Java tutorial
/* * Copyright (C) 2014-2015 University of Dundee & Open Microscopy Environment. * All rights reserved. * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 2 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License along * with this program; if not, write to the Free Software Foundation, Inc., * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. */ package omero.cmd.graphs; import java.util.ArrayList; import java.util.Collection; import java.util.HashMap; import java.util.Iterator; import java.util.List; import java.util.Map; import java.util.Map.Entry; import java.util.Set; import org.slf4j.Logger; import org.slf4j.LoggerFactory; import com.google.common.base.Function; import com.google.common.collect.HashMultimap; import com.google.common.collect.ImmutableMap; import com.google.common.collect.ImmutableSet; import com.google.common.collect.Maps; import com.google.common.collect.SetMultimap; import ome.api.IAdmin; import ome.model.IObject; import ome.model.internal.Details; import ome.model.meta.Experimenter; import ome.security.ACLVoter; import ome.security.SystemTypes; import ome.services.delete.Deletion; import ome.services.graphs.GraphException; import ome.services.graphs.GraphPathBean; import ome.services.graphs.GraphPolicy; import ome.services.graphs.GraphTraversal; import ome.services.graphs.PermissionsPredicate; import ome.system.EventContext; import ome.system.Login; import ome.system.Roles; import omero.cmd.Chown2; import omero.cmd.Chown2Response; import omero.cmd.HandleI.Cancel; import omero.cmd.ERR; import omero.cmd.Helper; import omero.cmd.IRequest; import omero.cmd.Response; /** * Request to give model objects to a different experimenter, replacing version 5.0's {@code ChownI}. * @author m.t.b.carroll@dundee.ac.uk * @since 5.1.0 */ public class Chown2I extends Chown2 implements IRequest, WrappableRequest<Chown2> { private static final Logger LOGGER = LoggerFactory.getLogger(Chown2I.class); private static final ImmutableMap<String, String> ALL_GROUPS_CONTEXT = ImmutableMap.of(Login.OMERO_GROUP, "-1"); private static final Set<GraphPolicy.Ability> REQUIRED_ABILITIES = ImmutableSet.of(GraphPolicy.Ability.DELETE); private final ACLVoter aclVoter; private final SystemTypes systemTypes; private final GraphPathBean graphPathBean; private final Deletion deletionInstance; private final Set<Class<? extends IObject>> targetClasses; private GraphPolicy graphPolicy; /* not final because of adjustGraphPolicy */ private final SetMultimap<String, String> unnullable; private List<Function<GraphPolicy, GraphPolicy>> graphPolicyAdjusters = new ArrayList<Function<GraphPolicy, GraphPolicy>>(); private Helper helper; private GraphTraversal graphTraversal; private Set<Long> acceptableGroupsFrom; private Set<Long> acceptableGroupsTo; private GraphTraversal.PlanExecutor unlinker; private GraphTraversal.PlanExecutor processor; private int targetObjectCount = 0; private int deletedObjectCount = 0; private int givenObjectCount = 0; /** * Construct a new <q>chown</q> request; called from {@link GraphRequestFactory#getRequest(Class)}. * @param aclVoter ACL voter for permissions checking * @param securityRoles the security roles * @param systemTypes for identifying the system types * @param graphPathBean the graph path bean to use * @param deletionInstance a deletion instance for deleting files * @param targetClasses legal target object classes for chown * @param graphPolicy the graph policy to apply for chown * @param unnullable properties that, while nullable, may not be nulled by a graph traversal operation */ public Chown2I(ACLVoter aclVoter, Roles securityRoles, SystemTypes systemTypes, GraphPathBean graphPathBean, Deletion deletionInstance, Set<Class<? extends IObject>> targetClasses, GraphPolicy graphPolicy, SetMultimap<String, String> unnullable) { this.aclVoter = aclVoter; this.systemTypes = systemTypes; this.graphPathBean = graphPathBean; this.deletionInstance = deletionInstance; this.targetClasses = targetClasses; this.graphPolicy = graphPolicy; this.unnullable = unnullable; } @Override public Map<String, String> getCallContext() { return new HashMap<String, String>(ALL_GROUPS_CONTEXT); } @Override public void init(Helper helper) { if (LOGGER.isDebugEnabled()) { final GraphUtil.ParameterReporter arguments = new GraphUtil.ParameterReporter(); arguments.addParameter("userId", userId); arguments.addParameter("targetObjects", targetObjects); arguments.addParameter("childOptions", childOptions); arguments.addParameter("dryRun", dryRun); LOGGER.debug("request: " + arguments); } this.helper = helper; helper.setSteps(dryRun ? 4 : 6); /* if the current user is not an administrator then find of which groups the target user is a member */ final EventContext eventContext = helper.getEventContext(); if (eventContext.isCurrentUserAdmin()) { acceptableGroupsFrom = null; acceptableGroupsTo = null; } else { final IAdmin iAdmin = helper.getServiceFactory().getAdminService(); acceptableGroupsFrom = ImmutableSet.copyOf(eventContext.getLeaderOfGroupsList()); acceptableGroupsTo = ImmutableSet.copyOf(iAdmin.getMemberOfGroupIds(new Experimenter(userId, false))); } final List<ChildOptionI> childOptions = ChildOptionI.castChildOptions(this.childOptions); if (childOptions != null) { for (final ChildOptionI childOption : childOptions) { childOption.init(); } } GraphPolicy graphPolicyWithOptions = graphPolicy; graphPolicyWithOptions = ChildOptionsPolicy.getChildOptionsPolicy(graphPolicyWithOptions, childOptions, REQUIRED_ABILITIES); for (final Function<GraphPolicy, GraphPolicy> adjuster : graphPolicyAdjusters) { graphPolicyWithOptions = adjuster.apply(graphPolicyWithOptions); } graphPolicyAdjusters = null; graphPolicyWithOptions.registerPredicate(new PermissionsPredicate()); GraphTraversal.Processor processor = new InternalProcessor(); if (dryRun) { processor = GraphUtil.disableProcessor(processor); } graphTraversal = new GraphTraversal(helper.getSession(), eventContext, aclVoter, systemTypes, graphPathBean, unnullable, graphPolicyWithOptions, processor); } @Override public Object step(int step) throws Cancel { helper.assertStep(step); try { switch (step) { case 0: /* if targetObjects were an IObjectList then this would need IceMapper.reverse */ final SetMultimap<String, Long> targetMultimap = HashMultimap.create(); for (final Entry<String, List<Long>> oneClassToTarget : targetObjects.entrySet()) { /* determine actual class from given target object class name */ String targetObjectClassName = oneClassToTarget.getKey(); final int lastDot = targetObjectClassName.lastIndexOf('.'); if (lastDot > 0) { targetObjectClassName = targetObjectClassName.substring(lastDot + 1); } final Class<? extends IObject> targetObjectClass = graphPathBean .getClassForSimpleName(targetObjectClassName); /* check that it is legal to target the given class */ final Iterator<Class<? extends IObject>> legalTargetsIterator = targetClasses.iterator(); do { if (!legalTargetsIterator.hasNext()) { final Exception e = new IllegalArgumentException( "cannot target " + targetObjectClassName); throw helper.cancel(new ERR(), e, "bad-target"); } } while (!legalTargetsIterator.next().isAssignableFrom(targetObjectClass)); /* note IDs to target for the class */ final Collection<Long> ids = oneClassToTarget.getValue(); targetMultimap.putAll(targetObjectClass.getName(), ids); targetObjectCount += ids.size(); } final Entry<SetMultimap<String, Long>, SetMultimap<String, Long>> plan = graphTraversal .planOperation(helper.getSession(), targetMultimap, true, true); return Maps.immutableEntry(plan.getKey(), GraphUtil.arrangeDeletionTargets(helper.getSession(), plan.getValue())); case 1: graphTraversal.assertNoPolicyViolations(); return null; case 2: processor = graphTraversal.processTargets(); return null; case 3: unlinker = graphTraversal.unlinkTargets(false); graphTraversal = null; return null; case 4: unlinker.execute(); return null; case 5: processor.execute(); return null; default: final Exception e = new IllegalArgumentException( "model object graph operation has no step " + step); throw helper.cancel(new ERR(), e, "bad-step"); } } catch (Cancel c) { throw c; } catch (GraphException ge) { final omero.cmd.GraphException graphERR = new omero.cmd.GraphException(); graphERR.message = ge.message; throw helper.cancel(graphERR, ge, "graph-fail"); } catch (Throwable t) { throw helper.cancel(new ERR(), t, "graph-fail"); } } @Override public void finish() { } @Override public void buildResponse(int step, Object object) { helper.assertResponse(step); if (step == 0) { /* if the results object were in terms of IObjectList then this would need IceMapper.map */ final Entry<SetMultimap<String, Long>, SetMultimap<String, Long>> result = (Entry<SetMultimap<String, Long>, SetMultimap<String, Long>>) object; if (!dryRun) { try { deletionInstance.deleteFiles(GraphUtil.trimPackageNames(result.getValue())); } catch (Exception e) { helper.cancel(new ERR(), e, "file-delete-fail"); } } final Map<String, List<Long>> givenObjects = new HashMap<String, List<Long>>(); final Map<String, List<Long>> deletedObjects = new HashMap<String, List<Long>>(); for (final Entry<String, Collection<Long>> oneGivenClass : result.getKey().asMap().entrySet()) { final String className = oneGivenClass.getKey(); final Collection<Long> ids = oneGivenClass.getValue(); givenObjects.put(className, new ArrayList<Long>(ids)); givenObjectCount += ids.size(); } for (final Entry<String, Collection<Long>> oneDeletedClass : result.getValue().asMap().entrySet()) { final String className = oneDeletedClass.getKey(); final Collection<Long> ids = oneDeletedClass.getValue(); deletedObjects.put(className, new ArrayList<Long>(ids)); deletedObjectCount += ids.size(); } final Chown2Response response = new Chown2Response(givenObjects, deletedObjects); helper.setResponseIfNull(response); helper.info("in " + (dryRun ? "mock " : "") + "chown to " + userId + " of " + targetObjectCount + ", gave " + givenObjectCount + " and deleted " + deletedObjectCount + " in total"); if (LOGGER.isDebugEnabled()) { final GraphUtil.ParameterReporter arguments = new GraphUtil.ParameterReporter(); arguments.addParameter("includedObjects", response.includedObjects); arguments.addParameter("deletedObjects", response.deletedObjects); LOGGER.debug("response: " + arguments); } } } @Override public Response getResponse() { return helper.getResponse(); } @Override public void copyFieldsTo(Chown2 request) { GraphUtil.copyFields(this, request); request.userId = userId; } @Override public void adjustGraphPolicy(Function<GraphPolicy, GraphPolicy> adjuster) { if (graphPolicyAdjusters == null) { throw new IllegalStateException("request is already initialized"); } else { graphPolicyAdjusters.add(adjuster); } } @Override public int getStepProvidingCompleteResponse() { return 0; } @Override public GraphPolicy.Action getActionForStarting() { return GraphPolicy.Action.INCLUDE; } @Override public Map<String, List<Long>> getStartFrom(Response response) { return ((Chown2Response) response).includedObjects; } /** * A <q>chown</q> processor that updates model objects' user. * @author m.t.b.carroll@dundee.ac.uk * @since 5.1.0 */ private final class InternalProcessor extends BaseGraphTraversalProcessor { private final Logger LOGGER = LoggerFactory.getLogger(InternalProcessor.class); private final Long userFromId = helper.getEventContext().getCurrentUserId(); private final Experimenter userTo = new Experimenter(userId, false); public InternalProcessor() { super(helper.getSession()); } @Override public void processInstances(String className, Collection<Long> ids) throws GraphException { final String update = "UPDATE " + className + " SET details.owner = :user WHERE id IN (:ids)"; final int count = session.createQuery(update).setParameter("user", userTo).setParameterList("ids", ids) .executeUpdate(); if (count != ids.size()) { LOGGER.warn("not all the objects of type " + className + " could be processed"); } } @Override public Set<GraphPolicy.Ability> getRequiredPermissions() { return REQUIRED_ABILITIES; } @Override public void assertMayProcess(String className, long objectId, Details details) throws GraphException { /* final Long objectOwnerId = details.getOwner().getId(); also allow userFromId.equals(objectOwnerId) for users to chown their own data */ final Long objectGroupId = details.getGroup().getId(); if (!(acceptableGroupsFrom == null || acceptableGroupsFrom.contains(objectGroupId))) { throw new GraphException("user " + userFromId + " is not an owner of group " + objectGroupId); } if (!(acceptableGroupsTo == null || acceptableGroupsTo.contains(objectGroupId))) { throw new GraphException("user " + userId + " is not a member of group " + objectGroupId); } } } }