Search in sources :

Example 1 with User

use of com.salesmanager.core.model.user.User in project shopizer by shopizer-ecommerce.

the class UserFacadeImpl method update.

@Override
public ReadableUser update(Long id, String authenticatedUser, MerchantStore store, PersistableUser user) {
    Validate.notNull(user, "User cannot be null");
    Validate.notNull(store, "store cannot be null");
    try {
        User userModel = userService.getById(id);
        if (userModel == null) {
            throw new ServiceRuntimeException("Cannot find user [" + user.getUserName() + "]");
        }
        if (userModel.getId().longValue() != id.longValue()) {
            throw new ServiceRuntimeException("Cannot find user [" + user.getUserName() + "] id or name does not match");
        }
        User auth = userService.getByUserName(authenticatedUser);
        if (auth == null) {
            throw new ServiceRuntimeException("Cannot find user [" + authenticatedUser + "]");
        }
        User adminName = getByUserName(user.getUserName());
        if (adminName != null) {
            if (adminName.getId().longValue() != userModel.getId().longValue()) {
                throw new ServiceRuntimeException("User id [" + userModel.getId() + "] does not match [" + user.getUserName() + "]");
            }
        }
        boolean isActive = userModel.isActive();
        List<Group> originalGroups = userModel.getGroups();
        Group superadmin = originalGroups.stream().filter(group -> Constants.GROUP_SUPERADMIN.equals(group.getGroupName())).findAny().orElse(null);
        // i'm i editing my own profile ?
        if (authenticatedUser.equals(adminName)) {
            if (!userModel.getMerchantStore().getCode().equals(store.getCode())) {
                throw new OperationNotAllowedException("User [" + adminName + "] cannot change owning store");
            }
        } else {
            // i am an admin or super admin
            Group adminOrSuperadmin = originalGroups.stream().filter(group -> (Constants.GROUP_SUPERADMIN.equals(group.getGroupName()) || Constants.ADMIN_USER.equals(group.getGroupName()) || Constants.ADMIN_STORE.equals(group.getGroupName()))).findAny().orElse(null);
            if (!userModel.getMerchantStore().getCode().equals(store.getCode()) && adminOrSuperadmin == null) {
                throw new OperationNotAllowedException("User [" + adminName + "] cannot change owning store");
            }
        }
        userModel = converPersistabletUserToUser(store, languageService.defaultLanguage(), userModel, user);
        // admin
        if (superadmin != null) {
            userModel.setGroups(originalGroups);
        }
        Group adminGroup = auth.getGroups().stream().filter((group) -> Constants.GROUP_SUPERADMIN.equals(group.getGroupName()) || Constants.GROUP_SUPERADMIN.equals(group.getGroupName())).findAny().orElse(null);
        if (adminGroup == null) {
            userModel.setGroups(originalGroups);
            userModel.setActive(isActive);
        }
        user.setPassword(userModel.getAdminPassword());
        userService.update(userModel);
        return this.convertUserToReadableUser(languageService.defaultLanguage(), userModel);
    } catch (ServiceException e) {
        throw new ServiceRuntimeException("Cannot update user [" + user.getUserName() + "]", e);
    }
}
Also used : ReadableGroup(com.salesmanager.shop.model.security.ReadableGroup) PersistableGroup(com.salesmanager.shop.model.security.PersistableGroup) Group(com.salesmanager.core.model.user.Group) ReadableUser(com.salesmanager.shop.model.user.ReadableUser) User(com.salesmanager.core.model.user.User) PersistableUser(com.salesmanager.shop.model.user.PersistableUser) ServiceException(com.salesmanager.core.business.exception.ServiceException) OperationNotAllowedException(com.salesmanager.shop.store.api.exception.OperationNotAllowedException) ServiceRuntimeException(com.salesmanager.shop.store.api.exception.ServiceRuntimeException)

Example 2 with User

use of com.salesmanager.core.model.user.User in project shopizer by shopizer-ecommerce.

the class UserFacadeImpl method authorizedStore.

@Override
public boolean authorizedStore(String userName, String merchantStoreCode) {
    try {
        Authentication authentication = SecurityContextHolder.getContext().getAuthentication();
        Set<String> roles = authentication.getAuthorities().stream().map(r -> r.getAuthority()).collect(Collectors.toSet());
        ReadableUser readableUser = findByUserName(userName, languageService.defaultLanguage());
        // unless superadmin
        for (ReadableGroup group : readableUser.getGroups()) {
            if (Constants.GROUP_SUPERADMIN.equals(group.getName())) {
                return true;
            }
        }
        boolean authorized = false;
        User user = userService.findByStore(readableUser.getId(), merchantStoreCode);
        if (user != null) {
            authorized = true;
        } else {
            user = userService.getByUserName(userName);
        }
        if (user != null && !authorized) {
            // get parent
            MerchantStore store = merchantStoreService.getParent(merchantStoreCode);
            // user can be in parent
            MerchantStore st = user.getMerchantStore();
            if (store != null && st.getCode().equals(store.getCode())) {
                authorized = true;
            }
        }
        return authorized;
    } catch (Exception e) {
        throw new ServiceRuntimeException("Cannot authorize user " + userName + " for store " + merchantStoreCode, e.getMessage());
    }
}
Also used : PermissionService(com.salesmanager.core.business.services.user.PermissionService) Date(java.util.Date) EmailConstants(com.salesmanager.shop.constants.EmailConstants) LoggerFactory(org.slf4j.LoggerFactory) Autowired(org.springframework.beans.factory.annotation.Autowired) StringUtils(org.apache.commons.lang3.StringUtils) LanguageService(com.salesmanager.core.business.services.reference.language.LanguageService) ReadableUser(com.salesmanager.shop.model.user.ReadableUser) ServiceException(com.salesmanager.core.business.exception.ServiceException) MerchantStore(com.salesmanager.core.model.merchant.MerchantStore) Locale(java.util.Locale) Map(java.util.Map) GenericEntityList(com.salesmanager.core.model.common.GenericEntityList) SecurityContextHolder(org.springframework.security.core.context.SecurityContextHolder) MerchantStoreService(com.salesmanager.core.business.services.merchant.MerchantStoreService) ReadableGroup(com.salesmanager.shop.model.security.ReadableGroup) Set(java.util.Set) ReadableUserList(com.salesmanager.shop.model.user.ReadableUserList) ReadableUserPopulator(com.salesmanager.shop.populator.user.ReadableUserPopulator) UUID(java.util.UUID) Page(org.springframework.data.domain.Page) Collectors(java.util.stream.Collectors) List(java.util.List) PersistableGroup(com.salesmanager.shop.model.security.PersistableGroup) CollectionUtils(org.springframework.util.CollectionUtils) ServiceRuntimeException(com.salesmanager.shop.store.api.exception.ServiceRuntimeException) Optional(java.util.Optional) AnonymousAuthenticationToken(org.springframework.security.authentication.AnonymousAuthenticationToken) Authentication(org.springframework.security.core.Authentication) EmailService(com.salesmanager.core.business.services.system.EmailService) Async(org.springframework.scheduling.annotation.Async) Email(com.salesmanager.core.business.modules.email.Email) Group(com.salesmanager.core.model.user.Group) Constants(com.salesmanager.shop.constants.Constants) DateUtil(com.salesmanager.shop.utils.DateUtil) CredentialsReset(com.salesmanager.core.model.common.CredentialsReset) ReadablePermission(com.salesmanager.shop.model.security.ReadablePermission) ArrayList(java.util.ArrayList) Inject(javax.inject.Inject) Language(com.salesmanager.core.model.reference.language.Language) ConversionRuntimeException(com.salesmanager.shop.store.api.exception.ConversionRuntimeException) Permission(com.salesmanager.core.model.user.Permission) ResourceNotFoundException(com.salesmanager.shop.store.api.exception.ResourceNotFoundException) LabelUtils(com.salesmanager.shop.utils.LabelUtils) Service(org.springframework.stereotype.Service) Qualifier(org.springframework.beans.factory.annotation.Qualifier) EmailUtils(com.salesmanager.shop.utils.EmailUtils) UserPassword(com.salesmanager.shop.model.user.UserPassword) User(com.salesmanager.core.model.user.User) Criteria(com.salesmanager.core.model.common.Criteria) OperationNotAllowedException(com.salesmanager.shop.store.api.exception.OperationNotAllowedException) Validate(org.jsoup.helper.Validate) Logger(org.slf4j.Logger) UserFacade(com.salesmanager.shop.store.controller.user.facade.UserFacade) ImageFilePath(com.salesmanager.shop.utils.ImageFilePath) UnauthorizedException(com.salesmanager.shop.store.api.exception.UnauthorizedException) UserService(com.salesmanager.core.business.services.user.UserService) PasswordEncoder(org.springframework.security.crypto.password.PasswordEncoder) PersistableUserPopulator(com.salesmanager.shop.populator.user.PersistableUserPopulator) GenericRuntimeException(com.salesmanager.shop.store.api.exception.GenericRuntimeException) ConversionException(com.salesmanager.core.business.exception.ConversionException) PersistableUser(com.salesmanager.shop.model.user.PersistableUser) FilePathUtils(com.salesmanager.shop.utils.FilePathUtils) UserCriteria(com.salesmanager.core.model.user.UserCriteria) SecurityFacade(com.salesmanager.shop.store.controller.security.facade.SecurityFacade) ReadableGroup(com.salesmanager.shop.model.security.ReadableGroup) ReadableUser(com.salesmanager.shop.model.user.ReadableUser) ReadableUser(com.salesmanager.shop.model.user.ReadableUser) User(com.salesmanager.core.model.user.User) PersistableUser(com.salesmanager.shop.model.user.PersistableUser) Authentication(org.springframework.security.core.Authentication) MerchantStore(com.salesmanager.core.model.merchant.MerchantStore) ServiceException(com.salesmanager.core.business.exception.ServiceException) ServiceRuntimeException(com.salesmanager.shop.store.api.exception.ServiceRuntimeException) ConversionRuntimeException(com.salesmanager.shop.store.api.exception.ConversionRuntimeException) ResourceNotFoundException(com.salesmanager.shop.store.api.exception.ResourceNotFoundException) OperationNotAllowedException(com.salesmanager.shop.store.api.exception.OperationNotAllowedException) UnauthorizedException(com.salesmanager.shop.store.api.exception.UnauthorizedException) GenericRuntimeException(com.salesmanager.shop.store.api.exception.GenericRuntimeException) ConversionException(com.salesmanager.core.business.exception.ConversionException) ServiceRuntimeException(com.salesmanager.shop.store.api.exception.ServiceRuntimeException)

Example 3 with User

use of com.salesmanager.core.model.user.User in project shopizer by shopizer-ecommerce.

the class UserFacadeImpl method changePassword.

@Override
public void changePassword(Long userId, String authenticatedUser, UserPassword changePassword) {
    Validate.notNull(changePassword, "Change password request must not be null");
    Validate.notNull(changePassword.getPassword(), "Original password request must not be null");
    Validate.notNull(changePassword.getChangePassword(), "New password request must not be null");
    /**
     * Only admin and superadmin can change other user password
     */
    User auth = null;
    try {
        auth = userService.getByUserName(authenticatedUser);
        if (auth == null) {
            throw new ServiceRuntimeException("Cannot find user [" + authenticatedUser + "]");
        }
        User userModel = userService.getById(userId);
        if (userModel == null) {
            throw new ServiceRuntimeException("Cannot find user [" + userId + "]");
        }
        if (!securityFacade.matchPassword(userModel.getAdminPassword(), changePassword.getPassword())) {
            throw new ServiceRuntimeException("Actual password does not match for user [" + userId + "]");
        }
        /**
         * Validate new password
         */
        if (!securityFacade.validateUserPassword(changePassword.getChangePassword())) {
            throw new ServiceRuntimeException("New password does not apply to format policy");
        }
        String newPasswordEncoded = securityFacade.encodePassword(changePassword.getChangePassword());
        userModel.setAdminPassword(newPasswordEncoded);
        userService.update(userModel);
    } catch (ServiceException e) {
        LOGGER.error("Error updating password");
        throw new ServiceRuntimeException(e);
    }
}
Also used : ReadableUser(com.salesmanager.shop.model.user.ReadableUser) User(com.salesmanager.core.model.user.User) PersistableUser(com.salesmanager.shop.model.user.PersistableUser) ServiceException(com.salesmanager.core.business.exception.ServiceException) ServiceRuntimeException(com.salesmanager.shop.store.api.exception.ServiceRuntimeException)

Example 4 with User

use of com.salesmanager.core.model.user.User in project shopizer by shopizer-ecommerce.

the class UserFacadeImpl method create.

@Override
public ReadableUser create(PersistableUser user, MerchantStore store) {
    Validate.notNull(store, "MerchantStore must not be null");
    Validate.notNull(user, "User must not be null");
    Validate.notNull(user.getUserName(), "Username must not be null");
    try {
        // check if user exists
        User tempUser = userService.getByUserName(user.getUserName(), store.getCode());
        if (tempUser != null) {
            throw new ServiceRuntimeException("User [" + user.getUserName() + "] already exists for store [" + store.getCode() + "]");
        }
        /**
         * validate password
         */
        if (!securityFacade.matchRawPasswords(user.getPassword(), user.getRepeatPassword())) {
            throw new ServiceRuntimeException("Passwords dos not match, make sure password and repeat password are equals");
        }
        /**
         * Validate new password
         */
        if (!securityFacade.validateUserPassword(user.getPassword())) {
            throw new ServiceRuntimeException("New password does not apply to format policy");
        }
        String newPasswordEncoded = securityFacade.encodePassword(user.getPassword());
        User userModel = new User();
        userModel = converPersistabletUserToUser(store, languageService.defaultLanguage(), userModel, user);
        if (CollectionUtils.isEmpty(userModel.getGroups())) {
            throw new ServiceRuntimeException("No valid group groups associated with user " + user.getUserName());
        }
        userModel.setAdminPassword(newPasswordEncoded);
        userService.saveOrUpdate(userModel);
        // now build returned object
        User createdUser = userService.getById(userModel.getId());
        return convertUserToReadableUser(createdUser.getDefaultLanguage(), createdUser);
    } catch (ServiceException e) {
        throw new ServiceRuntimeException("Cannot create user " + user.getUserName() + " for store " + store.getCode(), e);
    }
}
Also used : ReadableUser(com.salesmanager.shop.model.user.ReadableUser) User(com.salesmanager.core.model.user.User) PersistableUser(com.salesmanager.shop.model.user.PersistableUser) ServiceException(com.salesmanager.core.business.exception.ServiceException) ServiceRuntimeException(com.salesmanager.shop.store.api.exception.ServiceRuntimeException)

Example 5 with User

use of com.salesmanager.core.model.user.User in project shopizer by shopizer-ecommerce.

the class UserFacadeImpl method delete.

@Override
public void delete(Long id, String merchant) {
    Validate.notNull(id, "User id cannot be null");
    try {
        User user = userService.findByStore(id, merchant);
        if (user == null) {
            throw new ServiceRuntimeException("Cannot find user [" + id + "]");
        }
        // cannot delete superadmin
        if (user.getGroups().contains(Constants.GROUP_SUPERADMIN)) {
            throw new ServiceRuntimeException("Cannot delete superadmin user [" + id + "]");
        }
        userService.delete(user);
    } catch (ServiceException e) {
        throw new ServiceRuntimeException("Cannot find user [" + id + "]", e);
    }
}
Also used : ReadableUser(com.salesmanager.shop.model.user.ReadableUser) User(com.salesmanager.core.model.user.User) PersistableUser(com.salesmanager.shop.model.user.PersistableUser) ServiceException(com.salesmanager.core.business.exception.ServiceException) ServiceRuntimeException(com.salesmanager.shop.store.api.exception.ServiceRuntimeException)

Aggregations

User (com.salesmanager.core.model.user.User)21 ServiceException (com.salesmanager.core.business.exception.ServiceException)16 PersistableUser (com.salesmanager.shop.model.user.PersistableUser)15 ReadableUser (com.salesmanager.shop.model.user.ReadableUser)14 ServiceRuntimeException (com.salesmanager.shop.store.api.exception.ServiceRuntimeException)13 ResourceNotFoundException (com.salesmanager.shop.store.api.exception.ResourceNotFoundException)7 Group (com.salesmanager.core.model.user.Group)6 ConversionException (com.salesmanager.core.business.exception.ConversionException)5 PersistableGroup (com.salesmanager.shop.model.security.PersistableGroup)5 OperationNotAllowedException (com.salesmanager.shop.store.api.exception.OperationNotAllowedException)5 UnauthorizedException (com.salesmanager.shop.store.api.exception.UnauthorizedException)5 ReadableGroup (com.salesmanager.shop.model.security.ReadableGroup)4 ConversionRuntimeException (com.salesmanager.shop.store.api.exception.ConversionRuntimeException)4 GenericRuntimeException (com.salesmanager.shop.store.api.exception.GenericRuntimeException)4 ArrayList (java.util.ArrayList)4 Date (java.util.Date)4 CredentialsReset (com.salesmanager.core.model.common.CredentialsReset)3 GenericEntityList (com.salesmanager.core.model.common.GenericEntityList)3 MerchantStore (com.salesmanager.core.model.merchant.MerchantStore)3 Language (com.salesmanager.core.model.reference.language.Language)3