/**
    * Copyright 2004-2013 The Kuali Foundation
    *
    * Licensed under the Educational Community License, Version 2.0 (the "License");
    * you may not use this file except in compliance with the License.
    * You may obtain a copy of the License at
    *
    * http://www.opensource.org/licenses/ecl2.php
    *
   * Unless required by applicable law or agreed to in writing, software
   * distributed under the License is distributed on an "AS IS" BASIS,
   * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   * See the License for the specific language governing permissions and
   * limitations under the License.
   */
  package org.kuali.hr.time.authorization;
  
  import java.util.HashMap;
  import java.util.HashSet;
  import java.util.Map;
  import java.util.Set;
  
  import org.apache.commons.lang.StringUtils;
  import org.kuali.hr.time.roles.TkUserRoles;
  import org.kuali.hr.time.roles.UserRoles;
  import org.kuali.hr.time.util.TKContext;
  import org.kuali.hr.time.util.TKUser;
  import org.kuali.rice.kim.api.identity.Person;
  import org.kuali.rice.kns.document.authorization.DocumentAuthorizer;
  import org.kuali.rice.kns.document.authorization.MaintenanceDocumentAuthorizer;
  import org.kuali.rice.krad.bo.BusinessObject;
  import org.kuali.rice.krad.document.Document;
  import org.kuali.rice.krad.maintenance.MaintenanceDocument;
  import org.kuali.rice.krad.util.GlobalVariables;
  import org.kuali.rice.krad.util.KRADConstants;
  
  /**
   * Base class for the implementation of Authorization in KPME Time and Attendance.
   *
   * Role Security Grid Documentation:
   * https://wiki.kuali.org/display/KPME/Role+Security+Grid
   */
  public abstract class TkMaintenanceDocumentAuthorizerBase implements MaintenanceDocumentAuthorizer, DocumentAuthorizer {
  
      // Methods from BusinessObjectAuthorizer
  
      @Override
      public boolean isAuthorized(BusinessObject businessObject, String namespaceCode, String permissionName, String principalId) {
          return true;
      }
  
      @Override
      public boolean isAuthorizedByTemplate(BusinessObject businessObject, String namespaceCode, String permissionTemplateName, String principalId) {
          return true;
      }
  
      @Override
      public boolean isAuthorized(BusinessObject businessObject, String namespaceCode, String permissionName, String principalId, Map<String, String> additionalPermissionDetails, Map<String, String> additionalRoleQualifiers) {
          return true;
      }
      
      @Override
      public boolean isAuthorizedByTemplate(Object dataObject, String namespaceCode, String permissionTemplateName, String principalId, Map<String, String> additionalPermissionDetails, Map<String, String> additionalRoleQualifiers) {
      	return true;
      }
  
      @Override
      public Map<String, String> getCollectionItemRoleQualifications(BusinessObject collectionItemBusinessObject) {
          return new HashMap<String,String>();
      }
  
      @Override
      public Map<String, String> getCollectionItemPermissionDetails(BusinessObject collectionItemBusinessObject) {
          return new HashMap<String,String>();
      }
  
      // Methods from MaintenanceDocumentAuthorizer
  
      @Override
      public boolean canCreate(Class boClass, Person user) {
          return this.rolesIndicateGeneralWriteAccess();
      }
  
      @Override
      /**
       * In lookup, called for each Business object if the user can edit or not.
       */
      public boolean canMaintain(Object dataObject, Person user) {
          return this.rolesIndicateWriteAccess((BusinessObject) dataObject);
      }
  
      @Override
      /**
       * Called when submit is clicked from maintenance doc
       */
      public boolean canCreateOrMaintain(MaintenanceDocument maintenanceDocument, Person user){
          return this.rolesIndicateWriteAccess((BusinessObject) maintenanceDocument.getNewMaintainableObject().getDataObject());
      }
  
     @Override
     public Set<String> getSecurePotentiallyReadOnlySectionIds() {
         return new HashSet<String>();
     }
 
     // Methods from DocumentAuthorizer
     
 
     /**
      * Copied from DocumentAuthorizerBase
      */
 	@Override
 	public Set<String> getDocumentActions(Document document, Person user, Set<String> documentActions) {
         if (documentActions.contains(KRADConstants.KUALI_ACTION_CAN_EDIT) && !canEdit(document, user)) {
             documentActions.remove(KRADConstants.KUALI_ACTION_CAN_EDIT);
         }
 
         if (documentActions.contains(KRADConstants.KUALI_ACTION_CAN_COPY) && !canCopy(document, user)) {
             documentActions.remove(KRADConstants.KUALI_ACTION_CAN_COPY);
         }
 
         if (documentActions.contains(KRADConstants.KUALI_ACTION_CAN_CLOSE) && !canClose(document, user)) {
             documentActions.remove(KRADConstants.KUALI_ACTION_CAN_CLOSE);
         }
 
         if (documentActions.contains(KRADConstants.KUALI_ACTION_CAN_RELOAD) && !canReload(document, user)) {
             documentActions.remove(KRADConstants.KUALI_ACTION_CAN_RELOAD);
         }
 
         if (documentActions.contains(KRADConstants.KUALI_ACTION_CAN_BLANKET_APPROVE) && !canBlanketApprove(document, user)) {
             documentActions.remove(KRADConstants.KUALI_ACTION_CAN_BLANKET_APPROVE);
         }
 
         if (documentActions.contains(KRADConstants.KUALI_ACTION_CAN_CANCEL) && !canCancel(document, user)) {
             documentActions.remove(KRADConstants.KUALI_ACTION_CAN_CANCEL);
         }
 
         if (documentActions.contains(KRADConstants.KUALI_ACTION_CAN_RECALL) && !canRecall(document, user)) {
             documentActions.remove(KRADConstants.KUALI_ACTION_CAN_RECALL);
         }
 
         if (documentActions.contains(KRADConstants.KUALI_ACTION_CAN_SAVE) && !canSave(document, user)) {
             documentActions.remove(KRADConstants.KUALI_ACTION_CAN_SAVE);
         }
 
         if (documentActions.contains(KRADConstants.KUALI_ACTION_CAN_ROUTE) && !canRoute(document, user)) {
             documentActions.remove(KRADConstants.KUALI_ACTION_CAN_ROUTE);
         }
 
         if (documentActions.contains(KRADConstants.KUALI_ACTION_CAN_ACKNOWLEDGE) && !canAcknowledge(document, user)) {
             documentActions.remove(KRADConstants.KUALI_ACTION_CAN_ACKNOWLEDGE);
         }
 
         if (documentActions.contains(KRADConstants.KUALI_ACTION_CAN_FYI) && !canFyi(document, user)) {
             documentActions.remove(KRADConstants.KUALI_ACTION_CAN_FYI);
         }
 
         if (documentActions.contains(KRADConstants.KUALI_ACTION_CAN_APPROVE) && !canApprove(document, user)) {
             documentActions.remove(KRADConstants.KUALI_ACTION_CAN_APPROVE);
         }
 
         if (documentActions.contains(KRADConstants.KUALI_ACTION_CAN_DISAPPROVE) && !canDisapprove(document, user)) {
             documentActions.remove(KRADConstants.KUALI_ACTION_CAN_DISAPPROVE);
         }
 
         if (!canSendAnyTypeAdHocRequests(document, user)) {
             documentActions.remove(KRADConstants.KUALI_ACTION_CAN_ADD_ADHOC_REQUESTS);
             documentActions.remove(KRADConstants.KUALI_ACTION_CAN_SEND_ADHOC_REQUESTS);
             documentActions.remove(KRADConstants.KUALI_ACTION_CAN_SEND_NOTE_FYI);
         }
 
         if (documentActions.contains(KRADConstants.KUALI_ACTION_CAN_SEND_NOTE_FYI) && !canSendNoteFyi(document, user)) {
             documentActions.remove(KRADConstants.KUALI_ACTION_CAN_SEND_NOTE_FYI);
         }
 
         if (documentActions.contains(KRADConstants.KUALI_ACTION_CAN_ANNOTATE) && !canAnnotate(document, user)) {
             documentActions.remove(KRADConstants.KUALI_ACTION_CAN_ANNOTATE);
         }
 
         if (documentActions.contains(KRADConstants.KUALI_ACTION_CAN_EDIT_DOCUMENT_OVERVIEW) && !canEditDocumentOverview(
                 document, user)) {
             documentActions.remove(KRADConstants.KUALI_ACTION_CAN_EDIT_DOCUMENT_OVERVIEW);
         }
 
         if (documentActions.contains(KRADConstants.KUALI_ACTION_PERFORM_ROUTE_REPORT) && !canPerformRouteReport(document,
                 user)) {
             documentActions.remove(KRADConstants.KUALI_ACTION_PERFORM_ROUTE_REPORT);
         }
         // looking at the document status
         String documentStatus = document.getDocumentHeader().getWorkflowDocument().getStatus().name();
 
         if (StringUtils.equals(documentStatus, "FINAL")) {
             documentActions.remove(KRADConstants.KUALI_ACTION_CAN_APPROVE);
             documentActions.remove(KRADConstants.KUALI_ACTION_CAN_DISAPPROVE);
         }
 
         return documentActions;
 	}
 
     @Override
     /**
      * TODO: What is this used for? It's called often.
      */
     public boolean canInitiate(String documentTypeName, Person user) {
         return this.rolesIndicateGeneralReadAccess();
     }
 
     @Override
     /**
      * 
      * One Reference in KualiDocumentActionBase:366
      */
     public boolean canOpen(Document document, Person user) {
     	return this.rolesIndicateGeneralReadAccess();
     }
     
     @Override
     public boolean canEdit(Document document, Person user) {
     	return this.rolesIndicateGeneralWriteAccess();
     }
     
     @Override
     public boolean canAnnotate(Document document, Person user) {
     	return true;
     }
 
     @Override
     public boolean canReload(Document document, Person user) {
     	return true;
     }
 
     @Override
     public boolean canClose(Document document, Person user) {
     	return true;
     }
 
     @Override
     public boolean canSave(Document document, Person user) {
     	return this.rolesIndicateGeneralWriteAccess();
     }
 
     @Override
     public boolean canRoute(Document document, Person user) {
     	return true;
     }
 
     @Override
     public boolean canCancel(Document document, Person user) {
     	return true;
     }
 
     @Override
     public boolean canCopy(Document document, Person user) {
     	return this.rolesIndicateGeneralWriteAccess();
     }
 
     @Override
     public boolean canPerformRouteReport(Document document, Person user) {
     	return true;
     }
 
     @Override
     public boolean canBlanketApprove(Document document, Person user) {
     	return true;
     }
 
     @Override
     public boolean canApprove(Document document, Person user) {
     	return true;
     }
 
     @Override
     public boolean canDisapprove(Document document, Person user) {
     	return true;
     }
 
     @Override
     public boolean canSendNoteFyi(Document document, Person user) {
     	return true;
     }
 
     @Override
     public boolean canEditDocumentOverview(Document document, Person user) {
     	return true;
     }
 
     @Override
     public boolean canFyi(Document document, Person user) {
     	return true;
     }
 
     @Override
     public boolean canAcknowledge(Document document, Person user) {
     	return true;
     }
 
     @Override
     public boolean canReceiveAdHoc(Document document, Person user, String actionRequestCode) {
         return true;
     }
 
     @Override
     public boolean canAddNoteAttachment(Document document, String attachmentTypeCode, Person user) {
         return true;
     }
 
     @Override
     public boolean canDeleteNoteAttachment(Document document, String attachmentTypeCode, String createdBySelfOnly, Person user) {
         return true;
     }
 
 	@Override
 	public boolean canViewNoteAttachment(Document document,String attachmentTypeCode, Person user) {
 		return true;
 	}
 
     @Override
     public boolean canViewNoteAttachment(Document document, String attachmentTypeCode, String authorUniversalIdentifier, Person user) {
         return true;
     }
 
     @Override
     public boolean canSendAdHocRequests(Document document, String actionRequestCd, Person user) {
         return true;
     }
     
     @Override
     public boolean canSendAnyTypeAdHocRequests(Document document, Person user) {
     	return true;
     }
 
     @Override
     public boolean canTakeRequestedAction(Document document, String actionRequestCode, Person user) {
     	return true;
     }
     
     @Override
     public boolean canRecall(Document document, Person user) {
     	return true;
     }
     
     // Methods from DataObjectAuthorizer
     
     @Override
     public boolean isAuthorized(Object dataObject, String namespaceCode, String permissionName, String principalId) {
     	return true;
     }
 
     @Override
     public boolean isAuthorizedByTemplate(Object dataObject, String namespaceCode, String permissionTemplateName, String principalId) {
     	return true;
     }
 
     @Override
     public boolean isAuthorized(Object dataObject, String namespaceCode, String permissionName, String principalId,
             Map<String, String> additionalPermissionDetails, Map<String, String> additionalRoleQualifiers) {
     	return true;
     }
 
 
     // Methods from InquiryOrMaintenanceDocumentAuthorizer
 
     @Override
     /**
      * Can't return null.
      */
     public Set<String> getSecurePotentiallyHiddenSectionIds() {
         return new HashSet<String>();
     }
 
     // Override this if necessary:
 
     /**
      * Returns the UserRoles object for the CURRENT user. This will take into
      * account target/backdoor user status. Subclasses can override this if
      * necessary.
      *
      * @return The UserRoles object for the current user.
      */
     public UserRoles getRoles() {
         return TkUserRoles.getUserRoles(GlobalVariables.getUserSession().getPrincipalId());
     }
 
     // Subclasses will implement these methods
 
     /**
      * Method to indicate whether or not the Context current user can read
      * objects if the current maintenance type.
      *
      * @return true if readable, false otherwise.
      */
     abstract public boolean rolesIndicateGeneralReadAccess();
 
     /**
      * Method to indicate whether or not the Context current user can create/edit
      * objects if the current maintenance type.
      *
      * @return true if create/editable, false otherwise.
      */
     abstract public boolean rolesIndicateGeneralWriteAccess();
 
     /**
      * Indicates whether or not the current Context user has create/edit rights
      * to the provided BusinessObject.
      *
      * @param bo The BusinessObject under investigation.
      *
      * @return true if editable, false otherwise.
      */
     abstract public boolean rolesIndicateWriteAccess(BusinessObject bo);
 
     /**
      * Indicates whether or not the current Context user has view rights to the
      * provided BusinessObject.
      *
      * @param bo The BusinessObject under investigation.
      *
      * @return true if editable, false otherwise.
      */
     abstract public boolean rolesIndicateReadAccess(BusinessObject bo);
 }