PermissionBean.java

/*
 * Copyright Codecrew Ry
 * 
 * All rights reserved.
 * 
 * This license applies to any software containing a notice placed by the 
 * copyright holder. Such software is herein referred to as the Software. 
 * This license covers modification, distribution and use of the Software. 
 * 
 * Any distribution and use in source and binary forms, with or without 
 * modification is not permitted without explicit written permission from the 
 * copyright owner. 
 * 
 * A non-exclusive royalty-free right is granted to the copyright owner of the 
 * Software to use, modify and distribute all modifications to the Software in 
 * future versions of the Software. 
 * 
 */
package fi.codecrew.moya.beans;

import java.security.Principal;

import javax.annotation.Resource;
import javax.annotation.security.DeclareRoles;
import javax.ejb.EJB;
import javax.ejb.LocalBean;
import javax.ejb.SessionContext;
import javax.ejb.Stateless;
import javax.resource.spi.IllegalStateException;

import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import fi.codecrew.moya.enums.apps.BillPermission;
import fi.codecrew.moya.enums.apps.CompoPermission;
import fi.codecrew.moya.enums.apps.ContentPermission;
import fi.codecrew.moya.enums.apps.EventPermission;
import fi.codecrew.moya.enums.apps.IAppPermission;
import fi.codecrew.moya.enums.apps.LicensePermission;
import fi.codecrew.moya.enums.apps.MapPermission;
import fi.codecrew.moya.enums.apps.PollPermission;
import fi.codecrew.moya.enums.apps.ShopPermission;
import fi.codecrew.moya.enums.apps.SpecialPermission;
import fi.codecrew.moya.enums.apps.TerminalPermission;
import fi.codecrew.moya.enums.apps.UserPermission;
import fi.codecrew.moya.facade.EventUserFacade;
import fi.codecrew.moya.facade.UserFacade;
import fi.codecrew.moya.model.EventUser;
import fi.codecrew.moya.model.User;

@Stateless
@DeclareRoles({
		UserPermission.S_CREATE_NEW,
		UserPermission.S_LOGIN,
		UserPermission.S_LOGOUT,
		UserPermission.S_MODIFY,
		UserPermission.S_MODIFY_ACCOUNTEVENTS,
		UserPermission.S_VIEW_ACCOUNTEVENTS,
		UserPermission.S_VIEW_OWN_ACCOUNTEVENTS,
		UserPermission.S_VIEW_ALL,
		UserPermission.S_VIEW_SELF,
		UserPermission.S_WRITE_ROLES,
		UserPermission.S_READ_ROLES,
		UserPermission.S_ANYUSER,
		UserPermission.S_MANAGE_HTTP_SESSION,
		UserPermission.S_INVITE_USERS,
		UserPermission.S_READ_ORGROLES,
		UserPermission.S_WRITE_ORGROLES,
		UserPermission.S_VITUTTAAKO,

		MapPermission.S_VIEW,
		MapPermission.S_MANAGE_MAPS,
		MapPermission.S_MANAGE_OTHERS,
		MapPermission.S_BUY_PLACES,
		// MapPermission.S_RELEASE_PLACE,

		ShopPermission.S_LIST_ALL_PRODUCTS,
		ShopPermission.S_LIST_USERPRODUCTS,
		ShopPermission.S_SHOP_TO_OTHERS,
		ShopPermission.S_MANAGE_PRODUCTS,
		ShopPermission.S_SHOP_PRODUCTS,
		ShopPermission.S_SHOP_FOODWAVE,
		ShopPermission.S_MANAGE_FOODWAVES,

		BillPermission.S_CREATE_BILL,
		BillPermission.S_READ_ALL,
		BillPermission.S_WRITE_ALL,
		BillPermission.S_VIEW_OWN,

		ContentPermission.S_MANAGE_NEWS,
		ContentPermission.S_MANAGE_PAGES,
		ContentPermission.S_MANAGE_ACTIONLOG,
		ContentPermission.S_MANAGE_MENU,

		PollPermission.S_ANSWER,
		PollPermission.S_VIEW_RESULTS,
		PollPermission.S_CREATE,

		SpecialPermission.S_SUPERADMIN,
		SpecialPermission.S_USER,
		SpecialPermission.S_ANONYMOUS,

		TerminalPermission.S_INFO_TERMINAL,
		TerminalPermission.S_USER_TERMINAL,
		TerminalPermission.S_ADMIN_TERMINAL,

		CompoPermission.S_MANAGE,
		CompoPermission.S_VOTE,
		CompoPermission.S_SUBMIT_ENTRY,
		CompoPermission.S_VIEW_COMPOS,

		EventPermission.S_MANAGE_PRIVATE_PROPERTIES,
		EventPermission.S_MANAGE_PROPERTIES,

		LicensePermission.S_MANAGE,
		LicensePermission.S_VIEW_OWN_CODES
})
@LocalBean
public class PermissionBean implements PermissionBeanLocal {

	private static final Logger logger = LoggerFactory.getLogger(PermissionBean.class);

	@Resource
	private SessionContext context;

	@EJB
	private LoggingBeanLocal loggingbean;

	@EJB
	private UserFacade userfacade;

	@EJB
	private EventUserFacade eventUserFacade;

	@EJB
	private EventBeanLocal eventbean;

	@Override
	public boolean hasPermission(SpecialPermission perm) {
		if (perm == null) {
			return false;
		}
		return context.isCallerInRole(perm.toString());
	}

	@Override
	public boolean hasPermission(IAppPermission perm) {

		if (perm == null) {
			return false;
		}
		return context.isCallerInRole(perm.getFullName());

	}

	@Override
	public boolean isCurrentUser(User user) {
		return (context.getCallerPrincipal() == null || user == null) ? false : context.getCallerPrincipal().getName().equals(user.getLogin());
	}

	@Override
	public boolean isCurrentUser(EventUser user) {
		return user != null && isCurrentUser(user.getUser());
	}

	@Override
	public boolean isLoggedIn() {
		Principal principal = context.getCallerPrincipal();
		boolean ret = principal != null && !User.ANONYMOUS_LOGINNAME.equalsIgnoreCase(principal.getName());
		// logger.info("Checking principal {} against anon: {}", principal,
		// ret);
		return ret;
	}

	@Override
	public EventUser getCurrentUser() {
		Principal principal = context.getCallerPrincipal();

		EventUser ret = eventUserFacade.findByLogin(principal.getName());
		if (ret == null) {
			ret = getAnonEventUser();
		}
		return ret;
	}

	/**
	 * Makes sure default user and public role exist and the user is member of
	 * the role.
	 */
	@Override
	public EventUser getAnonEventUser() {
		EventUser defaultUser = eventUserFacade.findByLogin(User.ANONYMOUS_LOGINNAME);
		if (defaultUser == null) {
			User user = userfacade.findByLogin(User.ANONYMOUS_LOGINNAME);
			if (user == null)
			{
				defaultUser = new EventUser(new User(), eventbean.getCurrentEvent(), null);
				defaultUser.getUser().setLogin(User.ANONYMOUS_LOGINNAME);
				defaultUser.getUser().setNick(User.ANONYMOUS_LOGINNAME);

			} else {
				defaultUser = new EventUser(user, eventbean.getCurrentEvent(), null);
			}
			eventUserFacade.create(defaultUser);
			eventUserFacade.flush();

		}
		return defaultUser;
	}

	public String getPrincipal() {

		Principal principal = context.getCallerPrincipal();
		logger.debug("Principal: {}", principal);

		String principalName = principal.getName();
		logger.debug("Principal is {}", principalName);

		return principalName;
	}

	@Override
	public String getCommonName() throws IllegalStateException {

		String dn = context.getCallerPrincipal().getName();
		String[] parts = dn.split(",");

		for (String part : parts) {
			if (part.trim().toUpperCase().startsWith("CN=")) {
				String cn = part.substring("CN=".length());
				return cn;
			}
		}

		throw new IllegalStateException("Current security principal has no CN");
	}

}