemplateName.name(), partySecurityRoleTemplateName);
127        }
128        
129        return null;
130    }
131    
132}