2 * Copyright © 2016-2018 European Support Limited
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
8 * http://www.apache.org/licenses/LICENSE-2.0
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
16 package org.openecomp.sdc.itempermissions.dao.impl;
18 import static org.openecomp.sdc.itempermissions.notifications.NotificationConstants.ITEM_ID_PROP;
19 import static org.openecomp.sdc.itempermissions.notifications.NotificationConstants.ITEM_NAME_PROP;
20 import static org.openecomp.sdc.itempermissions.notifications.NotificationConstants.PERMISSION_CHANGED;
21 import static org.openecomp.sdc.itempermissions.notifications.NotificationConstants.PERMISSION_GRANTED;
22 import static org.openecomp.sdc.itempermissions.notifications.NotificationConstants.PERMISSION_ITEM;
23 import static org.openecomp.sdc.itempermissions.notifications.NotificationConstants.PERMISSION_USER;
25 import java.util.Collection;
26 import java.util.HashMap;
28 import java.util.Optional;
30 import org.openecomp.sdc.common.errors.CoreException;
31 import org.openecomp.sdc.common.errors.ErrorCategory;
32 import org.openecomp.sdc.common.errors.ErrorCode;
33 import org.openecomp.sdc.common.errors.Messages;
34 import org.openecomp.sdc.common.session.SessionContextProviderFactory;
35 import org.openecomp.sdc.itempermissions.PermissionsManager;
36 import org.openecomp.sdc.itempermissions.PermissionsServices;
37 import org.openecomp.sdc.itempermissions.impl.types.PermissionTypes;
38 import org.openecomp.sdc.itempermissions.type.ItemPermissionsEntity;
39 import org.openecomp.sdc.logging.api.Logger;
40 import org.openecomp.sdc.logging.api.LoggerFactory;
41 import org.openecomp.sdc.notification.dtos.Event;
42 import org.openecomp.sdc.notification.services.NotificationPropagationManager;
43 import org.openecomp.sdc.notification.services.SubscriptionService;
44 import org.openecomp.sdc.versioning.AsdcItemManager;
45 import org.openecomp.sdc.versioning.types.Item;
48 * Created by ayalaben on 6/18/2017.
50 public class PermissionsManagerImpl implements PermissionsManager {
52 private static final Logger LOGGER = LoggerFactory.getLogger(PermissionsManagerImpl.class);
53 private static final String CHANGE_PERMISSIONS = "Change_Item_Permissions";
54 private PermissionsServices permissionsServices;
55 private AsdcItemManager asdcItemManager;
56 private NotificationPropagationManager notifier;
57 private SubscriptionService subscriptionService;
59 public PermissionsManagerImpl(PermissionsServices permissionsServices, AsdcItemManager asdcItemManager,
60 NotificationPropagationManager notificationPropagationManager, SubscriptionService subscriptionService) {
61 this.permissionsServices = permissionsServices;
62 this.asdcItemManager = asdcItemManager;
63 this.notifier = notificationPropagationManager;
64 this.subscriptionService = subscriptionService;
68 public Collection<ItemPermissionsEntity> listItemPermissions(String itemId) {
69 return permissionsServices.listItemPermissions(itemId);
73 public Set<String> listUserPermittedItems(String userId, String permission) {
74 return permissionsServices.listUserPermittedItems(userId, permission);
78 public void updateItemPermissions(String itemId, String permission, Set<String> addedUsersIds, Set<String> removedUsersIds) {
79 String currentUser = SessionContextProviderFactory.getInstance().createInterface().get().getUser().getUserId();
80 if (!permissionsServices.isAllowed(itemId, currentUser, CHANGE_PERMISSIONS)) {
81 throw new CoreException(
82 new ErrorCode.ErrorCodeBuilder().withMessage(Messages.PERMISSIONS_ERROR.getErrorMessage()).withId(Messages.PERMISSIONS_ERROR.name())
83 .withCategory(ErrorCategory.SECURITY).build());
85 if (permission.equals(PermissionTypes.Owner.name())) {
86 if (addedUsersIds.size() == 1) {
87 asdcItemManager.updateOwner(itemId, addedUsersIds.iterator().next());
89 throw new CoreException(new ErrorCode.ErrorCodeBuilder().withMessage(Messages.PERMISSIONS_OWNER_ERROR.getErrorMessage())
90 .withId(Messages.PERMISSIONS_OWNER_ERROR.name()).withCategory(ErrorCategory.SECURITY).build());
93 permissionsServices.updateItemPermissions(itemId, permission, addedUsersIds, removedUsersIds);
94 sendNotifications(itemId, permission, addedUsersIds, removedUsersIds, currentUser);
97 private void sendNotifications(String itemId, String permission, Set<String> addedUsersIds, Set<String> removedUsersIds, String userName) {
98 Item item = asdcItemManager.get(itemId);
99 addedUsersIds.forEach(affectedUser -> {
100 notifyUser(userName, true, item.getName(), itemId, affectedUser, permission);
101 subscriptionService.subscribe(affectedUser, itemId);
103 removedUsersIds.forEach(affectedUser -> {
104 notifyUser(userName, false, item.getName(), itemId, affectedUser, permission);
105 subscriptionService.unsubscribe(affectedUser, itemId);
109 private void notifyUser(String userName, boolean granted, String itemName, String itemId, String affectedUser, String permission) {
110 Map<String, Object> details = new HashMap<>();
111 details.put(PERMISSION_ITEM, permission);
112 details.put(ITEM_ID_PROP, itemId);
113 details.put(ITEM_NAME_PROP, itemName);
114 details.put(PERMISSION_GRANTED, granted);
115 details.put(PERMISSION_USER, userName);
116 PermissionEvent permissionEvent = new PermissionEvent(PERMISSION_CHANGED, affectedUser, details, affectedUser);
118 notifier.directNotification(permissionEvent, affectedUser);
119 } catch (Exception e) {
120 LOGGER.error("Failed to send notification on permission changed for user '" + affectedUser + "'");
125 public boolean isAllowed(String itemId, String userId, String action) {
126 return permissionsServices.isAllowed(itemId, userId, action);
130 public Optional<String> getUserItemPermission(String itemId, String userId) {
131 return permissionsServices.getUserItemPermission(itemId, userId);
135 public void deleteItemPermissions(String itemId) {
136 permissionsServices.deleteItemPermissions(itemId);
139 private class PermissionEvent implements Event {
141 private String eventType;
142 private String originatorId;
143 private Map<String, Object> attributes;
144 private String entityId;
146 private PermissionEvent(String eventType, String originatorId, Map<String, Object> attributes, String entityId) {
147 this.eventType = eventType;
148 this.originatorId = originatorId;
149 this.attributes = attributes;
150 this.entityId = entityId;
154 public String getEventType() {
159 public String getOriginatorId() {
164 public Map<String, Object> getAttributes() {
169 public String getEntityId() {