/*-
 * ============LICENSE_START==========================================
 * ONAP Portal
 * ===================================================================
 * Copyright (C) 2017 AT&T Intellectual Property. All rights reserved.
 * ===================================================================
 *
 * Unless otherwise specified, all software contained herein is licensed
 * under the Apache License, Version 2.0 (the "License");
 * you may not use this software except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *             http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 *
 * Unless otherwise specified, all documentation contained herein is licensed
 * under the Creative Commons License, Attribution 4.0 Intl. (the "License");
 * you may not use this documentation except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *             https://creativecommons.org/licenses/by/4.0/
 *
 * Unless required by applicable law or agreed to in writing, documentation
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 *
 * ============LICENSE_END============================================
 *
 * 
 */
package org.onap.portalapp.portal.service;

import java.util.ArrayList;
import java.util.List;

import org.hibernate.criterion.Criterion;
import org.hibernate.criterion.Restrictions;
import org.onap.portalapp.portal.domain.EPApp;
import org.onap.portalapp.portal.domain.EPUser;
import org.onap.portalapp.portal.domain.EPUserApp;
import org.onap.portalapp.portal.domain.PersUserAppSelection;
import org.onap.portalapp.portal.logging.aop.EPMetricsLog;
import org.onap.portalsdk.core.logging.logic.EELFLoggerDelegate;
import org.onap.portalsdk.core.service.DataAccessService;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.annotation.EnableAspectJAutoProxy;
import org.springframework.stereotype.Service;
import org.springframework.transaction.annotation.Transactional;

@Service("persUserAppService")
@Transactional
@org.springframework.context.annotation.Configuration
@EnableAspectJAutoProxy
@EPMetricsLog
public class PersUserAppServiceImpl implements PersUserAppService {

	private static final String APP_ID = "appId";

	private static final String USER_ID = "userId";

	private static EELFLoggerDelegate logger = EELFLoggerDelegate.getLogger(PersUserAppServiceImpl.class);

	@Autowired
	private DataAccessService dataAccessService;
	@Autowired
	private AdminRolesService adminRolesService;
	@Autowired
	private UserRolesService userRolesService;

	/*
	 * (non-Javadoc)
	 * 
	 * @see org.onap.portalapp.portal.service.UserAppSelectService#
	 * setAppCatalogSelection(org.onap.portalapp.portal.domain.EPUser,
	 * org.onap.portalapp.portal.transport.AppCatalogSelection)
	 */
	@Override
	public void setPersUserAppValue(EPUser user, EPApp app, boolean select, boolean pending) {
		if (user == null || app == null)
			throw new IllegalArgumentException("setPersUserAppValue: Null values");

		// Find the record for this user-app combo, if any
		List<PersUserAppSelection> persList = getUsersAppSelection(user, app);

		// Key constraint limits to 1 row
		PersUserAppSelection persRow = null;
		if (persList.size() == 1)
			persRow = persList.get(0);
		else
			persRow = new PersUserAppSelection(null, user.getId(), app.getId(), null);

		if (app.getOpen()) {
			// Pending status is not meaningful for open apps.
			if (pending)
				logger.error(EELFLoggerDelegate.errorLogger,
						"setPersUserAppValue: invalid request, ignoring set-pending for open app");

			// Open apps have same behavior for regular and admin users
			if (select) {
				// Selection of an open app requires a record
				persRow.setStatusCode("S"); // show
				dataAccessService.saveDomainObject(persRow, null);
			} else {
				// De-selection of an open app requires no record
				if (persRow.getId() != null)
					dataAccessService.deleteDomainObject(persRow, null);
			}
		} else {
			// Non-open app.

			// Pending overrides select.
			if (pending) {
				persRow.setStatusCode("P");
				dataAccessService.saveDomainObject(persRow, null);
			} else {
				// Behavior depends on Portal (super) admin status, bcos an
				// admin can force an app onto the dashboard.
				boolean isPortalAdmin = adminRolesService.isSuperAdmin(user);
				boolean adminUserHasAppRole = false;
				if (isPortalAdmin) {
					List<EPUserApp> roles = userRolesService.getCachedAppRolesForUser(app.getId(), user.getId());
					adminUserHasAppRole = (roles.size() > 0);
					logger.debug(EELFLoggerDelegate.debugLogger, "setPersUserAppValue: app {}, admin user {}, role count {}",
							app.getId(), user.getId(), roles.size());
				}

				if (select) {
					if (isPortalAdmin) {
						// The special case: portal admin
						persRow.setStatusCode("S"); // show
						dataAccessService.saveDomainObject(persRow, null);
					} else {
						// User has role-based access to the app.
						// Showing an accessible app requires no record.
						if (persRow.getId() != null)
							dataAccessService.deleteDomainObject(persRow, null);
					}
				} // select
				else {
					if (isPortalAdmin && !adminUserHasAppRole) {
						// The special case: portal admin, no role
						if (persRow.getId() != null)
							dataAccessService.deleteDomainObject(persRow, null);
					} else {
						// User has role-based access to the app.
						// Hiding an accessible app requires a record
						persRow.setStatusCode("H"); // hide
						dataAccessService.saveDomainObject(persRow, null);
					}
				} // deselect
			}
		}
	}

	@SuppressWarnings("unchecked")
	private List<PersUserAppSelection> getUsersAppSelection(EPUser user, EPApp app) {
		List<Criterion> restrictionsList = new ArrayList<Criterion>();
		Criterion userIdCriterion = Restrictions.eq("userId", user.getId());
		Criterion appIdCriterion = Restrictions.eq("appId", app.getId());
		restrictionsList.add(Restrictions.and(userIdCriterion, appIdCriterion));
		return (List<PersUserAppSelection>) dataAccessService.getList(PersUserAppSelection.class, null, restrictionsList, null);
	}

}