TokenView.java

package fi.codecrew.moya.web.cdiview.map;

import javax.ejb.EJB;
import javax.enterprise.context.RequestScoped;
import javax.inject.Inject;
import javax.inject.Named;

import fi.codecrew.moya.beans.PlaceGroupBeanLocal;
import fi.codecrew.moya.enums.apps.MapPermission;
import fi.codecrew.moya.model.EventUser;
import fi.codecrew.moya.web.annotations.SelectedUser;
import fi.codecrew.moya.web.cdiview.GenericCDIView;

@Named
@RequestScoped
public class TokenView extends GenericCDIView {

	private static final long serialVersionUID = -2371506803749823158L;

	private String token;

	@Inject
	@SelectedUser
	private EventUser user;

	@EJB
	private transient PlaceGroupBeanLocal placegroupbean;

	public String saveToken() {
		super.requirePermissions();
		if (!permbean.hasPermission(MapPermission.BUY_PLACES) && !permbean.isCurrentUser(user) && permbean.hasPermission(MapPermission.MANAGE_OTHERS)) {
			this.addFaceMessage("permission.denied");
			return null;
		}

		// String ret = "myGroups";
		if (!placegroupbean.associateToToken(user, getToken())) {
			this.addFaceMessage("placetoken.tokenNotFound");
		}

		return null;
	}

	public void setToken(String token) {
		this.token = token;
	}

	public String getToken() {
		return token;
	}
}