DictionaryAuthorization.java

package edu.asu.spring.quadriga.aspects;

import java.util.Arrays;
import java.util.List;

import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Service;

import edu.asu.spring.quadriga.domain.IQuadrigaRole;
import edu.asu.spring.quadriga.domain.dictionary.IDictionary;
import edu.asu.spring.quadriga.domain.dictionary.IDictionaryCollaborator;
import edu.asu.spring.quadriga.exceptions.IllegalObjectException;
import edu.asu.spring.quadriga.exceptions.QuadrigaAccessException;
import edu.asu.spring.quadriga.exceptions.QuadrigaStorageException;
import edu.asu.spring.quadriga.service.dictionary.IDictionaryManager;

/**
 * Service level Implementation of {@link IAuthorization} for
 * {@link IDictionary} This class specifically works on authorization check of
 * user for {@link IDictionary} access.
 * 
 * @author Kiran Kumar
 * 
 */
@Service("dictionaryAuthorization")
public class DictionaryAuthorization implements IAuthorization {

    @Autowired
    private IDictionaryManager dictonaryManager;
    private final Logger logger = LoggerFactory.getLogger(DictionaryAuthorization.class);

    @Override
    public boolean chkAuthorization(String userName, Object accessObject, String[] userRoles)
            throws QuadrigaStorageException, QuadrigaAccessException {

        IDictionary dictionary;
        // fetch the details of the concept collection

        if (accessObject instanceof String) {
            String dictionaryId = (String) accessObject;
            dictionary = dictonaryManager.getDictionaryDetails(dictionaryId);
        } else {
            try {
                dictionary = (IDictionary) accessObject;
            } catch (ClassCastException cce) {
                throw new IllegalObjectException(cce);
            }
        }
        // fetch the details of the concept collection
        if (dictionary == null) {
            throw new QuadrigaAccessException();
        }
        // check if the user is a dictionary owner
        String dictionaryOwner = dictionary.getOwner().getUserName();
        if (userName.equals(dictionaryOwner)) {
            return true;
        }

        if (userRoles.length == 0)
            return false;

        // check the collaborator roles if he is not owner
        List<String> roles = Arrays.asList(userRoles);
        // fetch the collaborators of the concept collection
        List<IDictionaryCollaborator> dictCollaboratorList = dictonaryManager
                .showCollaboratingUsers(dictionary.getDictionaryId());

        if (dictCollaboratorList == null || dictCollaboratorList.isEmpty())
            return false;

        for (IDictionaryCollaborator dictCollaborator : dictCollaboratorList) {
            // check if he is the collaborator to the concept
            // collection
            String collaboratorName = dictCollaborator.getCollaborator().getUserObj().getUserName();
            if (userName != null && userName.equals(collaboratorName)) {
                List<IQuadrigaRole> collaboratorRoles = dictCollaborator.getCollaborator().getCollaboratorRoles();
                if (collaboratorRoles != null) {
                    for (IQuadrigaRole collabRole : collaboratorRoles) {
                        String collaboratorRoleId = collabRole.getId();
                        if (roles != null) {
                            if (roles.contains(collaboratorRoleId)) {
                                return true;
                            }
                        }
                    }
                }
            }
        }

        return false;
    }

    @Override
    public boolean chkAuthorizationByRole(String userName, String[] userRoles)
            throws QuadrigaStorageException, QuadrigaAccessException {
        return false;

    }

    @Override
    public boolean chkAuthorization(String userName, List<String> accessObjectId, String[] userRoles)
            throws QuadrigaStorageException, QuadrigaAccessException {
        // TODO Auto-generated method stub
        return false;
    }

}