org.sloth.web.report.EditReportController.java Source code

Introduction

Here is the source code for org.sloth.web.report.EditReportController.java

Source

/*
 * Copyright (C) 2009-2010  Stefan Arndt, Christian Autermann, Dustin Demuth,
 *                  Christoph Fendrich, Simon Ottenhues, Christian Paluschek
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program.  If not, see <http://www.gnu.org/licenses/>.
 */
package org.sloth.web.report;

import static org.sloth.util.ControllerUtils.forbiddenMAV;
import static org.sloth.util.ControllerUtils.forbiddenView;
import static org.sloth.util.ControllerUtils.internalErrorView;
import static org.sloth.util.ControllerUtils.isAdmin;
import static org.sloth.util.ControllerUtils.isAuth;
import static org.sloth.util.ControllerUtils.isOwnReport;
import static org.sloth.util.ControllerUtils.notFoundMAV;
import static org.sloth.util.ControllerUtils.notFoundView;

import java.io.IOException;
import java.util.Date;

import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.sloth.model.Report;
import org.sloth.service.ObservationService;
import org.sloth.validation.ReportValidator;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Controller;
import org.springframework.validation.BindingResult;
import org.springframework.web.bind.WebDataBinder;
import org.springframework.web.bind.annotation.InitBinder;
import org.springframework.web.bind.annotation.ModelAttribute;
import org.springframework.web.bind.annotation.PathVariable;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;
import org.springframework.web.bind.annotation.SessionAttributes;
import org.springframework.web.bind.support.SessionStatus;
import org.springframework.web.servlet.ModelAndView;

/**
 * Controller to edit a {@code Report}.
 * 
 * @author Christian Autermann
 * @author Stefan Arndt
 * @author Dustin Demuth
 * @author Christoph Fendrich
 * @author Simon Ottenhues
 * @author Christian Paluschek
 * 
 */
@Controller
@RequestMapping("/r/edit/{id}")
@SessionAttributes(types = { Report.class, Boolean.class })
public class EditReportController {

    private ObservationService observationService;
    private ReportValidator reportValidator;
    private static final String VIEW = "reports/form";
    private static final String REPORT_ATTRIBUTE = "report";
    private static final String PROCESSED_ATTRIBUTE = "processed";
    private static final Logger logger = LoggerFactory.getLogger(EditReportController.class);

    /**
     * @param observationService
     *            the {@code ObservationService} to set
     */
    @Autowired
    public void setObservationService(ObservationService observationService) {
        this.observationService = observationService;
    }

    /**
     * @param reportValidator
     *            the reportValidator to set
     */
    @Autowired
    public void setReportValidator(ReportValidator reportValidator) {
        this.reportValidator = reportValidator;
    }

    /**
     * Sets custom parameters to the {@code WebDataBinder}.
     * 
     * @param webDataBinder
     *            the {@code WebDataBinder} to initialize
     */
    @InitBinder
    public void initBinder(WebDataBinder webDataBinder) {
        webDataBinder.setAllowedFields("description", "processed");
    }

    /**
     * Handles the {@code GET} request and sets up the form.
     */
    @RequestMapping(method = RequestMethod.GET)
    public ModelAndView handleGet(@PathVariable Long id, HttpSession session, HttpServletResponse response)
            throws IOException {
        if (isAuth(session)) {
            Report report = observationService.getReport(id);
            if (report == null) {
                return notFoundMAV(response);
            }

            if (isAdmin(session) || isOwnReport(session, report)) {
                ModelAndView mav = new ModelAndView(VIEW);
                mav.addObject(PROCESSED_ATTRIBUTE, new Boolean(report.isProcessed()));
                mav.addObject(REPORT_ATTRIBUTE, report);
                return mav;
            }

        }
        return forbiddenMAV(response);
    }

    /**
     * Handles the {@code POST} request and saves the changes made to the
     * {@code Report}.
     */
    @RequestMapping(method = RequestMethod.POST)
    public String handlePost(@PathVariable Long id, @ModelAttribute(PROCESSED_ATTRIBUTE) Boolean processed,
            @ModelAttribute(REPORT_ATTRIBUTE) Report report, BindingResult result, SessionStatus status,
            HttpSession session, HttpServletResponse response) throws IOException {
        if (isAuth(session)) {
            if (report == null) {
                return notFoundView(response);
            } else if (!isAdmin(session) && !processed.equals(Boolean.valueOf(report.isProcessed()))) {
                return forbiddenView(response);
            } else if (isAdmin(session) || isOwnReport(session, report)) {
                this.reportValidator.validate(report, result);
                if (result.hasErrors()) {
                    return VIEW;
                }
                status.setComplete();
                try {
                    this.observationService.updateReport(report);
                } catch (Exception e) {
                    logger.warn("Unexpected Exception", e);
                    return internalErrorView(response);
                } finally {
                    status.setComplete();
                }
                return "redirect:/r";
            }
        }
        return forbiddenView(response);
    }

}