/**
 * Copyright (C) 2011  JTalks.org Team
 * This library is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
 * version 2.1 of the License, or (at your option) any later version.
 * This library is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 * You should have received a copy of the GNU Lesser General Public
 * License along with this library; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301  USA
 */
package org.jtalks.jcommune.service.security;

import org.jtalks.common.model.entity.Component;
import org.jtalks.common.model.entity.Group;
import org.jtalks.common.model.permissions.BranchPermission;
import org.jtalks.common.model.permissions.GeneralPermission;
import org.jtalks.common.model.permissions.JtalksPermission;
import org.jtalks.common.service.security.SecurityContextFacade;
import org.jtalks.jcommune.model.dto.GroupsPermissions;
import org.jtalks.jcommune.model.dto.PermissionChanges;
import org.jtalks.jcommune.model.entity.Branch;
import org.jtalks.jcommune.service.security.acl.AclClassName;
import org.jtalks.jcommune.service.security.acl.AclGroupPermissionEvaluator;
import org.jtalks.jcommune.service.transactional.TransactionalPermissionService;
import org.mockito.Mock;
import org.springframework.security.access.AccessDeniedException;
import org.springframework.security.core.Authentication;
import org.springframework.security.core.context.SecurityContext;
import org.testng.annotations.BeforeMethod;
import org.testng.annotations.Test;

import java.io.Serializable;
import java.util.List;

import static org.mockito.Mockito.*;
import static org.mockito.MockitoAnnotations.initMocks;
import static org.testng.Assert.*;

public class TransactionalPermissionServiceTest {

    @Mock
    private SecurityContextFacade contextFacade;
    @Mock
    private AclGroupPermissionEvaluator aclEvaluator;

    private PermissionService permissionService;
    private PermissionManager permissionManager;

    @BeforeMethod
    public void initEnvironmental() {
        initMocks(this);
        permissionManager = mock(PermissionManager.class);
        permissionService = spy(new TransactionalPermissionService(contextFacade, aclEvaluator, permissionManager));
    }

    @BeforeMethod
    public void prepareTestData() {
        Authentication authentication = mock(Authentication.class);
        SecurityContext securityContext = mock(SecurityContext.class);

        when(contextFacade.getContext()).thenReturn(securityContext);
        when(securityContext.getAuthentication()).thenReturn(authentication);
    }

    @Test
    public void testHasPermissionStringPermissionPermissionGranted() {
        doReturn(true).when(aclEvaluator)
                .hasPermission(any(Authentication.class), any(Serializable.class), anyString(), anyString());

        assertTrue(permissionService.hasPermission(0, null, ""));
    }

    @Test
    public void testHasPermissionStringPermissionPermissionNotGranted() {
        doReturn(false).when(aclEvaluator)
                .hasPermission(any(Authentication.class), any(Serializable.class), anyString(), anyString());

        assertFalse(permissionService.hasPermission(0, null, ""));
    }

    @Test
    public void testHasPermissionEnumPermissionPermissionGranted() {
        doReturn(true).when(aclEvaluator)
                .hasPermission(any(Authentication.class), any(Serializable.class), anyString(), anyString());

        assertTrue(permissionService.hasPermission(0, AclClassName.BRANCH, GeneralPermission.READ));
    }

    @Test
    public void testHasPermissionEnumPermissionPermissionNotGranted() {
        doReturn(false).when(aclEvaluator)
                .hasPermission(any(Authentication.class), any(Serializable.class), anyString(), anyString());

        assertFalse(permissionService.hasPermission(0, AclClassName.BRANCH, GeneralPermission.READ));
    }

    @Test
    public void testCheckPermissionPermissionGranted() {
        doReturn(true).when(aclEvaluator)
                .hasPermission(any(Authentication.class), any(Serializable.class), anyString(), anyString());

        permissionService.checkPermission(0, AclClassName.BRANCH, GeneralPermission.READ);
    }

    @Test(expectedExceptions = AccessDeniedException.class)
    public void testCheckPermissionPermissionNotGranted() {
        doReturn(false).when(aclEvaluator)
                .hasPermission(any(Authentication.class), any(Serializable.class), anyString(), anyString());

        permissionService.checkPermission(0, AclClassName.BRANCH, GeneralPermission.READ);
    }

    /**
     * Tests whether method constructs data that is going to be passed to the evaluator is correct and thus {@link
     * PermissionService#hasBranchPermission(long, JtalksPermission)} will return same result as evaluator.
     */
    @Test
    public void hasBranchPermissionIsTrueIfEvaluatorSaidSo() {
        doReturn(true).when(aclEvaluator).hasPermission(any(Authentication.class),
                eq(1L),
                eq(AclClassName.BRANCH.toString()),
                eq("BranchPermission.EDIT_OWN_POSTS"));

        permissionService.hasBranchPermission(1L, BranchPermission.EDIT_OWN_POSTS);
    }

    @Test
    public void testGetPermissionsFor() {
        Branch branch = mock(Branch.class);
        doReturn(new GroupsPermissions()).when(permissionManager).getPermissionsMapFor(branch);
        assertNotNull(permissionService.getPermissionsFor(branch));
    }

    @Test
    public void testChangeGrants() {
        PermissionChanges changes = mock(PermissionChanges.class);
        Branch branch = mock(Branch.class);
        permissionService.changeGrants(branch, changes);

        Component component = mock(Component.class);
        permissionService.changeGrants(component, changes);

        Group group = mock(Group.class);
        permissionService.changeGrants(group, changes);
    }

    @Test
    public void testChangeRestrictions() {
        PermissionChanges changes = mock(PermissionChanges.class);
        Branch branch = mock(Branch.class);
        permissionService.changeRestrictions(branch, changes);

        Component component = mock(Component.class);
        permissionService.changeRestrictions(component, changes);

        Group group = mock(Group.class);
        permissionService.changeRestrictions(group, changes);
    }

    @Test
    public void testGetPermissionsMapFor() {
        Component component = mock(Component.class);
        doReturn(new GroupsPermissions()).when(permissionManager).getPermissionsMapFor(component);
        assertNotNull(permissionService.getPermissionsMapFor(component));
    }

    @Test
    public void testGetPersonalPermissions() {
        List<Group> groups = mock(List.class);
        doReturn(new GroupsPermissions()).when(permissionManager).getPermissionsMapFor(groups);
        assertNotNull(permissionService.getPersonalPermissions(groups));
    }
}