auth/auth-gui/src/main/java/org/onap/aaf/auth/gui/pages/RoleDetail.java

   1 /**
   2  * ============LICENSE_START====================================================
   3  * org.onap.aaf
   4  * ===========================================================================
   5  * Copyright (c) 2018 AT&T Intellectual Property. All rights reserved.
   6  * ===========================================================================
   7  * Licensed under the Apache License, Version 2.0 (the "License");
   8  * you may not use this file except in compliance with the License.
   9  * You may obtain a copy of the License at
  10  *
  11  *      http://www.apache.org/licenses/LICENSE-2.0
  12  *
  13  * Unless required by applicable law or agreed to in writing, software
  14  * distributed under the License is distributed on an "AS IS" BASIS,
  15  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  16  * See the License for the specific language governing permissions and
  17  * limitations under the License.
  18  * ============LICENSE_END====================================================
  19  *
  20  */
  21
  22 package org.onap.aaf.auth.gui.pages;
  23
  24 import java.io.IOException;
  25 import java.net.ConnectException;
  26 import java.util.ArrayList;
  27 import java.util.List;
  28
  29 import org.onap.aaf.auth.env.AuthzEnv;
  30 import org.onap.aaf.auth.env.AuthzTrans;
  31 import org.onap.aaf.auth.gui.AAF_GUI;
  32 import org.onap.aaf.auth.gui.BreadCrumbs;
  33 import org.onap.aaf.auth.gui.Page;
  34 import org.onap.aaf.auth.gui.Table;
  35 import org.onap.aaf.auth.gui.Table.Cells;
  36 import org.onap.aaf.auth.gui.table.AbsCell;
  37 import org.onap.aaf.auth.gui.table.CheckBoxCell;
  38 import org.onap.aaf.auth.gui.table.CheckBoxCell.ALIGN;
  39 import org.onap.aaf.auth.gui.table.RefCell;
  40 import org.onap.aaf.auth.gui.table.TableData;
  41 import org.onap.aaf.auth.gui.table.TextCell;
  42 import org.onap.aaf.auth.gui.table.TextInputCell;
  43 import org.onap.aaf.auth.validation.Validator;
  44 import org.onap.aaf.cadi.CadiException;
  45 import org.onap.aaf.cadi.aaf.AAFPermission;
  46 import org.onap.aaf.cadi.client.Future;
  47 import org.onap.aaf.cadi.client.Rcli;
  48 import org.onap.aaf.cadi.client.Retryable;
  49 import org.onap.aaf.misc.env.APIException;
  50 import org.onap.aaf.misc.env.Env;
  51 import org.onap.aaf.misc.env.Slot;
  52 import org.onap.aaf.misc.env.TimeTaken;
  53 import org.onap.aaf.misc.env.util.Chrono;
  54 import org.onap.aaf.misc.xgen.Cache;
  55 import org.onap.aaf.misc.xgen.Mark;
  56 import org.onap.aaf.misc.xgen.html.HTMLGen;
  57
  58 import aaf.v2_0.Pkey;
  59 import aaf.v2_0.Role;
  60 import aaf.v2_0.Roles;
  61 import aaf.v2_0.UserRole;
  62 import aaf.v2_0.UserRoles;
  63
  64 /**
  65  * Detail Page for Permissions
  66  *
  67  * @author Jonathan
  68  *
  69  */
  70 public class RoleDetail extends Page {
  71         public static final String HREF = "/gui/roledetail";
  72         public static final String NAME = "RoleDetail";
  73         private static final String BLANK = "";
  74
  75         public RoleDetail(final AAF_GUI gui, Page ... breadcrumbs) throws APIException, IOException {
  76                 super(gui.env, NAME, HREF, new String[] {"role","ns"},
  77                                 new BreadCrumbs(breadcrumbs),
  78                                 new Table<AAF_GUI,AuthzTrans>("Role Details",gui.env.newTransNoAvg(),
  79                                                 new Model(gui.env),"class=detail")
  80                         );
  81         }
  82
  83         /**
  84          * Implement the table content for Permissions Detail
  85          *
  86          * @author Jonathan
  87          *
  88          */
  89         private static class Model extends TableData<AAF_GUI,AuthzTrans> {
  90                 private static final String ACCESS = "access";
  91                 private Slot sRoleName,sRole,sUserRole,sMayWrite,sMayApprove,sMark,sNS;
  92                 public Model(AuthzEnv env) {
  93                         sRoleName = env.slot(NAME+".role");
  94                         sRole = env.slot(NAME+".data.role");
  95                         sUserRole = env.slot(NAME+".data.userrole");
  96                         sMayWrite = env.slot(NAME+"mayWrite");
  97                         sMayApprove = env.slot(NAME+"mayApprove");
  98                         sMark = env.slot(NAME+"mark");
  99                         sNS = env.slot(NAME+".ns");
 100                 }
 101
 102                 /* (non-Javadoc)
 103                  * @see org.onap.aaf.auth.gui.table.TableData#prefix(org.onap.aaf.misc.xgen.html.State, com.att.inno.env.Trans, org.onap.aaf.misc.xgen.Cache, org.onap.aaf.misc.xgen.html.HTMLGen)
 104                  */
 105                 @Override
 106                 public void prefix(final AAF_GUI gui, final AuthzTrans trans, final Cache<HTMLGen> cache, final HTMLGen hgen) {
 107                         final String pRole = trans.get(sRoleName, null);
 108                         Validator v = new Validator();
 109                         v.role(pRole);
 110                         if(v.err()) {
 111                                 trans.warn().printf("Error in PermDetail Request: %s", v.errs());
 112                                 return;
 113                         }
 114
 115
 116                         try {
 117                                 gui.clientAsUser(trans.getUserPrincipal(), new Retryable<Boolean>() {
 118                                         @Override
 119                                         public Boolean code(Rcli<?> client) throws CadiException, ConnectException, APIException {
 120                                                 TimeTaken tt = trans.start("AAF Role Details",Env.REMOTE);
 121                                                 try {
 122                                                         Future<Roles> fr = client.read("/authz/roles/"+pRole+"?ns",gui.getDF(Roles.class));
 123                                                         Future<UserRoles> fur = client.read("/authz/userRoles/role/"+pRole,gui.getDF(UserRoles.class));
 124                                                         if(fr.get(AAF_GUI.TIMEOUT)) {
 125                                                                 List<Role> roles = fr.value.getRole();
 126                                                                 if(!roles.isEmpty()) {
 127                                                                         Role role = fr.value.getRole().get(0);
 128                                                                         trans.put(sRole, role);
 129                                                                         Boolean mayWrite = trans.fish(new AAFPermission(role.getNs(),ACCESS,":role:"+role.getName(),"write"));
 130                                                                         trans.put(sMayWrite,mayWrite);
 131                                                                         Boolean mayApprove = trans.fish(new AAFPermission(role.getNs(),ACCESS,":role:"+role.getName(),"approve"));
 132                                                                         trans.put(sMayApprove, mayApprove);
 133
 134                                                                         if(mayWrite || mayApprove) {
 135                                                                                 Mark js = new Mark();
 136                                                                                 Mark fn = new Mark();
 137                                                                                 hgen.js(js)
 138                                                                                         .function(fn,"touchedDesc")
 139                                                                                         .li("d=document.getElementById('descText');",
 140                                                                                                 "if (d.orig == undefined ) {",
 141                                                                                                 "  d.orig = d.value;",
 142                                                                                                 "  d.addEventListener('keyup',changedDesc);",
 143                                                                                                 "  d.removeEventListener('keypress',touchedDesc);",
 144                                                                                                 "}").end(fn)
 145                                                                                         .function(fn,"changedDesc")
 146                                                                                         .li(
 147                                                                                                 "dcb=document.getElementById('descCB');",
 148                                                                                                 "d=document.getElementById('descText');",
 149                                                                                                 "dcb.checked= (d.orig != d.value)"
 150                                                                                         ).end(fn)
 151                                                                                         .end(js);
 152
 153                                                                                 Mark mark = new Mark();
 154                                                                                 hgen.incr(mark,"form","method=post");
 155                                                                                 trans.put(sMark, mark);
 156                                                                         }
 157                                                                 }
 158                                                         } else {
 159                                                                 trans.error().printf("Error calling AAF for Roles in GUI, Role Detail %d: %s",fr.code(),fr.body());
 160                                                                 return false;
 161                                                         }
 162
 163                                                         if(fur.get(AAF_GUI.TIMEOUT)) {
 164                                                                 trans.put(sUserRole, fur.value.getUserRole());
 165                                                         } else {
 166                                                                 trans.error().printf("Error calling AAF for UserRoles in GUI, Role Detail %d: %s",fr.code(),fr.body());
 167                                                                 return false;
 168                                                         }
 169
 170                                                         return true;
 171                                                 } finally {
 172                                                         tt.done();
 173                                                 }
 174                                         }
 175                                 });
 176                         } catch (Exception e) {
 177                                 trans.error().log(e);
 178                         }
 179                 }
 180
 181                 @Override
 182                 public Cells get(final AuthzTrans trans, final AAF_GUI gui) {
 183                         final String pRole = trans.get(sRoleName, null);
 184                         final Role role = trans.get(sRole,null);
 185                         ArrayList<AbsCell[]> rv = new ArrayList<>();
 186
 187                         if(role!=null) {
 188                                 boolean mayWrite = trans.get(sMayWrite, false);
 189                                 boolean mayApprove = trans.get(sMayApprove, false);
 190
 191                                 String desc = (role.getDescription()!=null?role.getDescription():BLANK);
 192                                 rv.add(new AbsCell[]{
 193                                                 new TextCell("Role:","width=45%"),
 194                                                 new TextCell(pRole)});
 195                                 if(mayWrite) {
 196                                         rv.add(new AbsCell[]{
 197                                                         new TextCell("Description:","width=45%"),
 198                                                         new TextInputCell("description","textInput",desc,"id=descText","onkeypress=touchedDesc()"),
 199                                                         new CheckBoxCell("desc",ALIGN.left, "changed","id=descCB", "style=visibility: hidden"),
 200                                                         });
 201                                         rv.add(AbsCell.HLINE);
 202                                         rv.add(new AbsCell[] {
 203                                                         new TextCell("Associated Permissions:","width=25%"),
 204                                                         new TextCell("UnGrant","width=10%"),
 205                                                 });
 206                                 } else {
 207                                         rv.add(new AbsCell[]{
 208                                                         new TextCell("Description:","width=45%"),
 209                                                         new TextCell(desc)});
 210                                 }
 211                                 boolean protectedRole = role.getName().endsWith(".owner") ||
 212                                                                                 role.getName().endsWith(".admin");
 213                                 boolean first = true;
 214                                 for(Pkey r : role.getPerms()) {
 215                                         String key=r.getType() + '|' + r.getInstance() + '|' + r.getAction();
 216                                         if(mayWrite) {
 217                                                 rv.add(new AbsCell[] {
 218                                                         AbsCell.Null,
 219                                                         protectedRole && r.getType().endsWith(".access")
 220                                                                 ?new TextCell("protected","class=protected") // Do not allow ungranting of basic NS perms
 221                                                                 :new CheckBoxCell("perm.ungrant",key),
 222                                                         new TextCell("","width=10%"),
 223                                                         new TextCell(key)
 224                                                 });
 225                                         } else {
 226                                                 if(first) {
 227                                                         rv.add(new AbsCell[] {
 228                                                                         new TextCell("Associated Permissions:","width=45%"),
 229                                                                         new TextCell(key)
 230                                                                 });
 231                                                         first=false;
 232                                                 } else {
 233                                                         rv.add(new AbsCell[] {
 234                                                                         AbsCell.Null,
 235                                                                         new TextCell(key)
 236                                                         });
 237                                                 }
 238                                         }
 239                                 }
 240
 241                                 if(mayApprove) {
 242                                         rv.add(AbsCell.HLINE);
 243
 244                                         //
 245                                         rv.add(new AbsCell[] {
 246                                                         new TextCell("Users in Role:","width=25%"),
 247                                                         new TextCell("Delete","width=10%"),
 248                                                         new TextCell("Extend","width=10%")
 249                                                 });
 250
 251                                         List<UserRole> userroles = trans.get(sUserRole,null);
 252                                         if(userroles!=null) {
 253                                                 for(UserRole ur : userroles) {
 254                                                         String tag = "userrole";
 255
 256                                                         rv.add(new AbsCell[] {
 257                                                                 AbsCell.Null,
 258                                                                 new CheckBoxCell(tag+".delete", ur.getUser()),
 259                                                                 new CheckBoxCell(tag+".extend", ur.getUser()),
 260                                                                 new TextCell(ur.getUser()),
 261                                                                 new TextCell(Chrono.dateOnlyStamp(ur.getExpires())
 262                                                         )});
 263                                                 }
 264                                         }
 265                                 }
 266
 267                                 // History
 268                                 rv.add(new AbsCell[] {
 269                                                 new RefCell("See History",RoleHistory.HREF + "?role=" + pRole,false)
 270                                         });
 271                         } else {
 272                                 rv.add(new AbsCell[]{
 273                                                 new TextCell("Role:"),
 274                                                 new TextCell(pRole)});
 275
 276                                 rv.add(new AbsCell[] {new TextCell("*** Data Unavailable ***")});
 277                         }
 278                         return new Cells(rv, null);
 279                 }
 280
 281                 /* (non-Javadoc)
 282                  * @see org.onap.aaf.auth.gui.table.TableData#postfix(org.onap.aaf.misc.xgen.html.State, com.att.inno.env.Trans, org.onap.aaf.misc.xgen.Cache, org.onap.aaf.misc.xgen.html.HTMLGen)
 283                  */
 284                 @Override
 285                 public void postfix(AAF_GUI state, AuthzTrans trans, final Cache<HTMLGen> cache, final HTMLGen hgen) {
 286                         final Mark mark = trans.get(sMark, null);
 287                         if(mark!=null) {
 288                                 hgen.tagOnly("input", "type=submit", "value=Submit");
 289                                 final String pNS = trans.get(sNS, null);
 290                                 if(pNS!=null && pNS.length()>0) {
 291                                         hgen.leaf(mark,HTMLGen.A,"href="+NsDetail.HREF+"?ns="+pNS,"class=greenbutton").text("Back").end(mark);
 292                                 }
 293                                 hgen.end(mark);
 294                         }
 295
 296                 }
 297         }
 298 }
 299