@Override
public Entity add(
PersistencePackage persistencePackage, DynamicEntityDao dynamicEntityDao, RecordHelper helper)
throws ServiceException {
adminRemoteSecurityService.securityCheck(persistencePackage, EntityOperationType.ADD);
Entity entity = persistencePackage.getEntity();
try {
PersistencePerspective persistencePerspective =
persistencePackage.getPersistencePerspective();
AdminUser adminInstance = (AdminUser) Class.forName(entity.getType()[0]).newInstance();
Map<String, FieldMetadata> adminProperties =
helper.getSimpleMergedProperties(AdminUser.class.getName(), persistencePerspective);
adminInstance =
(AdminUser) helper.createPopulatedInstance(adminInstance, entity, adminProperties, false);
Entity errorEntity = validateLegalUsernameAndEmail(entity, adminInstance, true);
if (errorEntity != null) {
return errorEntity;
}
adminInstance.setUnencodedPassword(adminInstance.getPassword());
adminInstance.setPassword(null);
adminInstance = adminSecurityService.saveAdminUser(adminInstance);
Entity adminEntity = helper.getRecord(adminProperties, adminInstance, null, null);
return adminEntity;
} catch (Exception e) {
throw new ServiceException("Unable to add entity for " + entity.getType()[0], e);
}
}
protected Entity validateLegalUsernameAndEmail(
Entity entity, AdminUser adminInstance, boolean isAdd) {
String login = entity.findProperty("login").getValue();
String email = entity.findProperty("email").getValue();
// We know the username/email is ok if we're doing an update and they're unchanged
boolean skipLoginCheck = false;
boolean skipEmailCheck = !getRequireUniqueEmailAddress();
if (!isAdd) {
if (StringUtils.equals(login, adminInstance.getLogin())) {
skipLoginCheck = true;
}
if (!getRequireUniqueEmailAddress() || StringUtils.equals(email, adminInstance.getEmail())) {
skipEmailCheck = true;
}
}
if (!skipLoginCheck && adminSecurityService.readAdminUserByUserName(login) != null) {
entity.addValidationError("login", "admin.nonUniqueUsernameError");
return entity;
}
if (!skipEmailCheck
&& CollectionUtils.isNotEmpty(adminSecurityService.readAdminUsersByEmail(email))) {
entity.addValidationError("email", "admin.nonUniqueEmailError");
return entity;
}
return null;
}
@Override
public Entity update(
PersistencePackage persistencePackage, DynamicEntityDao dynamicEntityDao, RecordHelper helper)
throws ServiceException {
Entity entity = persistencePackage.getEntity();
try {
PersistencePerspective persistencePerspective =
persistencePackage.getPersistencePerspective();
Map<String, FieldMetadata> adminProperties =
helper.getSimpleMergedProperties(AdminUser.class.getName(), persistencePerspective);
Object primaryKey = helper.getPrimaryKey(entity, adminProperties);
AdminUser adminInstance =
(AdminUser) dynamicEntityDao.retrieve(Class.forName(entity.getType()[0]), primaryKey);
Entity errorEntity = validateLegalUsernameAndEmail(entity, adminInstance, false);
if (errorEntity != null) {
return errorEntity;
}
String passwordBefore = adminInstance.getPassword();
adminInstance.setPassword(null);
adminInstance =
(AdminUser) helper.createPopulatedInstance(adminInstance, entity, adminProperties, false);
Property passwordProperty = entity.getPMap().get("password");
if (passwordProperty != null) {
if (StringUtils.isNotEmpty(passwordProperty.getValue())) {
adminInstance.setUnencodedPassword(passwordProperty.getValue());
adminInstance.setPassword(null);
} else {
adminInstance.setPassword(passwordBefore);
}
}
validateUserUpdateSecurity(persistencePackage, adminInstance);
adminInstance = adminSecurityService.saveAdminUser(adminInstance);
Entity adminEntity = helper.getRecord(adminProperties, adminInstance, null, null);
return adminEntity;
} catch (Exception e) {
throw new ServiceException("Unable to update entity for " + entity.getType()[0], e);
}
}
@Override
public void remove(
PersistencePackage persistencePackage, DynamicEntityDao dynamicEntityDao, RecordHelper helper)
throws ServiceException {
Entity entity = persistencePackage.getEntity();
String userLoginToRemove = entity.findProperty("login").getValue();
AdminUser persistentAdminUser = adminRemoteSecurityService.getPersistentAdminUser();
if (persistentAdminUser != null && persistentAdminUser.getLogin() != null) {
if (persistentAdminUser.getLogin().equals(userLoginToRemove)) {
throw new ValidationException(entity, "admin.cantDeleteCurrentUserError");
}
}
OperationType removeType =
persistencePackage.getPersistencePerspective().getOperationTypes().getRemoveType();
helper.getCompatibleModule(removeType).remove(persistencePackage);
}
@Override
public PropertyValidationResult validate(
Entity entity,
Serializable instance,
Map<String, FieldMetadata> entityFieldMetadata,
Map<String, String> validationConfiguration,
BasicFieldMetadata propertyMetadata,
String propertyName,
String value) {
String errorMessage = "";
String compareFieldName = lookupCompareFieldName(propertyName, validationConfiguration);
String compareFieldValue = validationConfiguration.get("compareFieldValue");
String compareFieldRegEx = validationConfiguration.get("compareFieldRegEx");
Property compareFieldProperty = null;
boolean valid = true;
if (StringUtils.isEmpty(value)) {
compareFieldProperty = entity.getPMap().get(compareFieldName);
if (compareFieldProperty != null) {
if (compareFieldValue != null) {
valid = !compareFieldValue.equals(compareFieldProperty.getValue());
} else if (compareFieldRegEx != null) {
String expression = validationConfiguration.get("compareFieldRegEx");
valid = !compareFieldProperty.getValue().matches(expression);
}
}
}
if (!valid) {
BroadleafRequestContext context = BroadleafRequestContext.getBroadleafRequestContext();
MessageSource messages = context.getMessageSource();
FieldMetadata fmd = entityFieldMetadata.get(compareFieldName);
String fieldName = messages.getMessage(fmd.getFriendlyName(), null, context.getJavaLocale());
errorMessage =
messages.getMessage(
"requiredIfValidationFailure",
new Object[] {fieldName, compareFieldProperty.getValue()},
context.getJavaLocale());
}
return new PropertyValidationResult(valid, errorMessage);
}
