PermissionBean.java

/*
 * Copyright Codecrew Ry
 *
 * All rights reserved.
 *
 * This license applies to any software containing a notice placed by the
 * copyright holder. Such software is herein referred to as the Software.
 * This license covers modification, distribution and use of the Software.
 *
 * Any distribution and use in source and binary forms, with or without
 * modification is not permitted without explicit written permission from the
 * copyright owner.
 *
 * A non-exclusive royalty-free right is granted to the copyright owner of the
 * Software to use, modify and distribute all modifications to the Software in
 * future versions of the Software.
 *
 */
package fi.codecrew.moya.beans;

import java.security.Principal;

import javax.annotation.Resource;
import javax.annotation.security.DeclareRoles;
import javax.ejb.EJB;
import javax.ejb.LocalBean;
import javax.ejb.SessionContext;
import javax.ejb.Stateless;
import javax.resource.spi.IllegalStateException;

import fi.codecrew.moya.enums.apps.*;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import fi.codecrew.moya.facade.EventUserFacade;
import fi.codecrew.moya.facade.UserFacade;
import fi.codecrew.moya.model.EventUser;
import fi.codecrew.moya.model.User;

@Stateless
@DeclareRoles({
		UserPermission.S_CREATE_NEW,
		UserPermission.S_LOGIN,
		UserPermission.S_LOGOUT,
		UserPermission.S_MODIFY,
		UserPermission.S_MODIFY_ACCOUNTEVENTS,
		UserPermission.S_VIEW_ACCOUNTEVENTS,
		UserPermission.S_VIEW_OWN_ACCOUNTEVENTS,
		UserPermission.S_VIEW_ALL,
		UserPermission.S_VIEW_SELF,
		UserPermission.S_WRITE_ROLES,
	UserPermission.S_READ_ROLES,
		UserPermission.S_ANYUSER,
		UserPermission.S_MANAGE_HTTP_SESSION,
		UserPermission.S_INVITE_USERS,
		UserPermission.S_READ_ORGROLES,
		UserPermission.S_WRITE_ORGROLES,
		UserPermission.S_VITUTTAAKO,
		UserPermission.S_HELPPAGE,

		MapPermission.S_VIEW,
		MapPermission.S_MANAGE_MAPS,
		MapPermission.S_MANAGE_OTHERS,
		MapPermission.S_BUY_PLACES,
		MapPermission.S_MOVE_PLACES,

		ShopPermission.S_LIST_ALL_PRODUCTS,
		ShopPermission.S_LIST_USERPRODUCTS,
		ShopPermission.S_SHOP_TO_OTHERS,
		ShopPermission.S_MANAGE_PRODUCTS,
		ShopPermission.S_SHOP_PRODUCTS,
		ShopPermission.S_SHOP_FOODWAVE,
		ShopPermission.S_MANAGE_FOODWAVES,

		BillPermission.S_CREATE_BILL,
		BillPermission.S_READ_ALL,
		BillPermission.S_WRITE_ALL,
		BillPermission.S_VIEW_OWN,

		ContentPermission.S_MANAGE_NEWS,
		ContentPermission.S_MANAGE_PAGES,
		ContentPermission.S_MANAGE_ACTIONLOG,
		ContentPermission.S_MANAGE_MENU,

		PollPermission.S_ANSWER,
		PollPermission.S_VIEW_RESULTS,
		PollPermission.S_CREATE,

		SpecialPermission.S_SUPERADMIN,
		SpecialPermission.S_USER,
		SpecialPermission.S_ANONYMOUS,

		TerminalPermission.S_INFO_TERMINAL,
		TerminalPermission.S_USER_TERMINAL,
		TerminalPermission.S_ADMIN_TERMINAL,

		CompoPermission.S_MANAGE,
		CompoPermission.S_VOTE,
		CompoPermission.S_SUBMIT_ENTRY,
		CompoPermission.S_VIEW_COMPOS,

		EventPermission.S_MANAGE_PRIVATE_PROPERTIES,
		EventPermission.S_MANAGE_PROPERTIES,

		LicensePermission.S_MANAGE,
		LicensePermission.S_VIEW_OWN_CODES,

		PmsCodePermission.S_VIEW
})
@LocalBean
public class PermissionBean implements PermissionBeanLocal {

	@SuppressWarnings("unused")
	private static final Logger logger = LoggerFactory.getLogger(PermissionBean.class);

	@Resource
	private SessionContext context;

	@EJB
	private LoggingBeanLocal loggingbean;

	@EJB
	private UserFacade userfacade;

	@EJB
	private EventUserFacade eventUserFacade;

	@EJB
	private EventBeanLocal eventbean;

	@Override
	public boolean hasPermission(SpecialPermission perm) {
		if (perm == null) {
			return false;
		}
		return context.isCallerInRole(perm.toString());
	}

	@Override
	public boolean hasPermission(IAppPermission perm) {

		if (perm == null) {
			return false;
		}
		return context.isCallerInRole(perm.getFullName());

	}

	@Override
	public boolean isCurrentUser(User user) {

		return user != null && isCurrentUser(user.getLogin());
	}

	@Override
	public boolean isCurrentUser(String login) {
		return (context.getCallerPrincipal() == null || login == null) ? false : context.getCallerPrincipal().getName().equals(login);

	}

	@Override
	public boolean isCurrentUser(EventUser user) {
		return user != null && isCurrentUser(user.getUser());
	}

	@Override
	public boolean isLoggedIn() {
		Principal principal = context.getCallerPrincipal();
		boolean ret = principal != null && !User.ANONYMOUS_LOGINNAME.equalsIgnoreCase(principal.getName());
		// logger.info("Checking principal {} against anon: {}", principal,
		// ret);
		return ret;
	}

	@Override
	public EventUser getCurrentUser() {
		Principal principal = context.getCallerPrincipal();

		EventUser ret = eventUserFacade.findByLogin(principal.getName());
		if (ret == null) {
			ret = getAnonEventUser();
		}
		return ret;
	}

	/**
	 * Makes sure default user and public role exist and the user is member of
	 * the role.
	 */
	@Override
	public EventUser getAnonEventUser() {
		EventUser defaultUser = eventUserFacade.findByLogin(User.ANONYMOUS_LOGINNAME);
		if (defaultUser == null) {
			User user = userfacade.findByLogin(User.ANONYMOUS_LOGINNAME);
			if (user == null)
			{
				defaultUser = new EventUser(new User(), eventbean.getCurrentEvent(), null);
				defaultUser.getUser().setLogin(User.ANONYMOUS_LOGINNAME);
				defaultUser.getUser().setNick(User.ANONYMOUS_LOGINNAME);

			} else {
				defaultUser = new EventUser(user, eventbean.getCurrentEvent(), null);
			}
			eventUserFacade.create(defaultUser);
			eventUserFacade.flush();

		}
		return defaultUser;
	}

	public String getPrincipal() {

		Principal principal = context.getCallerPrincipal();
		//logger.debug("Principal: {}", principal);

		String principalName = principal.getName();
		//	logger.debug("Principal is {}", principalName);

		return principalName;
	}

	@Override
	public String getCommonName() throws IllegalStateException {

		String dn = context.getCallerPrincipal().getName();
		String[] parts = dn.split(",");

		for (String part : parts) {
			if (part.trim().toUpperCase().startsWith("CN=")) {
				String cn = part.substring("CN=".length());
				return cn;
			}
		}

		throw new IllegalStateException("Current security principal has no CN");
	}

}