use of com.salesmanager.core.model.user.User in project shopizer by shopizer-ecommerce.
the class UserFacadeImpl method update.
@Override
public ReadableUser update(Long id, String authenticatedUser, MerchantStore store, PersistableUser user) {
Validate.notNull(user, "User cannot be null");
Validate.notNull(store, "store cannot be null");
try {
User userModel = userService.getById(id);
if (userModel == null) {
throw new ServiceRuntimeException("Cannot find user [" + user.getUserName() + "]");
}
if (userModel.getId().longValue() != id.longValue()) {
throw new ServiceRuntimeException("Cannot find user [" + user.getUserName() + "] id or name does not match");
}
User auth = userService.getByUserName(authenticatedUser);
if (auth == null) {
throw new ServiceRuntimeException("Cannot find user [" + authenticatedUser + "]");
}
User adminName = getByUserName(user.getUserName());
if (adminName != null) {
if (adminName.getId().longValue() != userModel.getId().longValue()) {
throw new ServiceRuntimeException("User id [" + userModel.getId() + "] does not match [" + user.getUserName() + "]");
}
}
boolean isActive = userModel.isActive();
List<Group> originalGroups = userModel.getGroups();
Group superadmin = originalGroups.stream().filter(group -> Constants.GROUP_SUPERADMIN.equals(group.getGroupName())).findAny().orElse(null);
// i'm i editing my own profile ?
if (authenticatedUser.equals(adminName)) {
if (!userModel.getMerchantStore().getCode().equals(store.getCode())) {
throw new OperationNotAllowedException("User [" + adminName + "] cannot change owning store");
}
} else {
// i am an admin or super admin
Group adminOrSuperadmin = originalGroups.stream().filter(group -> (Constants.GROUP_SUPERADMIN.equals(group.getGroupName()) || Constants.ADMIN_USER.equals(group.getGroupName()) || Constants.ADMIN_STORE.equals(group.getGroupName()))).findAny().orElse(null);
if (!userModel.getMerchantStore().getCode().equals(store.getCode()) && adminOrSuperadmin == null) {
throw new OperationNotAllowedException("User [" + adminName + "] cannot change owning store");
}
}
userModel = converPersistabletUserToUser(store, languageService.defaultLanguage(), userModel, user);
// admin
if (superadmin != null) {
userModel.setGroups(originalGroups);
}
Group adminGroup = auth.getGroups().stream().filter((group) -> Constants.GROUP_SUPERADMIN.equals(group.getGroupName()) || Constants.GROUP_SUPERADMIN.equals(group.getGroupName())).findAny().orElse(null);
if (adminGroup == null) {
userModel.setGroups(originalGroups);
userModel.setActive(isActive);
}
user.setPassword(userModel.getAdminPassword());
userService.update(userModel);
return this.convertUserToReadableUser(languageService.defaultLanguage(), userModel);
} catch (ServiceException e) {
throw new ServiceRuntimeException("Cannot update user [" + user.getUserName() + "]", e);
}
}
use of com.salesmanager.core.model.user.User in project shopizer by shopizer-ecommerce.
the class UserFacadeImpl method authorizedStore.
@Override
public boolean authorizedStore(String userName, String merchantStoreCode) {
try {
Authentication authentication = SecurityContextHolder.getContext().getAuthentication();
Set<String> roles = authentication.getAuthorities().stream().map(r -> r.getAuthority()).collect(Collectors.toSet());
ReadableUser readableUser = findByUserName(userName, languageService.defaultLanguage());
// unless superadmin
for (ReadableGroup group : readableUser.getGroups()) {
if (Constants.GROUP_SUPERADMIN.equals(group.getName())) {
return true;
}
}
boolean authorized = false;
User user = userService.findByStore(readableUser.getId(), merchantStoreCode);
if (user != null) {
authorized = true;
} else {
user = userService.getByUserName(userName);
}
if (user != null && !authorized) {
// get parent
MerchantStore store = merchantStoreService.getParent(merchantStoreCode);
// user can be in parent
MerchantStore st = user.getMerchantStore();
if (store != null && st.getCode().equals(store.getCode())) {
authorized = true;
}
}
return authorized;
} catch (Exception e) {
throw new ServiceRuntimeException("Cannot authorize user " + userName + " for store " + merchantStoreCode, e.getMessage());
}
}
use of com.salesmanager.core.model.user.User in project shopizer by shopizer-ecommerce.
the class UserFacadeImpl method changePassword.
@Override
public void changePassword(Long userId, String authenticatedUser, UserPassword changePassword) {
Validate.notNull(changePassword, "Change password request must not be null");
Validate.notNull(changePassword.getPassword(), "Original password request must not be null");
Validate.notNull(changePassword.getChangePassword(), "New password request must not be null");
/**
* Only admin and superadmin can change other user password
*/
User auth = null;
try {
auth = userService.getByUserName(authenticatedUser);
if (auth == null) {
throw new ServiceRuntimeException("Cannot find user [" + authenticatedUser + "]");
}
User userModel = userService.getById(userId);
if (userModel == null) {
throw new ServiceRuntimeException("Cannot find user [" + userId + "]");
}
if (!securityFacade.matchPassword(userModel.getAdminPassword(), changePassword.getPassword())) {
throw new ServiceRuntimeException("Actual password does not match for user [" + userId + "]");
}
/**
* Validate new password
*/
if (!securityFacade.validateUserPassword(changePassword.getChangePassword())) {
throw new ServiceRuntimeException("New password does not apply to format policy");
}
String newPasswordEncoded = securityFacade.encodePassword(changePassword.getChangePassword());
userModel.setAdminPassword(newPasswordEncoded);
userService.update(userModel);
} catch (ServiceException e) {
LOGGER.error("Error updating password");
throw new ServiceRuntimeException(e);
}
}
use of com.salesmanager.core.model.user.User in project shopizer by shopizer-ecommerce.
the class UserFacadeImpl method create.
@Override
public ReadableUser create(PersistableUser user, MerchantStore store) {
Validate.notNull(store, "MerchantStore must not be null");
Validate.notNull(user, "User must not be null");
Validate.notNull(user.getUserName(), "Username must not be null");
try {
// check if user exists
User tempUser = userService.getByUserName(user.getUserName(), store.getCode());
if (tempUser != null) {
throw new ServiceRuntimeException("User [" + user.getUserName() + "] already exists for store [" + store.getCode() + "]");
}
/**
* validate password
*/
if (!securityFacade.matchRawPasswords(user.getPassword(), user.getRepeatPassword())) {
throw new ServiceRuntimeException("Passwords dos not match, make sure password and repeat password are equals");
}
/**
* Validate new password
*/
if (!securityFacade.validateUserPassword(user.getPassword())) {
throw new ServiceRuntimeException("New password does not apply to format policy");
}
String newPasswordEncoded = securityFacade.encodePassword(user.getPassword());
User userModel = new User();
userModel = converPersistabletUserToUser(store, languageService.defaultLanguage(), userModel, user);
if (CollectionUtils.isEmpty(userModel.getGroups())) {
throw new ServiceRuntimeException("No valid group groups associated with user " + user.getUserName());
}
userModel.setAdminPassword(newPasswordEncoded);
userService.saveOrUpdate(userModel);
// now build returned object
User createdUser = userService.getById(userModel.getId());
return convertUserToReadableUser(createdUser.getDefaultLanguage(), createdUser);
} catch (ServiceException e) {
throw new ServiceRuntimeException("Cannot create user " + user.getUserName() + " for store " + store.getCode(), e);
}
}
use of com.salesmanager.core.model.user.User in project shopizer by shopizer-ecommerce.
the class UserFacadeImpl method delete.
@Override
public void delete(Long id, String merchant) {
Validate.notNull(id, "User id cannot be null");
try {
User user = userService.findByStore(id, merchant);
if (user == null) {
throw new ServiceRuntimeException("Cannot find user [" + id + "]");
}
// cannot delete superadmin
if (user.getGroups().contains(Constants.GROUP_SUPERADMIN)) {
throw new ServiceRuntimeException("Cannot delete superadmin user [" + id + "]");
}
userService.delete(user);
} catch (ServiceException e) {
throw new ServiceRuntimeException("Cannot find user [" + id + "]", e);
}
}
Aggregations