Security/ Package Name changes
[portal.git] / ecomp-portal-BE-common / src / main / java / org / onap / portalapp / portal / service / PersUserAppServiceImpl.java
diff --git a/ecomp-portal-BE-common/src/main/java/org/onap/portalapp/portal/service/PersUserAppServiceImpl.java b/ecomp-portal-BE-common/src/main/java/org/onap/portalapp/portal/service/PersUserAppServiceImpl.java
new file mode 100644 (file)
index 0000000..39b88f6
--- /dev/null
@@ -0,0 +1,175 @@
+/*-
+ * ============LICENSE_START==========================================
+ * ONAP Portal
+ * ===================================================================
+ * Copyright (C) 2017 AT&T Intellectual Property. All rights reserved.
+ * ===================================================================
+ *
+ * Unless otherwise specified, all software contained herein is licensed
+ * under the Apache License, Version 2.0 (the "License");
+ * you may not use this software except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *             http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * Unless otherwise specified, all documentation contained herein is licensed
+ * under the Creative Commons License, Attribution 4.0 Intl. (the "License");
+ * you may not use this documentation except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *             https://creativecommons.org/licenses/by/4.0/
+ *
+ * Unless required by applicable law or agreed to in writing, documentation
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * ============LICENSE_END============================================
+ *
+ * ECOMP is a trademark and service mark of AT&T Intellectual Property.
+ */
+package org.onap.portalapp.portal.service;
+
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
+
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.context.annotation.EnableAspectJAutoProxy;
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
+import org.hibernate.criterion.Criterion;
+import org.hibernate.criterion.Restrictions;
+import org.onap.portalapp.portal.domain.EPApp;
+import org.onap.portalapp.portal.domain.EPUser;
+import org.onap.portalapp.portal.domain.EPUserApp;
+import org.onap.portalapp.portal.domain.PersUserAppSelection;
+import org.onap.portalapp.portal.domain.PersUserWidgetSelection;
+import org.onap.portalapp.portal.logging.aop.EPMetricsLog;
+import org.onap.portalsdk.core.logging.logic.EELFLoggerDelegate;
+import org.onap.portalsdk.core.service.DataAccessService;
+
+@Service("persUserAppService")
+@Transactional
+@org.springframework.context.annotation.Configuration
+@EnableAspectJAutoProxy
+@EPMetricsLog
+public class PersUserAppServiceImpl implements PersUserAppService {
+
+       private static final String APP_ID = "appId";
+
+       private static final String USER_ID = "userId";
+
+       private static EELFLoggerDelegate logger = EELFLoggerDelegate.getLogger(PersUserAppServiceImpl.class);
+
+       @Autowired
+       private DataAccessService dataAccessService;
+       @Autowired
+       private AdminRolesService adminRolesService;
+       @Autowired
+       private UserRolesService userRolesService;
+
+       /*
+        * (non-Javadoc)
+        * 
+        * @see org.openecomp.portalapp.portal.service.UserAppSelectService#
+        * setAppCatalogSelection(org.openecomp.portalapp.portal.domain.EPUser,
+        * org.openecomp.portalapp.portal.transport.AppCatalogSelection)
+        */
+       @Override
+       public void setPersUserAppValue(EPUser user, EPApp app, boolean select, boolean pending) {
+               if (user == null || app == null)
+                       throw new IllegalArgumentException("setPersUserAppValue: Null values");
+
+               // Find the record for this user-app combo, if any
+               List<PersUserAppSelection> persList = getUsersAppSelection(user, app);
+
+               // Key constraint limits to 1 row
+               PersUserAppSelection persRow = null;
+               if (persList.size() == 1)
+                       persRow = persList.get(0);
+               else
+                       persRow = new PersUserAppSelection(null, user.getId(), app.getId(), null);
+
+               if (app.getOpen()) {
+                       // Pending status is not meaningful for open apps.
+                       if (pending)
+                               logger.error(EELFLoggerDelegate.errorLogger,
+                                               "setPersUserAppValue: invalid request, ignoring set-pending for open app");
+
+                       // Open apps have same behavior for regular and admin users
+                       if (select) {
+                               // Selection of an open app requires a record
+                               persRow.setStatusCode("S"); // show
+                               dataAccessService.saveDomainObject(persRow, null);
+                       } else {
+                               // De-selection of an open app requires no record
+                               if (persRow.getId() != null)
+                                       dataAccessService.deleteDomainObject(persRow, null);
+                       }
+               } else {
+                       // Non-open app.
+
+                       // Pending overrides select.
+                       if (pending) {
+                               persRow.setStatusCode("P");
+                               dataAccessService.saveDomainObject(persRow, null);
+                       } else {
+                               // Behavior depends on Portal (super) admin status, bcos an
+                               // admin can force an app onto the dashboard.
+                               boolean isPortalAdmin = adminRolesService.isSuperAdmin(user);
+                               boolean adminUserHasAppRole = false;
+                               if (isPortalAdmin) {
+                                       List<EPUserApp> roles = userRolesService.getCachedAppRolesForUser(app.getId(), user.getId());
+                                       adminUserHasAppRole = (roles.size() > 0);
+                                       logger.debug(EELFLoggerDelegate.debugLogger, "setPersUserAppValue: app {}, admin user {}, role count {}",
+                                                       app.getId(), user.getId(), roles.size());
+                               }
+
+                               if (select) {
+                                       if (isPortalAdmin) {
+                                               // The special case: portal admin
+                                               persRow.setStatusCode("S"); // show
+                                               dataAccessService.saveDomainObject(persRow, null);
+                                       } else {
+                                               // User has role-based access to the app.
+                                               // Showing an accessible app requires no record.
+                                               if (persRow.getId() != null)
+                                                       dataAccessService.deleteDomainObject(persRow, null);
+                                       }
+                               } // select
+                               else {
+                                       if (isPortalAdmin && !adminUserHasAppRole) {
+                                               // The special case: portal admin, no role
+                                               if (persRow.getId() != null)
+                                                       dataAccessService.deleteDomainObject(persRow, null);
+                                       } else {
+                                               // User has role-based access to the app.
+                                               // Hiding an accessible app requires a record
+                                               persRow.setStatusCode("H"); // hide
+                                               dataAccessService.saveDomainObject(persRow, null);
+                                       }
+                               } // deselect
+                       }
+               }
+       }
+
+       @SuppressWarnings("unchecked")
+       private List<PersUserAppSelection> getUsersAppSelection(EPUser user, EPApp app) {
+               List<Criterion> restrictionsList = new ArrayList<Criterion>();
+               Criterion userIdCriterion = Restrictions.eq("userId", user.getId());
+               Criterion appIdCriterion = Restrictions.eq("appId", app.getId());
+               restrictionsList.add(Restrictions.and(userIdCriterion, appIdCriterion));
+               return (List<PersUserAppSelection>) dataAccessService.getList(PersUserAppSelection.class, null, restrictionsList, null);
+       }
+
+}