087ab952f7aac7059cf4bd3b63444ac4b09cc6cc
[aaf/authz.git] / auth / auth-batch / src / main / java / org / onap / aaf / auth / batch / update / Remove.java
1 /**
2  * ============LICENSE_START====================================================
3  * org.onap.aaf
4  * ===========================================================================
5  * Copyright (c) 2018 AT&T Intellectual Property. All rights reserved.
6  * ===========================================================================
7  * Licensed under the Apache License, Version 2.0 (the "License");
8  * you may not use this file except in compliance with the License.
9  * You may obtain a copy of the License at
10  *
11  *      http://www.apache.org/licenses/LICENSE-2.0
12  *
13  * Unless required by applicable law or agreed to in writing, software
14  * distributed under the License is distributed on an "AS IS" BASIS,
15  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16  * See the License for the specific language governing permissions and
17  * limitations under the License.
18  * ============LICENSE_END====================================================
19  *
20  */
21
22 package org.onap.aaf.auth.batch.update;
23
24 import java.io.File;
25 import java.io.IOException;
26 import java.nio.ByteBuffer;
27 import java.text.SimpleDateFormat;
28 import java.util.ArrayList;
29 import java.util.Date;
30 import java.util.List;
31
32 import org.onap.aaf.auth.batch.Batch;
33 import org.onap.aaf.auth.batch.BatchPrincipal;
34 import org.onap.aaf.auth.batch.helpers.Approval;
35 import org.onap.aaf.auth.batch.helpers.CQLBatch;
36 import org.onap.aaf.auth.batch.helpers.CQLBatchLoop;
37 import org.onap.aaf.auth.batch.helpers.Cred;
38 import org.onap.aaf.auth.batch.helpers.Future;
39 import org.onap.aaf.auth.batch.helpers.LastNotified;
40 import org.onap.aaf.auth.batch.helpers.UserRole;
41 import org.onap.aaf.auth.batch.helpers.X509;
42 import org.onap.aaf.auth.dao.CassAccess;
43 import org.onap.aaf.auth.dao.cass.CertDAO;
44 import org.onap.aaf.auth.dao.cass.CredDAO;
45 import org.onap.aaf.auth.dao.cass.HistoryDAO;
46 import org.onap.aaf.auth.dao.cass.UserRoleDAO;
47 import org.onap.aaf.auth.env.AuthzTrans;
48 import org.onap.aaf.auth.org.OrganizationException;
49 import org.onap.aaf.cadi.CadiException;
50 import org.onap.aaf.cadi.client.Holder;
51 import org.onap.aaf.cadi.util.CSV;
52 import org.onap.aaf.misc.env.APIException;
53 import org.onap.aaf.misc.env.Env;
54 import org.onap.aaf.misc.env.TimeTaken;
55 import org.onap.aaf.misc.env.Trans;
56 import org.onap.aaf.misc.env.util.Chrono;
57
58 public class Remove extends Batch {
59     private final AuthzTrans noAvg;
60     private HistoryDAO historyDAO;
61     private CQLBatch cqlBatch;
62
63     public Remove(AuthzTrans trans) throws APIException, IOException, OrganizationException {
64         super(trans.env());
65         trans.info().log("Starting Connection Process");
66
67         noAvg = env.newTransNoAvg();
68         noAvg.setUser(new BatchPrincipal("Remove"));
69
70         TimeTaken tt0 = trans.start("Cassandra Initialization", Env.SUB);
71         try {
72             historyDAO = new HistoryDAO(trans, cluster, CassAccess.KEYSPACE);
73             TimeTaken tt2 = trans.start("Connect to Cluster", Env.REMOTE);
74             try {
75                 session = historyDAO.getSession(trans);
76             } finally {
77                 tt2.done();
78             }
79             cqlBatch = new CQLBatch(noAvg.info(),session);
80         } finally {
81             tt0.done();
82         }
83     }
84
85     @Override
86     protected void run(AuthzTrans trans) {
87
88         // Create Intermediate Output
89         File logDir = logDir();
90
91         List<File> remove = new ArrayList<>();
92         if(args().length>0) {
93             for(int i=0;i<args().length;++i) {
94                 remove.add(new File(logDir, args()[i]));
95             }
96         } else {
97             remove.add(new File(logDir,"Delete"+Chrono.dateOnlyStamp()+".csv"));
98         }
99
100         for(File f : remove) {
101             trans.init().log("Processing File:",f.getAbsolutePath());
102         }
103
104         final Holder<Boolean> ur = new Holder<>(false);
105         final Holder<Boolean> cred = new Holder<>(false);
106         final Holder<Boolean> x509 = new Holder<>(false);
107         final Holder<String> memoFmt = new Holder<String>("");
108         final HistoryDAO.Data hdd = new HistoryDAO.Data();
109         final String orgName = trans.org().getName();
110
111         hdd.action="delete";
112         hdd.reconstruct = ByteBuffer.allocate(0);
113         hdd.user = noAvg.user();
114         SimpleDateFormat sdf = new SimpleDateFormat("yyyyMM");
115         hdd.yr_mon = Integer.parseInt(sdf.format(new Date()));
116
117         try {
118             final CQLBatchLoop cbl = new CQLBatchLoop(cqlBatch,50,dryRun);
119             for(File f : remove) {
120                 trans.info().log("Processing ",f.getAbsolutePath(),"for Deletions");
121                 if(f.exists()) {
122                     CSV removeCSV = new CSV(env.access(),f);
123                     try {
124                         removeCSV.visit( row -> {
125                             switch(row.get(0)) {
126                                 case "info":
127                                     switch(row.get(1)) {
128                                         case "Delete":
129                                             memoFmt.set("%s expired from %s on %s");
130                                             break;
131                                         case "NotInOrgDelete":
132                                             memoFmt.set("Identity %s was removed from %s on %s");
133                                             break;
134                                     }
135                                     break;
136                                 case "ur":
137                                     if(!ur.get()) {
138                                         ur.set(true);
139                                     }
140                                     //TODO If deleted because Role is no longer there, double check...
141
142                                     UserRole.batchDelete(cbl.inc(),row);
143                                     hdd.target=UserRoleDAO.TABLE;
144                                     hdd.subject=UserRole.histSubject(row);
145                                     hdd.memo=UserRole.histMemo(memoFmt.get(), row);
146                                     historyDAO.createBatch(cbl.inc(), hdd);
147                                     break;
148                                 case "cred":
149                                     if(!cred.get()) {
150                                         cred.set(true);
151                                     }
152                                     Cred.batchDelete(cbl.inc(),row);
153                                     hdd.target=CredDAO.TABLE;
154                                     hdd.subject=Cred.histSubject(row);
155                                     hdd.memo=Cred.histMemo(memoFmt.get(), orgName,row);
156                                     historyDAO.createBatch(cbl.inc(), hdd);
157                                     break;
158                                 case "x509":
159                                     if(!x509.get()) {
160                                         x509.set(true);
161                                     }
162                                     X509.batchDelete(cbl.inc(),row);
163                                     hdd.target="x509";
164                                     hdd.subject=X509.histSubject(row);
165                                     hdd.memo=X509.histMemo(memoFmt.get(),row);
166                                     historyDAO.createBatch(cbl.inc(), hdd);
167                                     break;
168                                 case "future":
169                                     // Not cached
170                                     Future.deleteByIDBatch(cbl.inc(),row.get(1));
171                                     break;
172                                 case "approval":
173                                     // Not cached
174                                     Approval.deleteByIDBatch(cbl.inc(),row.get(1));
175                                     break;
176                                 case "notified":
177                                     LastNotified.delete(cbl.inc(),row);
178                                     break;
179                             }
180                         });
181                         cbl.flush();
182                     } catch (IOException | CadiException e) {
183                         e.printStackTrace();
184                     }
185                 } else {
186                     trans.error().log("File",f.getAbsolutePath(),"does not exist.");
187                 }
188             }
189         } finally {
190             TimeTaken tt = trans.start("Touch UR,Cred and Cert Caches",Trans.REMOTE);
191             try {
192                 if(ur.get()) {
193                     cqlBatch.touch(UserRoleDAO.TABLE, 0, UserRoleDAO.CACHE_SEG, dryRun);
194                 }
195                 if(cred.get()) {
196                     cqlBatch.touch(CredDAO.TABLE, 0, CredDAO.CACHE_SEG, dryRun);
197                 }
198                 if(x509.get()) {
199                     cqlBatch.touch(CertDAO.TABLE, 0, CertDAO.CACHE_SEG, dryRun);
200                 }
201             } finally {
202                 tt.done();
203             }
204         }
205     }
206
207     @Override
208     protected void _close(AuthzTrans trans) {
209         session.close();
210     }
211
212 }