fr.inra.agrosyst.services.security

Class AuthorizationServiceImpl

java.lang.Object

fr.inra.agrosyst.services.AbstractAgrosystService

fr.inra.agrosyst.services.security.AuthorizationServiceImpl

All Implemented Interfaces:

AgrosystService, AuthorizationService

Direct Known Subclasses:

AnonymizeServiceImpl, BusinessAuthorizationServiceImpl

public class AuthorizationServiceImpl
extends AbstractAgrosystService
implements AuthorizationService

Author:

Arnaud Thimel : thimel@codelutin.com

Field Summary

Fields

Modifier and Type	Field and Description
protected AgrosystUserTopiaDao	agrosystUserDao
protected AuthenticationService	authenticationService
protected CacheService	cacheService
protected ComputedUserPermissionTopiaDao	computedUserPermissionDao
protected DomainTopiaDao	domainDao
protected DomainService	domainService
static com.google.common.base.Function<Domain,String>	GET_DOMAIN_ENTITY_LABEL
static com.google.common.base.Function<GrowingPlan,String>	GET_GROWING_PLAN_ENTITY_LABEL
static com.google.common.base.Function<GrowingSystem,String>	GET_GROWING_SYSTEM_ENTITY_LABEL
protected GrowingPlanTopiaDao	growingPlanDao
protected GrowingPlanService	growingPlanService
protected GrowingSystemTopiaDao	growingSystemDao
protected GrowingSystemService	growingSystemService
protected NetworkTopiaDao	networkDao
protected NetworkService	networkService
protected TrackerServiceImpl	trackerService
protected UserRoleTopiaDao	userRoleDao

Fields inherited from class fr.inra.agrosyst.services.AbstractAgrosystService

context

Fields inherited from interface fr.inra.agrosyst.api.services.security.AuthorizationService

__PARANAMER_DATA

Constructor Summary

Constructors

Constructor and Description
AuthorizationServiceImpl()

Method Summary

Methods

Modifier and Type	Method and Description
void	addUserRoles(String userId, List<UserRoleDto> userRoles)
boolean	canCreateUser(String authenticationToken)
protected String	checkComputedPermissionFromUserId(String userId)
String	checkComputedPermissions(String authenticationToken)
String	checkComputedPermissions(String authenticationToken, String doAsUserId)
protected List<ComputedUserPermission>	computeDomainResponsiblePermissions(String userId, UserRole role)
protected List<ComputedUserPermission>	computeGrowingPlanResponsiblePermissions(String userId, UserRole role)
protected List<ComputedUserPermission>	computeGrowingSystemDataProcessorPermissions(String userId, UserRole role)
protected List<ComputedUserPermission>	computeIsDataProcessorPermissions(String userId)
protected List<ComputedUserPermission>	computeNetworkResponsiblePermissions(String userId, UserRole role)
protected Set<ComputedUserPermission>	computeUserPermissions(String userId)
protected void	createOrUpdateUserRoles(String userId, List<UserRoleDto> userRoles, Boolean removePreviousRoles)
protected void	doCreateOrUpdateUserRoles(List<UserRoleDto> userRoles, AgrosystUser agrosystUser, com.google.common.collect.ImmutableMap<String,UserRole> rolesIndex, Set<String> rolesIds)
void	dropComputedPermissions(String authenticationToken)
protected void	dropComputedPermissions0(String userId)
List<UserDto>	getDomainResponsibles(String domainCode)
List<UserRoleDto>	getEntityRoles(RoleType roleType, String entityCode)
List<UserDto>	getGrowingPlanResponsibles(String growingPlanCode)
protected String	getUserId()
protected String	getUserIdOrFail(String authenticationToken)
List<UserRoleDto>	getUserRoles(String userId)
protected List<UserRole>	getUserRoles0(RoleType roleType, String entityCode)
protected com.google.common.base.Function<UserRole,UserRoleDto>	getUserRoleToDtoFunction(boolean includeEntity, boolean includeUser)
protected boolean	hasRole(String authenticationToken, RoleType roleType)
protected void	importPz0UserRoles(String userId, List<UserRoleDto> userRoles)
void	importPz0UsersRoles(Map<Class,ImportResults> allResults)
ImportResult	importRoles(InputStream rolesFileStream)
boolean	isAdmin()
boolean	isAdmin(String authenticationToken)
boolean	isIsDataProcessor()
boolean	isIsDataProcessor(String authenticationToken)
protected void	markPermissionsAsDirty(ComputedUserPermissionTopiaDao cupDAO, Iterable<ComputedUserPermission> toDirty)
protected void	objectIsDirty(PermissionObjectType type, String object)
protected void	objectsAreDirty(PermissionObjectType type)
protected void	removePreviousRoles(Boolean removePreviousRoles, com.google.common.collect.ImmutableMap<String,UserRole> rolesIndex, Set<String> rolesIds)
void	saveEntityUserRoles(RoleType roleType, String entityCode, List<UserRoleDto> roleDtos)
void	saveUserRoles(String userId, List<UserRoleDto> userRoles)
List<UserRoleEntityDto>	searchEntities(RoleType roleType, String termRaw, Integer campaign)
List<UserRoleEntityDto>	searchPossibleEntities(RoleType roleType, String termRaw)
void	setAgrosystUserDao(AgrosystUserTopiaDao agrosystUserDao)
void	setAuthenticationService(AuthenticationService authenticationService)
void	setCacheService(CacheService cacheService)
void	setComputedUserPermissionDao(ComputedUserPermissionTopiaDao computedUserPermissionDao)
void	setDomainDao(DomainTopiaDao domainDao)
void	setDomainService(DomainService domainService)
void	setGrowingPlanDao(GrowingPlanTopiaDao growingPlanDao)
void	setGrowingPlanService(GrowingPlanService growingPlanService)
void	setGrowingSystemDao(GrowingSystemTopiaDao growingSystemDao)
void	setGrowingSystemService(GrowingSystemService growingSystemService)
void	setNetworkDao(NetworkTopiaDao networkDao)
void	setNetworkService(NetworkService networkService)
void	setTrackerService(TrackerServiceImpl trackerService)
void	setUserRoleDao(UserRoleTopiaDao userRoleDao)

Methods inherited from class fr.inra.agrosyst.services.AbstractAgrosystService

easyBind, easyBind, easyBindNoDelete, finalize, getConfig, getContext, getPersistenceContext, getSecurityContext, getSecurityContextAsUser, getTransaction, newInstance, setContext

Methods inherited from class java.lang.Object

clone, equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

GET_DOMAIN_ENTITY_LABEL

public static final com.google.common.base.Function<Domain,String> GET_DOMAIN_ENTITY_LABEL

GET_GROWING_PLAN_ENTITY_LABEL

public static final com.google.common.base.Function<GrowingPlan,String> GET_GROWING_PLAN_ENTITY_LABEL

GET_GROWING_SYSTEM_ENTITY_LABEL

public static final com.google.common.base.Function<GrowingSystem,String> GET_GROWING_SYSTEM_ENTITY_LABEL

authenticationService

protected AuthenticationService authenticationService

growingSystemService

protected GrowingSystemService growingSystemService

domainService

protected DomainService domainService

networkService

protected NetworkService networkService

growingPlanService

protected GrowingPlanService growingPlanService

trackerService

protected TrackerServiceImpl trackerService

cacheService

protected CacheService cacheService

userRoleDao

protected UserRoleTopiaDao userRoleDao

agrosystUserDao

protected AgrosystUserTopiaDao agrosystUserDao

computedUserPermissionDao

protected ComputedUserPermissionTopiaDao computedUserPermissionDao

networkDao

protected NetworkTopiaDao networkDao

domainDao

protected DomainTopiaDao domainDao

growingPlanDao

protected GrowingPlanTopiaDao growingPlanDao

growingSystemDao

protected GrowingSystemTopiaDao growingSystemDao

Constructor Detail

AuthorizationServiceImpl

public AuthorizationServiceImpl()

Method Detail

setAuthenticationService

public void setAuthenticationService(AuthenticationService authenticationService)

setGrowingSystemService

public void setGrowingSystemService(GrowingSystemService growingSystemService)

setCacheService

public void setCacheService(CacheService cacheService)

setDomainService

public void setDomainService(DomainService domainService)

setNetworkService

public void setNetworkService(NetworkService networkService)

setGrowingPlanService

public void setGrowingPlanService(GrowingPlanService growingPlanService)

setTrackerService

public void setTrackerService(TrackerServiceImpl trackerService)

setUserRoleDao

public void setUserRoleDao(UserRoleTopiaDao userRoleDao)

setAgrosystUserDao

public void setAgrosystUserDao(AgrosystUserTopiaDao agrosystUserDao)

setComputedUserPermissionDao

public void setComputedUserPermissionDao(ComputedUserPermissionTopiaDao computedUserPermissionDao)

setNetworkDao

public void setNetworkDao(NetworkTopiaDao networkDao)

setDomainDao

public void setDomainDao(DomainTopiaDao domainDao)

setGrowingPlanDao

public void setGrowingPlanDao(GrowingPlanTopiaDao growingPlanDao)

setGrowingSystemDao

public void setGrowingSystemDao(GrowingSystemTopiaDao growingSystemDao)

getUserId

protected String getUserId()

getUserIdOrFail

protected String getUserIdOrFail(String authenticationToken)

hasRole

protected boolean hasRole(String authenticationToken,
              RoleType roleType)

isAdmin

public boolean isAdmin()

isAdmin

public boolean isAdmin(String authenticationToken)

Specified by:

isAdmin in interface AuthorizationService

isIsDataProcessor

public boolean isIsDataProcessor()

isIsDataProcessor

public boolean isIsDataProcessor(String authenticationToken)

Specified by:

isIsDataProcessor in interface AuthorizationService

canCreateUser

public boolean canCreateUser(String authenticationToken)

Specified by:

canCreateUser in interface AuthorizationService

dropComputedPermissions

public void dropComputedPermissions(String authenticationToken)

Specified by:

dropComputedPermissions in interface AuthorizationService

dropComputedPermissions0

protected void dropComputedPermissions0(String userId)

checkComputedPermissions

public String checkComputedPermissions(String authenticationToken,
                              String doAsUserId)

Specified by:

checkComputedPermissions in interface AuthorizationService

checkComputedPermissions

public String checkComputedPermissions(String authenticationToken)

Specified by:

checkComputedPermissions in interface AuthorizationService

checkComputedPermissionFromUserId

protected String checkComputedPermissionFromUserId(String userId)

getUserRoleToDtoFunction

protected com.google.common.base.Function<UserRole,UserRoleDto> getUserRoleToDtoFunction(boolean includeEntity,
                                                                             boolean includeUser)

getUserRoles

public List<UserRoleDto> getUserRoles(String userId)

Specified by:

getUserRoles in interface AuthorizationService

getEntityRoles

public List<UserRoleDto> getEntityRoles(RoleType roleType,
                               String entityCode)

Specified by:

getEntityRoles in interface AuthorizationService

getUserRoles0

protected List<UserRole> getUserRoles0(RoleType roleType,
                           String entityCode)

searchPossibleEntities

public List<UserRoleEntityDto> searchPossibleEntities(RoleType roleType,
                                             String termRaw)

Specified by:

searchPossibleEntities in interface AuthorizationService

searchEntities

public List<UserRoleEntityDto> searchEntities(RoleType roleType,
                                     String termRaw,
                                     Integer campaign)

Specified by:

searchEntities in interface AuthorizationService

saveUserRoles

public void saveUserRoles(String userId,
                 List<UserRoleDto> userRoles)

Specified by:

saveUserRoles in interface AuthorizationService

addUserRoles

public void addUserRoles(String userId,
                List<UserRoleDto> userRoles)

Specified by:

addUserRoles in interface AuthorizationService

createOrUpdateUserRoles

protected void createOrUpdateUserRoles(String userId,
                           List<UserRoleDto> userRoles,
                           Boolean removePreviousRoles)

removePreviousRoles

protected void removePreviousRoles(Boolean removePreviousRoles,
                       com.google.common.collect.ImmutableMap<String,UserRole> rolesIndex,
                       Set<String> rolesIds)

doCreateOrUpdateUserRoles

protected void doCreateOrUpdateUserRoles(List<UserRoleDto> userRoles,
                             AgrosystUser agrosystUser,
                             com.google.common.collect.ImmutableMap<String,UserRole> rolesIndex,
                             Set<String> rolesIds)

saveEntityUserRoles

public void saveEntityUserRoles(RoleType roleType,
                       String entityCode,
                       List<UserRoleDto> roleDtos)

Specified by:

saveEntityUserRoles in interface AuthorizationService

getDomainResponsibles

public List<UserDto> getDomainResponsibles(String domainCode)

Specified by:

getDomainResponsibles in interface AuthorizationService

getGrowingPlanResponsibles

public List<UserDto> getGrowingPlanResponsibles(String growingPlanCode)

Specified by:

getGrowingPlanResponsibles in interface AuthorizationService

computeUserPermissions

protected Set<ComputedUserPermission> computeUserPermissions(String userId)

computeIsDataProcessorPermissions

protected List<ComputedUserPermission> computeIsDataProcessorPermissions(String userId)

computeGrowingSystemDataProcessorPermissions

protected List<ComputedUserPermission> computeGrowingSystemDataProcessorPermissions(String userId,
                                                                        UserRole role)

computeGrowingPlanResponsiblePermissions

protected List<ComputedUserPermission> computeGrowingPlanResponsiblePermissions(String userId,
                                                                    UserRole role)

computeDomainResponsiblePermissions

protected List<ComputedUserPermission> computeDomainResponsiblePermissions(String userId,
                                                               UserRole role)

computeNetworkResponsiblePermissions

protected List<ComputedUserPermission> computeNetworkResponsiblePermissions(String userId,
                                                                UserRole role)

markPermissionsAsDirty

protected void markPermissionsAsDirty(ComputedUserPermissionTopiaDao cupDAO,
                          Iterable<ComputedUserPermission> toDirty)

objectsAreDirty

protected void objectsAreDirty(PermissionObjectType type)

objectIsDirty

protected void objectIsDirty(PermissionObjectType type,
                 String object)

importRoles

public ImportResult importRoles(InputStream rolesFileStream)

Specified by:

importRoles in interface AuthorizationService

importPz0UserRoles

protected void importPz0UserRoles(String userId,
                      List<UserRoleDto> userRoles)

importPz0UsersRoles

public void importPz0UsersRoles(Map<Class,ImportResults> allResults)

Specified by:

importPz0UsersRoles in interface AuthorizationService