Subversion Repositories general

package ak.hostadmiral.core.model;

import java.util.*;

import net.sf.hibernate.*;

import net.sf.hibernate.type.Type;

import ak.hostadmiral.util.HibernateUtil;

import ak.hostadmiral.util.ModelException;

import ak.hostadmiral.util.ModelSecurityException;

public class UserManager

	implements

		UserBeforeDeleteListener,

		UserDeletingListener

{

	private static UserManager userManager = null;

	private static boolean registered = false;

	public static UserManager getInstance()

	{

		return userManager;

	}

	protected static void register()

	{

		synchronized(UserManager.class) {

			if(registered) return;

			registered = true;

			try {

				HibernateUtil.getConfiguration().addResource(

					"ak/hostadmiral/core/model/User.hbm.xml");

				HibernateUtil.getConfiguration().addResource(

					"ak/hostadmiral/core/model/UserLogin.hbm.xml");

				HibernateUtil.getConfiguration().addResource(

					"ak/hostadmiral/core/model/PasswordStoreAbstract.hbm.xml");

				userManager = new UserManager();

			}

			catch(Exception ex) {

				ex.printStackTrace();

				throw new RuntimeException(ex.getMessage());

			}

		}

	}

	static {

		register();

	}

	private Collection createdListeners      = new ArrayList();

	private Collection modifiedListeners     = new ArrayList();

	private Collection beforeDeleteListeners = new ArrayList();

	private Collection deletingListeners     = new ArrayList();

	private Collection deletedListeners      = new ArrayList();

	private Map loggedinUsers = new WeakHashMap();

	private UserManager()

	{

		addBeforeDeleteListener(this);

		addDeletingListener(this);

	}

	public User create(User editor)

		throws ModelException

	{

		if(!allowedToCreate(editor)) throw new ModelSecurityException();

		User user = new User();

		if(!user.mayChangeBoss(editor)) { // ordinal user can create only own "subusers"

			user.setBoss(editor);

		}

        // FIXME: make this configurable

		user.addPasswordStore(new PasswordStoreMd5());

		user.addPasswordStore(new PasswordStoreCrypt());

		user.addPasswordStore(new PasswordStorePlain());

		return user;

	}

	public boolean allowedToCreate(User editor)

		throws ModelException

	{

		return User.allowedToCreate(this, editor);

	}

	public User get(User editor, Long id)

		throws ModelException

	{

		User user;

		try {

			user = (User)HibernateUtil.currentSession().load(User.class, id);

		}

		catch(HibernateException ex) {

			throw new ModelException(ex);

		}

		if(!user.viewableBy(editor))

			throw new ModelSecurityException();

		return user;

	}

	public boolean loginExists(User editor, User user, String login)

		throws ModelException

	{

		try {

			if(user.getId() == null)

				return ((Integer)HibernateUtil.currentSession().iterate(

					"select count(*) from User u where login = ?",

					login, Hibernate.STRING)

					.next()).intValue() > 0;

			else

				return ((Integer)HibernateUtil.currentSession().iterate(

					"select count(*) from User u where login = ? and u != ?",

					new Object[] { login, user },

					new Type[] { Hibernate.STRING, Hibernate.entity(User.class) } )

					.next()).intValue() > 0;

		}

		catch(HibernateException ex) {

			throw new ModelException(ex);

		}

	}

	public User findForLogin(String login)

		throws ModelException

	{

		try {

			List list = HibernateUtil.currentSession().find(

				"select u from User u left join fetch u.boss where u.login = ? and u.enabled = ?",

				new Object[] { login, Boolean.TRUE },

				new Type[] { Hibernate.STRING, Hibernate.BOOLEAN } );

			if(list.size() == 0)

				return null;

			else

				return (User)list.get(0);

		}

		catch(HibernateException ex) {

			throw new ModelException(ex);

		}

	}

	public void save(User editor, User user)

		throws ModelException

	{

		if(!user.editableBy(editor) && !user.partEditableBy(editor)

			&& !user.mayChangeSuperuser(editor))

		{

			throw new ModelSecurityException();

        }

        boolean isNew = user.isNew();

		//user.setModUser(editor); // FIXME: disabled because hb throws exception

		                           // if user edits itself

		try {

			HibernateUtil.currentSession().saveOrUpdate(user);

		}

		catch(HibernateException ex) {

			throw new ModelException(ex);

		}

		// update user if he is logged in

		for(Iterator i = loggedinUsers.keySet().iterator(); i.hasNext(); ) {

			User u = (User)i.next();

			if(u.equals(user))

				u.update(user);

		}

        // inform listeners

        if(isNew) {

        	for(Iterator i = createdListeners.iterator(); i.hasNext(); ) {

        		UserCreatedListener listener = (UserCreatedListener)i.next();

    			listener.userCreated(editor, user);

        	}

        }

        else {

            User oldUser = user.getOrigin();

            if(oldUser == null) oldUser = user;

        	for(Iterator i = modifiedListeners.iterator(); i.hasNext(); ) {

        		UserModifiedListener listener = (UserModifiedListener)i.next();

    			listener.userModified(editor, user, oldUser);

        	}

        }

	}

    public void addCreatedListener(UserCreatedListener listener)

    {

    	createdListeners.add(listener);

    }

    public void removeCreatedListener(UserCreatedListener listener)

    {

    	createdListeners.remove(listener);

    }

    public void addModifiedListener(UserModifiedListener listener)

    {

    	modifiedListeners.add(listener);

    }

    public void removeModifiedListener(UserModifiedListener listener)

    {

    	modifiedListeners.remove(listener);

    }

    public void addBeforeDeleteListener(UserBeforeDeleteListener listener)

    {

    	beforeDeleteListeners.add(listener);

    }

    public void removeBeforeDeleteListener(UserBeforeDeleteListener listener)

    {

    	beforeDeleteListeners.remove(listener);

    }

    public void addDeletedListener(UserDeletedListener listener)

    {

    	deletedListeners.add(listener);

    }

    public void removeDeletedListener(UserDeletedListener listener)

    {

    	deletedListeners.remove(listener);

    }

    public void addDeletingListener(UserDeletingListener listener)

    {

    	deletingListeners.add(listener);

    }

    public void removeDeletingListener(UserDeletingListener listener)

    {

    	deletingListeners.remove(listener);

    }

    public Collection beforeDelete(User editor, User user, Collection known)

		throws ModelException

    {

    	Collection cascade = new ArrayList();

    	for(Iterator i = beforeDeleteListeners.iterator(); i.hasNext(); ) {

    		UserBeforeDeleteListener listener = (UserBeforeDeleteListener)i.next();

			Collection subcascade = listener.userBeforeDelete(editor, user, known);

    		if(subcascade != null)

    			cascade.addAll(subcascade);

    	}

    	return cascade;

    }

	public void delete(User editor, User user)

		throws ModelException

	{

	    // check rights

		if(!user.deleteableBy(editor))

			throw new ModelSecurityException();

        // inform deleting listeners

    	for(Iterator i = deletingListeners.iterator(); i.hasNext(); ) {

    		UserDeletingListener listener = (UserDeletingListener)i.next();

			listener.userDeleting(editor, user);

    	}

        // backup copy

        User oldUser = new User(user);

        // delete it

		try {

			HibernateUtil.currentSession().delete(user);

		}

		catch(HibernateException ex) {

			throw new ModelException(ex);

		}

        // inform delete listeners

    	for(Iterator i = deletedListeners.iterator(); i.hasNext(); ) {

    		UserDeletedListener listener = (UserDeletedListener)i.next();

			listener.userDeleted(editor, oldUser);

    	}

	}

	public Collection listUsers(User editor)

		throws ModelException

	{

		try {

			if(editor.isSuperuser()) {

				return HibernateUtil.currentSession().find(

					"select u from User u left join fetch u.boss");

			}

			else {

				return HibernateUtil.currentSession().find(

					"select u from User u where u = ? or u.boss = ?",

					new Object[] { editor, editor},

					new Type[] { Hibernate.entity(User.class), Hibernate.entity(User.class) } );

			}

		}

		catch(HibernateException ex) {

			throw new ModelException(ex);

		}

	}

	public boolean areUsersAvailable(User editor)

		throws ModelException

	{

		try {

			if(editor.isSuperuser()) {

				return true;

			}

			else {

				// FIXME: always true?

				return ((Integer)HibernateUtil.currentSession().iterate(

					"select count(*) from User u where u = ? or u.boss = ?",

					new Object[] { editor, editor},

					new Type[] { Hibernate.entity(User.class), Hibernate.entity(User.class) } )

					.next()).intValue() > 0;

			}

		}

		catch(HibernateException ex) {

			throw new ModelException(ex);

		}

	}

	public User loginUser(String login, String password, String ip)

		throws ModelException

	{

		User      user      = (login == null || password == null) ? null : findForLogin(login);

		boolean   success   = (user == null) ? false : user.checkPassword(password);

		UserLogin userLogin = new UserLogin(user, login, new Date(), Boolean.valueOf(success), ip);

		// save login information

		try {

			HibernateUtil.currentSession().saveOrUpdate(userLogin);

		}

		catch(HibernateException ex) {

			throw new ModelException(ex);

		}

		if(success) {

			user = new User(user);   // unbind the user from hibernate

			loggedinUsers.put(user, Boolean.TRUE);

			return user;

		}

		else {

			return null; // wrong login or password

		}

	}

	public Collection listFailedLogins(User editor)

		throws ModelException

	{

		if(!editor.mayViewAllLogins())

		{

			throw new ModelSecurityException();

        }

		try {

			return HibernateUtil.currentSession().find(

				"select l from UserLogin l left join fetch l.user where l.success = ?",

				Boolean.FALSE, Hibernate.BOOLEAN);

		}

		catch(HibernateException ex) {

            throw new ModelException(ex);

		}

	}

	public Collection userBeforeDelete(User editor, User user, Collection known)

		throws ModelException

	{

        Collection subusers;

		try {

			subusers = HibernateUtil.currentSession().find(

				"select u from User u where u.boss = ?",

				user, Hibernate.entity(User.class) );

		}

		catch(HibernateException ex) {

			throw new ModelException(ex);

		}

    	Collection cascade = new ArrayList();

		for(Iterator i = subusers.iterator(); i.hasNext(); ) {

			User u = (User)i.next();

            if(u.viewableBy(editor)) {

				if(u.deleteableBy(editor))

					cascade.add(new CascadeDeleteElement(u, CascadeDeleteElement.DELETE,

						this.beforeDelete(editor, u, known)));

				else

					cascade.add(new CascadeDeleteElement(u, CascadeDeleteElement.FORBIDDEN, null));

			}

			else {

				cascade.add(new CascadeDeleteElement(User.createLimitedCopy(u),

					CascadeDeleteElement.FORBIDDEN, null));

			}

		}

    	return cascade;

	}

	public void userDeleting(User editor, User user)

		throws ModelException

	{

        Collection subusers;

		try {

			subusers = HibernateUtil.currentSession().find(

				"select u from User u where u.boss = ?",

				user, Hibernate.entity(User.class) );

		}

		catch(HibernateException ex) {

			throw new ModelException(ex);

		}

		for(Iterator i = subusers.iterator(); i.hasNext(); ) {

			delete(editor, (User)i.next());

		}

	}

	public static final Comparator LOGIN_COMPARATOR = new LoginComparator();

	public static final Comparator LOGINS_TIME_COMPARATOR = new LoginsTimeComparator();

	private static class LoginComparator

		implements Comparator

	{

		public int compare(Object o1, Object o2)

		{

			if(!(o1 instanceof User) || !(o2 instanceof User))

				throw new ClassCastException("not a User");

		    User a1 = (User)o1;

		    User a2 = (User)o2;

		    if(a1 == null && a2 == null)

		    	return 0;

		    else if(a1 == null && a2 != null)

		    	return -1;

		    else if(a1 != null && a2 == null)

		    	return 1;

		    else

		    	return a1.getLogin().compareToIgnoreCase(a2.getLogin());

		}

		public boolean equals(Object obj)

		{

			return (obj instanceof LoginComparator);

		}

	}

	private static class LoginsTimeComparator

		implements Comparator

	{

		public int compare(Object o1, Object o2)

		{

			if(!(o1 instanceof UserLogin) || !(o2 instanceof UserLogin))

				throw new ClassCastException("not a UserLogin");

		    UserLogin a1 = (UserLogin)o1;

		    UserLogin a2 = (UserLogin)o2;

		    if(a1 == null && a2 == null)

		    	return 0;

		    else if(a1 == null && a2 != null)

		    	return -1;

		    else if(a1 != null && a2 == null)

		    	return 1;

		    else

		    	return a1.getLoginTime().compareTo(a2.getLoginTime());

		}

		public boolean equals(Object obj)

		{

			return (obj instanceof LoginComparator);

		}

	}

}