DirectSqlAccessTools.java

/*
 * Copyright 2008 FatWire Corporation. All Rights Reserved.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *    http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package tools.gsf.facade.assetapi;

import COM.FutureTense.Interfaces.ICS;
import com.fatwire.assetapi.data.AssetId;
import com.fatwire.cs.core.db.PreparedStmt;
import com.fatwire.cs.core.db.StatementParam;
import tools.gsf.facade.sql.Row;
import tools.gsf.facade.sql.SqlHelper;

import java.util.Arrays;
import java.util.HashMap;
import java.util.Map;

/**
 * Backdoor asset API utility that assists with retrieving asset data without
 * using legitimate APIs. Warning: Using this class will bypass security,
 * revision tracking, approval, and compositional dependency management
 * subsystems and should only be used with extreme caution.
 *
 * @author Tony Field
 * @author Dolf Dijkstra
 * @since 2011-05-07
 */
public final class DirectSqlAccessTools {
    private final ICS ics;

    public DirectSqlAccessTools(ICS ics) {
        this.ics = ics;
    }

    public boolean isFlex(AssetId id) {
        StatementParam param = FLEX_ATTR_TYPE.newParam();
        param.setString(0, id.getType());
        param.setString(1, id.getType());
        return SqlHelper.selectSingle(ics, FLEX_ATTR_TYPE, param) != null;
    }

    private static final PreparedStmt FLEX_ATTR_TYPE = new PreparedStmt(
            "SELECT assetattr FROM FlexAssetTypes WHERE assettype = ? UNION SELECT assetattr FROM FlexGroupTypes WHERE assettype = ?",
            Arrays.asList("FlexAssetTypes", "FlexGroupTypes"));

    static {
        FLEX_ATTR_TYPE.setElement(0, "FlexAssetTypes", "assettype");
        FLEX_ATTR_TYPE.setElement(1, "FlexGroupTypes", "assettype");
    }

    public String getFlexAttributeType(AssetId id) {
        StatementParam param = FLEX_ATTR_TYPE.newParam();
        param.setString(0, id.getType());
        param.setString(1, id.getType());
        Row row = SqlHelper.selectSingle(ics, FLEX_ATTR_TYPE, param);
        if (row == null) {
            throw new IllegalArgumentException("Asset " + id + " is not a flex asset!");
        }
        return row.getString("assetattr");
    }


    public String getFlexAttributeValue(AssetId id, String attrName) {
        // todo: medium: fix as this is very inefficient
        String attrType = getFlexAttributeType(id);
        PreparedStmt flexFields = new PreparedStmt("SELECT attr.name AS name, cmungo.stringvalue AS stringvalue "
                + "FROM " + attrType + " attr, " + id.getType() + "_Mungo cmungo " + "WHERE cmungo.cs_ownerid = ? "
                + "AND cmungo.cs_attrid = attr.id AND attr.name = ?", Arrays.asList(attrType, id.getType() + "_Mungo"));
        flexFields.setElement(0, id.getType() + "_Mungo", "cs_ownerid");
        flexFields.setElement(1, attrType, "name");
        StatementParam param = flexFields.newParam();
        param.setLong(0, id.getId());
        param.setString(1, attrName);
        Row r = SqlHelper.selectSingle(ics, flexFields, param);
        if (r == null) {
            return null;
        } else {
            return r.getString("stringvalue");
        }
    }

    public Map<String, String> getFlexAttributeValues(AssetId id, String... attrName) {
        // todo: medium: fix as this is very inefficient
        if (attrName == null || attrName.length == 0) {
            throw new IllegalArgumentException("attrName must not be null or zero-length array.");
        }
        String attrType = getFlexAttributeType(id);
        StringBuilder sql = new StringBuilder("SELECT attr.name AS name, cmungo.stringvalue AS stringvalue FROM ")
                .append(attrType).append(" attr, ").append(id.getType())
                .append("_Mungo cmungo WHERE cmungo.cs_ownerid = ? AND cmungo.cs_attrid = attr.id AND attr.name IN (");

        for (int num = 0; num < attrName.length; num++) {
            if (num > 0) {
                sql.append(",");
            }
            sql.append("?");
        }

        sql.append(")");

        PreparedStmt flexFields = new PreparedStmt(sql.toString(), Arrays.asList(id.getType(), attrType, id.getType() + "_Mungo"));
        flexFields.setElement(0, id.getType() + "_Mungo", "cs_ownerid");
        for (int num = 0; num < attrName.length; num++) {
            flexFields.setElement(num + 1, attrType, "name");
        }

        StatementParam param = flexFields.newParam();
        param.setLong(0, id.getId());
        for (int num = 0; num < attrName.length; num++) {
            param.setString(num + 1, attrName[num]);
        }
        Map<String, String> map = new HashMap<String, String>();
        for (Row r : SqlHelper.select(ics, flexFields, param)) {
            map.put(r.getString("name"), r.getString("stringvalue"));
        }
        return map;
    }
}