org.sonar.server.permission.ws.TemplateGroupsAction.java Source code

Java tutorial

Introduction

Here is the source code for org.sonar.server.permission.ws.TemplateGroupsAction.java

Source

/*
 * SonarQube
 * Copyright (C) 2009-2016 SonarSource SA
 * mailto:contact AT sonarsource DOT com
 *
 * This program is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
 * version 3 of the License, or (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public License
 * along with this program; if not, write to the Free Software Foundation,
 * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
 */
package org.sonar.server.permission.ws;

import com.google.common.collect.Multimap;
import com.google.common.collect.Ordering;
import com.google.common.collect.TreeMultimap;
import java.util.List;
import java.util.stream.Collectors;
import org.sonar.api.security.DefaultGroups;
import org.sonar.api.server.ws.Request;
import org.sonar.api.server.ws.Response;
import org.sonar.api.server.ws.WebService;
import org.sonar.api.utils.Paging;
import org.sonar.db.DbClient;
import org.sonar.db.DbSession;
import org.sonar.db.permission.PermissionQuery;
import org.sonar.db.permission.template.PermissionTemplateDto;
import org.sonar.db.permission.template.PermissionTemplateGroupDto;
import org.sonar.db.user.GroupDto;
import org.sonar.server.user.UserSession;
import org.sonarqube.ws.WsPermissions;

import static org.sonar.api.server.ws.WebService.Param.PAGE;
import static org.sonar.api.server.ws.WebService.Param.PAGE_SIZE;
import static org.sonar.api.server.ws.WebService.Param.TEXT_QUERY;
import static org.sonar.db.permission.PermissionQuery.DEFAULT_PAGE_SIZE;
import static org.sonar.db.permission.PermissionQuery.RESULTS_MAX_SIZE;
import static org.sonar.db.permission.PermissionQuery.SEARCH_QUERY_MIN_LENGTH;
import static org.sonar.server.permission.PermissionPrivilegeChecker.checkGlobalAdminUser;
import static org.sonar.server.permission.ws.PermissionRequestValidator.validateProjectPermission;
import static org.sonar.server.permission.ws.PermissionsWsParametersBuilder.createProjectPermissionParameter;
import static org.sonar.server.permission.ws.PermissionsWsParametersBuilder.createTemplateParameters;
import static org.sonar.server.ws.WsUtils.writeProtobuf;
import static org.sonarqube.ws.client.permission.PermissionsWsParameters.PARAM_PERMISSION;

public class TemplateGroupsAction implements PermissionsWsAction {
    private final DbClient dbClient;
    private final UserSession userSession;
    private final PermissionDependenciesFinder dependenciesFinder;

    public TemplateGroupsAction(DbClient dbClient, UserSession userSession,
            PermissionDependenciesFinder dependenciesFinder) {
        this.dbClient = dbClient;
        this.userSession = userSession;
        this.dependenciesFinder = dependenciesFinder;
    }

    @Override
    public void define(WebService.NewController context) {
        WebService.NewAction action = context.createAction("template_groups").setSince("5.2").setInternal(true)
                .setDescription(
                        "Lists the groups with their permission as individual groups rather than through user affiliation on the chosen template.<br />"
                                + "This service defaults to all groups, but can be limited to groups with a specific permission by providing the desired permission.<br>"
                                + "It requires administration permissions to access.")
                .addPagingParams(DEFAULT_PAGE_SIZE, RESULTS_MAX_SIZE)
                .setResponseExample(getClass().getResource("template_groups-example.json")).setHandler(this);

        action.createParam(WebService.Param.TEXT_QUERY).setDescription(
                "Limit search to group names that contain the supplied string. Must have at least %d characters.<br/>"
                        + "When this parameter is not set, only group having at least one permission are returned.",
                SEARCH_QUERY_MIN_LENGTH).setExampleValue("eri");

        createProjectPermissionParameter(action);
        createTemplateParameters(action);
    }

    @Override
    public void handle(Request wsRequest, Response wsResponse) throws Exception {
        checkGlobalAdminUser(userSession);
        DbSession dbSession = dbClient.openSession(false);
        try {
            WsTemplateRef templateRef = WsTemplateRef.fromRequest(wsRequest);
            PermissionTemplateDto template = dependenciesFinder.getTemplate(dbSession, templateRef);

            PermissionQuery query = buildPermissionQuery(wsRequest);
            int total = dbClient.permissionTemplateDao().countGroupNamesByQueryAndTemplate(dbSession, query,
                    template.getId());
            Paging paging = Paging.forPageIndex(wsRequest.mandatoryParamAsInt(PAGE))
                    .withPageSize(wsRequest.mandatoryParamAsInt(PAGE_SIZE)).andTotal(total);
            List<GroupDto> groups = findGroups(dbSession, query, template);
            List<PermissionTemplateGroupDto> groupPermissions = findGroupPermissions(dbSession, groups, template);
            WsPermissions.WsGroupsResponse groupsResponse = buildResponse(groups, groupPermissions, paging);
            writeProtobuf(groupsResponse, wsRequest, wsResponse);
        } finally {
            dbClient.closeSession(dbSession);
        }
    }

    private static PermissionQuery buildPermissionQuery(Request request) {
        String textQuery = request.param(TEXT_QUERY);
        String permission = request.param(PARAM_PERMISSION);
        PermissionQuery.Builder permissionQuery = PermissionQuery.builder()
                .setPermission(permission != null ? validateProjectPermission(permission) : null)
                .setPageIndex(request.mandatoryParamAsInt(PAGE)).setPageSize(request.mandatoryParamAsInt(PAGE_SIZE))
                .setSearchQuery(textQuery);
        if (textQuery == null) {
            permissionQuery.withPermissionOnly();
        }
        return permissionQuery.build();
    }

    private static WsPermissions.WsGroupsResponse buildResponse(List<GroupDto> groups,
            List<PermissionTemplateGroupDto> groupPermissions, Paging paging) {
        Multimap<Long, String> permissionsByGroupId = TreeMultimap.create();
        groupPermissions.forEach(groupPermission -> permissionsByGroupId.put(groupPermission.getGroupId(),
                groupPermission.getPermission()));
        WsPermissions.WsGroupsResponse.Builder response = WsPermissions.WsGroupsResponse.newBuilder();

        groups.forEach(group -> {
            WsPermissions.Group.Builder wsGroup = response.addGroupsBuilder().setName(group.getName());
            if (group.getId() != 0L) {
                wsGroup.setId(String.valueOf(group.getId()));
            }
            if (group.getDescription() != null) {
                wsGroup.setDescription(group.getDescription());
            }
            wsGroup.addAllPermissions(permissionsByGroupId.get(group.getId()));
        });

        response.getPagingBuilder().setPageIndex(paging.pageIndex()).setPageSize(paging.pageSize())
                .setTotal(paging.total());
        return response.build();
    }

    private List<GroupDto> findGroups(DbSession dbSession, PermissionQuery dbQuery,
            PermissionTemplateDto template) {
        List<String> orderedNames = dbClient.permissionTemplateDao().selectGroupNamesByQueryAndTemplate(dbSession,
                dbQuery, template.getId());
        List<GroupDto> groups = dbClient.groupDao().selectByNames(dbSession, orderedNames);
        if (orderedNames.contains(DefaultGroups.ANYONE)) {
            groups.add(0, new GroupDto().setId(0L).setName(DefaultGroups.ANYONE));
        }
        return Ordering.explicit(orderedNames).onResultOf(GroupDto::getName).immutableSortedCopy(groups);
    }

    private List<PermissionTemplateGroupDto> findGroupPermissions(DbSession dbSession, List<GroupDto> groups,
            PermissionTemplateDto template) {
        List<String> names = groups.stream().map(GroupDto::getName).collect(Collectors.toList());
        return dbClient.permissionTemplateDao().selectGroupPermissionsByTemplateIdAndGroupNames(dbSession,
                template.getId(), names);
    }
}