de.decidr.model.acl.asserters.UserIsTenantMemberAsserter.java Source code

Introduction

Here is the source code for de.decidr.model.acl.asserters.UserIsTenantMemberAsserter.java

Source

/*
 * The DecidR Development Team licenses this file to you under
 * the Apache License, Version 2.0 (the "License"); you may
 * not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 * http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing,
 * software distributed under the License is distributed on an
 * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 * KIND, either express or implied. See the License for the
 * specific language governing permissions and limitations
 * under the License.
 */
package de.decidr.model.acl.asserters;

import org.hibernate.Query;

import de.decidr.model.DecidrGlobals;
import de.decidr.model.acl.access.TenantAccess;
import de.decidr.model.acl.permissions.Permission;
import de.decidr.model.acl.roles.Role;
import de.decidr.model.acl.roles.UserRole;
import de.decidr.model.commands.TransactionalCommand;
import de.decidr.model.exceptions.TransactionException;
import de.decidr.model.transactions.TransactionStartedEvent;

/**
 * Asserts that the given user is a member of any kind of the given tenant.
 * 
 * @author Daniel Huss
 * 
 * @version 0.1
 */
public class UserIsTenantMemberAsserter extends CommandAsserter {

    private Long userId = null;
    private Long[] tenantIds = null;
    private boolean userIsMember = false;

    @Override
    public boolean assertRule(Role role, Permission permission) throws TransactionException {
        boolean result = false;

        if (role instanceof UserRole) {
            userId = role.getActorId();

            TransactionalCommand command = getCommandInstance(permission);
            if (command instanceof TenantAccess) {
                tenantIds = ((TenantAccess) command).getTenantIds();
                DecidrGlobals.getTransactionCoordinator().runTransaction(this);
                result = userIsMember;
            }
        }

        return result;
    }

    @Override
    public void transactionStarted(TransactionStartedEvent evt) {
        // a user is a member of a tenant if he is the admin or a regular member
        String hql = "select u.id from User u where u.id = :userId and "
                + "exists(from UserIsMemberOfTenant rel where "
                + "rel.user.id = :userId and rel.tenant.id = :tenantId) " + " or exists(from Tenant t where "
                + "t.admin.id = :userId and t.id = :tenantId)";

        // The "tenantId" parameter is set in the for loop below
        Query q = evt.getSession().createQuery(hql).setMaxResults(1);

        if (tenantIds == null) {
            // no tenant ids to check against, so we're returning false
            userIsMember = false;
        } else {
            // the user must be a member of each given tenant
            userIsMember = true;
            for (Long tenantId : tenantIds) {
                q.setLong("userId", userId);
                q.setLong("tenantId", tenantId);
                boolean isMember = q.uniqueResult() != null;
                userIsMember = userIsMember && isMember;
                if (!userIsMember) {
                    break;
                }
            }
        }
    }
}