public JSONObject deletePlate(HttpSession session, JSONObject json) {
try {
User user =
securityManager.getUserByLoginName(
SecurityContextHolder.getContext().getAuthentication().getName());
if (user.isAdmin()) {
if (json.has("plateId")) {
Long plateId = json.getLong("plateId");
requestManager.deletePlate(requestManager.getPlateById(plateId));
return JSONUtils.SimpleJSONResponse("Plate deleted");
} else {
return JSONUtils.SimpleJSONError("No plate specified to delete.");
}
} else {
return JSONUtils.SimpleJSONError("Only admins can delete objects.");
}
} catch (IOException e) {
e.printStackTrace();
return JSONUtils.SimpleJSONError("Error getting currently logged in user.");
}
}
@Transactional(readOnly = false, rollbackFor = IOException.class)
@TriggersRemove(
cacheName = {"userCache", "lazyUserCache"},
keyGenerator =
@KeyGenerator(
name = "HashCodeCacheKeyGenerator",
properties = {
@Property(name = "includeMethod", value = "false"),
@Property(name = "includeParameterTypes", value = "false")
}))
public long saveUser(User user) throws IOException {
Blob roleBlob = null;
if (user.getRoles() != null) {
List<String> roles = new ArrayList<String>(Arrays.asList(user.getRoles()));
if (user.isExternal() && !roles.contains("ROLE_EXTERNAL")) roles.add("ROLE_EXTERNAL");
if (user.isInternal() && !roles.contains("ROLE_INTERNAL")) roles.add("ROLE_INTERNAL");
if (user.isAdmin() && !roles.contains("ROLE_ADMIN")) roles.add("ROLE_ADMIN");
user.setRoles(roles.toArray(new String[user.getRoles().length]));
try {
if (user.getRoles().length > 0) {
byte[] rbytes = LimsUtils.join(user.getRoles(), ",").getBytes();
roleBlob = new SerialBlob(rbytes);
}
} catch (SerialException e) {
e.printStackTrace();
} catch (SQLException e) {
e.printStackTrace();
}
}
MapSqlParameterSource params = new MapSqlParameterSource();
params
.addValue("active", user.isActive())
.addValue("admin", user.isAdmin())
.addValue("external", user.isExternal())
.addValue("fullName", user.getFullName())
.addValue("internal", user.isInternal())
.addValue("loginName", user.getLoginName())
.addValue("roles", roleBlob)
.addValue("email", user.getEmail());
if (passwordCodecService != null) {
params.addValue("password", passwordCodecService.encrypt(user.getPassword()));
} else {
log.warn(
"No PasswordCodecService has been wired to this SQLSecurityDAO. This means your passwords may be being "
+ "stored in plaintext, if not already encrypted. Please specify a PasswordCodecService in your Spring config and (auto)wire it "
+ "to this DAO.");
params.addValue("password", user.getPassword());
}
if (user.getUserId() == UserImpl.UNSAVED_ID) {
SimpleJdbcInsert insert =
new SimpleJdbcInsert(template).withTableName("User").usingGeneratedKeyColumns("userId");
Number newId = insert.executeAndReturnKey(params);
user.setUserId(newId.longValue());
} else {
params.addValue("userId", user.getUserId());
NamedParameterJdbcTemplate namedTemplate = new NamedParameterJdbcTemplate(template);
namedTemplate.update(USER_UPDATE, params);
}
// sort User_Group
// delete existing joins
MapSqlParameterSource delparams = new MapSqlParameterSource();
delparams.addValue("userId", user.getUserId());
NamedParameterJdbcTemplate namedTemplate = new NamedParameterJdbcTemplate(template);
namedTemplate.update(USER_GROUP_DELETE_BY_USER_ID, delparams);
if (user.getGroups() != null && !user.getGroups().isEmpty()) {
SimpleJdbcInsert eInsert = new SimpleJdbcInsert(template).withTableName("User_Group");
for (Group g : user.getGroups()) {
MapSqlParameterSource ugParams = new MapSqlParameterSource();
ugParams
.addValue("users_userId", user.getUserId())
.addValue("groups_groupId", g.getGroupId());
eInsert.execute(ugParams);
}
}
return user.getUserId();
}