/* * (C) Copyright 2013 Nuxeo SA (http://nuxeo.com/) and others. * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * Contributors: * dmetzler */ package org.nuxeo.ecm.restapi.server.jaxrs.usermanager; import java.io.Serializable; import javax.ws.rs.core.Response; import org.nuxeo.ecm.core.api.DocumentModel; import org.nuxeo.ecm.core.api.NuxeoGroup; import org.nuxeo.ecm.platform.query.api.PageProviderDefinition; import org.nuxeo.ecm.platform.query.api.PageProviderService; import org.nuxeo.ecm.platform.usermanager.UserManager; import org.nuxeo.ecm.webengine.WebException; import org.nuxeo.ecm.webengine.model.WebObject; import org.nuxeo.runtime.api.Framework; /** * @since 5.7.3 */ @WebObject(type = "groups") public class GroupRootObject extends AbstractUMRootObject<NuxeoGroup> { public static final String PAGE_PROVIDER_NAME = "nuxeo_groups_listing"; @Override protected NuxeoGroup getArtifact(String id) { return um.getGroup(id); } @Override protected String getArtifactType() { return "group"; } @Override protected void checkPrecondition(NuxeoGroup group) { checkCurrentUserCanCreateArtifact(group); checkGroupHasAName(group); checkGroupDoesNotAlreadyExists(group, um); } @Override protected NuxeoGroup createArtifact(NuxeoGroup group) { DocumentModel groupModel = buildModelFromGroup(group, um); um.createGroup(groupModel); return um.getGroup(group.getName()); } private DocumentModel buildModelFromGroup(NuxeoGroup group, UserManager um) { DocumentModel groupModel = um.getBareGroupModel(); String schemaName = um.getGroupSchemaName(); groupModel.setProperty(schemaName, um.getGroupIdField(), group.getName()); groupModel.setProperty(schemaName, um.getGroupLabelField(), group.getLabel()); groupModel.setPropertyValue(um.getGroupMembersField(), (Serializable) group.getMemberUsers()); groupModel.setPropertyValue(um.getGroupSubGroupsField(), (Serializable) group.getMemberGroups()); return groupModel; } private void checkGroupDoesNotAlreadyExists(NuxeoGroup group, UserManager um) { if (um.getGroup(group.getName()) != null) { throw new WebException("Group already exists", Response.Status.PRECONDITION_FAILED.getStatusCode()); } } private void checkGroupHasAName(NuxeoGroup group) { if (group.getName() == null) { throw new WebException("Group MUST have a name", Response.Status.PRECONDITION_FAILED.getStatusCode()); } } @Override boolean isAPowerUserEditableArtifact(NuxeoGroup artifact) { return isAPowerUserEditableGroup(artifact); } static boolean isAPowerUserEditableGroup(NuxeoGroup group) { UserManager um = Framework.getLocalService(UserManager.class); return !um.getAdministratorsGroups().contains(group.getName()); } @Override protected PageProviderDefinition getPageProviderDefinition() { PageProviderService ppService = Framework.getLocalService(PageProviderService.class); return ppService.getPageProviderDefinition(PAGE_PROVIDER_NAME); } }