AccessRightController.java

/* ===============================================================================
 *
 * Part of the InfoGlue Content Management Platform (www.infoglue.org)
 *
 * ===============================================================================
 *
 *  Copyright (C)
 * 
 * This program is free software; you can redistribute it and/or modify it under
 * the terms of the GNU General Public License version 2, as published by the
 * Free Software Foundation. See the file LICENSE.html for more information.
 * 
 * This program is distributed in the hope that it will be useful, but WITHOUT
 * ANY WARRANTY, including the implied warranty of MERCHANTABILITY or FITNESS
 * FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
 * 
 * You should have received a copy of the GNU General Public License along with
 * this program; if not, write to the Free Software Foundation, Inc. / 59 Temple
 * Place, Suite 330 / Boston, MA 02111-1307 / USA.
 *
 * ===============================================================================
 */

package org.infoglue.cms.controllers.kernel.impl.simple;

import java.util.ArrayList;
import java.util.Collection;
import java.util.HashMap;
import java.util.Iterator;
import java.util.List;
import java.util.Map;
import java.util.concurrent.ConcurrentHashMap;
import java.util.concurrent.atomic.AtomicBoolean;

import javax.servlet.http.HttpServletRequest;

import org.apache.log4j.Level;
import org.apache.log4j.Logger;
import org.exolab.castor.jdo.Database;
import org.exolab.castor.jdo.OQLQuery;
import org.exolab.castor.jdo.QueryResults;
import org.infoglue.cms.applications.contenttool.actions.databeans.AccessRightsUserRow;
import org.infoglue.cms.entities.content.Content;
import org.infoglue.cms.entities.content.ContentVO;
import org.infoglue.cms.entities.content.ContentVersionVO;
import org.infoglue.cms.entities.kernel.BaseEntityVO;
import org.infoglue.cms.entities.management.AccessRight;
import org.infoglue.cms.entities.management.AccessRightGroup;
import org.infoglue.cms.entities.management.AccessRightGroupVO;
import org.infoglue.cms.entities.management.AccessRightRole;
import org.infoglue.cms.entities.management.AccessRightRoleVO;
import org.infoglue.cms.entities.management.AccessRightUser;
import org.infoglue.cms.entities.management.AccessRightUserVO;
import org.infoglue.cms.entities.management.AccessRightVO;
import org.infoglue.cms.entities.management.InterceptionPoint;
import org.infoglue.cms.entities.management.InterceptionPointVO;
import org.infoglue.cms.entities.management.RepositoryVO;
import org.infoglue.cms.entities.management.TableCount;
import org.infoglue.cms.entities.management.impl.simple.AccessRightGroupImpl;
import org.infoglue.cms.entities.management.impl.simple.AccessRightImpl;
import org.infoglue.cms.entities.management.impl.simple.RepositoryImpl;
import org.infoglue.cms.entities.management.impl.simple.SmallAccessRightImpl;
import org.infoglue.cms.entities.management.impl.simple.AccessRightRoleImpl;
import org.infoglue.cms.entities.management.impl.simple.AccessRightUserImpl;
import org.infoglue.cms.entities.structure.SiteNodeVersion;
import org.infoglue.cms.entities.structure.SiteNodeVersionVO;
import org.infoglue.cms.exception.Bug;
import org.infoglue.cms.exception.ConstraintException;
import org.infoglue.cms.exception.SystemException;
import org.infoglue.cms.security.InfoGlueGroup;
import org.infoglue.cms.security.InfoGluePrincipal;
import org.infoglue.cms.security.InfoGlueRole;
import org.infoglue.cms.util.CmsPropertyHandler;
import org.infoglue.cms.util.DateHelper;
import org.infoglue.deliver.util.CacheController;
import org.infoglue.deliver.util.RequestAnalyser;
import org.infoglue.deliver.util.Timer;

/**
 * This class is a helper class for the use case handle Accesss
 *
 * @author Mattias Bogeblad
 */

public class AccessRightController extends BaseController
{
    private final static Logger logger = Logger.getLogger(AccessRightController.class.getName());

	/**
	 * Factory method
	 */

	public static AccessRightController getController()
	{
		return new AccessRightController();
	}
	
	public AccessRight getAccessRightWithId(Integer accessRightId, Database db) throws SystemException, Bug
	{
		return (AccessRight) getObjectWithId(AccessRightImpl.class, accessRightId, db);
	}

	public AccessRightVO getAccessRightVOWithId(Integer accessRightId) throws SystemException, Bug
	{
		return (AccessRightVO) getVOWithId(AccessRightImpl.class, accessRightId);
	}
  
	public List getAccessRightVOList() throws SystemException, Bug
	{
		return getAllVOObjects(AccessRightImpl.class, "accessRightId");
	}

	public List getAccessRightVOList(Database db) throws SystemException, Bug
	{
		return this.getAllVOObjects(AccessRightImpl.class, "accessRightId", db);
	}

	public List getAccessRightUserVOList(Database db) throws SystemException, Bug
	{
		return this.getAllVOObjects(AccessRightUserImpl.class, "accessRightUserId", db);
	}

	public List getAccessRightRoleVOList(Database db) throws SystemException, Bug
	{
		return this.getAllVOObjects(AccessRightRoleImpl.class, "accessRightRoleId", db);
	}

	public List getAccessRightGroupVOList(Database db) throws SystemException, Bug
	{
		return this.getAllVOObjects(AccessRightGroupImpl.class, "accessRightGroupId", db);
	}
	    
	public void preCacheUserAccessRightVOList(InfoGluePrincipal principal) throws Exception
	{
		if(principal.getIsAdministrator() || preCacheInProcessForUsers.contains(principal.getName()))
		{
			logger.warn("No recaching user access rights now as it's in process allready");
			return;
		}
		
		try
		{
			preCacheInProcessForUsers.add(principal.getName());
			
			Database db = CastorDatabaseService.getDatabase();
	
			try 
			{
				beginTransaction(db);
				
				preCacheUserAccessRightVOList(principal, db);
				
				commitTransaction(db);
			} 
			catch (Exception e) 
			{
			    logger.info("An error occurred so we should not complete the transaction:" + e);
				rollbackTransaction(db);
				throw new SystemException(e.getMessage());					
			}
		}
		finally
		{
			preCacheInProcessForUsers.remove(principal.getName());
		}
	}
	
	
	public void preCacheUserAccessRightVOList(InfoGluePrincipal principal, Database db) throws Exception
	{
		Timer t = new Timer();
		//Ifor detta sen ocksa - cachear alla sidor som ar skyddade..
		/*
		select accessRightId from cmAccessRight ar INNER JOIN
		(  
		select max(siteNodeVersionId) as siteNodeVersionId from cmSiteNodeVersion snv 
		WHERE  
		snv.isActive = 1 AND 
		snv.stateId >= 0 AND
		snv.isProtected = 1 group by siteNodeId) snv
		ON ar.parameters = snv.siteNodeVersionId WHERE ar.interceptionPointId = 8
		*/
		
		StringBuilder sb = new StringBuilder();
		sb.append("CALL SQL select ar.accessRightId, ar.parameters, ar.interceptionPointId from cmAccessRight ar where ");
		sb.append("ar.interceptionPointId in (select interceptionPointId from cmInterceptionPoint where name like 'ComponentEditor.%' OR name LIKE 'Component.%' OR name = 'ComponentPropertyEditor.EditProperty' OR name like '%.Read%' AND name NOT LIKE 'SiteNodeVersion.Read') AND ");
		sb.append("(ar.accessRightId IN (select accessRightId from cmAccessRightUser where userName = '" + principal.getName() + "') OR ");
		sb.append("((ar.accessRightId NOT IN (select accessRightId from cmAccessRightRole where ar.accessRightId = accessRightId) AND ar.accessRightId NOT IN (select accessRightId from cmAccessRightUser where ar.accessRightId = accessRightId)) OR ");
		sb.append("(  ar.accessRightId IN ");
		sb.append("(select accessRightId from cmAccessRightRole where ar.accessRightId = accessRightId AND roleName in ( ");
		int index = 0;
		for(InfoGlueRole role : (Collection<InfoGlueRole>)principal.getRoles())
		{
			if(index > 0)
				sb.append(",");
			sb.append("'" + role.getName() + "'");
			index++;
		}
		sb.append(")) ) ");
		sb.append("AND ");
		sb.append("(  ar.accessRightId NOT IN (select accessRightId from cmAccessRightGroup where ar.accessRightId = accessRightId) ");
		if(principal.getGroups().size() > 0)
		{
			sb.append("OR ar.accessRightId IN  ");
			sb.append("(select accessRightId from cmAccessRightGroup where ar.accessRightId = accessRightId AND groupName in ( ");
			index = 0;
			for(InfoGlueGroup group : (Collection<InfoGlueGroup>)principal.getGroups())
			{
				if(index > 0)
					sb.append(",");
				sb.append("'" + group.getName() + "'");
				index++;
			}
			sb.append(")) ");
		}
		sb.append("))) AS org.infoglue.cms.entities.management.impl.simple.SmallAccessRightImpl");
		
		logger.info("SQL:" + sb.toString());
		
		OQLQuery oql = db.getOQLQuery(sb.toString());
		//t.printElapsedTime("Executed took");
		
		int duplicates = 0;
		Map<String,Integer> accessRightsMap = new ConcurrentHashMap<String,Integer>();
		QueryResults results = oql.execute(Database.READONLY);
		int i=0;
		while(results.hasMore()) 
	    {
			i++;
			//System.out.print(".");
			AccessRightImpl aru = (SmallAccessRightImpl)results.next();			
			String key = "" + aru.getValueObject().getInterceptionPointId();
			if(aru.getValueObject().getParameters() != null && !aru.getValueObject().getParameters().equals(""))
				key = "" + aru.getValueObject().getInterceptionPointId() + "_" + aru.getValueObject().getParameters();
			
			if(accessRightsMap.get(key) == null)
			{
				accessRightsMap.put(key, 1);
			}
			/*
			else
			{
				accessRightsMap.put(key, -1);
				duplicates++;
				logger.info("Was a duplicate on " + key);
			}
			*/
			//accessRightVOList.add(aru.getValueObject());
		}
		logger.warn("accessRightsMap:" + accessRightsMap.size() + " took " + t.getElapsedTime());
		
		List<AccessRightVO> duplicateAccessRightVOList = new ArrayList<AccessRightVO>();
		List<AccessRightVO> duplicateNonHarmfulAccessRightVOList = new ArrayList<AccessRightVO>();
		List<AccessRightVO> duplicateAutoMergableAccessRightVOList = new ArrayList<AccessRightVO>();
		getAllDuplicates(false, true, duplicateAccessRightVOList, duplicateNonHarmfulAccessRightVOList, duplicateAutoMergableAccessRightVOList, db);
		
		logger.info("duplicateAccessRightVOList:" + duplicateAccessRightVOList.size());
		for(AccessRightVO accessRightVO : duplicateAccessRightVOList)
		{
			if(!duplicateNonHarmfulAccessRightVOList.contains(accessRightVO))
			{
				String key = "" + accessRightVO.getInterceptionPointId() + "_" + accessRightVO.getParameters();
				logger.info("Was a duplicate accessRightVO " + accessRightVO.getId() + ": " + key);
				accessRightsMap.put(key, -1);
			}
			else
			{
				logger.info("Was a duplicate accessRightVO but not harmful" + accessRightVO.getId());
			}
		}
		
		List<AccessRightVO> undefinedAccessRights = getUndefinedAccessRights(db);
		logger.info("undefinedAccessRights:" + undefinedAccessRights.size() + " took " + t.getElapsedTime());
		for(AccessRightVO accessRightVO : undefinedAccessRights)
		{
			String key = "" + accessRightVO.getInterceptionPointId() + "_" + accessRightVO.getParameters();
			logger.info("Was a empty accessRightVO " + accessRightVO.getId() + ": " + key);
			accessRightsMap.put(key, -1);
		}
		
		//CacheController.cacheObjectInAdvancedCache("personalAuthorizationCache", "authorizationMap_" + principal.getName(), accessRightsMap);
		CacheController.cacheObject("userAccessCache", "authorizationMap_" + principal.getName(), accessRightsMap);

		//logger.info("accessRightsMap:" + accessRightsMap.size());
		//logger.info("duplicates:" + duplicates);
		//principalAccessRights.put("" + principal.getName(), accessRightsMap);
		logger.warn("accessRightsMap:" + accessRightsMap.size());
		logger.warn("duplicates:" + duplicates);
		//t.printElapsedTime("Read took:" + accessRightVOList.size());
		
		results.close();
		oql.close();

		logger.warn("Recaching access rights in " + CmsPropertyHandler.getContextRootPath() + " for user " + principal.getName() + " took " + t.getElapsedTime());
	}
	
	
	public List getAccessRightVOList(String interceptionPointName, String parameters) throws SystemException, Bug
	{
		List<AccessRightVO> accessRightVOList = new ArrayList<AccessRightVO>();
		
		Database db = CastorDatabaseService.getDatabase();

		try 
		{
			beginTransaction(db);
			
			accessRightVOList = getAccessRightVOList(interceptionPointName, parameters, db);
			
			commitTransaction(db);
		} 
		catch (Exception e) 
		{
		    logger.info("An error occurred so we should not complete the transaction:" + e);
			rollbackTransaction(db);
			throw new SystemException(e.getMessage());					
		}
		
		return accessRightVOList;	
	}
	
	public List getAccessRightVOList(String interceptionPointName, String parameters, Database db) throws SystemException, Bug
	{
		String key = "" + interceptionPointName + "_" + parameters;
		List accessRightVOList = (List)CacheController.getCachedObject("authorizationCache", key);
		if(accessRightVOList != null)
		{
			if(logger.isInfoEnabled())
				logger.info("There was an cached accessRightVOList:" + accessRightVOList);
		
			return accessRightVOList;
		}
			
		accessRightVOList = new ArrayList();
		
		InterceptionPointVO interceptionPointVO = InterceptionPointController.getController().getInterceptionPointVOWithName(interceptionPointName, db);
		if(interceptionPointVO == null)
		{
			logger.info("interceptionPointName:" + interceptionPointName + " not found");
			return new ArrayList();
		}
		
		//Thread.dumpStack();
		logger.info("Reading the hard way from an unexpected place:" + interceptionPointName + ":" + parameters);
		
		List accessRightList = this.getAccessRightListOnlyReadOnly(interceptionPointVO.getId(), parameters, db);
		
		Iterator accessRightListIterator = accessRightList.iterator();
		while(accessRightListIterator.hasNext())
		{
		    AccessRight accessRight = (AccessRight)accessRightListIterator.next();
		    
		    Collection approvedRoles = accessRight.getRoles();
		    Collection approvedGroups = accessRight.getGroups();
		    Collection approvedUsers = accessRight.getUsers();
		
		    AccessRightVO vo = accessRight.getValueObject();
		    vo.getRoles().addAll(toVOList(approvedRoles));
		    vo.getGroups().addAll(toVOList(approvedGroups));
		    vo.getUsers().addAll(toVOList(approvedUsers));
		    
		    accessRightVOList.add(vo);
		}
		
		if(accessRightVOList != null)
			CacheController.cacheObject("authorizationCache", key, accessRightVOList);
		
		return accessRightVOList;	
	}

	public List<AccessRightGroupVO> getAccessRightGroupVOList(Integer accessRightId) throws SystemException, Bug
	{
		List<AccessRightGroupVO> accessRightGroupVOList = new ArrayList<AccessRightGroupVO>();
		
		Database db = CastorDatabaseService.getDatabase();

		try 
		{
			beginTransaction(db);
			
			OQLQuery oql = db.getOQLQuery("SELECT f FROM org.infoglue.cms.entities.management.impl.simple.AccessRightGroupImpl f WHERE f.accessRight = $1 ORDER BY f.accessRightGroupId");
			oql.bind(accessRightId);

			QueryResults results = oql.execute(Database.READONLY);
			while (results.hasMore()) 
			{
				AccessRightGroup accessRightGroup = (AccessRightGroup)results.next();
				accessRightGroupVOList.add(accessRightGroup.getValueObject());
			}
			
			results.close();
			oql.close();
			
	        logger.info("accessRightGroupVOList:" + accessRightGroupVOList.size());
			
			commitTransaction(db);
		} 
		catch (Exception e) 
		{
		    logger.info("An error occurred so we should not complete the transaction:" + e);
			rollbackTransaction(db);
			throw new SystemException(e.getMessage());					
		}
		
		return accessRightGroupVOList;	
	}

	public List<AccessRightGroupVO> getAccessRightGroupVOList(Integer accessRightId, Database db) throws SystemException, Bug, Exception
	{
		List<AccessRightGroupVO> accessRightGroupVOList = new ArrayList<AccessRightGroupVO>();
		
		OQLQuery oql = db.getOQLQuery("SELECT f FROM org.infoglue.cms.entities.management.impl.simple.AccessRightGroupImpl f WHERE f.accessRight = $1 ORDER BY f.accessRightGroupId");
		oql.bind(accessRightId);

		QueryResults results = oql.execute(Database.READONLY);
		while (results.hasMore()) 
		{
			AccessRightGroup accessRightGroup = (AccessRightGroup)results.next();
			accessRightGroupVOList.add(accessRightGroup.getValueObject());
		}
		
		results.close();
		oql.close();
		
		return accessRightGroupVOList;	
	}

	public List getAccessRightVOList(Integer interceptionPointId, String parameters, String roleName) throws SystemException, Bug
	{
		List accessRightVOList = null;
		
		Database db = CastorDatabaseService.getDatabase();

		try 
		{
			beginTransaction(db);
			
			accessRightVOList = getAccessRightVOList(db, interceptionPointId, parameters, roleName);

			logger.info("accessRightVOList:" + accessRightVOList.size());
			
			commitTransaction(db);
		} 
		catch (Exception e) 
		{
		    e.printStackTrace();
			logger.info("An error occurred so we should not complete the transaction:" + e);
			rollbackTransaction(db);
			throw new SystemException(e.getMessage());
		}
		
		return accessRightVOList;	
	}

	
	public List getAccessRightVOList(Database db, Integer interceptionPointId, String parameters, String roleName) throws SystemException, Bug
	{
		List accessRightVOList = null;
		
		InterceptionPointVO interceptionPointVO = InterceptionPointController.getController().getInterceptionPointVOWithId(interceptionPointId);
		if(interceptionPointVO.getUsesExtraDataForAccessControl().booleanValue())
			accessRightVOList = toVOList(getAccessRightList(interceptionPointId, parameters, roleName, db));
		else
			accessRightVOList = toVOList(getAccessRightList(interceptionPointId, roleName, db));

		logger.info("accessRightVOList:" + accessRightVOList.size());
		
		return accessRightVOList;	
	}

	public List getAccessRightVOListOnly(Integer interceptionPointId, String parameters) throws SystemException, Bug
	{
		List accessRightVOList = null;
		
		Database db = CastorDatabaseService.getDatabase();

		try 
		{
			beginTransaction(db);
			
			accessRightVOList = getAccessRightVOListOnly(db, interceptionPointId, parameters);

			logger.info("accessRightVOList:" + accessRightVOList.size());
			
			commitTransaction(db);
		} 
		catch (Exception e) 
		{
			logger.info("An error occurred so we should not complete the transaction:" + e);
			rollbackTransaction(db);
			throw new SystemException(e.getMessage());
		}
		
		return accessRightVOList;	
	}

	public List getAccessRightVOListOnly(Database db, Integer interceptionPointId, String parameters) throws SystemException, Bug
	{
		List accessRightVOList = null;
		
		InterceptionPointVO interceptionPointVO = InterceptionPointController.getController().getInterceptionPointVOWithId(interceptionPointId);
		if(interceptionPointVO.getUsesExtraDataForAccessControl().booleanValue())
			accessRightVOList = toVOList(getAccessRightListOnlyReadOnly(interceptionPointId, parameters, db));
		else
			accessRightVOList = toVOList(getAccessRightList(interceptionPointId, db));

		logger.info("accessRightVOList:" + accessRightVOList.size());
		
		return accessRightVOList;	
	}

	public List getAccessRightList(String interceptionPointName, String parameters, String roleName, Database db) throws SystemException, Bug
	{
		List accessRightList = getAccessRightList(InterceptionPointController.getController().getInterceptionPointVOWithName(interceptionPointName).getId(), parameters, roleName, db);
		
		return accessRightList;		
	}
	
	public List getAccessRightList(Integer interceptionPointId, String parameters, String roleName, Database db) throws SystemException, Bug
	{
		List accessRightList = new ArrayList();
		
		try
		{
			OQLQuery oql = null;
			
			if(parameters == null || parameters.length() == 0)
			{
				oql = db.getOQLQuery("SELECT f FROM org.infoglue.cms.entities.management.impl.simple.AccessRightImpl f WHERE f.interceptionPoint = $1 AND (is_undefined(f.parameters) OR f.parameters = $2) AND f.roles.roleName = $3 ORDER BY f.accessRightId");
				oql.bind(interceptionPointId);
				oql.bind(parameters);
				oql.bind(roleName);
			}
			else
			{
		    	oql = db.getOQLQuery("SELECT f FROM org.infoglue.cms.entities.management.impl.simple.AccessRightImpl f WHERE f.interceptionPoint = $1 AND f.parameters = $2 AND f.roles.roleName = $3 ORDER BY f.accessRightId");
				oql.bind(interceptionPointId);
				oql.bind(parameters);
				oql.bind(roleName);
			}
			
			QueryResults results = oql.execute();
			this.logger.info("Fetching entity in read/write mode" + interceptionPointId);

			while (results.hasMore()) 
			{
				AccessRight accessRight = (AccessRight)results.next();
				accessRightList.add(accessRight);
			}
			
			results.close();
			oql.close();
		}
		catch(Exception e)
		{
		    e.printStackTrace();
			throw new SystemException("An error occurred when we tried to fetch a list of Access rights. Reason:" + e.getMessage(), e);    
		}
		
		return accessRightList;		
	}

	public List getAccessRightListOnly(Integer interceptionPointId, String parameters, Database db) throws SystemException, Bug
	{
		List accessRightList = new ArrayList();
		
		try
		{
			OQLQuery oql = null;
			
			if(parameters == null || parameters.length() == 0)
			{
				oql = db.getOQLQuery("SELECT f FROM org.infoglue.cms.entities.management.impl.simple.AccessRightImpl f WHERE f.interceptionPoint = $1 AND (is_undefined(f.parameters) OR f.parameters = $2) ORDER BY f.accessRightId");
				oql.bind(interceptionPointId);
				oql.bind(parameters);
			}
			else
			{
		    	oql = db.getOQLQuery("SELECT f FROM org.infoglue.cms.entities.management.impl.simple.AccessRightImpl f WHERE f.interceptionPoint = $1 AND f.parameters = $2 ORDER BY f.accessRightId");
				oql.bind(interceptionPointId);
				oql.bind(parameters);
			}
			
			QueryResults results = oql.execute();
			this.logger.info("Fetching entity in read/write mode");

			while (results.hasMore()) 
			{
				AccessRight accessRight = (AccessRight)results.next();
				accessRightList.add(accessRight);
			}
			
			results.close();
			oql.close();
		}
		catch(Exception e)
		{
		    e.printStackTrace();
			throw new SystemException("An error occurred when we tried to fetch a list of Access rights. Reason:" + e.getMessage(), e);    
		}
		
		return accessRightList;		
	}

	public List getAccessRightListOnlyReadOnly(Integer interceptionPointId, Database db) throws SystemException, Bug
	{
		List accessRightList = new ArrayList();
		
		try
		{
			OQLQuery oql = null;
			
	    	oql = db.getOQLQuery("SELECT f FROM org.infoglue.cms.entities.management.impl.simple.AccessRightImpl f WHERE f.interceptionPoint = $1 ORDER BY f.accessRightId");
			oql.bind(interceptionPointId);
			
			QueryResults results = oql.execute(Database.READONLY);
			while (results.hasMore()) 
			{
				AccessRight accessRight = (AccessRight)results.next();
				accessRightList.add(accessRight);
			}
			
			results.close();
			oql.close();
		}
		catch(Exception e)
		{
			throw new SystemException("An error occurred when we tried to fetch a list of Access rights. Reason:" + e.getMessage(), e);    
		}
		
		return accessRightList;		
	}

	
	public List<AccessRight> getAccessRightListOnlyReadOnly(Integer interceptionPointId, String parameters, Database db) throws SystemException, Bug
	{
		List accessRightList = new ArrayList();
		
		try
		{
			RequestAnalyser.getRequestAnalyser().incApproximateNumberOfDatabaseQueries();

			OQLQuery oql = null;
			
			if(parameters == null || parameters.length() == 0)
			{
				oql = db.getOQLQuery("SELECT f FROM org.infoglue.cms.entities.management.impl.simple.AccessRightImpl f WHERE f.interceptionPoint = $1 ORDER BY f.accessRightId");
				oql.bind(interceptionPointId);
			}
			else
			{
		    	oql = db.getOQLQuery("SELECT f FROM org.infoglue.cms.entities.management.impl.simple.AccessRightImpl f WHERE f.interceptionPoint = $1 AND f.parameters = $2 ORDER BY f.accessRightId");
				oql.bind(interceptionPointId);
				oql.bind(parameters);
			}
			
			QueryResults results = oql.execute(Database.READONLY);
			while (results.hasMore()) 
			{
				AccessRight accessRight = (AccessRight)results.next();
				accessRightList.add(accessRight);
			}
			
			results.close();
			oql.close();
		}
		catch(Exception e)
		{
			logger.warn("Error getting access rights. Message: " + e.getMessage() + ". Not retrying...");
			throw new SystemException("An error occurred when we tried to fetch a list of Access rights. Reason:" + e.getMessage(), e);    
		}
		finally
		{
			RequestAnalyser.getRequestAnalyser().decApproximateNumberOfDatabaseQueries();
		}

		return accessRightList;		
	}

	public List<AccessRight> getContentAccessRightListOnlyReadOnly(Integer repositoryId, Database db) throws SystemException, Bug
	{
		List<AccessRight> accessRightList = new ArrayList<AccessRight>();
		
		try
		{
			RequestAnalyser.getRequestAnalyser().incApproximateNumberOfDatabaseQueries();

			String SQL = "CALL SQL select ar.accessRightId, ar.parameters, ar.interceptionPointId from cmAccessRight ar, cmContent c where ar.interceptionPointId in (select interceptionPointId from cmInterceptionPoint where name like 'Content.%') AND ar.parameters = c.contentId AND c.repositoryId = $1 ORDER BY ar.interceptionPointId, ar.parameters AS org.infoglue.cms.entities.management.impl.simple.SmallAccessRightImpl";
			if(CmsPropertyHandler.getUseShortTableNames().equals("true"))
				SQL = "CALL SQL select ar.accessRightId, ar.parameters, ar.interceptionPointId from cmAccessRight ar, cmCont c where ar.interceptionPointId in (select interceptionPointId from cmInterceptionPoint where name like 'Content.%') AND ar.parameters = to_char(c.contId) AND c.repositoryId = $1 ORDER BY ar.interceptionPointId, ar.parameters AS org.infoglue.cms.entities.management.impl.simple.SmallAccessRightImpl";
			
			OQLQuery oql = db.getOQLQuery(SQL);
			oql.bind(repositoryId);
			
			QueryResults results = oql.execute(Database.READONLY);
			while (results.hasMore()) 
			{
				SmallAccessRightImpl smallAccessRight = (SmallAccessRightImpl)results.next();
				AccessRight accessRight = getAccessRightWithId(smallAccessRight.getAccessRightId(), db);
				
				accessRightList.add(accessRight);
			}
			
			results.close();
			oql.close();
		}
		catch(Exception e)
		{
			logger.warn("Error getting access rights. Message: " + e.getMessage() + ". Not retrying...");
			throw new SystemException("An error occurred when we tried to fetch a list of Access rights. Reason:" + e.getMessage(), e);    
		}
		finally
		{
			RequestAnalyser.getRequestAnalyser().decApproximateNumberOfDatabaseQueries();
		}

		return accessRightList;		
	}
	
	public List<AccessRight> getSiteNodeAccessRightListOnlyReadOnly(Integer repositoryId, Database db) throws SystemException, Bug
	{
		List<AccessRight> accessRightList = new ArrayList<AccessRight>();
		
		try
		{
			RequestAnalyser.getRequestAnalyser().incApproximateNumberOfDatabaseQueries();

			String SQL = "CALL SQL select ar.accessRightId, ar.parameters, ar.interceptionPointId from cmAccessRight ar, cmSiteNode sn, cmSiteNodeVersion snv where ar.interceptionPointId in (select interceptionPointId from cmInterceptionPoint where name like 'SiteNodeVersion.%') AND ar.parameters = snv.siteNodeVersionId AND snv.siteNodeId = sn.siteNodeId AND sn.repositoryId = $1 ORDER BY ar.interceptionPointId, ar.parameters AS org.infoglue.cms.entities.management.impl.simple.SmallAccessRightImpl";
			if(CmsPropertyHandler.getUseShortTableNames().equals("true"))
				SQL = "CALL SQL select ar.accessRightId, ar.parameters, ar.interceptionPointId from cmAccessRight ar, cmSiNo sn, cmSiNoVer snv where ar.interceptionPointId in (select interceptionPointId from cmInterceptionPoint where name like 'SiteNodeVersion.%') AND ar.parameters = to_char(snv.siNoVerId) AND snv.siNoId = sn.siNoId AND sn.repositoryId = $1 ORDER BY ar.interceptionPointId, ar.parameters AS org.infoglue.cms.entities.management.impl.simple.SmallAccessRightImpl";
				
			OQLQuery oql = db.getOQLQuery(SQL);
			oql.bind(repositoryId);
			
			QueryResults results = oql.execute(Database.READONLY);
			while (results.hasMore()) 
			{
				SmallAccessRightImpl smallAccessRight = (SmallAccessRightImpl)results.next();
				AccessRight accessRight = getAccessRightWithId(smallAccessRight.getAccessRightId(), db);
				
				accessRightList.add(accessRight);
			}
			
			results.close();
			oql.close();
		}
		catch(Exception e)
		{
			logger.warn("Error getting access rights. Message: " + e.getMessage() + ". Not retrying...");
			throw new SystemException("An error occurred when we tried to fetch a list of Access rights. Reason:" + e.getMessage(), e);    
		}
		finally
		{
			RequestAnalyser.getRequestAnalyser().decApproximateNumberOfDatabaseQueries();
		}

		return accessRightList;		
	}

	public List<AccessRightRoleVO> getAccessRightRoleVOList(Integer interceptionPointId, String parameters, Database db) throws SystemException, Bug
	{
		List<AccessRightRoleVO> accessRightRoleList = new ArrayList<AccessRightRoleVO>();
		
		try
		{
			OQLQuery oql = null;
			
			if(parameters == null || parameters.length() == 0)
			{
				oql = db.getOQLQuery("SELECT f FROM org.infoglue.cms.entities.management.impl.simple.AccessRightRoleImpl f WHERE f.accessRight.interceptionPoint = $1 ORDER BY f.accessRightRoleId");
				oql.bind(interceptionPointId);
			}
			else
			{
		    	oql = db.getOQLQuery("SELECT f FROM org.infoglue.cms.entities.management.impl.simple.AccessRightRoleImpl f WHERE f.accessRight.interceptionPoint = $1 AND f.accessRight.parameters = $2 ORDER BY f.accessRightRoleId");
				oql.bind(interceptionPointId);
				oql.bind(parameters);
			}
			
			QueryResults results = oql.execute(Database.READONLY);
			while (results.hasMore()) 
			{
				AccessRightRole accessRightRole = (AccessRightRole)results.next();
				accessRightRoleList.add(accessRightRole.getValueObject());
			}
			
			results.close();
			oql.close();
		}
		catch(Exception e)
		{
			logger.warn("Error getting access rights. Message: " + e.getMessage() + ". Retrying...");
			try
			{
				accessRightRoleList = getAccessRightRoleVOList(interceptionPointId, parameters, db);
			}
			catch(Exception e2)
			{
				throw new SystemException("An error occurred when we tried to fetch a list of Access rights. Reason:" + e.getMessage(), e);    
			}
		}

		return accessRightRoleList;		
	}

	public List<AccessRightGroupVO> getAccessRightGroupVOList(Integer interceptionPointId, String parameters, Database db) throws SystemException, Bug
	{
		List<AccessRightGroupVO> accessRightGroupList = new ArrayList<AccessRightGroupVO>();
		
		try
		{
			OQLQuery oql = null;
			
			if(parameters == null || parameters.length() == 0)
			{
				oql = db.getOQLQuery("SELECT f FROM org.infoglue.cms.entities.management.impl.simple.AccessRightGroupImpl f WHERE f.accessRight.interceptionPoint = $1 ORDER BY f.accessRightGroupId");
				oql.bind(interceptionPointId);
			}
			else
			{
		    	oql = db.getOQLQuery("SELECT f FROM org.infoglue.cms.entities.management.impl.simple.AccessRightGroupImpl f WHERE f.accessRight.interceptionPoint = $1 AND f.accessRight.parameters = $2 ORDER BY f.accessRightGroupId");
				oql.bind(interceptionPointId);
				oql.bind(parameters);
			}
			
			QueryResults results = oql.execute(Database.READONLY);
			while (results.hasMore()) 
			{
				AccessRightGroup accessRightGroup = (AccessRightGroup)results.next();
				accessRightGroupList.add(accessRightGroup.getValueObject());
			}
			
			results.close();
			oql.close();
		}
		catch(Exception e)
		{
			logger.warn("Error getting access rights. Message: " + e.getMessage() + ". Retrying...");
			try
			{
				accessRightGroupList = getAccessRightGroupVOList(interceptionPointId, parameters, db);
			}
			catch(Exception e2)
			{
				throw new SystemException("An error occurred when we tried to fetch a list of Access rights. Reason:" + e.getMessage(), e);    
			}
		}

		return accessRightGroupList;		
	}

	
	public List<AccessRightUserVO> getAccessRightUserVOList(Integer interceptionPointId, String parameters, Database db) throws SystemException, Bug
	{
		List<AccessRightUserVO> accessRightUserList = new ArrayList<AccessRightUserVO>();
		
		try
		{
			OQLQuery oql = null;
			
			if(parameters == null || parameters.length() == 0)
			{
				oql = db.getOQLQuery("SELECT f FROM org.infoglue.cms.entities.management.impl.simple.AccessRightUserImpl f WHERE f.accessRight.interceptionPoint = $1 ORDER BY f.accessRightUserId");
				oql.bind(interceptionPointId);
			}
			else
			{
		    	oql = db.getOQLQuery("SELECT f FROM org.infoglue.cms.entities.management.impl.simple.AccessRightUserImpl f WHERE f.accessRight.interceptionPoint = $1 AND f.accessRight.parameters = $2 ORDER BY f.accessRightUserId");
				oql.bind(interceptionPointId);
				oql.bind(parameters);
			}
			
			QueryResults results = oql.execute(Database.READONLY);
			while (results.hasMore()) 
			{
				AccessRightUser accessRightUser = (AccessRightUser)results.next();
				accessRightUserList.add(accessRightUser.getValueObject());
			}
			
			results.close();
			oql.close();
		}
		catch(Exception e)
		{
			logger.warn("Error getting access rights. Message: " + e.getMessage() + ". Retrying...");
			try
			{
				accessRightUserList = getAccessRightUserVOList(interceptionPointId, parameters, db);
			}
			catch(Exception e2)
			{
				throw new SystemException("An error occurred when we tried to fetch a list of Access rights users. Reason:" + e.getMessage(), e);    
			}
		}

		return accessRightUserList;		
	}

	public List<AccessRight> getAccessRightListForEntity(Integer interceptionPointId, String parameters, Database db)  throws SystemException, Bug
	{
		List<AccessRight> accessRightList = new ArrayList<AccessRight>();

		try
		{
		    //logger.info("getAccessRightListForEntity(Integer interceptionPointId, String parameters, Database db)");
		    //logger.info("interceptionPointId:" + interceptionPointId);
		    //logger.info("parameters:" + parameters);

			OQLQuery oql = null;

			if(parameters == null || parameters.length() == 0)
			{
				oql = db.getOQLQuery("SELECT f FROM org.infoglue.cms.entities.management.impl.simple.AccessRightImpl f WHERE f.interceptionPoint = $1 AND (is_undefined(f.parameters) OR f.parameters = $2) ORDER BY f.accessRightId");
				oql.bind(interceptionPointId);
				oql.bind(parameters);
			}
			else
			{
		    	oql = db.getOQLQuery("SELECT f FROM org.infoglue.cms.entities.management.impl.simple.AccessRightImpl f WHERE f.interceptionPoint = $1 AND f.parameters = $2 ORDER BY f.accessRightId");
				oql.bind(interceptionPointId);
				oql.bind(parameters);
			}

			QueryResults results = oql.execute();
			logger.info("Fetching entity in read/write mode");

			while (results.hasMore()) 
			{
				AccessRight accessRight = (AccessRight)results.next();
				//logger.info("accessRight:" + accessRight.getAccessRightId());
				accessRightList.add(accessRight);
			}

			results.close();
			oql.close();
		}
		catch(Exception e)
		{
			throw new SystemException("An error occurred when we tried to fetch a list of Function. Reason:" + e.getMessage(), e);
		}

		return accessRightList;
	}

	public List<AccessRight> getAccessRightListForEntity(List<InterceptionPoint> interceptionPointVOList, String parameters, Database db, boolean readOnly)  throws SystemException, Bug
	{
		List accessRightList = new ArrayList();
		
		try
		{
			OQLQuery oql = null;

			int lastIndex = 0;;
			StringBuilder variables = new StringBuilder();
		    for(int i=0; i<interceptionPointVOList.size(); i++)
		    {
		    	variables.append("f.interceptionPoint = $" + (i+1) + (i+1!=interceptionPointVOList.size() ? " OR " : ""));
		    	lastIndex++;
		    }

			if(parameters == null || parameters.length() == 0)
			{
				oql = db.getOQLQuery("SELECT f FROM org.infoglue.cms.entities.management.impl.simple.AccessRightImpl f WHERE (" + variables + ") AND (is_undefined(f.parameters) OR f.parameters = $2) ORDER BY f.accessRightId");
				for(InterceptionPoint ipVO : interceptionPointVOList)
					oql.bind(ipVO.getId());
				oql.bind(parameters);
			}
			else
			{
		    	oql = db.getOQLQuery("SELECT f FROM org.infoglue.cms.entities.management.impl.simple.AccessRightImpl f WHERE (" + variables + ") AND f.parameters = $" + (lastIndex+1) + " ORDER BY f.accessRightId");
		    	for(InterceptionPoint ipVO : interceptionPointVOList)
		    	{
		    		oql.bind(ipVO.getId());
		    	}
				oql.bind(parameters);
			}
						
			QueryResults results;
			if(readOnly)
				results = oql.execute(Database.READONLY);
			else
				results = oql.execute();
				
			this.logger.info("Fetching entity in read/write mode");

			while (results.hasMore()) 
			{
				AccessRight accessRight = (AccessRight)results.next();
				//logger.info("accessRight:" + accessRight.getAccessRightId());
				accessRightList.add(accessRight);
			}
			
			results.close();
			oql.close();
		}
		catch(Exception e)
		{
			throw new SystemException("An error occurred when we tried to fetch a list of Function. Reason:" + e.getMessage(), e);    
		}
		
		return accessRightList;		
	}

	
	public List getAccessRightList(Integer interceptionPointId, Database db)  throws SystemException, Bug
	{
		List accessRightList = new ArrayList();
		
		try
		{
			logger.info("getAccessRightList(Integer interceptionPointId, Database db)");
			logger.info("interceptionPointId: " + interceptionPointId);
			
			OQLQuery oql = db.getOQLQuery("SELECT f FROM org.infoglue.cms.entities.management.impl.simple.AccessRightImpl f WHERE f.interceptionPoint = $1 ORDER BY f.accessRightId");
			oql.bind(interceptionPointId);
			
			QueryResults results = oql.execute();
			this.logger.info("Fetching entity in read/write mode");

			while (results.hasMore()) 
			{
				AccessRight accessRight = (AccessRight)results.next();
				logger.info("accessRight:" + accessRight.getAccessRightId());
				accessRightList.add(accessRight);
			}
			
			results.close();
			oql.close();
		}
		catch(Exception e)
		{
			throw new SystemException("An error occurred when we tried to fetch a list of Function. Reason:" + e.getMessage(), e);    
		}
		
		return accessRightList;		
	}

	public List getAccessRightList(String roleName, Database db)  throws SystemException, Bug
	{
		List accessRightList = new ArrayList();
		
		try
		{
			logger.info("getAccessRightList(String roleName, Database db)");
			logger.info("roleName: " + roleName);
			
			OQLQuery oql = db.getOQLQuery("SELECT f FROM org.infoglue.cms.entities.management.impl.simple.AccessRightImpl f WHERE f.roles.roleName = $1 ORDER BY f.accessRightId");
			oql.bind(roleName);
			
			QueryResults results = oql.execute();
			this.logger.info("Fetching entity in read/write mode");

			while (results.hasMore()) 
			{
				AccessRight accessRight = (AccessRight)results.next();
				logger.info("accessRight:" + accessRight.getAccessRightId());
				accessRightList.add(accessRight);
			}

			results.close();
			oql.close();
		}
		catch(Exception e)
		{
			throw new SystemException("An error occurred when we tried to fetch a list of Function. Reason:" + e.getMessage(), e);    
		}
		
		return accessRightList;		
	}
	

	public List getAccessRightList(Integer interceptionPointId, String roleName, Database db)  throws SystemException, Bug
	{
		List accessRightList = new ArrayList();
		
		try
		{
		    if(logger.isInfoEnabled())
		    {
				logger.info("getAccessRightList(Integer interceptionPointId, String roleName, Database db)");
				logger.info("interceptionPointId: " + interceptionPointId);
				logger.info("roleName: " + roleName);
		    }

			OQLQuery oql = db.getOQLQuery("SELECT f FROM org.infoglue.cms.entities.management.impl.simple.AccessRightImpl f WHERE f.interceptionPoint = $1 AND f.roles.roleName = $2 ORDER BY f.accessRightId");
			oql.bind(interceptionPointId);
			oql.bind(roleName);
						
			QueryResults results = oql.execute();
			this.logger.info("Fetching entity in read/write mode");

			while (results.hasMore()) 
			{
				AccessRight accessRight = (AccessRight)results.next();
				accessRightList.add(accessRight);
			}

			results.close();
			oql.close();
		}
		catch(Exception e)
		{
			throw new SystemException("An error occurred when we tried to fetch a list of Function. Reason:" + e.getMessage(), e);    
		}
		
		return accessRightList;		
	}
	
	/**
	 * This method creates an access note.
	 * 
	 * @param accessRightVO
	 * @param db
	 * @return
	 * @throws SystemException
	 * @throws Exception
	 */
	
	public AccessRight create(AccessRightVO accessRightVO, InterceptionPoint interceptionPoint, Database db) throws SystemException, Exception
	{
		AccessRight accessRight = new AccessRightImpl();
		accessRight.setValueObject(accessRightVO);
		
		accessRight.setInterceptionPoint(interceptionPoint);
		
		db.create(accessRight);
					
		return accessRight;
	}     

	
	public AccessRightVO update(AccessRightVO AccessRightVO) throws ConstraintException, SystemException
	{
		return (AccessRightVO) updateEntity(AccessRightImpl.class, AccessRightVO);
	}        

	
	public void update(String parameters, HttpServletRequest request, String interceptionPointCategory) throws ConstraintException, SystemException
	{
		Database db = CastorDatabaseService.getDatabase();
		
		logger.info("parameters:" + parameters);
		
		try 
		{
			beginTransaction(db);
			
			int accessRights = 0;
			
			int interceptionPointIndex = 0;
			String interceptionPointIdString = request.getParameter(interceptionPointIndex + "_InterceptionPointId");
			while(interceptionPointIdString != null)
			{
				logger.info("interceptionPointIdString:" + interceptionPointIdString);
				AccessRight accessRight = delete(new Integer(interceptionPointIdString), parameters, false, db);
				
				if(accessRight == null)
				{
					logger.info("accessRight after delete was null");
					AccessRightVO accessRightVO = new AccessRightVO();
					accessRightVO.setParameters(parameters);
	
					int roleIndex = 0;
					String roleName = request.getParameter(interceptionPointIdString + "_" + roleIndex + "_roleName");
					while(roleName != null)
					{
					    String hasAccess = request.getParameter(interceptionPointIdString + "_" + roleName + "_hasAccess");
						
						if(hasAccess != null)
						{
						    if(accessRight == null)
						    {
							    InterceptionPoint interceptionPoint = InterceptionPointController.getController().getInterceptionPointWithId(new Integer(interceptionPointIdString), db);
								accessRight = create(accessRightVO, interceptionPoint, db);
						    }
						    
						    AccessRightRoleVO accessRightRoleVO = new AccessRightRoleVO();
						    accessRightRoleVO.setRoleName(roleName);
						    AccessRightRole accessRightRole = createAccessRightRole(db, accessRightRoleVO, accessRight);
						    accessRight.getRoles().add(accessRightRole);
							accessRights++;
						}
						
						roleIndex++;
						roleName = request.getParameter(interceptionPointIdString + "_" + roleIndex + "_roleName");
					}
	
					int groupIndex = 0;
					String groupName = request.getParameter(interceptionPointIdString + "_" + groupIndex + "_groupName");
	
					while(groupName != null)
					{
						logger.info("groupName:" + groupName);
					    if(accessRight == null)
					    {
						    InterceptionPoint interceptionPoint = InterceptionPointController.getController().getInterceptionPointWithId(new Integer(interceptionPointIdString), db);
						    //logger.info("Creating access for:" + interceptionPoint.getName() + "_" + parameters);
							accessRight = create(accessRightVO, interceptionPoint, db);
					    }
						
					    AccessRightGroupVO accessRightGroupVO = new AccessRightGroupVO();
					    accessRightGroupVO.setGroupName(groupName);
					    AccessRightGroup accessRightGroup = createAccessRightGroup(db, accessRightGroupVO, accessRight);
					    accessRight.getGroups().add(accessRightGroup);
						
						accessRights++;
					    groupIndex++;
					    groupName = request.getParameter(interceptionPointIdString + "_" + groupIndex + "_groupName");
					    //logger.info("groupName:" + groupName);
					}
				}
				else
				{
					logger.info("accessRight after delete:" + accessRight.getAccessRightId());

					int roleIndex = 0;
					String roleName = request.getParameter(interceptionPointIdString + "_" + roleIndex + "_roleName");
					while(roleName != null)
					{
					    String hasAccess = request.getParameter(interceptionPointIdString + "_" + roleName + "_hasAccess");
						if(hasAccess != null)
						{
						    AccessRightRoleVO accessRightRoleVO = new AccessRightRoleVO();
						    accessRightRoleVO.setRoleName(roleName);
						    AccessRightRole accessRightRole = createAccessRightRole(db, accessRightRoleVO, accessRight);
						    accessRight.getRoles().add(accessRightRole);
							accessRights++;
						}
						
						roleIndex++;
						roleName = request.getParameter(interceptionPointIdString + "_" + roleIndex + "_roleName");
					}
	
					int groupIndex = 0;
					String groupName = request.getParameter(interceptionPointIdString + "_" + groupIndex + "_groupName");
					while(groupName != null)
					{
						logger.info("groupName:" + groupName);
					    AccessRightGroupVO accessRightGroupVO = new AccessRightGroupVO();
					    accessRightGroupVO.setGroupName(groupName);
					    AccessRightGroup accessRightGroup = createAccessRightGroup(db, accessRightGroupVO, accessRight);
					    accessRight.getGroups().add(accessRightGroup);
						
						accessRights++;
					    groupIndex++;
					    groupName = request.getParameter(interceptionPointIdString + "_" + groupIndex + "_groupName");
					    //logger.info("groupName:" + groupName);
					}
				}

				interceptionPointIndex++;
				interceptionPointIdString = request.getParameter(interceptionPointIndex + "_InterceptionPointId");
			}
			
			if(logger.isDebugEnabled())
				logger.debug("accessRights:" + accessRights);
			if(accessRights > 0)
			{
				if(interceptionPointCategory.equalsIgnoreCase("Content"))
				{	
					Integer contentId = new Integer(parameters);
					Content content = ContentControllerProxy.getController().getContentWithId(contentId, db);
					if(!content.getIsProtected().equals(ContentVO.YES))
						content.setIsProtected(ContentVO.YES);
				}
				else if(interceptionPointCategory.equalsIgnoreCase("SiteNodeVersion"))
				{	
					Integer siteNodeVersionId = new Integer(parameters);
					SiteNodeVersion siteNodeVersion = SiteNodeVersionController.getController().getSiteNodeVersionWithId(siteNodeVersionId, db);
					if(logger.isDebugEnabled())
						logger.debug("It was a siteNodeVersion and there are access rights - set it to true:" + accessRights);
					if(!siteNodeVersion.getIsProtected().equals(SiteNodeVersionVO.YES) && !siteNodeVersion.getIsProtected().equals(SiteNodeVersionVO.YES_WITH_INHERIT_FALLBACK))
						siteNodeVersion.setIsProtected(SiteNodeVersionVO.YES);
				}
			}
			else
			{
				List accessRightsUsers = getAccessRightsUsers(interceptionPointCategory, parameters, db, true);
				if(logger.isDebugEnabled())
					logger.debug("accessRightsUsers:" + accessRightsUsers.size());
				if(accessRightsUsers == null || accessRightsUsers.size() == 0)
				{
					if(interceptionPointCategory.equalsIgnoreCase("Content"))
					{	
						Integer contentId = new Integer(parameters);
						Content content = ContentControllerProxy.getController().getContentWithId(contentId, db);
						if(content.getIsProtected().equals(ContentVO.YES))
							content.setIsProtected(ContentVO.NO);
					}
					else if(interceptionPointCategory.equalsIgnoreCase("SiteNodeVersion"))
					{	
						Integer siteNodeVersionId = new Integer(parameters);
						SiteNodeVersion siteNodeVersion = SiteNodeVersionController.getController().getSiteNodeVersionWithId(siteNodeVersionId, db);
						if(logger.isDebugEnabled())
							logger.debug("It was a siteNodeVersion and there was no access rights - set it to false:" + accessRights + ":" + siteNodeVersion.getIsProtected());
						if(siteNodeVersion.getIsProtected().equals(SiteNodeVersionVO.YES) && !siteNodeVersion.getIsProtected().equals(SiteNodeVersionVO.YES_WITH_INHERIT_FALLBACK))
						{
							siteNodeVersion.setIsProtected(SiteNodeVersionVO.NO);
							siteNodeVersion.setModifiedDateTime(DateHelper.getSecondPreciseDate());
						}
					}
				}
			}
				
			commitTransaction(db);
		} 
		catch (Exception e) 
		{
		    e.printStackTrace();
			logger.info("An error occurred so we should not complete the transaction:" + e);
			rollbackTransaction(db);
			throw new SystemException(e.getMessage());
		}
	}			

	
	public void updateGroups(Integer accessRightId, String parameters, String[] groupNames) throws ConstraintException, SystemException
	{
		Database db = CastorDatabaseService.getDatabase();
		
		logger.info("parameters:" + parameters);
		
		try 
		{
			beginTransaction(db);
			
			AccessRight accessRight = this.getAccessRightWithId(accessRightId, db);

			Iterator groupsIterator = accessRight.getGroups().iterator();
			while(groupsIterator.hasNext())
			{
			    AccessRightGroup accessRightGroup = (AccessRightGroup)groupsIterator.next();
			    groupsIterator.remove();
			    db.remove(accessRightGroup);
			}
			
			if(groupNames != null)
			{
				for(int i=0; i < groupNames.length; i++)
				{
				    String groupName = groupNames[i];
				    AccessRightGroupVO accessRightGroupVO = new AccessRightGroupVO();
				    accessRightGroupVO.setGroupName(groupName);
				    AccessRightGroup accessRightGroup = createAccessRightGroup(db, accessRightGroupVO, accessRight);
				    accessRight.getGroups().add(accessRightGroup);
				}
			}
			
		    commitTransaction(db);
		} 
		catch (Exception e) 
		{
		    e.printStackTrace();
			logger.info("An error occurred so we should not complete the transaction:" + e);
			rollbackTransaction(db);
			throw new SystemException(e.getMessage());
		}
	}
	
	/**
	 * Adds a user to have access
	 * 
	 * @param accessRightId
	 * @param parameters
	 * @param userName
	 * @throws ConstraintException
	 * @throws SystemException
	 */
	public void addUser(String interceptionPointCategory, String parameters, String userName, Integer index, HttpServletRequest request) throws ConstraintException, SystemException
	{
		Database db = CastorDatabaseService.getDatabase();

		logger.info("parameters:" + parameters);

		try
		{
			beginTransaction(db);

			try
			{
			    InfoGluePrincipal infoGluePrincipal = UserControllerProxy.getController(db).getUser(userName);
			    if(infoGluePrincipal == null)
			        throw new SystemException("The user named " + userName + " does not exist in the system.");
			}
			catch(Exception e)
			{
		        throw new SystemException("The user named " + userName + " does not exist in the system.");
			}

		    List accessRightsUsers = getAccessRightsUsers(interceptionPointCategory, parameters, userName, db);
		    Iterator accessRightsUsersIterator = accessRightsUsers.iterator();
		    while(accessRightsUsersIterator.hasNext())
		    {
		        AccessRightUser accessRightUser = (AccessRightUser)accessRightsUsersIterator.next();

		        AccessRight ar = getAccessRightWithId(accessRightUser.getAccessRight().getAccessRightId(), db);

		        ar.getUsers().remove(accessRightUser);
		        accessRightsUsersIterator.remove();
		        db.remove(accessRightUser);
		    }

			int interceptionPointIndex = 0;
			String interceptionPointIdString = request.getParameter((index != null ? index + "_" : "") + interceptionPointIndex + "_InterceptionPointId");
			logger.info("interceptionPointIdString:" + interceptionPointIdString);
			while(interceptionPointIdString != null)
			{
			    String hasAccess = request.getParameter((index != null ? index + "_" : "") + interceptionPointIdString + "_hasAccess");
			    logger.info("interceptionPointIdString:" + interceptionPointIdString);

			    AccessRight accessRight = null;

			    List<AccessRight> accessRights = getAccessRightListForEntity(new Integer(interceptionPointIdString), parameters, db);
				if(hasAccess != null)
				{
				    if(accessRights == null || accessRights.size() == 0)
				    {
						AccessRightVO accessRightVO = new AccessRightVO();
						accessRightVO.setParameters(parameters);

				        InterceptionPoint interceptionPoint = InterceptionPointController.getController().getInterceptionPointWithId(new Integer(interceptionPointIdString), db);
						accessRight = create(accessRightVO, interceptionPoint, db);
				    }
				    else
				    {
				        accessRight = (AccessRight)accessRights.get(0);
				    }

					if(userName != null && accessRight != null)
					{
					    AccessRightUserVO accessRightUserVO = new AccessRightUserVO();
					    accessRightUserVO.setUserName(userName);
					    AccessRightUser accessRightUser = createAccessRightUser(db, accessRightUserVO, accessRight);
					    accessRight.getUsers().add(accessRightUser);
					}
				}

				// If we do not have an access right reference here we try to get one so that we can do some cleaning
				if (accessRight == null)
				{
					if (accessRights.size() < 1)
					{
						logger.info("We have no access right and there is none in the list. IP: " + interceptionPointIdString + ". Parameters: " + parameters);
					}
					else
					{
						accessRight = (AccessRight)accessRights.get(0);
					}
				}
				if (accessRight != null)
				{
					logger.debug("Check if we should remove access right: " + accessRight.getAccessRightId() + ". IP.name: " + accessRight.getInterceptionPointName());
					if (   (accessRight.getRoles() == null || accessRight.getRoles().size() == 0)
						&& (accessRight.getGroups() == null || accessRight.getGroups().size() == 0)
						&& (accessRight.getUsers() == null || accessRight.getUsers().size() == 0))
					{
						logger.info("Cleaning access right since it is not used anymore. AccessRight.id: " + accessRight.getAccessRightId());
						db.remove(accessRight);
					}
				}

				interceptionPointIndex++;
				interceptionPointIdString = request.getParameter((index != null ? index + "_" : "") + interceptionPointIndex + "_InterceptionPointId");
			}

			if(interceptionPointCategory.equalsIgnoreCase("Content"))
			{
				Integer contentId = new Integer(parameters);
				Content content = ContentControllerProxy.getController().getContentWithId(contentId, db);
				if(!content.getIsProtected().equals(ContentVO.YES))
					content.setIsProtected(ContentVO.YES);
			}
			else if(interceptionPointCategory.equalsIgnoreCase("SiteNodeVersion"))
			{
				Integer siteNodeVersionId = new Integer(parameters);
				SiteNodeVersion siteNodeVersion = SiteNodeVersionController.getController().getSiteNodeVersionWithId(siteNodeVersionId, db);
				if(!siteNodeVersion.getIsProtected().equals(SiteNodeVersionVO.YES))
					siteNodeVersion.setIsProtected(SiteNodeVersionVO.YES);
			}

		    commitTransaction(db);
		}
		catch (Exception e)
		{
			logger.info("An error occurred so we should not complete the transaction:" + e);
			rollbackTransaction(db);
			throw new SystemException(e.getMessage());
		}
	}

	/**
	 * Adds a user to have access
	 * 
	 * @param accessRightId
	 * @param parameters
	 * @param userName
	 * @throws ConstraintException
	 * @throws SystemException
	 */
	
	public void addUserRights(String[] interceptionPointNames, String parameters, InfoGluePrincipal principal) throws ConstraintException, SystemException
	{
		Database db = CastorDatabaseService.getDatabase();
		
		try 
		{
			beginTransaction(db);
					
			for(int i=0; i<interceptionPointNames.length; i++)
			{
				String interceptionPointName = interceptionPointNames[i];
				InterceptionPoint interceptionPoint = InterceptionPointController.getController().getInterceptionPointWithName(interceptionPointName, db);
				if(interceptionPoint != null)
				{
					AccessRightVO accessRightVO = new AccessRightVO();
					accessRightVO.setParameters(parameters);
		
					AccessRight accessRight = create(accessRightVO, interceptionPoint, db);
				    
					if(principal != null && accessRight != null)
					{
					    AccessRightUserVO accessRightUserVO = new AccessRightUserVO();
					    accessRightUserVO.setUserName(principal.getName());
					    AccessRightUser accessRightUser = createAccessRightUser(db, accessRightUserVO, accessRight);
					    accessRight.getUsers().add(accessRightUser);
					}
				}
			}			
			
		    commitTransaction(db);
		} 
		catch (Exception e) 
		{
			logger.info("An error occurred so we should not complete the transaction:" + e);
			rollbackTransaction(db);
			throw new SystemException(e.getMessage());
		}
	}

	/**
	 * Adds access for the role with the given <em>roleName</em>. The role is given access to all interception points in the given <em>interceptionPointCategory</em>.
	 * If the given category does not match any category in the system will not do anything.
	 * 
	 * All current access rights to the <em>parameters</em> for the given roleName are removed before applying the new access rights.
	 * 
	 * @param interceptionPointCategory
	 * @param parameters
	 * @param roleName
	 * @throws ConstraintException
	 * @throws SystemException Thrown if a database error occurs or if the given roleName does not match a role in the system.
	 */
	@SuppressWarnings("unchecked")
	public void addRoleRights(String interceptionPointCategory, String parameters, String roleName) throws SystemException
	{
		Database db = CastorDatabaseService.getDatabase();

		try
		{
			beginTransaction(db);

			// Verify that the role exists in the system.
			try
			{
			    InfoGlueRole role = RoleControllerProxy.getController(db).getRole(roleName);
			    if(role == null)
			        throw new SystemException("The role named " + roleName + " does not exist in the system.");
			}
			catch(Exception e)
			{
		        throw new SystemException("The role named " + roleName + " does not exist in the system.");
			}

			// Delete all existing access right for this role on this parameter and category group
			List<AccessRightRole> accessRightsRole = getAccessRightsRole(interceptionPointCategory, roleName, parameters, db, false);
		    Iterator<AccessRightRole> accessRightsRoleIterator = accessRightsRole.iterator();
		    while(accessRightsRoleIterator.hasNext())
		    {
				AccessRightRole accessRightRole = (AccessRightRole)accessRightsRoleIterator.next();

		        db.remove(accessRightRole.getAccessRight());

		        accessRightsRoleIterator.remove();
		        db.remove(accessRightRole);
		    }

		    // Add acces rights for each interception point in the category
			List<InterceptionPoint> interceptionPointList = InterceptionPointController.getController().getInterceptionPointList(interceptionPointCategory, db);
			for(InterceptionPoint interceptionPoint : interceptionPointList)
			{
				AccessRightVO accessRightVO = new AccessRightVO();
				accessRightVO.setParameters(parameters);

				AccessRight accessRight = create(accessRightVO, interceptionPoint, db);

				if(roleName != null && accessRight != null)
				{
					AccessRightRoleVO accessRightRoleVO = new AccessRightRoleVO();
					accessRightRoleVO.setRoleName(roleName);
					AccessRightRole accessRightRole = createAccessRightRole(db, accessRightRoleVO, accessRight);
					accessRight.getRoles().add(accessRightRole);
				}
			}

			commitTransaction(db);
		}
		catch (Exception e)
		{
			logger.error("An error occurred so we should not complete the transaction when add role access rights to Interception point category: '" + interceptionPointCategory + "'. Message: " + e.getMessage() + ". Type: " + e.getClass());
			logger.warn("An error occurred so we should not complete the transaction when add role access rights to Interception point category: '" + interceptionPointCategory, e);
			rollbackTransaction(db);
			throw new SystemException(e.getMessage());
		}
	}

	/**
	 * Adds a user to have access
	 * 
	 * @param accessRightId
	 * @param parameters
	 * @param userName
	 * @throws ConstraintException
	 * @throws SystemException
	 */
	
	public void deleteUser(String interceptionPointCategory, String parameters, String userName, HttpServletRequest request) throws ConstraintException, SystemException
	{
		Database db = CastorDatabaseService.getDatabase();
		
		logger.info("parameters:" + parameters);
		
		try 
		{
			beginTransaction(db);
			
		    List accessRightsUsers = getAccessRightsUsers(interceptionPointCategory, parameters, userName, db);
		    Iterator accessRightsUsersIterator = accessRightsUsers.iterator();
		    while(accessRightsUsersIterator.hasNext())
		    {
		        AccessRightUser accessRightUser = (AccessRightUser)accessRightsUsersIterator.next();
		        
		        accessRightUser.getAccessRight().getUsers().remove(accessRightUser);
		        //if(accessRightUser.getAccessRight().)
		        //db.remove(accessRightUser.getAccessRight());

		        accessRightsUsersIterator.remove();
		        db.remove(accessRightUser);
		    }
			
		    if(accessRightsUsers.size() == 0)
		    {
				List accessRightsRoles = getAccessRightsRoles(interceptionPointCategory, parameters, db, true);
				List accessRightsGroups = getAccessRightsGroups(interceptionPointCategory, parameters, db, true);
				logger.info("accessRightsRoles:" + accessRightsRoles.size());
				if((accessRightsRoles == null || accessRightsRoles.size() == 0) && (accessRightsGroups == null || accessRightsGroups.size() == 0))
				{
					if(interceptionPointCategory.equalsIgnoreCase("Content"))
					{	
						Integer contentId = new Integer(parameters);
						Content content = ContentControllerProxy.getController().getContentWithId(contentId, db);
						if(content.getIsProtected().equals(ContentVO.YES))
							content.setIsProtected(ContentVO.NO);
					}
					else if(interceptionPointCategory.equalsIgnoreCase("SiteNodeVersion"))
					{	
						Integer siteNodeVersionId = new Integer(parameters);
						SiteNodeVersion siteNodeVersion = SiteNodeVersionController.getController().getSiteNodeVersionWithId(siteNodeVersionId, db);
						if(siteNodeVersion.getIsProtected().equals(SiteNodeVersionVO.YES))
							siteNodeVersion.setIsProtected(SiteNodeVersionVO.NO);
					}
				}
		    }
		    
		    commitTransaction(db);
		} 
		catch (Exception e) 
		{
			logger.info("An error occurred so we should not complete the transaction:" + e);
			rollbackTransaction(db);
			throw new SystemException(e.getMessage());
		}
	}

	/**
	 * This method creates a AccessRightRole-object in the database.
	 * @param db
	 * @param accessRightRoleVO
	 * @return
	 * @throws SystemException
	 */
	
	public AccessRightRole createAccessRightRole(Database db, AccessRightRoleVO accessRightRoleVO, AccessRight accessRight) throws SystemException, Exception
	{
	    AccessRightRole accessRightRole = new AccessRightRoleImpl();
	    accessRightRole.setValueObject(accessRightRoleVO);
	    accessRightRole.setAccessRight(accessRight);
	    
	    db.create(accessRightRole);
        
	    return accessRightRole;
	}

	/**
	 * This method creates a AccessRightGroup-object in the database.
	 * @param db
	 * @param accessRightGroupVO
	 * @return
	 * @throws SystemException
	 */
	
	public AccessRightGroup createAccessRightGroup(Database db, AccessRightGroupVO accessRightGroupVO, AccessRight accessRight) throws SystemException, Exception
	{
	    AccessRightGroup accessRightGroup = new AccessRightGroupImpl();
	    accessRightGroup.setValueObject(accessRightGroupVO);
	    accessRightGroup.setAccessRight(accessRight);
	    
	    db.create(accessRightGroup);
	    
        return accessRightGroup;
	}

	/**
	 * This method creates a AccessRightUser-object in the database.
	 * @param db
	 * @param accessRightUserVO
	 * @return
	 * @throws SystemException
	 */
	
	public AccessRightUser createAccessRightUser(Database db, AccessRightUserVO accessRightUserVO, AccessRight accessRight) throws SystemException, Exception
	{
	    AccessRightUser accessRightUser = new AccessRightUserImpl();
	    accessRightUser.setValueObject(accessRightUserVO);
	    accessRightUser.setAccessRight(accessRight);
	    
	    db.create(accessRightUser);
	    
        return accessRightUser;
	}
	
	
	/**
	 * This method deletes all occurrencies of AccessRight which has the interceptionPointId.
	 * 
	 * @param roleName
	 * @throws ConstraintException
	 * @throws SystemException
	 */
	
	/*
	public void deleteRoleName(String roleName) throws SystemException, Exception
	{
		Database db = CastorDatabaseService.getDatabase();
		
		logger.info("roleName:" + roleName);
		
		try 
		{
			beginTransaction(db);

			List accessRightList = getAccessRightList(roleName, db);
			Iterator i = accessRightList.iterator();
			while(i.hasNext())
			{
				AccessRight accessRight = (AccessRight)i.next();
				
				Iterator accessRightRolesIterator = accessRight.getRoles().iterator();
				while(accessRightRolesIterator.hasNext())
				{
					AccessRightRole accessRightRole = (AccessRightRole)accessRightRolesIterator.next();
					if(roleName.equals(accessRightRole.getRoleName()))
					{
						accessRightRolesIterator.remove();
						db.remove(accessRightRole);
					}
				}
				
				//db.remove(accessRight);
			}
			
			commitTransaction(db);
		} 
		catch (Exception e) 
		{
			logger.info("An error occurred so we should not complete the transaction:" + e);
			rollbackTransaction(db);
			throw new SystemException(e.getMessage());
		}
	}  
	*/

	public void delete(String roleName) throws SystemException, Exception
	{
		Database db = CastorDatabaseService.getDatabase();
		
		logger.info("roleName:" + roleName);
		
		try 
		{
			beginTransaction(db);

			List accessRightList = getAccessRightList(roleName, db);
			Iterator i = accessRightList.iterator();
			while(i.hasNext())
			{
				AccessRight accessRight = (AccessRight)i.next();
				
				Iterator accessRightRolesIterator = accessRight.getRoles().iterator();
				while(accessRightRolesIterator.hasNext())
				{
					AccessRightRole accessRightRole = (AccessRightRole)accessRightRolesIterator.next();
					if(roleName.equals(accessRightRole.getRoleName()))
					{
						accessRightRolesIterator.remove();
						db.remove(accessRightRole);
					}
				}
				/*
				Iterator accessRightGroupsIterator = accessRight.getGroups().iterator();
				while(accessRightGroupsIterator.hasNext())
				{
					AccessRightGroup accessRightGroup = (AccessRightGroup)accessRightGroupsIterator.next();
					db.remove(accessRightGroup);
				}
				Iterator accessRightUsersIterator = accessRight.getUsers().iterator();
				while(accessRightRolesIterator.hasNext())
				{
					AccessRightUser accessRightUser = (AccessRightUser)accessRightUsersIterator.next();
					db.remove(accessRightUser);
				}
				*/
				//db.remove(accessRight);
			}
			
			commitTransaction(db);
		} 
		catch (Exception e) 
		{
			logger.info("An error occurred so we should not complete the transaction:" + e);
			rollbackTransaction(db);
			throw new SystemException(e.getMessage());
		}
	}        

	/**
	 * This method deletes all occurrencies of AccessRight which has the interceptionPointId.
	 * 
	 * @param roleName
	 * @throws ConstraintException
	 * @throws SystemException
	 */

	public void deleteAccessRightGroup(String groupName, Database db) throws SystemException, Exception
	{
		List<AccessRightGroup> accessRightGroupList = getAccessRightGroupList(groupName, db);
		Iterator<AccessRightGroup> accessRightGroupListIterator = accessRightGroupList.iterator();
		while(accessRightGroupListIterator.hasNext())
		{
			AccessRightGroup accessRightGroup = (AccessRightGroup)accessRightGroupListIterator.next();
			accessRightGroupListIterator.remove();
			db.remove(accessRightGroup);
		}
	} 
	
	/**
	 * This method deletes all occurrencies of AccessRight which has the interceptionPointId.
	 * 
	 * @param roleName
	 * @throws ConstraintException
	 * @throws SystemException
	 */

	public void deleteAccessRightRole(String roleName, Database db) throws SystemException, Exception
	{
		List<AccessRightRole> accessRightRoleList = getAccessRightRoleList(roleName, db, false);
		Iterator<AccessRightRole> accessRightRoleListIterator = accessRightRoleList.iterator();
		while(accessRightRoleListIterator.hasNext())
		{
			AccessRightRole accessRightRole = (AccessRightRole)accessRightRoleListIterator.next();
			accessRightRoleListIterator.remove();
			db.remove(accessRightRole);
		}
	}  


	/**
	 * This method deletes all occurrencies of AccessRight which has the interceptionPointId.
	 * 
	 * @param roleName
	 * @throws ConstraintException
	 * @throws SystemException
	 */

	public AccessRight delete(Integer interceptionPointId, String parameters, boolean deleteUsers, Database db) throws SystemException, Exception
	{
		AccessRight returnAccessRight = null;
		
		List accessRightList = getAccessRightListOnly(interceptionPointId, parameters, db);
		Iterator i = accessRightList.iterator();
		int index = 0;
		while(i.hasNext())
		{
			AccessRight accessRight = (AccessRight)i.next();
			logger.info("Removing accessRight:" + accessRight.getId() + ":" + accessRight.getUsers().size());

			Iterator rolesIterator = accessRight.getRoles().iterator();
			while(rolesIterator.hasNext())
			{
			    AccessRightRole accessRightRole = (AccessRightRole)rolesIterator.next();
			    rolesIterator.remove();
			    db.remove(accessRightRole);
			}
			
			Iterator groupsIterator = accessRight.getGroups().iterator();
			while(groupsIterator.hasNext())
			{
			    AccessRightGroup accessRightGroup = (AccessRightGroup)groupsIterator.next();
			    groupsIterator.remove();
			    db.remove(accessRightGroup);
			}
			
			if(index > 0)
			{
				Iterator usersIterator = accessRight.getUsers().iterator();
				while(usersIterator.hasNext())
				{
				    AccessRightUser accessRightUser = (AccessRightUser)usersIterator.next();
				    usersIterator.remove();
				    db.remove(accessRightUser);
				}
	
				logger.info("OBS: removing old access right as there were duplicates: " + accessRight.getId());
				db.remove(accessRight);
			}
			else
			{
				if(deleteUsers)
				{
					Iterator usersIterator = accessRight.getUsers().iterator();
					while(usersIterator.hasNext())
					{
					    AccessRightUser accessRightUser = (AccessRightUser)usersIterator.next();
					    usersIterator.remove();
					    db.remove(accessRightUser);
					}
		
					logger.info("Deleting after users removal:" + accessRight.getId());
					db.remove(accessRight);
				}
				else
				{
				    if(accessRight.getUsers() == null || accessRight.getUsers().size() == 0)
				    {
				    	logger.info("Deleting as users was empty:" + accessRight.getId());
				        db.remove(accessRight);
				    }
				    else
				    	returnAccessRight = accessRight;
				}
			}
			
			index++;
		}
		
		return returnAccessRight;
	}        

	/**
	 * This method deletes all occurrencies of AccessRight which has the interceptionPointId.
	 * 
	 * @param roleName
	 * @throws ConstraintException
	 * @throws SystemException
	 */

	public void delete(AccessRight accessRight, Database db) throws SystemException, Exception
	{
		logger.info("Removing accessRight:" + accessRight.getId() + ":" + accessRight.getUsers().size());

		Iterator rolesIterator = accessRight.getRoles().iterator();
		while(rolesIterator.hasNext())
		{
		    AccessRightRole accessRightRole = (AccessRightRole)rolesIterator.next();
		    rolesIterator.remove();
		    db.remove(accessRightRole);
		}
		
		Iterator groupsIterator = accessRight.getGroups().iterator();
		while(groupsIterator.hasNext())
		{
		    AccessRightGroup accessRightGroup = (AccessRightGroup)groupsIterator.next();
		    groupsIterator.remove();
		    db.remove(accessRightGroup);
		}
			
		Iterator usersIterator = accessRight.getUsers().iterator();
		while(usersIterator.hasNext())
		{
		    AccessRightUser accessRightUser = (AccessRightUser)usersIterator.next();
		    usersIterator.remove();
		    db.remove(accessRightUser);
		}

		logger.info("OBS: removing access right: " + accessRight.getId());
		db.remove(accessRight);
	}        

	/**
	 * This method checks if a role has access to an entity. It takes name and id of the entity. 
	 */
	public boolean getIsPrincipalAuthorized(InfoGluePrincipal infoGluePrincipal, String interceptionPointName, String parameters) throws SystemException
	{
	   return getIsPrincipalAuthorized(infoGluePrincipal, interceptionPointName, parameters, true);
	}

	/**
	 * This method checks if a role has access to an entity. It takes name and id of the entity. 
	 */
	public boolean getIsPrincipalAuthorized(InfoGluePrincipal infoGluePrincipal, String interceptionPointName, String parameters, boolean returnTrueIfNoAccessRightsDefined) throws SystemException
	{
		return getIsPrincipalAuthorized(infoGluePrincipal, interceptionPointName, parameters, returnTrueIfNoAccessRightsDefined, false);
	}
	
	/**
	 * This method checks if a role has access to an entity. It takes name and id of the entity. 
	 */
	public boolean getIsPrincipalAuthorized(InfoGluePrincipal infoGluePrincipal, String interceptionPointName, String parameters, boolean returnTrueIfNoAccessRightsDefined, boolean defeatCaches) throws SystemException
	{
	    if(infoGluePrincipal == null)
	        return false;
	        
		if(infoGluePrincipal != null && infoGluePrincipal.getIsAdministrator())
			return true;
			
		boolean isPrincipalAuthorized = false;
		
		Database db = CastorDatabaseService.getDatabase();

		try 
		{
			beginTransaction(db);
			
			isPrincipalAuthorized = getIsPrincipalAuthorized(db, infoGluePrincipal, interceptionPointName, parameters, returnTrueIfNoAccessRightsDefined, defeatCaches);
			
			commitTransaction(db);
		} 
		catch (Exception e) 
		{
			logger.info("An error occurred so we should not complete the transaction:" + e);
			rollbackTransaction(db);
			throw new SystemException(e.getMessage());
		}
					
		return isPrincipalAuthorized;
	}
	

	/**
	 * This method checks if a role has access to an entity. It takes name and id of the entity. 
	 */
	/*
	public boolean getIsPrincipalAuthorized(InfoGluePrincipal infoGluePrincipal, String interceptionPointName, String parameters, boolean returnSuccessIfInterceptionPointNotDefined, boolean returnFailureIfInterceptionPointNotDefined) throws SystemException
	{
	    if(infoGluePrincipal == null)
	        return false;
	        
		if(infoGluePrincipal != null && infoGluePrincipal.getIsAdministrator())
			return true;
			
		boolean isPrincipalAuthorized = false;
		
		Database db = CastorDatabaseService.getDatabase();

		try 
		{
			beginTransaction(db);
			
			isPrincipalAuthorized = getIsPrincipalAuthorized(db, infoGluePrincipal, interceptionPointName, parameters, returnSuccessIfInterceptionPointNotDefined, returnFailureIfInterceptionPointNotDefined);
		
			commitTransaction(db);
		} 
		catch (Exception e) 
		{
			logger.info("An error occurred so we should not complete the transaction:" + e);
			rollbackTransaction(db);
			throw new SystemException(e.getMessage());
		}
					
		return isPrincipalAuthorized;
	}
	*/

	/**
	 * This method checks if a role has access to an entity. It takes name and id of the entity. 
	 */
	
	public boolean getIsPrincipalAuthorized(Database db, InfoGluePrincipal infoGluePrincipal, String interceptionPointName, String extraParameters) throws SystemException
	{
		//Timer t = new Timer();
		
		boolean isAuthorized = getIsPrincipalAuthorized(db, infoGluePrincipal, interceptionPointName, extraParameters, true);
		//boolean isAuthorized = getIsPrincipalAuthorizedNew(db, infoGluePrincipal, interceptionPointName, extraParameters, true);

		//t.printElapsedTime("getIsPrincipalAuthorized took");
		
		return isAuthorized;
	}

	private static List<String> preCacheInProcessForUsers = new ArrayList<String>();
	
	/**
	 * This method checks if a role has access to an entity. It takes name and id of the entity. 
	 */
	public boolean getIsPrincipalAuthorized(Database db, InfoGluePrincipal infoGluePrincipal, String interceptionPointName, String extraParameters, boolean returnTrueIfNoAccessRightsDefined) throws SystemException
	{		
		return getIsPrincipalAuthorized(db, infoGluePrincipal, interceptionPointName, extraParameters, returnTrueIfNoAccessRightsDefined, false);
	}
	
	public boolean getIsPrincipalAuthorized(Database db, InfoGluePrincipal infoGluePrincipal, String interceptionPointName, String extraParameters, boolean returnTrueIfNoAccessRightsDefined, boolean defeatCaches) throws SystemException
	{		
		Timer t = new Timer();
		if(!logger.isInfoEnabled())
			t.setActive(false);
		
		if(interceptionPointName.equalsIgnoreCase("SiteNodeVersion.Read"))
		{			
			if(CmsPropertyHandler.getOperatingMode().equals("0") && CmsPropertyHandler.getUseWriteForAccessControlInWorking())
				interceptionPointName = "SiteNodeVersion.Write";
		}
		
		//Map<String,Integer> cachedPrincipalAuthorizationMap = (Map<String,Integer>)CacheController.getCachedObjectFromAdvancedCache("personalAuthorizationCache", "authorizationMap_" + infoGluePrincipal.getName());
		Map<String,Integer> cachedPrincipalAuthorizationMap = (Map<String,Integer>)CacheController.getCachedObject("userAccessCache", "authorizationMap_" + infoGluePrincipal.getName());
		if(!infoGluePrincipal.getIsAdministrator() && cachedPrincipalAuthorizationMap == null && !preCacheInProcessForUsers.contains(infoGluePrincipal.getName()))
		{
			preCacheInProcessForUsers.add(infoGluePrincipal.getName());
			logger.info("Precaching all access rights for this user");
			try 
			{
				preCacheUserAccessRightVOList(infoGluePrincipal, db);
				logger.info("Done precaching all access rights for this user.");
				t.printElapsedTime("Done precaching all access rights for this user", 1000);
			} 
			catch (Exception e) 
			{
				logger.error("Error precaching all access rights for this user: " + e.getMessage(), e);
			}
			finally
			{
				preCacheInProcessForUsers.remove(infoGluePrincipal.getName());
			}
		}
		
		boolean enableDebug = false;
		/*if(interceptionPointName != null && interceptionPointName.equalsIgnoreCase("Content.Read") && 
				extraParameters != null && (extraParameters.equalsIgnoreCase("163786") || 
				extraParameters.equalsIgnoreCase("163787") || 
				extraParameters.equalsIgnoreCase("163791") || 
				extraParameters.equalsIgnoreCase("163789") ||
				extraParameters.equalsIgnoreCase("163792") ||
				extraParameters.equalsIgnoreCase("11268") ||
				extraParameters.equalsIgnoreCase("6902")))
		{
			logger.info("Was a content we want to check...");
			enableDebug = true;
		}
		*/
		String debugInfo = "";
		if(enableDebug)
			debugInfo += "\n	getIsPrincipalAuthorized with: " + infoGluePrincipal + ", " + interceptionPointName + ", " + extraParameters;
		
		//logger.info("infoGluePrincipal:" + infoGluePrincipal);
		
		if(infoGluePrincipal == null)
	      return false;
	    
	    if(infoGluePrincipal != null && infoGluePrincipal.getIsAdministrator())
			return true;
		
	    //TODO
		
	    String key = "" + infoGluePrincipal.getName() + "_" + interceptionPointName + "_" + extraParameters + "_" + returnTrueIfNoAccessRightsDefined;
	    //logger.info("key:" + key);

	    if(enableDebug)
			debugInfo += "\n	key: " + key;

	    if(logger.isInfoEnabled())
		{
			logger.info("key:" + key);
			logger.info("infoGluePrincipal:" + infoGluePrincipal.getName());
		}

		//Boolean cachedIsPrincipalAuthorized = (Boolean)CacheController.getCachedObject("authorizationCache", key);
	    //logger.info("personalAuthorizationCache:" + CacheController.getCacheSize("personalAuthorizationCache"));
		Boolean cachedIsPrincipalAuthorized = (Boolean)CacheController.getCachedObjectFromAdvancedCache("personalAuthorizationCache", key);
		if(cachedIsPrincipalAuthorized != null)
		{
			if(enableDebug)
				debugInfo += "\n	Principal " + infoGluePrincipal.getName() + " was " + (!cachedIsPrincipalAuthorized ? " NOT " : "") + " allowed to " + interceptionPointName + " on " + extraParameters + " (Cached value)";
			
			//logger.info("\n	Principal " + infoGluePrincipal.getName() + " was " + (!cachedIsPrincipalAuthorized ? " NOT " : "") + " allowed to " + interceptionPointName + " on " + extraParameters + " (Cached value)");
				
			if(logger.isInfoEnabled() && !cachedIsPrincipalAuthorized.booleanValue())
				logger.info("Principal " + infoGluePrincipal.getName() + " was not allowed to " + interceptionPointName + " on " + extraParameters + " (Cached value)");
		    return cachedIsPrincipalAuthorized.booleanValue();
		}

		boolean isPrincipalAuthorized = false;
		boolean limitOnGroups = false;
		boolean principalHasRole = false;
		boolean principalHasGroup = false;
		   
		Collection roles = infoGluePrincipal.getRoles();
		Collection groups = infoGluePrincipal.getGroups();
		if(logger.isInfoEnabled())
		{
			logger.info("roles:" + roles.size());
			logger.info("groups:" + groups.size());
		}
		
		InterceptionPointVO interceptionPointVO = InterceptionPointController.getController().getInterceptionPointVOWithName(interceptionPointName, db);
		if(interceptionPointVO == null)
		{
			//logger.info("interceptionPointVO null");
			return true;
		}
		
		//ComponentEditor.%' OR name = 'Component.Select' OR name = 'ComponentPropertyEditor.EditProperty' OR name like '%.Read' AND name NOT LIKE 'SiteNodeVersion.Read
		if((interceptionPointName.indexOf("ComponentEditor.") > -1 || interceptionPointName.indexOf("Component.Select") > -1 || interceptionPointName.indexOf("ComponentPropertyEditor.EditProperty") > -1 || interceptionPointName.indexOf(".Read") > -1) && interceptionPointName.indexOf("SiteNodeVersion.Read") == -1)
		{
			//Map<String,Integer> userAccessRightsMap = (Map<String,Integer>)CacheController.getCachedObjectFromAdvancedCache("personalAuthorizationCache", "authorizationMap_" + infoGluePrincipal.getName());
			Map<String,Integer> userAccessRightsMap = (Map<String,Integer>)CacheController.getCachedObject("userAccessCache", "authorizationMap_" + infoGluePrincipal.getName());
			//Map<String,Integer> userAccessRightsMap = principalAccessRights.get("" + infoGluePrincipal.getName());
			if(userAccessRightsMap != null)
			{
				String acKey = "" + interceptionPointVO.getId();
				if(extraParameters != null && !extraParameters.equals(""))
					acKey = "" + interceptionPointVO.getId() + "_" + extraParameters;
				//logger.info("Checking access on: " + acKey);
				
				Integer hasAccess = userAccessRightsMap.get(acKey);
				if(hasAccess == null)
				{
					boolean doDoubleCheck;
					
					if(CmsPropertyHandler.getDoubleCheckComponentEditorRights())
					{
						doDoubleCheck = interceptionPointName.indexOf("Repository.") <= -1;
					}
					else
					{
						doDoubleCheck = true;
						if(interceptionPointName.indexOf("Repository.") > -1 || interceptionPointName.indexOf("ComponentEditor.") > -1 /* || interceptionPointName.indexOf("ComponentPropertyEditor.EditProperty") > -1*/)
							doDoubleCheck = false;
					}
					
					if(returnTrueIfNoAccessRightsDefined && doDoubleCheck /*&& (interceptionPointName.indexOf("ContentVersion.") > -1 || )*/)
					{
						logger.warn("Double checking on access as it's a content version and those are often not protected:" + interceptionPointName + ":" + acKey);
					}
					else
					{
					    CacheController.cacheObjectInAdvancedCache("personalAuthorizationCache", key, new Boolean(false), new String[]{infoGluePrincipal.getName()}, true);
						return false;
					}
				}
				else if(hasAccess == 1)
				{
				    CacheController.cacheObjectInAdvancedCache("personalAuthorizationCache", key, new Boolean(true), new String[]{infoGluePrincipal.getName()}, true);
					return true;
				}
				else if(hasAccess == -1)
				{
					logger.info("Unknown access to " + acKey + " - probably a duplicate access right on it:" + acKey);
				}
			}
		}
		
		logger.info("Reading the hard way:" + interceptionPointVO.getName() + "/" + interceptionPointVO.getId() + ":" + extraParameters);
		
		List<AccessRight> accessRightList = this.getAccessRightListOnlyReadOnly(interceptionPointVO.getId(), extraParameters, db);
		if(logger.isInfoEnabled())
			logger.info("accessRightList:" + accessRightList.size());
		
		boolean accessRightEmpty = true;
		if(accessRightList != null)
		{
			for(AccessRight ar : accessRightList)
			{
				if((ar.getGroups() != null && 
					ar.getGroups().size() > 0) ||
					(ar.getRoles() != null && 
					ar.getRoles().size() > 0) ||
					(ar.getUsers() != null && 
					ar.getUsers().size() > 0))
				{
					accessRightEmpty = false;
					break;
				}
			}
		}
		
		if(returnTrueIfNoAccessRightsDefined && accessRightEmpty)
		{
			if (logger.isInfoEnabled())
			{
				logger.info("Returned true as there was no access rights defined which means it's not correctly protected. IP.name: " + interceptionPointName);
			}
			CacheController.cacheObjectInAdvancedCache("personalAuthorizationCache", key, new Boolean(true), new String[]{infoGluePrincipal.getName()}, true);
			return true;
		}
		
		//If no access rights are set for the content version we should assume it was not protected on version level.
		if((interceptionPointName.equalsIgnoreCase("ContentVersion.Read") || 
		   interceptionPointName.equalsIgnoreCase("ContentVersion.Write") || 
		   interceptionPointName.equalsIgnoreCase("ContentVersion.Delete") || 
		   interceptionPointName.equalsIgnoreCase("ContentVersion.Publish") || returnTrueIfNoAccessRightsDefined) && 
		   (accessRightList == null || accessRightList.size() == 0))
		{
		    CacheController.cacheObjectInAdvancedCache("personalAuthorizationCache", key, new Boolean(true), new String[]{infoGluePrincipal.getName()}, true);
			return true;
		}

		if(enableDebug)
			debugInfo += "\n  Access right debug:";

		Iterator accessRightListIterator = accessRightList.iterator();
		while(accessRightListIterator.hasNext() && !isPrincipalAuthorized)
		{
		    AccessRight accessRight = (AccessRight)accessRightListIterator.next();
		    if(enableDebug)
				debugInfo += "\n	Access right: " + accessRight.getId();

			Collection approvedRoles = accessRight.getRoles();
		    Collection approvedGroups = accessRight.getGroups();
		    Collection approvedUsers = accessRight.getUsers();

			Iterator approvedUsersIterator = approvedUsers.iterator();
			while(approvedUsersIterator.hasNext())
			{
			    AccessRightUser accessRightUser = (AccessRightUser)approvedUsersIterator.next();
			    
			    if(enableDebug)
					debugInfo += "\n		user:" + accessRightUser.getUserName();
			    if(accessRightUser.getUserName().equals(infoGluePrincipal.getName()))
			    {
			        isPrincipalAuthorized = true;
			    }
			}

			if(!isPrincipalAuthorized)
			{
			    Iterator rolesIterator = roles.iterator();
				outer:while(rolesIterator.hasNext())
				{
					InfoGlueRole role = (InfoGlueRole)rolesIterator.next();

					if(enableDebug)
						debugInfo += "\n		role:" + role.getName();

					if(logger.isInfoEnabled())
					    logger.info("role:" + role.getName());

					if(!role.getIsActive())
					{
						logger.info("skipping checking for match on role: " + role.getName() + " as it was inactive.");
						continue;
					}

					Iterator approvedRolesIterator = approvedRoles.iterator();
					while(approvedRolesIterator.hasNext())
					{
					    AccessRightRole accessRightRole = (AccessRightRole)approvedRolesIterator.next();
					    
						if(enableDebug)
							debugInfo += "\n		" + role.getName() + " = " + accessRightRole.getRoleName();

					    if(logger.isInfoEnabled())
					    	logger.info("" + role.getName() + " = " + accessRightRole.getRoleName());
					    if(accessRightRole.getRoleName().equals(role.getName()))
					    {
							if(enableDebug)
								debugInfo += "\n		Principal " + infoGluePrincipal.getName() + " has role " + accessRightRole.getRoleName();

					        if(logger.isInfoEnabled())
						    	logger.info("Principal " + infoGluePrincipal.getName() + " has role " + accessRightRole.getRoleName());
						
					        principalHasRole = true;
					        break outer;
					    }
					}
				}
	 
				Iterator approvedGroupsIterator = approvedGroups.iterator();
				outer:while(approvedGroupsIterator.hasNext())
				{
				    AccessRightGroup accessRightGroup = (AccessRightGroup)approvedGroupsIterator.next();
					
				    if(enableDebug)
						debugInfo += "\n		accessRightGroup:" + accessRightGroup.getGroupName();

					if(logger.isInfoEnabled())
					    logger.info("accessRightGroup:" + accessRightGroup.getGroupName());
	
				    limitOnGroups = true;
	
				    Iterator groupsIterator = groups.iterator();
					while(groupsIterator.hasNext())
					{
					    InfoGlueGroup group = (InfoGlueGroup)groupsIterator.next();
						if(enableDebug)
							debugInfo += "\n		group:" + group.getName();

						if(logger.isInfoEnabled())
					    	logger.info("" + group.getName() + " = " + accessRightGroup.getGroupName());

						if(!group.getIsActive())
						{
							logger.info("skipping checking for match on group:" + group.getName() + " as it was inactive.");
							continue;
						}

					    if(accessRightGroup.getGroupName().equals(group.getName()))
					    {
					        if(logger.isInfoEnabled())
						    	logger.info("Principal " + infoGluePrincipal.getName() + " has group " + accessRightGroup.getGroupName());

							if(enableDebug)
								debugInfo += "\n		Principal " + infoGluePrincipal.getName() + " has group " + accessRightGroup.getGroupName();

					        principalHasGroup = true;
					        break outer;
					    }
					}
				}
			}
			
			if(enableDebug)
			{
				debugInfo += "\n		principalHasRole: " + principalHasRole;
				debugInfo += "\n		principalHasGroup: " + principalHasGroup;
				debugInfo += "\n		limitOnGroups: " + limitOnGroups;
			}
		}

		//getCastorCategory().setLevel(Level.WARN);
		//getCastorJDOCategory().setLevel(Level.WARN);

		if(enableDebug)
		{
			debugInfo += "\n		FINAL principalHasRole: " + principalHasRole;
			debugInfo += "\n		FINAL principalHasGroup: " + principalHasGroup;
			debugInfo += "\n		FINAL limitOnGroups: " + limitOnGroups;
		}

        if(logger.isInfoEnabled())
        {
	    	logger.info("principalHasRole: " + principalHasRole);
	    	logger.info("principalHasGroup: " + principalHasGroup);
	    	logger.info("limitOnGroups: " + limitOnGroups);
        }
        
	    if((principalHasRole && principalHasGroup) || (principalHasRole && !limitOnGroups))
		    isPrincipalAuthorized = true;
		
		if(logger.isInfoEnabled() && !isPrincipalAuthorized)
		{
			logger.info("Principal " + infoGluePrincipal.getName() + " was not allowed to " + interceptionPointName + " on " + extraParameters);
		}
		logger.info("Caching " + isPrincipalAuthorized + " on " + interceptionPointName + " on " + extraParameters);
				
	    CacheController.cacheObjectInAdvancedCache("personalAuthorizationCache", key, new Boolean(isPrincipalAuthorized), new String[]{infoGluePrincipal.getName()}, true);

		return isPrincipalAuthorized;
	}
	
	
	/**
	 * This method checks if a role has access to an entity. It takes name and id of the entity. 
	 */
	public boolean getIsPrincipalAuthorizedNew(Database db, InfoGluePrincipal infoGluePrincipal, String interceptionPointName, String extraParameters, boolean returnTrueIfNoAccessRightsDefined) throws SystemException
	{		
		logger.info("Going to check new:" + interceptionPointName + ":" + extraParameters);

		if(infoGluePrincipal == null)
	      return false;
	    
	    if(infoGluePrincipal != null && infoGluePrincipal.getIsAdministrator())
			return true;
		
	    //TODO
	    String key = "" + infoGluePrincipal.getName() + "_" + interceptionPointName + "_" + extraParameters + "_" + returnTrueIfNoAccessRightsDefined;
		if(logger.isInfoEnabled())
		{
			logger.info("key:" + key);
			logger.info("infoGluePrincipal:" + infoGluePrincipal.getName());
		}

		//Boolean cachedIsPrincipalAuthorized = (Boolean)CacheController.getCachedObject("authorizationCache", key);
		Boolean cachedIsPrincipalAuthorized = (Boolean)CacheController.getCachedObjectFromAdvancedCache("personalAuthorizationCache", key);
		if(cachedIsPrincipalAuthorized != null)
		{
			if(logger.isInfoEnabled() && !cachedIsPrincipalAuthorized.booleanValue())
				logger.info("Principal " + infoGluePrincipal.getName() + " was not allowed to " + interceptionPointName + " on " + extraParameters + " (Cached value)");
		    return cachedIsPrincipalAuthorized.booleanValue();
		}

		boolean isPrincipalAuthorized = false;
		boolean limitOnGroups = false;
		boolean principalHasRole = false;
		boolean principalHasGroup = false;
		   
		Collection roles = infoGluePrincipal.getRoles();
		Collection groups = infoGluePrincipal.getGroups();
		if(logger.isInfoEnabled())
		{
			logger.info("roles:" + roles.size());
			logger.info("groups:" + groups.size());
		}
		
		InterceptionPointVO interceptionPointVO = InterceptionPointController.getController().getInterceptionPointVOWithName(interceptionPointName, db);
		if(interceptionPointVO == null)
			return true;

		List<AccessRightUserVO> accessRightUserVOList = this.getAccessRightUserVOList(interceptionPointVO.getId(), extraParameters, db);
		
		//If no access rights are set for the content version we should assume it was not protected on version level.
		if(interceptionPointName.equalsIgnoreCase("ContentVersion.Read") || 
		   interceptionPointName.equalsIgnoreCase("ContentVersion.Write") || 
		   interceptionPointName.equalsIgnoreCase("ContentVersion.Delete") || 
		   interceptionPointName.equalsIgnoreCase("ContentVersion.Publish"))
		{
			return true;
		}

		for(AccessRightUserVO accessRightUserVO : accessRightUserVOList)
		{
		    if(accessRightUserVO.getUserName().equals(infoGluePrincipal.getName()))
		    {
		        isPrincipalAuthorized = true;
		    }
		}

		if(!isPrincipalAuthorized)
		{
			List<AccessRightRoleVO> accessRightRoleVOList = this.getAccessRightRoleVOList(interceptionPointVO.getId(), extraParameters, db);
			List<AccessRightGroupVO> accessRightGroupVOList = this.getAccessRightGroupVOList(interceptionPointVO.getId(), extraParameters, db);
			
			if(returnTrueIfNoAccessRightsDefined && ((accessRightUserVOList == null || accessRightUserVOList.size() == 0) && (accessRightRoleVOList == null || accessRightRoleVOList.size() == 0) && (accessRightGroupVOList == null || accessRightGroupVOList.size() == 0)))
				return true;
						   
			Iterator rolesIterator = roles.iterator();
			outer:while(rolesIterator.hasNext())
			{
				InfoGlueRole role = (InfoGlueRole)rolesIterator.next();
				if(logger.isInfoEnabled())
				    logger.info("role:" + role.getName());

				if(!role.getIsActive())
				{
					logger.info("skipping checking for match on role:" + role.getName() + " as it was inactive.");
					continue;
				}
				
				Iterator approvedRolesIterator = accessRightRoleVOList.iterator();
				while(approvedRolesIterator.hasNext())
				{
					AccessRightRoleVO accessRightRole = (AccessRightRoleVO)approvedRolesIterator.next();
				    if(logger.isInfoEnabled())
				    	logger.info("" + role.getName() + " = " + accessRightRole.getRoleName());
				    if(accessRightRole.getRoleName().equals(role.getName()))
				    {
				        if(logger.isInfoEnabled())
					    	logger.info("Principal " + infoGluePrincipal.getName() + " has role " + accessRightRole.getRoleName());
					
				        principalHasRole = true;
				        break outer;
				    }
				}
			}
 
			Iterator approvedGroupsIterator = accessRightGroupVOList.iterator();
			outer:while(approvedGroupsIterator.hasNext())
			{
			    AccessRightGroupVO accessRightGroup = (AccessRightGroupVO)approvedGroupsIterator.next();
			    if(logger.isInfoEnabled())
				    logger.info("accessRightGroup:" + accessRightGroup.getGroupName());

			    limitOnGroups = true;

			    Iterator groupsIterator = groups.iterator();
				while(groupsIterator.hasNext())
				{
				    InfoGlueGroup group = (InfoGlueGroup)groupsIterator.next();
				    if(logger.isInfoEnabled())
				    	logger.info("" + group.getName() + " = " + accessRightGroup.getGroupName());

					if(!group.getIsActive())
					{
						logger.info("skipping checking for match on group:" + group.getName() + " as it was inactive.");
						continue;
					}

				    if(accessRightGroup.getGroupName().equals(group.getName()))
				    {
				        if(logger.isInfoEnabled())
					    	logger.info("Principal " + infoGluePrincipal.getName() + " has group " + accessRightGroup.getGroupName());
					
				        principalHasGroup = true;
				        break outer;
				    }
				}
			}
		}
		
        if(logger.isInfoEnabled())
        {
	    	logger.info("principalHasRole: " + principalHasRole);
	    	logger.info("principalHasGroup: " + principalHasGroup);
	    	logger.info("limitOnGroups: " + limitOnGroups);
        }
        
	    if((principalHasRole && principalHasGroup) || (principalHasRole && !limitOnGroups))
		    isPrincipalAuthorized = true;
		
		if(logger.isInfoEnabled() && !isPrincipalAuthorized)
		{
			logger.info("Principal " + infoGluePrincipal.getName() + " was not allowed to " + interceptionPointName + " on " + extraParameters);
		}
		
	    //CacheController.cacheObject("authorizationCache", key, new Boolean(isPrincipalAuthorized));
	    CacheController.cacheObjectInAdvancedCache("personalAuthorizationCache", key, new Boolean(isPrincipalAuthorized), new String[]{infoGluePrincipal.getName()}, true);

		return isPrincipalAuthorized;
	}
	
	/**
	 * This method checks if a role has access to an entity. It takes name and id of the entity. 
	 */

	public boolean getIsPrincipalAuthorized(InfoGluePrincipal infoGluePrincipal, String interceptionPointName) throws SystemException
	{
		return getIsPrincipalAuthorized(infoGluePrincipal, interceptionPointName, false);
	}

	/**
	 * This method checks if a role has access to an entity. It takes name and id of the entity. 
	 */

	public boolean getIsPrincipalAuthorized(InfoGluePrincipal infoGluePrincipal, String interceptionPointName, boolean returnSuccessIfInterceptionPointNotDefined, boolean returnFailureIfInterceptionPointNotDefined) throws SystemException
	{
		if(infoGluePrincipal.getIsAdministrator())
			return true;
			
		String key = "" + infoGluePrincipal.getName() + "_" + interceptionPointName + "_" + returnSuccessIfInterceptionPointNotDefined;
		logger.info("key:" + key);
		//Boolean cachedIsPrincipalAuthorized = (Boolean)CacheController.getCachedObject("authorizationCache", key);
		Boolean cachedIsPrincipalAuthorized = (Boolean)CacheController.getCachedObjectFromAdvancedCache("personalAuthorizationCache", key);
		if(cachedIsPrincipalAuthorized != null)
		{
			if(logger.isInfoEnabled() && !cachedIsPrincipalAuthorized.booleanValue())
				logger.info("Principal " + infoGluePrincipal.getName() + " was not allowed to " + interceptionPointName);

			return cachedIsPrincipalAuthorized.booleanValue();
		}
		
		boolean isPrincipalAuthorized = false;
		
		Database db = CastorDatabaseService.getDatabase();

		try 
		{
			beginTransaction(db);
			
			isPrincipalAuthorized = getIsPrincipalAuthorized(db, infoGluePrincipal, interceptionPointName, returnSuccessIfInterceptionPointNotDefined, returnFailureIfInterceptionPointNotDefined, true);
			
		    CacheController.cacheObjectInAdvancedCache("personalAuthorizationCache", key, new Boolean(isPrincipalAuthorized), new String[]{infoGluePrincipal.getName()}, true);
			
			commitTransaction(db);
		} 
		catch (Exception e) 
		{
			e.printStackTrace();
			logger.info("An error occurred so we should not complete the transaction:" + e.getMessage(), e);
			rollbackTransaction(db);
			throw new SystemException(e.getMessage());
		}
					
		return isPrincipalAuthorized;
	}

	/**
	 * This method checks if a role has access to an entity. It takes name and id of the entity. 
	 */

	public boolean getIsPrincipalAuthorized(InfoGluePrincipal infoGluePrincipal, String interceptionPointName, boolean returnSuccessIfInterceptionPointNotDefined) throws SystemException
	{
		if(infoGluePrincipal.getIsAdministrator())
			return true;
			
		String key = "" + infoGluePrincipal.getName() + "_" + interceptionPointName + "_" + returnSuccessIfInterceptionPointNotDefined;
		logger.info("key:" + key);
		//Boolean cachedIsPrincipalAuthorized = (Boolean)CacheController.getCachedObject("authorizationCache", key);
		Boolean cachedIsPrincipalAuthorized = (Boolean)CacheController.getCachedObjectFromAdvancedCache("personalAuthorizationCache", key);
		if(cachedIsPrincipalAuthorized != null)
		{
			if(logger.isInfoEnabled() && !cachedIsPrincipalAuthorized.booleanValue())
				logger.info("Principal " + infoGluePrincipal.getName() + " was not allowed to " + interceptionPointName);

			return cachedIsPrincipalAuthorized.booleanValue();
		}
		
		boolean isPrincipalAuthorized = false;
		
		Database db = CastorDatabaseService.getDatabase();

		try 
		{
			beginTransaction(db);
			
			isPrincipalAuthorized = getIsPrincipalAuthorized(db, infoGluePrincipal, interceptionPointName, returnSuccessIfInterceptionPointNotDefined, false, true);
			
			//CacheController.cacheObject("authorizationCache", key, new Boolean(isPrincipalAuthorized));
		    CacheController.cacheObjectInAdvancedCache("personalAuthorizationCache", key, new Boolean(isPrincipalAuthorized), new String[]{infoGluePrincipal.getName()}, true);
			
			commitTransaction(db);
		} 
		catch (Exception e) 
		{
			logger.info("An error occurred so we should not complete the transaction:" + e.getMessage(), e);
			rollbackTransaction(db);
			throw new SystemException(e.getMessage());
		}
					
		return isPrincipalAuthorized;
	}

	/**
	 * This method checks if a role has access to an entity. It takes name and id of the entity. 
	 */

	public boolean getIsPrincipalAuthorized(InfoGluePrincipal infoGluePrincipal, String interceptionPointName, boolean returnSuccessIfInterceptionPointNotDefined, boolean returnFailureIfInterceptionPointNotDefined, boolean returnTrueIfNoAccessRightsDefined) throws SystemException
	{
		if(infoGluePrincipal.getIsAdministrator())
			return true;
			
		String key = "" + infoGluePrincipal.getName() + "_" + interceptionPointName + "_" + returnSuccessIfInterceptionPointNotDefined + "_" + returnFailureIfInterceptionPointNotDefined + "_" + returnTrueIfNoAccessRightsDefined;
		logger.info("key:" + key);
		//Boolean cachedIsPrincipalAuthorized = (Boolean)CacheController.getCachedObject("authorizationCache", key);
		Boolean cachedIsPrincipalAuthorized = (Boolean)CacheController.getCachedObjectFromAdvancedCache("personalAuthorizationCache", key);
		if(cachedIsPrincipalAuthorized != null)
		{
			if(logger.isInfoEnabled() && !cachedIsPrincipalAuthorized.booleanValue())
				logger.info("Principal " + infoGluePrincipal.getName() + " was not allowed to " + interceptionPointName);

			return cachedIsPrincipalAuthorized.booleanValue();
		}
		
		boolean isPrincipalAuthorized = false;
		
		Database db = CastorDatabaseService.getDatabase();

		try 
		{
			beginTransaction(db);
			
			isPrincipalAuthorized = getIsPrincipalAuthorized(db, infoGluePrincipal, interceptionPointName, returnSuccessIfInterceptionPointNotDefined, returnFailureIfInterceptionPointNotDefined, returnTrueIfNoAccessRightsDefined);
			
			//CacheController.cacheObject("authorizationCache", key, new Boolean(isPrincipalAuthorized));
		    CacheController.cacheObjectInAdvancedCache("personalAuthorizationCache", key, new Boolean(isPrincipalAuthorized), new String[]{infoGluePrincipal.getName()}, true);
			
			commitTransaction(db);
		} 
		catch (Exception e) 
		{
			logger.info("An error occurred so we should not complete the transaction:" + e.getMessage(), e);
			rollbackTransaction(db);
			throw new SystemException(e.getMessage());
		}
					
		return isPrincipalAuthorized;
	}

	/**
	 * This method checks if a role has access to an entity. It takes name and id of the entity. 
	 */

	public boolean getIsPrincipalAuthorized(Database db, InfoGluePrincipal infoGluePrincipal, String interceptionPointName) throws SystemException
	{		
		boolean isAuthorized = getIsPrincipalAuthorized(db, infoGluePrincipal, interceptionPointName, false, false, true);
		
		return isAuthorized;
	}
	
	/**
	 * This method checks if a role has access to an entity. It takes name and id of the entity. 
	 */

	public boolean getIsPrincipalAuthorized(Database db, InfoGluePrincipal infoGluePrincipal, String interceptionPointName, boolean returnSuccessIfInterceptionPointNotDefined, boolean returnFailureIfInterceptionPointNotDefined, boolean returnTrueIfNoAccessRightsDefined) throws SystemException
	{		
		Timer t = new Timer();

		//logger.info("getIsPrincipalAuthorized 2:" + interceptionPointName);
		//Thread.dumpStack();
		
		Map<String,Integer> cachedPrincipalAuthorizationMap = (Map<String,Integer>)CacheController.getCachedObject("userAccessCache", "authorizationMap_" + infoGluePrincipal.getName());
		//Map<String,Integer> cachedPrincipalAuthorizationMap = (Map<String,Integer>)CacheController.getCachedObjectFromAdvancedCache("personalAuthorizationCache", "authorizationMap_" + infoGluePrincipal.getName());
		if(!infoGluePrincipal.getIsAdministrator() && cachedPrincipalAuthorizationMap == null && !preCacheInProcessForUsers.contains(infoGluePrincipal.getName()))
		{
			preCacheInProcessForUsers.add(infoGluePrincipal.getName());
			
			logger.info("Precaching all access rights for this user");
			try 
			{
				preCacheUserAccessRightVOList(infoGluePrincipal, db);
				logger.info("Done precaching all access rights for this user");
				t.printElapsedTime("Done precaching all access rights for this user", 1000);
			} 
			catch (Exception e) 
			{
				logger.error("Error precaching all access rights for this user: " + e.getMessage(), e);
			}
			finally
			{
				preCacheInProcessForUsers.remove(infoGluePrincipal.getName());
			}
		}
		
		
	    if(infoGluePrincipal.getIsAdministrator())
			return true;

	    String key = "" + infoGluePrincipal.getName() + "_" + interceptionPointName + "_" + returnTrueIfNoAccessRightsDefined;

		Boolean cachedIsPrincipalAuthorized = (Boolean)CacheController.getCachedObjectFromAdvancedCache("personalAuthorizationCache", key);
		if(cachedIsPrincipalAuthorized != null)
		{
			if(logger.isInfoEnabled() && !cachedIsPrincipalAuthorized.booleanValue())
				logger.info("Principal " + infoGluePrincipal.getName() + " was not allowed to " + interceptionPointName + " (Cached value)");
		    return cachedIsPrincipalAuthorized.booleanValue();
		}

		boolean isPrincipalAuthorized = false;
		boolean limitOnGroups = false;
		boolean principalHasRole = false;
		boolean principalHasGroup = false;
		   
		Collection roles = infoGluePrincipal.getRoles();
		Collection groups = infoGluePrincipal.getGroups();
		InterceptionPointVO interceptionPointVO = InterceptionPointController.getController().getInterceptionPointVOWithName(interceptionPointName, db);
		if(interceptionPointVO == null && returnSuccessIfInterceptionPointNotDefined)
		{
		    CacheController.cacheObjectInAdvancedCache("personalAuthorizationCache", key, new Boolean(true), new String[]{infoGluePrincipal.getName()}, true);
		    return true;
		}
		
		if(interceptionPointVO == null && returnFailureIfInterceptionPointNotDefined)
		{
		    CacheController.cacheObjectInAdvancedCache("personalAuthorizationCache", key, new Boolean(false), new String[]{infoGluePrincipal.getName()}, true);
			return false;
		}
		
		if(interceptionPointVO == null)
			return true;
			
		//if(interceptionPointName.indexOf(".Read") > -1 && interceptionPointName.indexOf("SiteNodeVersion.Read") == -1)
		if((interceptionPointName.indexOf("ComponentEditor.") > -1 || interceptionPointName.indexOf("Component.Select") > -1 || interceptionPointName.indexOf("ComponentPropertyEditor.EditProperty") > -1 || interceptionPointName.indexOf(".Read") > -1) && interceptionPointName.indexOf("SiteNodeVersion.Read") == -1)
		{
			Map<String,Integer> userAccessRightsMap = (Map<String,Integer>)CacheController.getCachedObject("userAccessCache", "authorizationMap_" + infoGluePrincipal.getName());
			//Map<String,Integer> userAccessRightsMap = (Map<String,Integer>)CacheController.getCachedObjectFromAdvancedCache("personalAuthorizationCache", "authorizationMap_" + infoGluePrincipal.getName());
			if(userAccessRightsMap != null)
			{
				String acKey = "" + interceptionPointVO.getId();
				//logger.info("Checking access on: " + acKey);
				Integer hasAccess = userAccessRightsMap.get(acKey);
				if(hasAccess == null)
				{
					CacheController.cacheObjectInAdvancedCache("personalAuthorizationCache", key, new Boolean(false), new String[]{infoGluePrincipal.getName()}, true);
					return false;
				}
				else if(hasAccess == 1)
				{
					CacheController.cacheObjectInAdvancedCache("personalAuthorizationCache", key, new Boolean(true), new String[]{infoGluePrincipal.getName()}, true);
					return true;
				}
				else if(hasAccess == -1)
				{
					logger.info("Unknown access to " + acKey + " - probably a duplicate access right on it:" + acKey);
				}
			}
		}
		
		logger.info("Reading the hard way: " + interceptionPointVO.getName());

		//List accessRightList = this.getAccessRightList(interceptionPointVO.getId(), db);
		List accessRightList = this.getAccessRightListOnlyReadOnly(interceptionPointVO.getId(), db);
		if(logger.isInfoEnabled())
			logger.info("accessRightList:" + accessRightList.size());
		//If no access rights are set for the content version we should assume it was not protected on version level.
		if((interceptionPointName.equalsIgnoreCase("ContentVersion.Read") || 
		   interceptionPointName.equalsIgnoreCase("ContentVersion.Write") || 
		   interceptionPointName.equalsIgnoreCase("ContentVersion.Delete") || 
		   interceptionPointName.equalsIgnoreCase("ContentVersion.Publish") || returnTrueIfNoAccessRightsDefined) && 
		   (accessRightList == null || accessRightList.size() == 0))
		{
			CacheController.cacheObjectInAdvancedCache("personalAuthorizationCache", key, new Boolean(true), new String[]{infoGluePrincipal.getName()}, true);
			return true;
		}

		Iterator accessRightListIterator = accessRightList.iterator();
		while(accessRightListIterator.hasNext() && !isPrincipalAuthorized)
		{
		    AccessRight accessRight = (AccessRight)accessRightListIterator.next();
		    Collection approvedRoles = accessRight.getRoles();
		    Collection approvedGroups = accessRight.getGroups();
		    Collection approvedUsers = accessRight.getUsers();

			Iterator approvedUsersIterator = approvedUsers.iterator();
			while(approvedUsersIterator.hasNext())
			{
			    AccessRightUser accessRightUser = (AccessRightUser)approvedUsersIterator.next();
			    if(accessRightUser.getUserName().equals(infoGluePrincipal.getName()))
			    {
			        isPrincipalAuthorized = true;
			    }
			}

			if(!isPrincipalAuthorized)
			{
			    Iterator rolesIterator = roles.iterator();
				outer:while(rolesIterator.hasNext())
				{
					InfoGlueRole role = (InfoGlueRole)rolesIterator.next();
					logger.info("role:" + role.getName());

					if(!role.getIsActive())
					{
						logger.info("skipping checking for match on role:" + role.getName() + " as it was inactive.");
						continue;
					}

					Iterator approvedRolesIterator = approvedRoles.iterator();
					while(approvedRolesIterator.hasNext())
					{
					    AccessRightRole accessRightRole = (AccessRightRole)approvedRolesIterator.next();
					    if(accessRightRole.getRoleName().equals(role.getName()))
					    {
					        principalHasRole = true;
					        break outer;
					    }
					}
				}
	 
			    Iterator approvedGroupsIterator = approvedGroups.iterator();
				outer:while(approvedGroupsIterator.hasNext())
				{
				    AccessRightGroup accessRightGroup = (AccessRightGroup)approvedGroupsIterator.next();
				    logger.info("accessRightGroup:" + accessRightGroup.getGroupName());
	
				    limitOnGroups = true;
	
				    Iterator groupsIterator = groups.iterator();
					while(groupsIterator.hasNext())
					{
					    InfoGlueGroup group = (InfoGlueGroup)groupsIterator.next();

					    if(!group.getIsActive())
						{
							logger.info("skipping checking for match on group:" + group.getName() + " as it was inactive.");
							continue;
						}

					    if(accessRightGroup.getGroupName().equals(group.getName()))
					    {
					        principalHasGroup = true;
					        break outer;
					    }
					}
				}
			}
		}

	    if((principalHasRole && principalHasGroup) || (principalHasRole && !limitOnGroups))
		    isPrincipalAuthorized = true;
		
		if(logger.isInfoEnabled() && !isPrincipalAuthorized)
			logger.info("Principal " + infoGluePrincipal.getName() + " was not allowed to " + interceptionPointName);
		
		if(logger.isInfoEnabled())
			logger.info("isPrincipalAuthorized:" + isPrincipalAuthorized);

		CacheController.cacheObjectInAdvancedCache("personalAuthorizationCache", key, new Boolean(isPrincipalAuthorized), new String[]{infoGluePrincipal.getName()}, true);

		return isPrincipalAuthorized;
	}

	
	public boolean getIsPrincipalAuthorizedNew(Database db, InfoGluePrincipal infoGluePrincipal, String interceptionPointName, boolean returnSuccessIfInterceptionPointNotDefined, boolean returnFailureIfInterceptionPointNotDefined, boolean returnTrueIfNoAccessRightsDefined) throws SystemException
	{		
	    if(infoGluePrincipal.getIsAdministrator())
			return true;
	
		boolean isPrincipalAuthorized = false;
		boolean limitOnGroups = false;
		boolean principalHasRole = false;
		boolean principalHasGroup = false;
		   
		Collection roles = infoGluePrincipal.getRoles();
		Collection groups = infoGluePrincipal.getGroups();
		InterceptionPointVO interceptionPointVO = InterceptionPointController.getController().getInterceptionPointVOWithName(interceptionPointName, db);
		//InterceptionPoint interceptionPoint = InterceptionPointController.getController().getInterceptionPointWithName(interceptionPointName, db);
		if(interceptionPointVO == null && returnSuccessIfInterceptionPointNotDefined)
			return true;
		
		if(interceptionPointVO == null && returnFailureIfInterceptionPointNotDefined)
			return false;
		
		if(interceptionPointVO == null)
			return true;
			
		List<AccessRightUserVO> accessRightUserVOList = this.getAccessRightUserVOList(interceptionPointVO.getId(), null, db);
		
		//If no access rights are set for the content version we should assume it was not protected on version level.
		if(interceptionPointName.equalsIgnoreCase("ContentVersion.Read") || 
		   interceptionPointName.equalsIgnoreCase("ContentVersion.Write") || 
		   interceptionPointName.equalsIgnoreCase("ContentVersion.Delete") || 
		   interceptionPointName.equalsIgnoreCase("ContentVersion.Publish"))
		{
			return true;
		}

		for(AccessRightUserVO accessRightUserVO : accessRightUserVOList)
		{
		    if(accessRightUserVO.getUserName().equals(infoGluePrincipal.getName()))
		    {
		        isPrincipalAuthorized = true;
		    }
		}
		
		if(!isPrincipalAuthorized)
		{
			List<AccessRightRoleVO> accessRightRoleVOList = this.getAccessRightRoleVOList(interceptionPointVO.getId(), null, db);
			List<AccessRightGroupVO> accessRightGroupVOList = this.getAccessRightGroupVOList(interceptionPointVO.getId(), null, db);
			
			if(returnTrueIfNoAccessRightsDefined && ((accessRightUserVOList == null || accessRightUserVOList.size() == 0) && (accessRightRoleVOList == null || accessRightRoleVOList.size() == 0) && (accessRightGroupVOList == null || accessRightGroupVOList.size() == 0)))
				return true;
						   
			Iterator rolesIterator = roles.iterator();
			outer:while(rolesIterator.hasNext())
			{
				InfoGlueRole role = (InfoGlueRole)rolesIterator.next();
				if(logger.isInfoEnabled())
				    logger.info("role:" + role.getName());

				if(!role.getIsActive())
				{
					logger.info("skipping checking for match on role:" + role.getName() + " as it was inactive.");
					continue;
				}
				
				Iterator approvedRolesIterator = accessRightRoleVOList.iterator();
				while(approvedRolesIterator.hasNext())
				{
					AccessRightRoleVO accessRightRole = (AccessRightRoleVO)approvedRolesIterator.next();
				    if(logger.isInfoEnabled())
				    	logger.info("" + role.getName() + " = " + accessRightRole.getRoleName());
				    if(accessRightRole.getRoleName().equals(role.getName()))
				    {
				        if(logger.isInfoEnabled())
					    	logger.info("Principal " + infoGluePrincipal.getName() + " has role " + accessRightRole.getRoleName());
					
				        principalHasRole = true;
				        break outer;
				    }
				}
			}
 
			Iterator approvedGroupsIterator = accessRightGroupVOList.iterator();
			outer:while(approvedGroupsIterator.hasNext())
			{
			    AccessRightGroupVO accessRightGroup = (AccessRightGroupVO)approvedGroupsIterator.next();
			    if(logger.isInfoEnabled())
				    logger.info("accessRightGroup:" + accessRightGroup.getGroupName());

			    limitOnGroups = true;

			    Iterator groupsIterator = groups.iterator();
				while(groupsIterator.hasNext())
				{
				    InfoGlueGroup group = (InfoGlueGroup)groupsIterator.next();
				    if(logger.isInfoEnabled())
				    	logger.info("" + group.getName() + " = " + accessRightGroup.getGroupName());

					if(!group.getIsActive())
					{
						logger.info("skipping checking for match on group:" + group.getName() + " as it was inactive.");
						continue;
					}

				    if(accessRightGroup.getGroupName().equals(group.getName()))
				    {
				        if(logger.isInfoEnabled())
					    	logger.info("Principal " + infoGluePrincipal.getName() + " has group " + accessRightGroup.getGroupName());
					
				        principalHasGroup = true;
				        break outer;
				    }
				}
			}
		}
	
	    if((principalHasRole && principalHasGroup) || (principalHasRole && !limitOnGroups))
		    isPrincipalAuthorized = true;
		
		if(logger.isInfoEnabled() && !isPrincipalAuthorized)
			logger.info("Principal " + infoGluePrincipal.getName() + " was not allowed to " + interceptionPointName);
		
		if(logger.isInfoEnabled())
			logger.info("isPrincipalAuthorized:" + isPrincipalAuthorized);
	    
		return isPrincipalAuthorized;
	}

	public Collection<AccessRightsUserRow> getAccessRightsUserRows(String interceptionPointCategory, String parameters) throws SystemException, Bug
	{
		Collection<AccessRightsUserRow> principalVOList = null;

		Database db = CastorDatabaseService.getDatabase();

		try 
		{
			beginTransaction(db);

			principalVOList = getAccessRightsUserRows(interceptionPointCategory, parameters, db);

			commitTransaction(db);
		} 
		catch (Exception e)
		{
			logger.warn("An error occurred so we should not complete the transaction:" + e, e);
			rollbackTransaction(db);
			throw new SystemException(e.getMessage());
		}

		return principalVOList;
	}

	public Collection<AccessRightsUserRow> getAccessRightsUserRows(String interceptionPointCategory, String parameters, Database db) throws SystemException, Bug
	{
	    Map<String, AccessRightsUserRow> accessRightsUserRows = new HashMap<String, AccessRightsUserRow>();

		try
		{
		    List accessRightUsers = getAccessRightsUsers(interceptionPointCategory, parameters, db, true);

		    Iterator accessRightUsersIterator = accessRightUsers.iterator();
			while (accessRightUsersIterator.hasNext()) 
			{
			    try
			    {
					AccessRightUser accessRightUser = (AccessRightUser)accessRightUsersIterator.next();

					AccessRightsUserRow accessRightsUserRow = (AccessRightsUserRow)accessRightsUserRows.get(accessRightUser.getUserName());
					if(accessRightsUserRow == null)
					{
						InfoGluePrincipal infoGluePrincipal = UserControllerProxy.getController(db).getUser(accessRightUser.getUserName());
						if(infoGluePrincipal != null)
					    {
					        AccessRightsUserRow newAccessRightsUserRow = new AccessRightsUserRow();
					        newAccessRightsUserRow.setUserName(infoGluePrincipal.getName());
					        newAccessRightsUserRow.getAccessRights().put(accessRightUser.getAccessRight().getInterceptionPoint().getId(), new Boolean(true));
					        accessRightsUserRows.put(infoGluePrincipal.getName(), newAccessRightsUserRow);
					    }
					}
					else
					{
					    accessRightsUserRow.getAccessRights().put(accessRightUser.getAccessRight().getInterceptionPoint().getId(), new Boolean(true));
					}
			    }
			    catch(Exception e)
			    {
			        logger.warn("An user did not exist although given access rights:" + e.getMessage());
			    }
			}
		}
		catch(Exception e)
		{
			throw new SystemException("An error occurred when we tried to fetch a list of Access rights. Reason:" + e.getMessage(), e);
		}

		return accessRightsUserRows.values();
	}

	public List getAccessRightsUsers(String interceptionPointCategory, String parameters, Database db, boolean readOnly) throws SystemException, Bug
	{
	    List accessRightsUsers = new ArrayList();
		
		try
		{
			OQLQuery oql = null;
			
			if(parameters == null || parameters.length() == 0)
			{
				oql = db.getOQLQuery("SELECT aru FROM org.infoglue.cms.entities.management.impl.simple.AccessRightUserImpl aru WHERE aru.accessRight.interceptionPoint.category = $1 AND (is_undefined(aru.accessRight.parameters) OR aru.accessRight.parameters = $2)");
				oql.bind(interceptionPointCategory);
				oql.bind(parameters);
			}
			else
			{
		    	oql = db.getOQLQuery("SELECT aru FROM org.infoglue.cms.entities.management.impl.simple.AccessRightUserImpl aru WHERE aru.accessRight.interceptionPoint.category = $1 AND aru.accessRight.parameters = $2");
				oql.bind(interceptionPointCategory);
				oql.bind(parameters);
			}
			
			QueryResults results = null;
			
			if(readOnly)
				results = oql.execute(Database.READONLY);
			else
				results = oql.execute();
				
			while (results.hasMore()) 
			{
				AccessRightUser accessRightUser = (AccessRightUser)results.next();
				accessRightsUsers.add(accessRightUser);
			}
			
			results.close();
			oql.close();
		}
		catch(Exception e)
		{
			throw new SystemException("An error occurred when we tried to fetch a list of Access rights. Reason:" + e.getMessage(), e);    
		}
		
		return accessRightsUsers;		
	}

	public List getAccessRightsUsers(String interceptionPointCategory, String parameters, String userName, Database db) throws SystemException, Bug
	{
	    List accessRightsUsers = new ArrayList();
		
		try
		{
			OQLQuery oql = null;
			
			if(parameters == null || parameters.length() == 0)
			{
				oql = db.getOQLQuery("SELECT aru FROM org.infoglue.cms.entities.management.impl.simple.AccessRightUserImpl aru WHERE aru.accessRight.interceptionPoint.category = $1 AND (is_undefined(aru.accessRight.parameters) OR aru.accessRight.parameters = $2) AND aru.userName = $3");
				oql.bind(interceptionPointCategory);
				oql.bind(parameters);
				oql.bind(userName);
			}
			else
			{
		    	oql = db.getOQLQuery("SELECT aru FROM org.infoglue.cms.entities.management.impl.simple.AccessRightUserImpl aru WHERE aru.accessRight.interceptionPoint.category = $1 AND aru.accessRight.parameters = $2 AND aru.userName = $3");
				oql.bind(interceptionPointCategory);
				oql.bind(parameters);
				oql.bind(userName);
			}

			QueryResults results = oql.execute();

			while (results.hasMore()) 
			{
				AccessRightUser accessRightUser = (AccessRightUser)results.next();
				accessRightsUsers.add(accessRightUser);
			}

			results.close();
			oql.close();
		}
		catch(Exception e)
		{
			e.printStackTrace();
			throw new SystemException("An error occurred when we tried to fetch a list of Access rights. Reason:" + e.getMessage(), e);    
		}
		
		return accessRightsUsers;		
	}
	
	//TEST
	
	
	public List getAccessRightUserList(String userName, Database db) throws SystemException, Bug
	{
		List accessRightUserList = new ArrayList();
		
		try
		{
			OQLQuery oql = null;
			
	    	oql = db.getOQLQuery("SELECT f FROM org.infoglue.cms.entities.management.impl.simple.AccessRightUserImpl f WHERE f.userName = $1");
			oql.bind(userName);

			QueryResults results = oql.execute();

			while (results.hasMore()) 
			{
				AccessRightUser accessRightUser = (AccessRightUser)results.next();

				//Dummy to get the access right to load correctly - otherwise a but occurrs.
				Integer accessRightId = accessRightUser.getAccessRight().getAccessRightId();

				accessRightUserList.add(accessRightUser);
			}
			
			results.close();
			oql.close();
		}
		catch(Exception e)
		{
		    e.printStackTrace();
			throw new SystemException("An error occurred when we tried to fetch a list of Access rights users. Reason:" + e.getMessage(), e);    
		}
		
		return accessRightUserList;		
	}

	public List getAccessRightRoleList(String roleName, Database db, boolean readOnly) throws SystemException, Bug
	{
		List accessRightRoleList = new ArrayList();
		
		try
		{
			OQLQuery oql = null;
			
	    	oql = db.getOQLQuery("SELECT f FROM org.infoglue.cms.entities.management.impl.simple.AccessRightRoleImpl f WHERE f.roleName = $1");
			oql.bind(roleName);

			QueryResults results;
			if(readOnly)
				results = oql.execute(Database.READONLY);
			else
				results = oql.execute();
				
			while (results.hasMore()) 
			{
				AccessRightRole accessRightRole = (AccessRightRole)results.next();
				//Dummy to get the access right to load correctly - otherwise a but occurrs.
				Integer accessRightId = accessRightRole.getAccessRight().getAccessRightId();

				if(accessRightRole.getAccessRight() == null && !readOnly)
					db.remove(accessRightRole);
				else
					accessRightRoleList.add(accessRightRole);
			}
			
			results.close();
			oql.close();
		}
		catch(Exception e)
		{
		    e.printStackTrace();
			throw new SystemException("An error occurred when we tried to fetch a list of Access rights users. Reason:" + e.getMessage(), e);    
		}
		
		return accessRightRoleList;		
	}

	public List getAccessRightsRoles(String interceptionPointCategory, String parameters, Database db, boolean readOnly) throws SystemException, Bug
	{
	    List accessRightsRoles = new ArrayList();
		
		try
		{
			OQLQuery oql = null;
			
			if(parameters == null || parameters.length() == 0)
			{
				oql = db.getOQLQuery("SELECT aru FROM org.infoglue.cms.entities.management.impl.simple.AccessRightRoleImpl aru WHERE aru.accessRight.interceptionPoint.category = $1 AND (is_undefined(aru.accessRight.parameters) OR aru.accessRight.parameters = $2)");
				oql.bind(interceptionPointCategory);
				oql.bind(parameters);
			}
			else
			{
		    	oql = db.getOQLQuery("SELECT aru FROM org.infoglue.cms.entities.management.impl.simple.AccessRightRoleImpl aru WHERE aru.accessRight.interceptionPoint.category = $1 AND aru.accessRight.parameters = $2");
				oql.bind(interceptionPointCategory);
				oql.bind(parameters);
			}
			
			QueryResults results = null;
			
			if(readOnly)
				results = oql.execute(Database.READONLY);
			else
				results = oql.execute();
				
			while (results.hasMore()) 
			{
				AccessRightRole accessRightRole = (AccessRightRole)results.next();
				accessRightsRoles.add(accessRightRole);
			}
			
			results.close();
			oql.close();
		}
		catch(Exception e)
		{
			throw new SystemException("An error occurred when we tried to fetch a list of Access rights. Reason:" + e.getMessage(), e);    
		}
		
		return accessRightsRoles;		
	}

	public List<AccessRightRole> getAccessRightsRole(String interceptionPointCategory, String roleName, String parameters, Database db, boolean readOnly) throws SystemException, Bug
	{
		List<AccessRightRole> accessRightsRoles = new ArrayList<AccessRightRole>();

		try
		{
			OQLQuery oql = null;

			if(parameters == null || parameters.length() == 0)
			{
				oql = db.getOQLQuery("SELECT aru FROM org.infoglue.cms.entities.management.impl.simple.AccessRightRoleImpl aru WHERE aru.accessRight.interceptionPoint.category = $1 AND aru.roleName = $2 AND (is_undefined(aru.accessRight.parameters) OR aru.accessRight.parameters = $3)");
				oql.bind(interceptionPointCategory);
				oql.bind(roleName);
				oql.bind(parameters);
			}
			else
			{
				oql = db.getOQLQuery("SELECT aru FROM org.infoglue.cms.entities.management.impl.simple.AccessRightRoleImpl aru WHERE aru.accessRight.interceptionPoint.category = $1 AND aru.roleName = $2 AND aru.accessRight.parameters = $3");
				oql.bind(interceptionPointCategory);
				oql.bind(roleName);
				oql.bind(parameters);
			}

			QueryResults results = null;

			if(readOnly)
				results = oql.execute(Database.READONLY);
			else
				results = oql.execute();

			while (results.hasMore())
			{
				AccessRightRole accessRightRole = (AccessRightRole)results.next();
				accessRightsRoles.add(accessRightRole);
			}

			results.close();
			oql.close();
		}
		catch(Exception e)
		{
			throw new SystemException("An error occurred when we tried to fetch a list of Access rights for role <" + roleName + ">. Reason:" + e.getMessage(), e);
		}

		return accessRightsRoles;
	}

	public List getAccessRightsGroups(String interceptionPointCategory, String parameters, Database db, boolean readOnly) throws SystemException, Bug
	{
	    List accessRightsGroups = new ArrayList();
		
		try
		{
			OQLQuery oql = null;
			
			if(parameters == null || parameters.length() == 0)
			{
				oql = db.getOQLQuery("SELECT aru FROM org.infoglue.cms.entities.management.impl.simple.AccessRightGroupImpl aru WHERE aru.accessRight.interceptionPoint.category = $1 AND (is_undefined(aru.accessRight.parameters) OR aru.accessRight.parameters = $2)");
				oql.bind(interceptionPointCategory);
				oql.bind(parameters);
			}
			else
			{
		    	oql = db.getOQLQuery("SELECT aru FROM org.infoglue.cms.entities.management.impl.simple.AccessRightGroupImpl aru WHERE aru.accessRight.interceptionPoint.category = $1 AND aru.accessRight.parameters = $2");
				oql.bind(interceptionPointCategory);
				oql.bind(parameters);
			}
			
			QueryResults results = null;
			
			if(readOnly)
				results = oql.execute(Database.READONLY);
			else
				results = oql.execute();
				
			while (results.hasMore()) 
			{
				AccessRightGroup accessRightGroup = (AccessRightGroup)results.next();
				accessRightsGroups.add(accessRightGroup);
			}
			
			results.close();
			oql.close();
		}
		catch(Exception e)
		{
			throw new SystemException("An error occurred when we tried to fetch a list of Access rights. Reason:" + e.getMessage(), e);    
		}
		
		return accessRightsGroups;		
	}

	
	public List<AccessRightVO> getAccessRightVOListForGroupWithName(String groupName) throws SystemException, Bug	
	{
		List<AccessRightVO> accessRightVOList = null;
		
		Database db = CastorDatabaseService.getDatabase();

		try 
		{
			beginTransaction(db);
			
			accessRightVOList = getAccessRightVOListForGroupWithName(groupName, db);

			logger.info("accessRightVOList:" + accessRightVOList.size());
			
			commitTransaction(db);
		} 
		catch (Exception e) 
		{
			logger.warn("An error occurred so we should not complete the transaction:" + e);
			rollbackTransaction(db);
			throw new SystemException(e.getMessage());
		}
		
		return accessRightVOList;	
	}
	
	public List<AccessRightVO> getAccessRightVOListForGroupWithName(String groupName, Database db) throws SystemException, Bug
	{
		List<AccessRightVO> accessRightGroupList = new ArrayList<AccessRightVO>();
		
		try
		{
			OQLQuery oql = null;
			
	    	oql = db.getOQLQuery("SELECT f FROM org.infoglue.cms.entities.management.impl.simple.AccessRightGroupImpl f WHERE f.groupName = $1");
			oql.bind(groupName);

			QueryResults results = oql.execute(Database.READONLY);

			while (results.hasMore()) 
			{
				AccessRightGroup accessRightGroup = (AccessRightGroup)results.next();
				
				accessRightGroupList.add(accessRightGroup.getAccessRight().getValueObject());
			}
			
			results.close();
			oql.close();
		}
		catch(Exception e)
		{
		    e.printStackTrace();
			throw new SystemException("An error occurred when we tried to fetch a list of Access rights users. Reason:" + e.getMessage(), e);    
		}
		
		return accessRightGroupList;		
	}
	

	public Map<String,List<AccessRightVO>> getAccessRightsForGroups() throws SystemException, Bug	
	{
		Map<String,List<AccessRightVO>> accessRights = null;
		
		Database db = CastorDatabaseService.getDatabase();

		try 
		{
			beginTransaction(db);
			
			accessRights = getAccessRightsForGroups(db);

			logger.info("accessRights:" + accessRights.size());
			
			commitTransaction(db);
		} 
		catch (Exception e) 
		{
			logger.warn("An error occurred so we should not complete the transaction:" + e);
			rollbackTransaction(db);
			throw new SystemException(e.getMessage());
		}
		
		return accessRights;	
	}
	
	public Map<String,List<AccessRightVO>> getAccessRightsForGroups(Database db) throws SystemException, Bug
	{
		Map<String,List<AccessRightVO>> accessRights = new HashMap<String,List<AccessRightVO>>();
		
		try
		{
			OQLQuery oql = null;
			
	    	oql = db.getOQLQuery("SELECT f FROM org.infoglue.cms.entities.management.impl.simple.AccessRightGroupImpl f");

			QueryResults results = oql.execute(Database.READONLY);

			while (results.hasMore()) 
			{
				AccessRightGroup accessRightGroup = (AccessRightGroup)results.next();
				List<AccessRightVO> existingAccessRights = accessRights.get(accessRightGroup.getGroupName());
				if(existingAccessRights == null)
				{
					existingAccessRights = new ArrayList<AccessRightVO>();
					accessRights.put(accessRightGroup.getGroupName(), existingAccessRights);
				}
				
				existingAccessRights.add(accessRightGroup.getAccessRight().getValueObject());
			}
			
			results.close();
			oql.close();
		}
		catch(Exception e)
		{
		    e.printStackTrace();
			throw new SystemException("An error occurred when we tried to fetch a list of Access rights users. Reason:" + e.getMessage(), e);    
		}
		
		return accessRights;		
	}
	
	public String getReadableDescriptionForAccessRight(AccessRightVO accessRight)
	{
		StringBuffer sb = new StringBuffer();
		try
		{
			//System.out.println(accessRight.getInterceptionPointName());
			if(accessRight.getInterceptionPointName().startsWith("SiteNodeVersion"))
			{
				SiteNodeVersionVO snvVO = SiteNodeVersionController.getController().getSiteNodeVersionVOWithId(new Integer(accessRight.getParameters()));
				String path = SiteNodeController.getController().getSiteNodePath(snvVO.getSiteNodeId(), true, false);
				sb.append("Page access right on [" + path + "]");
			}
			else if(accessRight.getInterceptionPointName().startsWith("Content"))
			{
				ContentVO contentVO = ContentController.getContentController().getContentVOWithId(new Integer(accessRight.getParameters()));
				String path = ContentController.getContentController().getContentPath(contentVO.getId(), true, false);				
				sb.append("Content access right on [" + path + "]");
			}
			else if(accessRight.getInterceptionPointName().startsWith("ContentVersion"))
			{
				ContentVersionVO contentVersionVO = ContentVersionController.getContentVersionController().getContentVersionVOWithId(new Integer(accessRight.getParameters()));
				String path = ContentController.getContentController().getContentPath(contentVersionVO.getContentId(), true, false);				
				sb.append("Content access right on [" + path + "]");
			}
			else if(accessRight.getInterceptionPointName().startsWith("Repository"))
			{
				RepositoryVO repositoryVO = RepositoryController.getController().getRepositoryVOWithId(new Integer(accessRight.getParameters()));
				String path = repositoryVO.getName();			
				sb.append("Repository access right on [" + path + "]");
			}
			else
			{
				sb.append("Other access right on [" + accessRight.getInterceptionPointName() + "/" + accessRight.getParameters() + "]");
			}
		}
		catch (Exception e) 
		{
			sb.append("Not a valid access right. Could be a deleted object referenced. Error: " + e.getMessage());
			logger.warn("Error creating readable access right message", e);
		}
		
		return sb.toString();
	}
	
	
	public List getAccessRightGroupList(String groupName, Database db) throws SystemException, Bug
	{
		List accessRightGroupList = new ArrayList();
		
		try
		{
			OQLQuery oql = null;
			
	    	oql = db.getOQLQuery("SELECT f FROM org.infoglue.cms.entities.management.impl.simple.AccessRightGroupImpl f WHERE f.groupName = $1");
			oql.bind(groupName);

			QueryResults results = oql.execute();

			while (results.hasMore()) 
			{
				AccessRightGroup accessRightGroup = (AccessRightGroup)results.next();

				//Dummy to get the access right to load correctly - otherwise a but occurrs.
				Integer accessRightId = accessRightGroup.getAccessRight().getAccessRightId();

				accessRightGroupList.add(accessRightGroup);
			}
			
			results.close();
			oql.close();
		}
		catch(Exception e)
		{
		    e.printStackTrace();
			throw new SystemException("An error occurred when we tried to fetch a list of Access rights users. Reason:" + e.getMessage(), e);    
		}
		
		return accessRightGroupList;		
	}

	/**
	 * Returns all system user names used in any access rights related queries.
	 */
	
	public List<String> getUniqueSystemUserNameListInAccessRightUser(Database db) throws Exception
	{
		List<String> users = new ArrayList<String>();
		
		OQLQuery oql = db.getOQLQuery("CALL SQL select max(accessRightUserId), userName, max(accessRightId) from cmAccessRightUser aru group by userName AS org.infoglue.cms.entities.management.impl.simple.AccessRightUserImpl");
 
    	QueryResults results = oql.execute(Database.READONLY);
		while(results.hasMore()) 
        {
			AccessRightUserImpl aru = (AccessRightUserImpl)results.next();
			users.add(aru.getUserName());
		}

		results.close();
		oql.close();
        
        return users;
	}

	/**
	 * This method get all unique names used in cmAccessRightRole
	 * @param db
	 * @return
	 * @throws Exception
	 */
	public List<String> getUniqueRoleNameListInAccessRightRole(Database db) throws Exception
	{
		List<String> roles = new ArrayList<String>();
		
		OQLQuery oql = db.getOQLQuery("CALL SQL select max(accessRightRoleId), roleName, max(accessRightId) from cmAccessRightRole arr group by roleName AS org.infoglue.cms.entities.management.impl.simple.AccessRightRoleImpl");
		 
    	QueryResults results = oql.execute(Database.READONLY);
		while(results.hasMore()) 
        {
			AccessRightRoleImpl arr = (AccessRightRoleImpl)results.next();
			roles.add(arr.getRoleName());
		}

		results.close();
		oql.close();

		return roles;
	}	

	/**
	 * This method get all unique names used in cmAccessRightGroup
	 * @param db
	 * @return
	 * @throws Exception
	 */
	public List<String> getUniqueGroupNameListInAccessRightGroup(Database db) throws Exception
	{
		List<String> groups = new ArrayList<String>();

		OQLQuery oql = db.getOQLQuery("CALL SQL select max(accessRightGroupId), groupName, max(accessRightId) from cmAccessRightGroup arr group by groupName AS org.infoglue.cms.entities.management.impl.simple.AccessRightGroupImpl");
		 
    	QueryResults results = oql.execute(Database.READONLY);
		while(results.hasMore()) 
        {
			AccessRightGroupImpl arr = (AccessRightGroupImpl)results.next();
			groups.add(arr.getGroupName());
		}

		results.close();
		oql.close();
		
		return groups;
	}	
	
	public String getAccessRightsStatusText() throws SystemException, Bug
	{
		String accessRightsStatusText = "";
		
		Database db = CastorDatabaseService.getDatabase();

		try 
		{
			beginTransaction(db);
			
			accessRightsStatusText = getAccessRightsStatusText(db);
			
			commitTransaction(db);
		} 
		catch (Exception e) 
		{
			logger.error("An error occurred when we tried to fetch a list of Access rights. Reason:" + e.getMessage(), e);
			rollbackTransaction(db);
			throw new SystemException("An error occurred when we tried to fetch a list of Access rights. Reason:" + e.getMessage(), e);    
		}
		
		return accessRightsStatusText;		
	}

	public String getAccessRightsStatusText(Database db) throws SystemException, Bug, Exception
	{
		String accessRightsStatusText = "";
		
		String sqlSNV = "CALL SQL select count(*) from cmAccessRight ar where ar.interceptionPointId in (select interceptionPointId from cmInterceptionPoint where name like 'SiteNodeVersion.%') AND ar.parameters NOT IN (select siteNodeVersionId from cmSiteNodeVersion where siteNodeVersionId = ar.parameters) AS org.infoglue.cms.entities.management.TableCount";
		if(CmsPropertyHandler.getUseShortTableNames().equalsIgnoreCase("true"))
			sqlSNV = "CALL SQL select count(*) from cmAccessRight ar where ar.interceptionPointId in (select interceptionPointId from cmInterceptionPoint where name like 'SiteNodeVersion.%') AND ar.parameters NOT IN (select siNoVerId from cmSiNoVer where siNoVerId = ar.parameters) AS org.infoglue.cms.entities.management.TableCount";
			
		OQLQuery oql = db.getOQLQuery(sqlSNV);
		
		QueryResults results = oql.execute(Database.READONLY);
		while (results.hasMore()) 
		{
			TableCount tableCount = (TableCount)results.next();
			accessRightsStatusText += "SiteNode versions wrongly connected and removable: " + tableCount.getCount() + "\n";  
		}
		/*
		String sql = "CALL SQL select count(*) from cmAccessRight ar where ar.interceptionPointId in (select interceptionPointId from cmInterceptionPoint where name like 'SiteNodeVersion.%') AND ar.parameters NOT IN (select siteNodeVersionId from cmSiteNodeVersion where siteNodeVersionId = ar.parameters) AS org.infoglue.cms.entities.management.TableCount";
		if(CmsPropertyHandler.getUseShortTableNames().equalsIgnoreCase("true"))
			sql = "CALL SQL select count(*) from cmAccessRight ar where ar.interceptionPointId in (select interceptionPointId from cmInterceptionPoint where name like 'SiteNodeVersion.%') AND ar.parameters NOT IN (select siNoVerId from cmSiNoVer where siNoVerId = ar.parameters) AS org.infoglue.cms.entities.management.TableCount";
			
		OQLQuery oql = db.getOQLQuery(sql);
		
		QueryResults results = oql.execute(Database.READONLY);
		while (results.hasMore()) 
		{
			TableCount tableCount = (TableCount)results.next();
			accessRightsStatusText += "SiteNode versions wrongly connected and removable: " + tableCount.getCount() + "\n";  
		}
		*/

		results.close();
		oql.close();
		
		return accessRightsStatusText;		
	}

	public String fixAccessRightInconsistencies() throws SystemException, Bug
	{
		String accessRightsStatusText = "";
		
		Database db = CastorDatabaseService.getDatabase();

		try 
		{
			beginTransaction(db);
			
			accessRightsStatusText = fixAccessRightInconsistencies(db);
			
			commitTransaction(db);
		} 
		catch (Exception e) 
		{
			logger.error("An error occurred when we tried to fetch a list of Access rights. Reason:" + e.getMessage(), e);
			rollbackTransaction(db);
			throw new SystemException("An error occurred when we tried to fetch a list of Access rights. Reason:" + e.getMessage(), e);    
		}
		
		return accessRightsStatusText;		
	}

	public String fixAccessRightInconsistencies(Database db) throws SystemException, Bug, Exception
	{
		String accessRightsStatusText = "";
		
		String sqlSNV = "CALL SQL select ar.accessRightId, ar.parameters, ar.interceptionPointId from cmAccessRight ar where ar.interceptionPointId in (select interceptionPointId from cmInterceptionPoint where name like 'SiteNodeVersion.%') AND ar.parameters NOT IN (select siteNodeVersionId from cmSiteNodeVersion where siteNodeVersionId = ar.parameters) AS org.infoglue.cms.entities.management.impl.simple.SmallAccessRightImpl";
		if(CmsPropertyHandler.getUseShortTableNames().equalsIgnoreCase("true"))
			sqlSNV = "CALL SQL select ar.accessRightId, ar.parameters, ar.interceptionPointId from cmAccessRight ar where ar.interceptionPointId in (select interceptionPointId from cmInterceptionPoint where name like 'SiteNodeVersion.%') AND ar.parameters NOT IN (select siNoVerId from cmSiNoVer where siNoVerId = ar.parameters) AS org.infoglue.cms.entities.management.impl.simple.SmallAccessRightImpl";
			
		OQLQuery oql = db.getOQLQuery(sqlSNV);
		
		QueryResults results = oql.execute(Database.READONLY);
		int itemsRemoved = 0;
		while (results.hasMore() && itemsRemoved < 1000) 
		{
			AccessRight accessRight = (AccessRight)results.next();
			//logger.info("Checking if siteNodeVersion really is missing");
			try
			{
				SiteNodeVersionVO snvVO = SiteNodeVersionController.getController().getSiteNodeVersionVOWithId(new Integer(accessRight.getParameters()), db);
				logger.info("OBS::::::::::: snvVO was not missing");
			}
			catch (Exception e) 
			{
				//logger.info("snvVO was missing - ok to remove:" + accessRight.getId());
				delete(accessRight.getValueObject().getInterceptionPointId(), accessRight.getParameters(), true, db);
				itemsRemoved++;
			}
			logger.info("itemsRemoved:" + itemsRemoved);
		}
		accessRightsStatusText += "" + itemsRemoved + " AccessRights were removed as the siteNodeVersion it pointed to was removed\n";  

		/*
		String sql = "CALL SQL select count(*) from cmAccessRight ar where ar.interceptionPointId in (select interceptionPointId from cmInterceptionPoint where name like 'SiteNodeVersion.%') AND ar.parameters NOT IN (select siteNodeVersionId from cmSiteNodeVersion where siteNodeVersionId = ar.parameters) AS org.infoglue.cms.entities.management.TableCount";
		if(CmsPropertyHandler.getUseShortTableNames().equalsIgnoreCase("true"))
			sql = "CALL SQL select count(*) from cmAccessRight ar where ar.interceptionPointId in (select interceptionPointId from cmInterceptionPoint where name like 'SiteNodeVersion.%') AND ar.parameters NOT IN (select siNoVerId from cmSiNoVer where siNoVerId = ar.parameters) AS org.infoglue.cms.entities.management.TableCount";
			
		OQLQuery oql = db.getOQLQuery(sql);
		
		QueryResults results = oql.execute(Database.READONLY);
		while (results.hasMore()) 
		{
			TableCount tableCount = (TableCount)results.next();
			accessRightsStatusText += "SiteNode versions wrongly connected and removable: " + tableCount.getCount() + "\n";  
		}
		*/

		results.close();
		oql.close();
		
		return accessRightsStatusText;		
	}
	
	public String fixEmptyAccessRightInconsistencies() throws SystemException, Bug
	{
		String accessRightsStatusText = "";
		
		Database db = CastorDatabaseService.getDatabase();

		try 
		{
			beginTransaction(db);
			
			accessRightsStatusText = fixEmptyAccessRightInconsistencies(db);
			
			commitTransaction(db);
		} 
		catch (Exception e) 
		{
			logger.error("An error occurred when we tried to fetch a list of Access rights. Reason:" + e.getMessage(), e);
			rollbackTransaction(db);
			throw new SystemException("An error occurred when we tried to fetch a list of Access rights. Reason:" + e.getMessage(), e);    
		}
		
		return accessRightsStatusText;		
	}

	public String fixEmptyAccessRightInconsistencies(Database db) throws SystemException, Bug, Exception
	{
		String accessRightsStatusText = "";
		
		List<AccessRightVO> duplicateAccessRightVOList = new ArrayList<AccessRightVO>();
		List<AccessRightVO> duplicateAutoDeletableAccessRightVOList = new ArrayList<AccessRightVO>();
		List<AccessRightVO> duplicateAutoMergableAccessRightVOList = new ArrayList<AccessRightVO>();
		
		getAllDuplicates(true, true, duplicateAccessRightVOList, duplicateAutoDeletableAccessRightVOList, duplicateAutoMergableAccessRightVOList, db);
		for(AccessRightVO arVO : duplicateAutoDeletableAccessRightVOList)
		{
			delete(arVO.getInterceptionPointId(), arVO.getParameters(), true, db);
		}
		
		return accessRightsStatusText;		
	}

	public String fixAutoMergableAccessRightInconsistencies() throws SystemException, Bug
	{
		String accessRightsStatusText = "";
		
		Database db = CastorDatabaseService.getDatabase();

		try 
		{
			beginTransaction(db);
			
			accessRightsStatusText = fixAutoMergableAccessRightInconsistencies(db);
			
			commitTransaction(db);
		} 
		catch (Exception e) 
		{
			logger.error("An error occurred when we tried to fetch a list of Access rights. Reason:" + e.getMessage(), e);
			rollbackTransaction(db);
			throw new SystemException("An error occurred when we tried to fetch a list of Access rights. Reason:" + e.getMessage(), e);    
		}
		
		return accessRightsStatusText;		
	}

	public String fixAutoMergableAccessRightInconsistencies(Database db) throws SystemException, Bug, Exception
	{
		String accessRightsStatusText = "";
		
		List<AccessRightVO> duplicateAccessRightVOList = new ArrayList<AccessRightVO>();
		List<AccessRightVO> duplicateAutoDeletableAccessRightVOList = new ArrayList<AccessRightVO>();
		List<AccessRightVO> duplicateAutoMergableAccessRightVOList = new ArrayList<AccessRightVO>();
		
		getAllDuplicates(true, true, duplicateAccessRightVOList, duplicateAutoDeletableAccessRightVOList, duplicateAutoMergableAccessRightVOList, db);
		Iterator duplicateAutoMergableAccessRightVOListIterator = duplicateAutoMergableAccessRightVOList.iterator();
		while(duplicateAutoMergableAccessRightVOListIterator.hasNext())
		{
			AccessRightVO arVO = (AccessRightVO)duplicateAutoMergableAccessRightVOListIterator.next();
			
			List<AccessRight> entityAccessRights = getAccessRightListForEntity(arVO.getInterceptionPointId(), arVO.getParameters(), db);
			List<AccessRightUser> users = new ArrayList<AccessRightUser>();
			
			Iterator entityAccessRightsIterator = entityAccessRights.iterator();
			while(entityAccessRightsIterator.hasNext())
			{
				AccessRight ar = (AccessRight)entityAccessRightsIterator.next();
				if(ar.getUsers().size() > 0 && ar.getRoles().size() == 0 && ar.getGroups().size() == 0)
				{
					users.addAll(ar.getUsers());
					db.remove(ar);
					entityAccessRightsIterator.remove();
					duplicateAutoMergableAccessRightVOListIterator.remove();
					logger.info("Deleted the item with only users...:" + ar.getId());
				}
			}

			entityAccessRightsIterator = entityAccessRights.iterator();
			while(entityAccessRightsIterator.hasNext())
			{
				AccessRight ar = (AccessRight)entityAccessRightsIterator.next();
				if(users.size() > 0)
				{
					logger.info("Adding users " + users.size() + " to " + ar.getId());
					ar.getUsers().addAll(users);
					for(AccessRightUser user : users)
					{
						user.setAccessRight(ar);
					}
				}
			}
		}

		return accessRightsStatusText;		
	}

	public String mergeAccessRight(Integer interceptionPointId, String parameters, String[] roleNames, String[] groupNames, String[] userNames) throws SystemException, Bug
	{
		String accessRightsStatusText = "";
		
		Database db = CastorDatabaseService.getDatabase();

		try 
		{
			beginTransaction(db);
			
			accessRightsStatusText = mergeAccessRight(interceptionPointId, parameters, roleNames, groupNames, userNames, db);
			
			commitTransaction(db);
		} 
		catch (Exception e) 
		{
			logger.error("An error occurred when we tried to fetch a list of Access rights. Reason:" + e.getMessage(), e);
			rollbackTransaction(db);
			throw new SystemException("An error occurred when we tried to fetch a list of Access rights. Reason:" + e.getMessage(), e);    
		}
		
		return accessRightsStatusText;		
	}

	public String mergeAccessRight(Integer interceptionPointId, String parameters, String[] roleNames, String[] groupNames, String[] userNames, Database db) throws SystemException, Bug, Exception
	{
		String accessRightsStatusText = "";
		
		List<AccessRight> entityAccessRights = getAccessRightListForEntity(interceptionPointId, parameters, db);
		
		AccessRight keeperAR = null;
		Iterator entityAccessRightsIterator = entityAccessRights.iterator();
		while(entityAccessRightsIterator.hasNext())
		{
			AccessRight ar = (AccessRight)entityAccessRightsIterator.next();
			if(entityAccessRightsIterator.hasNext())
			{
				//db.remove(ar);
				delete(ar, db);
				entityAccessRightsIterator.remove();
				logger.info("Deleted the duplicates:" + ar.getId());
			}
			else
				keeperAR = ar;
		}
		
		if(keeperAR != null)
		{
			AccessRightVO accessRightVO = new AccessRightVO();
			accessRightVO.setParameters(parameters);
	
		    //InterceptionPoint interceptionPoint = InterceptionPointController.getController().getInterceptionPointWithId(interceptionPointId, db);
			//AccessRight accessRight = create(accessRightVO, interceptionPoint, db);
			
			for(String roleName : roleNames)
			{
				boolean add = true;
				for(AccessRightRole arr : (Collection<AccessRightRole>)keeperAR.getRoles())
				{
					if(arr.getRoleName().equals(roleName)) add = false;
				}
				
				if(add)
				{
					logger.info("roleName:" + roleName);
				    AccessRightRoleVO accessRightRoleVO = new AccessRightRoleVO();
				    accessRightRoleVO.setRoleName(roleName);
				    AccessRightRole accessRightRole = createAccessRightRole(db, accessRightRoleVO, keeperAR);
				    keeperAR.getRoles().add(accessRightRole);
				}
			}
				
			for(String groupName : groupNames)
			{
				boolean add = true;
				for(AccessRightGroup arg : (Collection<AccessRightGroup>)keeperAR.getGroups())
				{
					if(arg.getGroupName().equals(groupName)) add = false;
				}
				
				if(add)
				{
					logger.info("groupName:" + groupName);
				    AccessRightGroupVO accessRightGroupVO = new AccessRightGroupVO();
				    accessRightGroupVO.setGroupName(groupName);
				    AccessRightGroup accessRightGroup = createAccessRightGroup(db, accessRightGroupVO, keeperAR);
				    keeperAR.getGroups().add(accessRightGroup);
				}
			}
			
			for(String userName : userNames)
			{
				boolean add = true;
				for(AccessRightUser aru : (Collection<AccessRightUser>)keeperAR.getUsers())
				{
					if(aru.getUserName().equals(userName)) add = false;
				}
				
				if(add)
				{
					logger.info("userName:" + userName);
				    AccessRightUserVO accessRightUserVO = new AccessRightUserVO();
				    accessRightUserVO.setUserName(userName);
				    AccessRightUser accessRightUser = createAccessRightUser(db, accessRightUserVO, keeperAR);
				    keeperAR.getUsers().add(accessRightUser);
				}
			}
		}
		
		return accessRightsStatusText;		
	}

	public void getAllDuplicates(boolean populateRelated, boolean includeAllDuplicates, List<AccessRightVO> duplicates, List<AccessRightVO> duplicatesEasyToDelete, List<AccessRightVO> duplicateAutoMergableAccessRightVOList) throws SystemException, Bug
	{
		Database db = CastorDatabaseService.getDatabase();

		try 
		{
			beginTransaction(db);
			
			getAllDuplicates(populateRelated, includeAllDuplicates, duplicates, duplicatesEasyToDelete, duplicateAutoMergableAccessRightVOList, db);
			
			commitTransaction(db);
		} 
		catch (Exception e) 
		{
			logger.error("An error occurred when we tried to fetch a list of Access rights. Reason:" + e.getMessage(), e);
			rollbackTransaction(db);
			throw new SystemException("An error occurred when we tried to fetch a list of Access rights. Reason:" + e.getMessage(), e);    
		}
	}

	public void getAllDuplicates(boolean populateRelated, boolean includeAllDuplicates, List<AccessRightVO> duplicates, List<AccessRightVO> duplicatesEasyToDelete, List<AccessRightVO> duplicatesEasyToMerge, Database db) throws SystemException, Bug, Exception
	{
		String SQL = "CALL SQL select max(ar.accessRightId) as accessRightId, ar.parameters, ar.interceptionPointId from cmAccessRight ar where ar.interceptionPointId in (select interceptionPointId from cmInterceptionPoint where name like '%.Read' AND name not like 'SiteNodeVersion.Read') GROUP BY ar.parameters, ar.interceptionPointId HAVING count(*) > 1 ORDER BY ar.interceptionPointId, ar.parameters AS org.infoglue.cms.entities.management.impl.simple.SmallAccessRightImpl";
		if(includeAllDuplicates)
			SQL = "CALL SQL select ar.accessRightId, ar.parameters, ar.interceptionPointId from cmAccessRight ar INNER JOIN (select ar2.parameters, ar2.interceptionPointId from cmAccessRight ar2 GROUP BY ar2.parameters, ar2.interceptionPointId HAVING count(*) > 1 ORDER BY ar2.interceptionPointId, ar2.parameters, ar2.accessRightId) derived_ar ON derived_ar.parameters = ar.parameters AND derived_ar.interceptionPointId = ar.interceptionPointId AND derived_ar.interceptionPointId in (select interceptionPointId from cmInterceptionPoint where name like '%.Read' AND name not like 'SiteNodeVersion.Read') order by parameters AS org.infoglue.cms.entities.management.impl.simple.SmallAccessRightImpl";
			
		OQLQuery oql = db.getOQLQuery(SQL);
		
		int deletable=0;
		QueryResults results = oql.execute(Database.READONLY);
		while (results.hasMore()) 
		{
			AccessRight accessRight = (AccessRight)results.next();
			AccessRightVO accessRightVO = accessRight.getValueObject();
			
			if(populateRelated)
			{
				AccessRight fullAccessRight = getAccessRightWithId(accessRightVO.getId(), db);
				
				populateDescription(db, accessRightVO, fullAccessRight);
				
				List<AccessRightRoleVO> roles = toVOList(fullAccessRight.getRoles());
				List<AccessRightGroupVO> groups = toVOList(fullAccessRight.getGroups());
				List<AccessRightUserVO> users = toVOList(fullAccessRight.getUsers());
				accessRightVO.getRoles().addAll(roles);
				accessRightVO.getGroups().addAll(groups);
				accessRightVO.getUsers().addAll(users);
				if(roles.size() == 0 && groups.size() == 0 && users.size() == 0)
				{
					duplicates.add(accessRightVO);					
					duplicatesEasyToDelete.add(accessRightVO);
				}
				else if(roles.size() == 0 && groups.size() == 0 && users.size() > 0)
				{
					duplicates.add(accessRightVO);					
					duplicatesEasyToMerge.add(accessRightVO);
				}
				else
				{
					duplicates.add(accessRightVO);					
				}
			}
			else
				duplicates.add(accessRightVO);
		}
		
		results.close();
		oql.close();
	}

	public List<AccessRightVO> getUndefinedAccessRights(Database db) throws SystemException, Bug, Exception
	{
		List<AccessRightVO> undefinedAccessRights = new ArrayList<AccessRightVO>();
		  
		StringBuilder sb = new StringBuilder();
		sb.append("CALL SQL select ar.accessRightId, ar.parameters, ar.interceptionPointId from cmAccessRight ar where ");
		sb.append("ar.interceptionPointId in (select interceptionPointId from cmInterceptionPoint where name like 'ComponentEditor.%' OR name LIKE 'Component.%' OR name = 'ComponentPropertyEditor.EditProperty' OR name like '%.Read%' AND name NOT LIKE 'SiteNodeVersion.Read') AND ");
		sb.append("ar.accessRightId NOT IN (select accessRightId from cmAccessRightUser where ar.accessRightId = accessRightId) AND ");
		sb.append("ar.accessRightId NOT IN (select accessRightId from cmAccessRightRole where ar.accessRightId = accessRightId) AND ");
		sb.append("ar.accessRightId NOT IN (select accessRightId from cmAccessRightGroup where ar.accessRightId = accessRightId)  AS org.infoglue.cms.entities.management.impl.simple.SmallAccessRightImpl");
					
		//System.out.println(sb.toString());
		OQLQuery oql = db.getOQLQuery(sb.toString());
		
		QueryResults results = oql.execute(Database.READONLY);
		while (results.hasMore()) 
		{
			AccessRight accessRight = (AccessRight)results.next();
			AccessRightVO accessRightVO = accessRight.getValueObject();
			undefinedAccessRights.add(accessRightVO);
		}
		
		results.close();
		oql.close();
		
		return undefinedAccessRights;
	}
	
	public void populateDescription(Database db, AccessRightVO accessRightVO, AccessRight fullAccessRight) 
	{
		try
		{
			String entityName = accessRightVO.getParameters();
			if(fullAccessRight.getInterceptionPointName().equalsIgnoreCase("Repository.Read"))
				entityName = RepositoryController.getController().getRepositoryVOWithId(new Integer(accessRightVO.getParameters()), db).getName();
			if(fullAccessRight.getInterceptionPointName().startsWith("Content."))
				entityName = ContentController.getContentController().getContentPath(new Integer(accessRightVO.getParameters()));
			if(fullAccessRight.getInterceptionPointName().equalsIgnoreCase("SiteNodeVersion."))
			{
				SiteNodeVersionVO snvVO = SiteNodeVersionController.getController().getSiteNodeVersionVOWithId(new Integer(accessRightVO.getParameters()), db);
				entityName = SiteNodeController.getController().getSiteNodePath(snvVO.getId(), db);
			}
			
			accessRightVO.setName(fullAccessRight.getInterceptionPointName() + " on " + entityName);
		}
		catch (Exception e) 
		{
			logger.warn("Could not populate access right desc: " + e.getMessage(), e);
			accessRightVO.setName("Unknown entity: Could be missing" + e.getMessage());
		}
	}

	public void fixAccessRightDuplicate(Integer[] accessRightIds) throws SystemException, Bug
	{
		List accessRightList = new ArrayList();
		
		Database db = CastorDatabaseService.getDatabase();

		try 
		{
			beginTransaction(db);

			//sssss

			commitTransaction(db);
		} 
		catch (Exception e) 
		{
			logger.error("An error occurred when we tried to fetch a list of Access rights. Reason:" + e.getMessage(), e);
			rollbackTransaction(db);
			throw new SystemException("An error occurred when we tried to fetch a list of Access rights. Reason:" + e.getMessage(), e);    
		}
	}

	/**
	 * This is a method that gives the user back an newly initialized ValueObject for this entity that the controller
	 * is handling.
	 */

	public BaseEntityVO getNewVO()
	{
		return new AccessRightVO();
	}

}