HibernateUserDao.java

////////////////////////////////////////////////////////////////////////
//
//     Copyright (c) 2009-2013 Denim Group, Ltd.
//
//     The contents of this file are subject to the Mozilla Public License
//     Version 2.0 (the "License"); you may not use this file except in
//     compliance with the License. You may obtain a copy of the License at
//     http://www.mozilla.org/MPL/
//
//     Software distributed under the License is distributed on an "AS IS"
//     basis, WITHOUT WARRANTY OF ANY KIND, either express or implied. See the
//     License for the specific language governing rights and limitations
//     under the License.
//
//     The Original Code is ThreadFix.
//
//     The Initial Developer of the Original Code is Denim Group, Ltd.
//     Portions created by Denim Group, Ltd. are Copyright (C)
//     Denim Group, Ltd. All Rights Reserved.
//
//     Contributor(s): Denim Group, Ltd.
//
////////////////////////////////////////////////////////////////////////
package com.denimgroup.threadfix.data.dao.hibernate;

import java.util.List;

import org.hibernate.Criteria;
import org.hibernate.SessionFactory;
import org.hibernate.criterion.Order;
import org.hibernate.criterion.Projections;
import org.hibernate.criterion.Restrictions;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Repository;

import com.denimgroup.threadfix.data.dao.UserDao;
import com.denimgroup.threadfix.data.entities.User;

/**
 * Hibernate User DAO implementation. Most basic methods are implemented in the
 * AbstractGenericDao
 * 
 * @author dshannon
 * @see AbstractGenericDao
 */
@Repository
public class HibernateUserDao implements UserDao {

	private SessionFactory sessionFactory;

	@Autowired
	public HibernateUserDao(SessionFactory sessionFactory) {
		this.sessionFactory = sessionFactory;
	}

	@Override
	@SuppressWarnings("unchecked")
	public List<User> retrieveAllActive() {
		return getActiveUserCriteria().addOrder(Order.asc("name")).list();
	}

	@Override
	public User retrieveById(int id) {
		return (User) getActiveUserCriteria().add(Restrictions.eq("id", id)).uniqueResult();
	}

	@Override
	public User retrieveByName(String name) {
		return (User) getActiveUserCriteria()
				.add(Restrictions.eq("name", name))
				.uniqueResult();
	}
	
	@Override
	public User retrieveLdapUser(String name) {
		return (User) getActiveUserCriteria()
				.add(Restrictions.eq("name", name))
				.add(Restrictions.eq("isLdapUser", true))
				.uniqueResult();
	}

	@Override
	public void saveOrUpdate(User user) {
		if (user.getId() != null) {
			sessionFactory.getCurrentSession().merge(user);
		} else {
			sessionFactory.getCurrentSession().saveOrUpdate(user);
		}
	}

	private Criteria getActiveUserCriteria() {
		return sessionFactory.getCurrentSession().createCriteria(User.class).add(Restrictions.eq("active", true));
	}
	
	public boolean canRemovePermissionFromRole(Integer id, String string) {
		Long result = (Long) sessionFactory.getCurrentSession()
				.createCriteria(User.class)
				.createAlias("globalRole", "roleAlias")
				.add(Restrictions.eq("active", true))
				.add(Restrictions.eq("roleAlias." + string, true))
				.add(Restrictions.ne("roleAlias.id", id))
				.setProjection(Projections.rowCount())
				.uniqueResult();
		
		return result != null && result > 0;
	}
	
	public boolean canRemovePermissionFromUser(Integer id, String string) {
		Long result = (Long) sessionFactory.getCurrentSession()
				.createCriteria(User.class)
				.createAlias("globalRole", "roleAlias")
				.add(Restrictions.eq("active", true))
				.add(Restrictions.eq("roleAlias." + string, true))
				.add(Restrictions.ne("id", id))
				.setProjection(Projections.rowCount())
				.uniqueResult();
		
		return result != null && result > 0;
	}
}