use of cz.metacentrum.perun.audit.events.UserManagerEvents.OwnershipRemovedForSpecificUser in project perun by CESNET.
the class UsersManagerBlImpl method removeSpecificUserOwner.
@Override
public void removeSpecificUserOwner(PerunSession sess, User user, User specificUser, boolean forceDelete) throws RelationNotExistsException, SpecificUserOwnerAlreadyRemovedException {
if (specificUser.isServiceUser() && specificUser.isSponsoredUser())
throw new InternalErrorException("We don't support specific and sponsored users together yet.");
if (specificUser.getMajorSpecificType().equals(SpecificUserType.NORMAL))
throw new InternalErrorException("Incorrect type of specification for specific user!" + specificUser);
if (user.getMajorSpecificType().equals(SpecificUserType.SERVICE))
throw new InternalErrorException("Service user can`t own another account (service or guest)!" + user);
List<User> specificUserOwners = this.getUsersBySpecificUser(sess, specificUser);
if (!specificUserOwners.remove(user))
throw new RelationNotExistsException("User is not the active owner of the specificUser.");
if (!getUsersManagerImpl().specificUserOwnershipExists(sess, user, specificUser)) {
throw new RelationNotExistsException("User has no relationship to specificUser.");
}
try {
// refresh authz for sponsors
if (specificUser.isSponsoredUser())
AuthzResolverBlImpl.removeSpecificUserOwner(sess, specificUser, user);
// refresh authz for service user owners
if (specificUser.isServiceUser() && sess.getPerunPrincipal() != null) {
if (user.getId() == sess.getPerunPrincipal().getUserId()) {
AuthzResolverBlImpl.refreshAuthz(sess);
}
}
} catch (UserNotAdminException ex) {
throw new InternalErrorException("Can't remove role of sponsor for user " + user + " and sponsored user " + specificUser);
}
if (forceDelete) {
// getPerunBl().getAuditer().log(sess, "{} ownership was removed for specificUser {}.", user, specificUser);
getPerunBl().getAuditer().log(sess, new OwnershipRemovedForSpecificUser(user, specificUser));
getUsersManagerImpl().removeSpecificUserOwner(sess, user, specificUser);
} else {
getPerunBl().getAuditer().log(sess, new OwnershipDisabledForSpecificUser(user, specificUser));
getUsersManagerImpl().disableOwnership(sess, user, specificUser);
}
}
Aggregations