001    /**
002     * Copyright 2005-2011 The Kuali Foundation
003     *
004     * Licensed under the Educational Community License, Version 2.0 (the "License");
005     * you may not use this file except in compliance with the License.
006     * You may obtain a copy of the License at
007     *
008     * http://www.opensource.org/licenses/ecl2.php
009     *
010     * Unless required by applicable law or agreed to in writing, software
011     * distributed under the License is distributed on an "AS IS" BASIS,
012     * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
013     * See the License for the specific language governing permissions and
014     * limitations under the License.
015     */
016    package org.kuali.rice.kim.rules.ui;
017    
018    import org.apache.commons.lang.StringUtils;
019    import org.kuali.rice.core.api.util.RiceKeyConstants;
020    import org.kuali.rice.kim.api.KimConstants;
021    import org.kuali.rice.kim.api.group.GroupService;
022    import org.kuali.rice.kim.api.services.KimApiServiceLocator;
023    import org.kuali.rice.kim.bo.ui.GroupDocumentMember;
024    import org.kuali.rice.kim.document.IdentityManagementGroupDocument;
025    import org.kuali.rice.kim.rule.event.ui.AddGroupMemberEvent;
026    import org.kuali.rice.kim.rule.ui.AddGroupMemberRule;
027    import org.kuali.rice.krad.rules.DocumentRuleBase;
028    import org.kuali.rice.krad.util.GlobalVariables;
029    
030    import java.util.HashMap;
031    import java.util.Map;
032    
033    //import org.kuali.rice.kim.api.group.GroupServiceBase;
034    
035    /**
036     * This is a description of what this class does - shyu don't forget to fill this in. 
037     * 
038     * @author Kuali Rice Team (rice.collab@kuali.org)
039     *
040     */
041    public class GroupDocumentMemberRule extends DocumentRuleBase implements AddGroupMemberRule {
042    
043            private static final String ERROR_PATH = "document.member.memberId";
044    
045            public boolean processAddGroupMember(AddGroupMemberEvent addGroupMemberEvent){
046                    GroupDocumentMember newMember = addGroupMemberEvent.getMember();
047                    IdentityManagementGroupDocument document = (IdentityManagementGroupDocument)addGroupMemberEvent.getDocument();
048                boolean rulePassed = true;
049    
050            if (newMember == null || StringUtils.isBlank(newMember.getMemberId())){
051                GlobalVariables.getMessageMap().putError(ERROR_PATH, RiceKeyConstants.ERROR_EMPTY_ENTRY, new String[] {"Member"});
052                return false;
053            }
054            if(!validAssignGroup(newMember, document))
055                    return false;
056    
057                int i = 0;
058                for (GroupDocumentMember member: document.getMembers()){
059                    if (member.getMemberId().equals(newMember.getMemberId()) && member.getMemberTypeCode().equals(newMember.getMemberTypeCode())){
060                        rulePassed = false;
061                        GlobalVariables.getMessageMap().putError("document.members["+i+"].memberId", RiceKeyConstants.ERROR_DUPLICATE_ENTRY, new String[] {"Member"});
062                    }
063                    i++;
064                }
065                
066                // check for circular reference
067                    GroupService groupService = KimApiServiceLocator.getGroupService();
068                    if (groupService.isGroupMemberOfGroup(document.getGroupId(),newMember.getMemberId())){
069                GlobalVariables.getMessageMap().putError(ERROR_PATH, RiceKeyConstants.ERROR_ASSIGN_GROUP_MEMBER_CIRCULAR, new String[] {newMember.getMemberId()});
070                            return false;
071                    }
072                
073                    return rulePassed;
074            } 
075    
076            protected boolean validAssignGroup(GroupDocumentMember groupMember, IdentityManagementGroupDocument document){
077            boolean rulePassed = true;
078                    if(StringUtils.isNotEmpty(document.getGroupNamespace())){
079                            Map<String,String> roleDetails = new HashMap<String,String>();
080                            roleDetails.put(KimConstants.AttributeConstants.NAMESPACE_CODE, document.getGroupNamespace());
081                            roleDetails.put(KimConstants.AttributeConstants.GROUP_NAME, document.getGroupName());
082                            if (!getDocumentHelperService().getDocumentAuthorizer(document).isAuthorizedByTemplate(
083                                            document, 
084                                            KimConstants.NAMESPACE_CODE, 
085                                            KimConstants.PermissionTemplateNames.POPULATE_GROUP,
086                                            GlobalVariables.getUserSession().getPerson().getPrincipalId(), 
087                                            roleDetails, null)){
088                        GlobalVariables.getMessageMap().putError(ERROR_PATH, RiceKeyConstants.ERROR_ASSIGN_GROUP, 
089                                    new String[] {document.getGroupNamespace(), document.getGroupName()});
090                        rulePassed = false;
091                            }
092                    }
093                    return rulePassed;
094            }
095    
096    }