/**
    * Copyright 2011 The Kuali Foundation Licensed under the
    * Educational Community License, Version 2.0 (the "License"); you may
    * not use this file except in compliance with the License. You may
    * obtain a copy of the License at
    *
    * http://www.osedu.org/licenses/ECL-2.0
    *
    * Unless required by applicable law or agreed to in writing,
   * software distributed under the License is distributed on an "AS IS"
   * BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express
   * or implied. See the License for the specific language governing
   * permissions and limitations under the License.
   */
  package org.kuali.mobility.shared.controllers;
  
  import org.kuali.mobility.security.authn.util.AuthenticationConstants;
  import org.kuali.mobility.security.group.api.Group;
  import org.kuali.mobility.security.user.api.User;
  
  import javax.annotation.Resource;
  import javax.servlet.http.HttpServletRequest;
  import java.util.Properties;
  
  /**
   * Base controller that provides utilities for managing authorization
   *
   * @author Kuali Mobility Team (mobility.dev@kuali.org)
   * @since 2.0.0
   */
  public class AbstractMobilityController {
  
      @Resource(name="kmeProperties")
      private Properties kmeProperties;
  
      public boolean isAllowedAccess(String roleName, HttpServletRequest request) {
          boolean isAllowed = false;
  
          if( roleName == null || roleName.isEmpty() ) {
              isAllowed = true;
          } else if ( request.getSession() == null ) {
              isAllowed = false;
          } else {
              User user = (User)request.getSession().getAttribute(AuthenticationConstants.KME_USER_KEY);
              if( user == null || user.isPublicUser() ) {
                  isAllowed = false;
              } else if( user.getGroups() == null || user.getGroups().isEmpty() ) {
                  isAllowed = false;
              } else {
                  for( Group group : user.getGroups() ) {
                      if( group.getName().equalsIgnoreCase(roleName) ) {
                          isAllowed = true;
                          break;
                      }
                  }
              }
          }
  
          return isAllowed;
      }
  
      public Properties getKmeProperties() {
          return kmeProperties;
      }
  
      public void setKmeProperties(Properties kmeProperties) {
          this.kmeProperties = kmeProperties;
      }
  }