RoleValidatorByOwningEntity permits by PermissionPropertiesOwningEntity
[vid.git] / vid-app-common / src / main / java / org / onap / vid / controller / AsyncInstantiationController.java
1 /*-
2  * ============LICENSE_START=======================================================
3  * VID
4  * ================================================================================
5  * Copyright (C) 2017 - 2019 AT&T Intellectual Property. All rights reserved.
6  * ================================================================================
7  * Licensed under the Apache License, Version 2.0 (the "License");
8  * you may not use this file except in compliance with the License.
9  * You may obtain a copy of the License at
10  *
11  *      http://www.apache.org/licenses/LICENSE-2.0
12  *
13  * Unless required by applicable law or agreed to in writing, software
14  * distributed under the License is distributed on an "AS IS" BASIS,
15  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16  * See the License for the specific language governing permissions and
17  * limitations under the License.
18  * ============LICENSE_END=========================================================
19  */
20
21 package org.onap.vid.controller;
22
23 import static org.onap.vid.utils.KotlinUtilsKt.JACKSON_OBJECT_MAPPER;
24
25 import java.util.List;
26 import java.util.UUID;
27 import javax.servlet.http.HttpServletRequest;
28 import org.onap.portalsdk.core.logging.logic.EELFLoggerDelegate;
29 import org.onap.vid.dal.AsyncInstantiationRepository;
30 import org.onap.vid.exceptions.AccessDeniedException;
31 import org.onap.vid.model.JobAuditStatus;
32 import org.onap.vid.model.ServiceInfo;
33 import org.onap.vid.model.serviceInstantiation.ServiceInstantiation;
34 import org.onap.vid.mso.MsoResponseWrapper2;
35 import org.onap.vid.properties.Features;
36 import org.onap.vid.roles.AllPermissionProperties;
37 import org.onap.vid.roles.RoleProvider;
38 import org.onap.vid.roles.RoleValidator;
39 import org.onap.vid.services.AsyncInstantiationBusinessLogic;
40 import org.onap.vid.services.AuditService;
41 import org.onap.vid.utils.SystemPropertiesWrapper;
42 import org.springframework.beans.factory.annotation.Autowired;
43 import org.springframework.web.bind.annotation.PathVariable;
44 import org.springframework.web.bind.annotation.RequestBody;
45 import org.springframework.web.bind.annotation.RequestMapping;
46 import org.springframework.web.bind.annotation.RequestMethod;
47 import org.springframework.web.bind.annotation.RequestParam;
48 import org.springframework.web.bind.annotation.RestController;
49 import org.togglz.core.manager.FeatureManager;
50
51
52 @RestController
53 @RequestMapping(AsyncInstantiationController.ASYNC_INSTANTIATION)
54 public class AsyncInstantiationController extends VidRestrictedBaseController {
55
56     public static final String ASYNC_INSTANTIATION = "asyncInstantiation";
57
58     protected final AsyncInstantiationBusinessLogic asyncInstantiationBL;
59     protected final AsyncInstantiationRepository asyncInstantiationRepository;
60     private final SystemPropertiesWrapper systemPropertiesWrapper;
61
62     private final RoleProvider roleProvider;
63
64     private final FeatureManager featureManager;
65
66     protected final AuditService auditService;
67
68     @Autowired
69     public AsyncInstantiationController(AsyncInstantiationBusinessLogic asyncInstantiationBL,
70         AsyncInstantiationRepository asyncInstantiationRepository, RoleProvider roleProvider,
71         FeatureManager featureManager, SystemPropertiesWrapper systemPropertiesWrapper,
72         AuditService auditService) {
73         this.asyncInstantiationBL = asyncInstantiationBL;
74         this.asyncInstantiationRepository = asyncInstantiationRepository;
75         this.roleProvider = roleProvider;
76         this.featureManager = featureManager;
77         this.systemPropertiesWrapper = systemPropertiesWrapper;
78         this.auditService = auditService;
79     }
80
81     @RequestMapping(method = RequestMethod.GET)
82     public List<ServiceInfo> getServicesInfo(HttpServletRequest request) {
83         return asyncInstantiationBL.getAllServicesInfo();
84     }
85
86     @RequestMapping(value = "bulk", method = RequestMethod.POST)
87     public MsoResponseWrapper2<List<String>> createBulkOfServices(@RequestBody ServiceInstantiation request, HttpServletRequest httpServletRequest) {
88         //Push to DB according the model
89         try {
90             LOGGER.debug(EELFLoggerDelegate.debugLogger, "incoming ServiceInstantiation request: "+ JACKSON_OBJECT_MAPPER.writeValueAsString(request));
91         }
92         catch (Exception e) {
93             LOGGER.error(EELFLoggerDelegate.errorLogger, "failed to log incoming ServiceInstantiation request ", e);
94         }
95         String userId = new ControllersUtils(systemPropertiesWrapper).extractUserId(httpServletRequest);
96
97         throwExceptionIfAccessDenied(request, httpServletRequest, userId);
98         List<UUID> uuids = asyncInstantiationBL.pushBulkJob(request, userId);
99         return new MsoResponseWrapper2(200, uuids);
100     }
101
102
103
104     @RequestMapping(value = "retryJobWithChangedData/{jobId}", method = RequestMethod.POST)
105     public MsoResponseWrapper2<List<String>> retryJobWithChangedData(@RequestBody ServiceInstantiation request, @PathVariable(value="jobId") UUID jobId, HttpServletRequest httpServletRequest) {
106
107         String userId = new ControllersUtils(systemPropertiesWrapper).extractUserId(httpServletRequest);
108         List<UUID> uuids =  asyncInstantiationBL.retryJob(request, jobId, userId);
109         return new MsoResponseWrapper2(200, uuids);
110     }
111
112     @RequestMapping(value = "job/{jobId}", method = RequestMethod.DELETE)
113     public void deleteServiceInfo(@PathVariable("jobId") UUID jobId) {
114         asyncInstantiationBL.deleteJob(jobId);
115     }
116
117     @RequestMapping(value = "hide/{jobId}", method = RequestMethod.POST)
118     public void hideServiceInfo(@PathVariable("jobId") UUID jobId) {
119         asyncInstantiationBL.hideServiceInfo(jobId);
120     }
121
122     @RequestMapping(value = "auditStatus/{jobId}", method = RequestMethod.GET)
123     public List<JobAuditStatus> getJobAuditStatus(HttpServletRequest request, @PathVariable(value="jobId") UUID jobId, @RequestParam(value="source") JobAuditStatus.SourceStatus source){
124         return auditService.getAuditStatuses(jobId, source);
125     }
126
127     @RequestMapping(value = "auditStatus/{jobId}/mso", method = RequestMethod.GET)
128     public List<JobAuditStatus> getJobMsoAuditStatusForAlaCarte(HttpServletRequest request,
129                                                                 @PathVariable(value="jobId") UUID jobId,
130                                                                 @RequestParam(value="requestId", required = false) UUID requestId,
131                                                                 @RequestParam(value="serviceInstanceId", required = false) UUID serviceInstanceId){
132         if (serviceInstanceId != null) {
133             return auditService.getAuditStatusFromMsoByInstanceId(JobAuditStatus.ResourceTypeFilter.SERVICE, serviceInstanceId, jobId);
134         }
135         if (requestId != null){
136             return auditService.getAuditStatusFromMsoByRequestId(jobId, requestId);
137         }
138         return auditService.getAuditStatusFromMsoByJobId(jobId);
139
140     }
141
142     @RequestMapping(value = "auditStatus/{type}/{instanceId}/mso", method = RequestMethod.GET)
143     public List<JobAuditStatus> getAuditStatusFromMsoByInstanceId(HttpServletRequest request,
144                                                                   @PathVariable(value="type") JobAuditStatus.ResourceTypeFilter resourceTypeFilter,
145                                                                   @PathVariable(value="instanceId") UUID instanceId) {
146         return auditService.getAuditStatusFromMsoByInstanceId(resourceTypeFilter, instanceId, null);
147     }
148
149     @RequestMapping(value = "/bulkForRetry/{jobId}", method = RequestMethod.GET)
150     public ServiceInstantiation getBulkForRetry(HttpServletRequest request, @PathVariable(value="jobId") UUID jobId) {
151         return asyncInstantiationBL.getBulkForRetry(jobId);
152     }
153
154     @RequestMapping(value = "retry/{jobId}", method = RequestMethod.POST)
155     public MsoResponseWrapper2<List<UUID>> retryJobRequest(HttpServletRequest httpServletRequest,
156                                                            @PathVariable(value="jobId") UUID jobId) {
157
158         String userId = new ControllersUtils(systemPropertiesWrapper).extractUserId(httpServletRequest);
159         List<UUID> uuids =  asyncInstantiationBL.retryJob(jobId, userId);
160
161         return new MsoResponseWrapper2(200, uuids);
162     }
163
164     @RequestMapping(value = "/auditStatusForRetry/{trackById}", method = RequestMethod.GET)
165     public JobAuditStatus getResourceAuditStatus(HttpServletRequest request, @PathVariable(value="trackById") String trackById) {
166         return auditService.getResourceAuditStatus(trackById);
167     }
168
169     private void throwExceptionIfAccessDenied(ServiceInstantiation request, HttpServletRequest httpServletRequest, String userId) {
170         if (featureManager.isActive(Features.FLAG_1906_INSTANTIATION_API_USER_VALIDATION)) {
171             RoleValidator roleValidator = roleProvider.getUserRolesValidator(httpServletRequest);
172             if (!roleValidator.isServicePermitted(new AllPermissionProperties(
173                 request.getGlobalSubscriberId(),
174                 request.getSubscriptionServiceType(),
175                 request.getOwningEntityId()))
176             ) {
177                 throw new AccessDeniedException(String.format("User %s is not allowed to make this request", userId));
178             }
179         }
180     }
181 }