PermissionBean.java

/*
 * Copyright Codecrew Ry
 *
 * All rights reserved.
 *
 * This license applies to any software containing a notice placed by the
 * copyright holder. Such software is herein referred to as the Software.
 * This license covers modification, distribution and use of the Software.
 *
 * Any distribution and use in source and binary forms, with or without
 * modification is not permitted without explicit written permission from the
 * copyright owner.
 *
 * A non-exclusive royalty-free right is granted to the copyright owner of the
 * Software to use, modify and distribute all modifications to the Software in
 * future versions of the Software.
 *
 */
package fi.codecrew.moya.beans;

import java.security.Principal;

import javax.annotation.Resource;
import javax.annotation.security.DeclareRoles;
import javax.ejb.*;
import javax.resource.spi.IllegalStateException;

import fi.codecrew.moya.enums.apps.*;
import fi.codecrew.moya.facade.EventFacade;
import fi.codecrew.moya.model.LanEvent;
import fi.codecrew.moya.utilities.UserLoginUtils;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import fi.codecrew.moya.facade.EventUserFacade;
import fi.codecrew.moya.facade.UserFacade;
import fi.codecrew.moya.model.EventUser;
import fi.codecrew.moya.model.User;

@Stateless
@DeclareRoles({
	UserPermission.S_CREATE_NEW,
	UserPermission.S_LOGIN,
	UserPermission.S_LOGOUT,
	UserPermission.S_MODIFY,
	UserPermission.S_MODIFY_ACCOUNTEVENTS,
	UserPermission.S_VIEW_ACCOUNTEVENTS,
	UserPermission.S_VIEW_OWN_ACCOUNTEVENTS,
	UserPermission.S_VIEW_ALL,
	UserPermission.S_VIEW_SELF,
	UserPermission.S_WRITE_ROLES,
	UserPermission.S_READ_ROLES,
	UserPermission.S_ANYUSER,
	UserPermission.S_MANAGE_HTTP_SESSION,
	UserPermission.S_INVITE_USERS,
	UserPermission.S_READ_ORGROLES,
	UserPermission.S_WRITE_ORGROLES,
	UserPermission.S_VITUTTAAKO,
	UserPermission.S_HELPPAGE,

	MapPermission.S_VIEW,
	MapPermission.S_MANAGE_MAPS,
	MapPermission.S_MANAGE_OTHERS,
	MapPermission.S_BUY_PLACES,
	MapPermission.S_MOVE_PLACES,

	ShopPermission.S_LIST_ALL_PRODUCTS,
	ShopPermission.S_LIST_USERPRODUCTS,
	ShopPermission.S_SHOP_TO_OTHERS,
	ShopPermission.S_MANAGE_PRODUCTS,
	ShopPermission.S_SHOP_PRODUCTS,
	ShopPermission.S_SHOP_FOODWAVE,
	ShopPermission.S_MANAGE_FOODWAVES,

	BillPermission.S_CREATE_BILL,
	BillPermission.S_READ_ALL,
	BillPermission.S_WRITE_ALL,
	BillPermission.S_VIEW_OWN,

	ContentPermission.S_MANAGE_NEWS,
	ContentPermission.S_MANAGE_PAGES,
	ContentPermission.S_MANAGE_ACTIONLOG,
	ContentPermission.S_MANAGE_MENU,

	PollPermission.S_ANSWER,
	PollPermission.S_VIEW_RESULTS,
	PollPermission.S_CREATE,

	SpecialPermission.S_SUPERADMIN,
	SpecialPermission.S_USER,
	SpecialPermission.S_ANONYMOUS,

	TerminalPermission.S_INFO_TERMINAL,
	TerminalPermission.S_USER_TERMINAL,
	TerminalPermission.S_ADMIN_TERMINAL,

	CompoPermission.S_MANAGE,
	CompoPermission.S_VOTE,
	CompoPermission.S_SUBMIT_ENTRY,
	CompoPermission.S_VIEW_COMPOS,

	EventPermission.S_MANAGE_PRIVATE_PROPERTIES,
	EventPermission.S_MANAGE_PROPERTIES,

	LicensePermission.S_MANAGE,
	LicensePermission.S_VIEW_OWN_CODES,

	PmsCodePermission.S_VIEW
})
@LocalBean
public class PermissionBean implements PermissionBeanLocal {

	@SuppressWarnings("unused")
	private static final Logger logger = LoggerFactory.getLogger(PermissionBean.class);

	@Resource
	private SessionContext context;

	@EJB
	private LoggingBeanLocal loggingbean;

	@EJB
	private UserFacade userfacade;

	@EJB
	private EventUserFacade eventUserFacade;

	@EJB
	private EventBean eventbean;


	@Override
	public boolean hasPermission(SpecialPermission perm) {
		if (perm == null) {
			return false;
		}
		return context.isCallerInRole(perm.toString());
	}

	@Override
	public boolean hasPermission(IAppPermission perm) {

		if (perm == null) {
			return false;
		}
		return context.isCallerInRole(perm.getFullName());
	}

	@Override
	public boolean isCurrentUser(User user) {

		return user != null && isCurrentUser(user.getLogin());
	}

	@Override
	public boolean isCurrentUser(String login) {
		return login != null && login.equals(getPrincipalName());
	}


	@Override
	public boolean isCurrentUser(EventUser user) {
		return user != null && isCurrentUser(user.getUser());
	}

	@Override
	public boolean isLoggedIn() {
		return !User.ANONYMOUS_LOGINNAME.equalsIgnoreCase(getPrincipalName());
	}

	@Override
	public EventUser getCurrentUser() {
		LanEvent event = eventbean.getEventForHostname(getPrincipalDomain());
		if (event == null) {
			throw new EJBException("Could not find event for current user");
		}
		EventUser ret = eventUserFacade.findByLogin(getPrincipalName(), event);
		if (ret == null) {
			ret = getAnonEventUser();
		}
		return ret;
	}


	public EventUser getAnonEventUser(LanEvent event) {
		EventUser defaultUser = eventUserFacade.findByLogin(User.ANONYMOUS_LOGINNAME, event);
		if (defaultUser == null) {
			User user = userfacade.findByLogin(User.ANONYMOUS_LOGINNAME);
			if (user == null) {
				defaultUser = new EventUser(new User(), event, null);
				defaultUser.getUser().setLogin(User.ANONYMOUS_LOGINNAME);
				defaultUser.getUser().setNick(User.ANONYMOUS_LOGINNAME);

			} else {
				defaultUser = new EventUser(user, event, null);
			}
			eventUserFacade.create(defaultUser);
			eventUserFacade.flush();

		}
		return defaultUser;
	}

	/**
	 * Makes sure default user and public role exist and the user is member of
	 * the role.
	 */
	@Override
	public EventUser getAnonEventUser() {
		return getAnonEventUser(eventbean.getCurrentEvent());
	}

	public String getPrincipalName() {

		Principal principal = context.getCallerPrincipal();
		String principalName = null;
		if (principal != null) {
			principalName = UserLoginUtils.geUsernameFromJaas(principal);
		}
		return principalName;
	}

	public String getPrincipalDomain() {

		Principal principal = context.getCallerPrincipal();
		String principalDomain = null;
		if (principal != null) {
			principalDomain = UserLoginUtils.getDomainFromJaas(principal);
		}
		return principalDomain;
	}

	@Override
	public String getCommonName() throws IllegalStateException {

		String dn = getPrincipalName();
		String[] parts = dn.split(",");

		for (String part : parts) {
			if (part.trim().toUpperCase().startsWith("CN=")) {
				String cn = part.substring("CN=".length());
				return cn;
			}
		}

		throw new IllegalStateException("Current security principal has no CN");
	}

}