/*

  * Copyright 2007-2010 The Kuali Foundation

  *

  * Licensed under the Educational Community License, Version 2.0 (the "License");

  * you may not use this file except in compliance with the License.

  * You may obtain a copy of the License at

  *

  * http://www.opensource.org/licenses/ecl2.php

  *

  * Unless required by applicable law or agreed to in writing, software

  * distributed under the License is distributed on an "AS IS" BASIS,

  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

  * See the License for the specific language governing permissions and

  * limitations under the License.

  */

 package org.kuali.rice.kim.service.impl;

 import java.util.ArrayList;

 import java.util.Collection;

 import java.util.Collections;

 import java.util.HashMap;

 import java.util.HashSet;

 import java.util.List;

 import java.util.Map;

 import java.util.Set;

 import javax.xml.namespace.QName;

 import org.apache.commons.collections.CollectionUtils;

 import org.apache.commons.lang.StringUtils;

 import org.kuali.rice.core.xml.dto.AttributeSet;

 import org.kuali.rice.kew.service.KEWServiceLocator;

 import org.kuali.rice.kew.util.KEWConstants;

 import org.kuali.rice.kim.bo.Group;

 import org.kuali.rice.kim.bo.Role;

 import org.kuali.rice.kim.bo.entity.KimPrincipal;

 import org.kuali.rice.kim.bo.impl.RoleImpl;

 import org.kuali.rice.kim.bo.role.dto.DelegateMemberCompleteInfo;

 import org.kuali.rice.kim.bo.role.dto.RoleMemberCompleteInfo;

 import org.kuali.rice.kim.bo.role.dto.RoleResponsibilityActionInfo;

 import org.kuali.rice.kim.bo.role.impl.KimDelegationImpl;

 import org.kuali.rice.kim.bo.role.impl.KimDelegationMemberImpl;

 import org.kuali.rice.kim.bo.role.impl.RoleMemberAttributeDataImpl;

 import org.kuali.rice.kim.bo.role.impl.RoleMemberImpl;

 import org.kuali.rice.kim.bo.role.impl.RoleResponsibilityActionImpl;

 import org.kuali.rice.kim.bo.types.impl.KimAttributeImpl;

 import org.kuali.rice.kim.dao.KimRoleDao;

 import org.kuali.rice.kim.service.*;

 import org.kuali.rice.kim.service.support.KimDelegationTypeService;

 import org.kuali.rice.kim.service.support.KimRoleTypeService;

 import org.kuali.rice.kim.util.KIMPropertyConstants;

 import org.kuali.rice.kim.util.KimCommonUtilsInternal;

 import org.kuali.rice.kim.util.KimConstants;

 import org.kuali.rice.kns.service.*;

 import org.kuali.rice.kns.util.KNSPropertyConstants;

 import org.kuali.rice.ksb.cache.RiceCacheAdministrator;

 import org.kuali.rice.ksb.service.KSBServiceLocator;

 /**

  * This is a description of what this class does - jjhanso don't forget to fill this in. 

  * 

  * @author Kuali Rice Team (rice.collab@kuali.org)

  *

  */

 public class RoleServiceBase {

         protected static final String ROLE_IMPL_CACHE_PREFIX = "RoleImpl-ID-";

         protected static final String ROLE_IMPL_BY_NAME_CACHE_PREFIX = "RoleImpl-Name-";

         protected static final String ROLE_IMPL_CACHE_GROUP = "RoleImpl";

         protected static final String ROLE_MEMBER_IMPL_CACHE_PREFIX = "RoleMemberImpl-ID-";

         protected static final String ROLE_MEMBER_IMPL_LIST_CACHE_PREFIX = "RoleMemberImpl-List-";

         protected static final String ROLE_MEMBER_IMPL_CACHE_GROUP = "RoleMemberImpl";

         protected static final String DELEGATION_IMPL_CACHE_PREFIX = "KimDelegationImpl-ID-";

         protected static final String DELEGATION_IMPL_LIST_CACHE_PREFIX = "KimDelegationImpl-List-";

         protected static final String DELEGATION_IMPL_CACHE_GROUP = "KimDelegationImpl";

         protected static final String DELEGATION_MEMBER_IMPL_CACHE_PREFIX = "KimDelegationMemberImpl-ID-";

         protected static final String DELEGATION_MEMBER_IMPL_BY_DLGN_AND_ID_CACHE_PREFIX = "KimDelegationMemberImpl-DelegationAndId-";

         protected static final String DELEGATION_MEMBER_IMPL_LIST_CACHE_PREFIX = "KimDelegationMemberImpl-List-";

         protected static final String DELEGATION_MEMBER_IMPL_LIST_BY_MBR_DLGN_CACHE_PREFIX = "KimDelegationMemberImpl-List-MemberAndDelegationId-";

         protected static final String DELEGATION_MEMBER_IMPL_CACHE_GROUP = "KimDelegationMemberImpl";

         private BusinessObjectService businessObjectService;

         private LookupService lookupService;

         private RiceCacheAdministrator cacheAdministrator;

         private SequenceAccessorService sequenceAccessorService;

         private IdentityManagementService identityManagementService;

         private ResponsibilityInternalService responsibilityInternalService;

     private Map<String,KimRoleTypeService> roleTypeServiceCache = Collections.synchronizedMap( new HashMap<String,KimRoleTypeService>() );

         private Map<String,KimDelegationTypeService> delegationTypeServiceCache = Collections.synchronizedMap( new HashMap<String,KimDelegationTypeService>() );

         private Map<String,Boolean> applicationRoleTypeCache = Collections.synchronizedMap( new HashMap<String,Boolean>() );

         private KimRoleDao roleDao;

         /**

          * A helper enumeration for indicating which KimRoleDao method to use when attempting to get role/delegation-related lists that are not in the cache.

          * 

          * @author Kuali Rice Team (rice.collab@kuali.org)

          */

         protected static enum RoleDaoAction {

                 ROLE_PRINCIPALS_FOR_PRINCIPAL_ID_AND_ROLE_IDS("principalMembers-"),

                 ROLE_GROUPS_FOR_GROUP_IDS_AND_ROLE_IDS("groupMembers-"),

                 ROLE_MEMBERS_FOR_ROLE_IDS("membersOfRole-"),

                 ROLE_MEMBERSHIPS_FOR_ROLE_IDS_AS_MEMBERS("rolesAsMembers-"),

                 ROLE_MEMBERS_FOR_ROLE_IDS_WITH_FILTERS("roleIdsWithFilters-"),

                 DELEGATION_PRINCIPALS_FOR_PRINCIPAL_ID_AND_DELEGATION_IDS("delegationPrincipals-"),

                 DELEGATION_GROUPS_FOR_GROUP_IDS_AND_DELEGATION_IDS("delegationGroups-"),

                 DELEGATION_MEMBERS_FOR_DELEGATION_IDS("delegationMembers-");

                 public final String DAO_ACTION_CACHE_PREFIX;

                 private RoleDaoAction(String daoActionCachePrefix) { this.DAO_ACTION_CACHE_PREFIX = daoActionCachePrefix;  }

         }

     // -----------------------------------------------------------------------------------------------------------------

     // Role Membership Caching Methods

     // -----------------------------------------------------------------------------------------------------------------

         /**

          * Generates a String key to use for storing or retrieving a RoleMemberImpl to/from the cache.

          * 

          * @param roleMemberId The ID of the RoleMemberImpl to generate a key for.

          * @return A cache key for the RoleMemberImpl with the given ID.

          */

         protected String getRoleMemberCacheKey(String roleMemberId) {

                 return ROLE_MEMBER_IMPL_CACHE_PREFIX + roleMemberId;

         }

         /**

          * Generates a String key to use for storing or retrieving a list of RoleMemberImpls to/from the cache. The key is generated by specifying

          * certain properties that are common to all the RoleMemberImpl instances in the list to be cached. Note that at least one common

          * property will always be null; for instance, a role member cannot have a member ID that refers to both a principal and a group, so at least

          * the principalId or the groupId parameter will have a null value passed in by the calling code in this RoleService implementation. Also,

          * the value of the RoleDaoAction parameter passed in will affect which subsequent parameters will be used in generating the cache key.

          * 

          * @param roleDaoAction The RoleDaoAction signifying which KimRoleDao call found this list; will determine how and which parameters are used.

          * @param roleId The role ID (possibly as a member ID) shared among the members of the list; will be interpreted as an empty String if this is blank.

          * @param principalId The (principal) member ID shared among the members of the list; will be interpreted as an empty String if this is blank.

          * @param groupId The (group) member ID shared among the members of the list; will be interpreted as an empty String if this is blank.

          * @param memberTypeCode The member type code shared among the members of the list; will be interpreted as an empty String if this is blank.

          * @return A cache key for the RoleMemberImpl list whose members share the given roleId, principalId, groupId, and memberTypeCode.

          * @throws IllegalArgumentException if the RoleDaoAction parameter does not refer to a role-member-related enumeration value.

          */

         protected String getRoleMemberListCacheKey(RoleDaoAction roleDaoAction, String roleId, String principalId, String groupId, String memberTypeCode) {

                 switch (roleDaoAction) {

                         case ROLE_PRINCIPALS_FOR_PRINCIPAL_ID_AND_ROLE_IDS : // Search for principal role members only.

                                 return new StringBuilder(ROLE_MEMBER_IMPL_LIST_CACHE_PREFIX).append(roleDaoAction.DAO_ACTION_CACHE_PREFIX).append(

                                                 StringUtils.isBlank(roleId) ? "" : roleId).append('-').append(StringUtils.isBlank(principalId) ? "" : principalId).toString();

                         case ROLE_GROUPS_FOR_GROUP_IDS_AND_ROLE_IDS : // Search for group role members only.

                                 return new StringBuilder(ROLE_MEMBER_IMPL_LIST_CACHE_PREFIX).append(roleDaoAction.DAO_ACTION_CACHE_PREFIX).append(

                                                 StringUtils.isBlank(roleId) ? "" : roleId).append('-').append(StringUtils.isBlank(groupId) ? "" : groupId).toString();

                         case ROLE_MEMBERS_FOR_ROLE_IDS : // Search for role members with the given member type code.

                                 return new StringBuilder(ROLE_MEMBER_IMPL_LIST_CACHE_PREFIX).append(roleDaoAction.DAO_ACTION_CACHE_PREFIX).append(

                                                 StringUtils.isBlank(roleId) ? "" : roleId).append('-').append(StringUtils.isBlank(memberTypeCode) ? "" : memberTypeCode).toString();

                         case ROLE_MEMBERSHIPS_FOR_ROLE_IDS_AS_MEMBERS : // Search for role members who are also roles.

                                 return new StringBuilder(ROLE_MEMBER_IMPL_LIST_CACHE_PREFIX).append(roleDaoAction.DAO_ACTION_CACHE_PREFIX).append(

                                                 StringUtils.isBlank(roleId) ? "" : roleId).toString();

                         case ROLE_MEMBERS_FOR_ROLE_IDS_WITH_FILTERS : // Search for role members that might be roles, principals, or groups.

                                 return new StringBuilder(ROLE_MEMBER_IMPL_LIST_CACHE_PREFIX).append(roleDaoAction.DAO_ACTION_CACHE_PREFIX).append(

                                                 StringUtils.isBlank(roleId) ? "" : roleId).append('-').append(StringUtils.isBlank(principalId) ? "" : principalId).append(

                                                                 '-').append(StringUtils.isBlank(groupId) ? "" : groupId).append('-').append(

                                                                                 StringUtils.isBlank(memberTypeCode) ? "" : memberTypeCode).toString();

                         default : // The daoActionToTake parameter is invalid; throw an exception.

                                 throw new IllegalArgumentException("The 'roleDaoAction' parameter cannot refer to a non-role-member-related value!");

                 }

         }

         /**

          * Converts the Qualifier Name/Value Role qualification set into Qualifier AttributeID/Value set

          * 

          * @param qualification The original role qualification attribute set

          * @return Converted attributeSet containing ID/value pairs

          */        

         private AttributeSet convertQualifierKeys(AttributeSet qualification) {

                 AttributeSet convertedQualification = new AttributeSet();

                 if(qualification != null && CollectionUtils.isNotEmpty(qualification.keySet())) { 

                         for(String attributeName : qualification.keySet()) {

                                 if(StringUtils.isNotEmpty(getKimAttributeId(attributeName))) {

                                         convertedQualification.put(getKimAttributeId(attributeName), qualification.get(attributeName));

                                 }

                         }

                 }

                 return convertedQualification;

         }

     public Set<String> getRoleTypeRoleMemberIds( String roleId ){

             Set<String> results = new HashSet();

             getNestedRoleTypeMemberIds( roleId, results);

             return results;

     }

     protected void getNestedRoleTypeMemberIds( String roleId, Set members) throws RuntimeException

     {

             ArrayList<String> roleList = new ArrayList<String>( 1 );

                 roleList.add( roleId );

                 List<RoleMemberImpl> firstLevelMembers = getStoredRoleMembersForRoleIds(roleList, KimConstants.KimUIConstants.MEMBER_TYPE_ROLE_CODE, null);

                 for (RoleMemberImpl member : firstLevelMembers) {

                         if (KimConstants.KimUIConstants.MEMBER_TYPE_ROLE_CODE.equals(member.getMemberTypeCode())){

                                 if (!members.contains(member.getMemberId())){

                                         members.add(member.getMemberId());

                                         getNestedRoleTypeMemberIds( member.getMemberId(), members);

                                 }

                         }

             }            

     }

     public List<String> getMemberParentRoleIds(String memberType, String memberId) {        

                 List<RoleMemberImpl> parentRoleMembers = roleDao.getRoleMembershipsForMemberId(memberType, memberId, null);

                 List<String> parentRoleIds = new ArrayList<String>(parentRoleMembers.size());

                 for (RoleMemberImpl parentRoleMember: parentRoleMembers) {

                         parentRoleIds.add(parentRoleMember.getRoleId());

                 }

             return parentRoleIds;

     }

         /**

          * Retrieves a list of RoleMemberImpl instances from the cache and/or the KimRoleDao as appropriate.

          * 

          * @param daoActionToTake An indicator for which KimRoleDao method should be used to get the results if the desired RoleMemberImpls are not cached.

          * @param roleIds The role IDs to filter by; may get used as the IDs for members that are also roles, depending on the daoActionToTake value.

          * @param principalId The principal ID to filter by; may get ignored depending on the daoActionToTake value.

          * @param groupIds The group IDs to filter by; may get ignored depending on the daoActionToTake value.

          * @param memberTypeCode The member type code to filter by; may get overridden depending on the daoActionToTake value.

          * @param qualification The original role qualification attribute set 

          * @return A list of RoleMemberImpl instances based on the provided parameters.

          * @throws IllegalArgumentException if daoActionToTake refers to an enumeration constant that is not role-member-related.

          */

         protected List<RoleMemberImpl> getRoleMemberImplList(RoleDaoAction daoActionToTake, Collection<String> roleIds, String principalId,

                         Collection<String> groupIds, String memberTypeCode, AttributeSet qualification) {

                 List<RoleMemberImpl> finalResults = new ArrayList<RoleMemberImpl>();

                 List<RoleMemberCacheKeyHelper> searchKeys = new ArrayList<RoleMemberCacheKeyHelper>();

                 List<RoleMemberCacheKeyHelper> uncachedKeys = new ArrayList<RoleMemberCacheKeyHelper>();

                 Set<String> usedKeys = new HashSet<String>();

                 AttributeSet convertedQualification = convertQualifierKeys(qualification);

                 if (roleIds == null || roleIds.isEmpty()) { roleIds = Collections.singletonList(null); }

                 if (groupIds == null || groupIds.isEmpty()) { groupIds = Collections.singletonList(null); }

                 // Attempt to find any pre-cached role members based on what KimRoleDao method call is desired.

                 switch (daoActionToTake) {

                         case ROLE_PRINCIPALS_FOR_PRINCIPAL_ID_AND_ROLE_IDS : // Search for principal role members only.

                                 for (String roleId : roleIds) {

                                         searchKeys.add(new RoleMemberCacheKeyHelper(daoActionToTake, roleId, principalId, null, Role.PRINCIPAL_MEMBER_TYPE));

                                 }

                                 break;

                         case ROLE_GROUPS_FOR_GROUP_IDS_AND_ROLE_IDS : // Search for group role members only.

                                 for (String roleId : roleIds) {

                                         for (String groupId : groupIds) {

                                                 searchKeys.add(new RoleMemberCacheKeyHelper(daoActionToTake, roleId, null, groupId, Role.GROUP_MEMBER_TYPE));

                                         }

                                 }

                                 break;

                         case ROLE_MEMBERS_FOR_ROLE_IDS : // Search for role members with the given member type code.

                                 for (String roleId : roleIds) {

                                         searchKeys.add(new RoleMemberCacheKeyHelper(daoActionToTake, roleId, null, null, memberTypeCode));

                                 }

                                 break;

                         case ROLE_MEMBERSHIPS_FOR_ROLE_IDS_AS_MEMBERS : // Search for role members who are also roles.

                                 for (String roleId : roleIds) {

                                         searchKeys.add(new RoleMemberCacheKeyHelper(daoActionToTake, roleId, null, null, Role.ROLE_MEMBER_TYPE));

                                 }

                                 break;

                         case ROLE_MEMBERS_FOR_ROLE_IDS_WITH_FILTERS : // Search for role members that might be roles, principals, or groups.

                                 for (String roleId : roleIds) {

                                         searchKeys.add(new RoleMemberCacheKeyHelper(daoActionToTake, roleId, null, null, Role.ROLE_MEMBER_TYPE));

                                         searchKeys.add(new RoleMemberCacheKeyHelper(daoActionToTake, roleId, principalId, null, Role.PRINCIPAL_MEMBER_TYPE));

                                         for (String groupId : groupIds) {

                                                 searchKeys.add(new RoleMemberCacheKeyHelper(daoActionToTake, roleId, null, groupId, Role.GROUP_MEMBER_TYPE));

                                         }

                                 }

                                 break;

                         default : // The daoActionToTake parameter is invalid; throw an exception.

                                 throw new IllegalArgumentException("The 'daoActionToTake' parameter cannot refer to a non-role-member-related value!");

                 }

                 // Attempt to find any pre-cached role members.

                 for (RoleMemberCacheKeyHelper searchKey : searchKeys) {

                         if (!usedKeys.contains(searchKey.getCacheKey())) {

                                 List<RoleMemberImpl> tempMembers = (List<RoleMemberImpl>) getCacheAdministrator().getFromCache(searchKey.getCacheKey());

                                 if (tempMembers != null) {

                                         finalResults.addAll(tempMembers);

                                 } else {

                                         uncachedKeys.add(searchKey);

                                 }

                                 usedKeys.add(searchKey.getCacheKey());

                         }

                 }

                 // If any portion of the result set was not in the cache, then retrieve and cache the missing sections.

                 if (!uncachedKeys.isEmpty()) {

                         Set<String> uncachedRoleSet = new HashSet<String>();

                         Set<String> uncachedGroupSet = new HashSet<String>();

                         for (RoleMemberCacheKeyHelper uncachedKey : uncachedKeys) {

                                 if (uncachedKey.ROLE_ID != null) { uncachedRoleSet.add(uncachedKey.ROLE_ID); }

                                 if (uncachedKey.GROUP_ID != null) { uncachedGroupSet.add(uncachedKey.GROUP_ID); }

                         }

                         List<String> uncachedRoles = (uncachedRoleSet.isEmpty()) ? null : new ArrayList<String>(uncachedRoleSet);

                         List<String> uncachedGroups = (uncachedGroupSet.isEmpty()) ? null : new ArrayList<String>(uncachedGroupSet);

                         List<RoleMemberImpl> uncachedResults = null;

                         // Retrieve the uncached RoleMemberImpls via the appropriate RoleDao method.

                         switch (daoActionToTake) {

                                 case ROLE_PRINCIPALS_FOR_PRINCIPAL_ID_AND_ROLE_IDS : // Search for principal role members only.

                                         uncachedResults = roleDao.getRolePrincipalsForPrincipalIdAndRoleIds(uncachedRoles, principalId, convertedQualification);

                                         break;

                                 case ROLE_GROUPS_FOR_GROUP_IDS_AND_ROLE_IDS : // Search for group role members only.

                                         uncachedResults = roleDao.getRoleGroupsForGroupIdsAndRoleIds(uncachedRoles, uncachedGroups, convertedQualification);

                                         break;

                                 case ROLE_MEMBERS_FOR_ROLE_IDS : // Search for role members with the given member type code.

                                         uncachedResults = roleDao.getRoleMembersForRoleIds(uncachedRoles, memberTypeCode, convertedQualification);

                                         break;

                                 case ROLE_MEMBERSHIPS_FOR_ROLE_IDS_AS_MEMBERS : // Search for role members who are also roles.

                                         uncachedResults = roleDao.getRoleMembershipsForRoleIdsAsMembers(uncachedRoles, convertedQualification);

                                         break;

                                 case ROLE_MEMBERS_FOR_ROLE_IDS_WITH_FILTERS : // Search for role members that might be roles, principals, or groups.

                                         uncachedResults = roleDao.getRoleMembersForRoleIdsWithFilters(uncachedRoles, principalId, uncachedGroups, convertedQualification);

                                         break;

                                 default : // This should never happen, since the previous switch block should handle this case appropriately.

                                         throw new IllegalArgumentException("The 'daoActionToTake' parameter cannot refer to a non-role-member-related value!");

                         }

                         cacheRoleMemberLists(uncachedKeys, uncachedResults);

                         for (RoleMemberImpl uncachedMember : uncachedResults) {

                                 addRoleMemberImplToCache(uncachedMember);

                         }

                         finalResults.addAll(uncachedResults);

                 }

                 return finalResults;

         }

         /**

          * Caches several Lists of role members that are constructed based on the given search keys. Note that a given List will not be cached if

          * it contains any role members that belong to a role that disallows caching of its members.

          * 

          * @param keysToCache The keys of the role member Lists that will be used to store the uncached results.

          * @param membersToCache The uncached role members.

          */

         private void cacheRoleMemberLists(List<RoleMemberCacheKeyHelper> keysToCache, List<RoleMemberImpl> membersToCache) {

                 if (membersToCache == null) { membersToCache = new ArrayList<RoleMemberImpl>(); }

                 for (RoleMemberCacheKeyHelper keyToCache : keysToCache) {

                         List<RoleMemberImpl> roleMembers = new ArrayList<RoleMemberImpl>();

                         // Cache the Lists that do not contain role members belonging to roles that forbid caching of their members.

                         if (RoleDaoAction.ROLE_MEMBERSHIPS_FOR_ROLE_IDS_AS_MEMBERS.equals(keyToCache.ROLE_DAO_ACTION)) {

                                 boolean safeToCacheList = true;

                                 for (RoleMemberImpl memberToCache : membersToCache) {

                                         if ( (keyToCache.ROLE_ID == null || keyToCache.ROLE_ID.equals(memberToCache.getMemberId())) &&

                                                         (keyToCache.MEMBER_TYPE_CODE == null || keyToCache.MEMBER_TYPE_CODE.equals(memberToCache.getMemberTypeCode())) ) {

                                                 if (shouldCacheMembersOfRole(memberToCache.getRoleId())) {

                                                         roleMembers.add(memberToCache);

                                                 } else {

                                                         safeToCacheList = false;

                                                         break;

                                                 }

                                         }

                                 }

                                 if (safeToCacheList) { getCacheAdministrator().putInCache(keyToCache.getCacheKey(), roleMembers, ROLE_MEMBER_IMPL_CACHE_GROUP); }

                         } else if (keyToCache.ROLE_ID == null || shouldCacheMembersOfRole(keyToCache.ROLE_ID)) {

                                 for (RoleMemberImpl memberToCache : membersToCache) {

                                         if ( (keyToCache.ROLE_ID == null || keyToCache.ROLE_ID.equals(memberToCache.getRoleId())) &&

                                                         (keyToCache.PRINCIPAL_ID == null || keyToCache.PRINCIPAL_ID.equals(memberToCache.getMemberId())) &&

                                                         (keyToCache.GROUP_ID == null || keyToCache.GROUP_ID.equals(memberToCache.getMemberId())) &&

                                                         (keyToCache.MEMBER_TYPE_CODE == null || keyToCache.MEMBER_TYPE_CODE.equals(memberToCache.getMemberTypeCode())) ) {

                                                 roleMembers.add(memberToCache);

                                         }

                                 }

                                 getCacheAdministrator().putInCache(keyToCache.getCacheKey(), roleMembers, ROLE_MEMBER_IMPL_CACHE_GROUP);

                         }

                 }

         }

         /** Calls the KimRoleDao's "getRolePrincipalsForPrincipalIdAndRoleIds" method and/or retrieves any corresponding members from the cache. */

         protected List<RoleMemberImpl> getStoredRolePrincipalsForPrincipalIdAndRoleIds(Collection<String> roleIds, String principalId, AttributeSet qualification) {

                 return getRoleMemberImplList(RoleDaoAction.ROLE_PRINCIPALS_FOR_PRINCIPAL_ID_AND_ROLE_IDS, roleIds, principalId, null, null, qualification);

         }

         /** Calls the KimRoleDao's "getRoleGroupsForGroupIdsAndRoleIds" method and/or retrieves any corresponding members from the cache. */

         protected List<RoleMemberImpl> getStoredRoleGroupsForGroupIdsAndRoleIds(Collection<String> roleIds, Collection<String> groupIds, AttributeSet qualification) {

                 return getRoleMemberImplList(RoleDaoAction.ROLE_GROUPS_FOR_GROUP_IDS_AND_ROLE_IDS, roleIds, null, groupIds, null, qualification);

         }

         /** Calls the KimRoleDao's "getRoleMembersForRoleIds" method and/or retrieves any corresponding members from the cache. */

         protected List<RoleMemberImpl> getStoredRoleMembersForRoleIds(Collection<String> roleIds, String memberTypeCode, AttributeSet qualification) {

                 return getRoleMemberImplList(RoleDaoAction.ROLE_MEMBERS_FOR_ROLE_IDS, roleIds, null, null, memberTypeCode, qualification);

         }

         /** Calls the KimRoleDao's "getRoleMembershipsForRoleIdsAsMembers" method and/or retrieves any corresponding members from the cache. */

         protected List<RoleMemberImpl> getStoredRoleMembershipsForRoleIdsAsMembers(Collection<String> roleIds, AttributeSet qualification) {

                 return getRoleMemberImplList(RoleDaoAction.ROLE_MEMBERSHIPS_FOR_ROLE_IDS_AS_MEMBERS, roleIds, null, null, null, qualification);

         }

         /** Calls the KimRoleDao's "getRoleMembersForRoleIdsWithFilters" method and/or retrieves any corresponding members from the cache. */

         protected List<RoleMemberImpl> getStoredRoleMembersForRoleIdsWithFilters(Collection<String> roleIds, String principalId, List<String> groupIds, AttributeSet qualification) {

                 return getRoleMemberImplList(RoleDaoAction.ROLE_MEMBERS_FOR_ROLE_IDS_WITH_FILTERS, roleIds, principalId, groupIds, null, qualification);

         }

         /**

          * Determines whether or not the given role should allow its members to be cached. The default implementation always returns true, but

          * subclasses can override this method if other non-default Role implementations forbid their members from being cached.

          * 

          * @param roleId The ID of the role to check for determining whether or not to allow caching of its members.

          * @return True if the given role allows its members to be cached; false otherwise.

          */

         protected boolean shouldCacheMembersOfRole(String roleId) {

                 return true;

         }

         protected void addRoleMemberImplToCache(RoleMemberImpl roleMember) {

                 if (roleMember != null && shouldCacheMembersOfRole(roleMember.getRoleId())) {

                         getCacheAdministrator().putInCache(getRoleMemberCacheKey(roleMember.getRoleMemberId()), roleMember, ROLE_MEMBER_IMPL_CACHE_GROUP);

                 }

         }

         protected RoleMemberImpl getRoleMemberFromCache(String roleMemberId) {

                 return (RoleMemberImpl)getCacheAdministrator().getFromCache(getRoleMemberCacheKey(roleMemberId));

         }

         public void flushInternalRoleMemberCache() {

                 getCacheAdministrator().flushGroup(ROLE_MEMBER_IMPL_CACHE_GROUP);

         }

         /**

          * Retrieves a RoleMemberImpl object by its ID. If the role member already exists in the cache, this method will return the cached

          * version; otherwise, it will retrieve the uncached version from the database and then cache it (if it belongs to a role that allows

          * its members to be cached) before returning it.

          */

     protected RoleMemberImpl getRoleMemberImpl( String roleMemberId ) {

             if (StringUtils.isBlank(roleMemberId)) {

                     return null;

             }

             // If the RoleMemberImpl exists in the cache, return the cached one.

             RoleMemberImpl tempRoleMemberImpl = getRoleMemberFromCache(roleMemberId);

             if (tempRoleMemberImpl != null) {

                     return tempRoleMemberImpl;

             }

             // Otherwise, retrieve it normally.

             tempRoleMemberImpl = (RoleMemberImpl)getBusinessObjectService().findByPrimaryKey( RoleMemberImpl.class,

                             Collections.singletonMap(KIMPropertyConstants.RoleMember.ROLE_MEMBER_ID, roleMemberId) );

             addRoleMemberImplToCache(tempRoleMemberImpl);

             return tempRoleMemberImpl;

     }

     // -----------------------------------------------------------------------------------------------------------------

     // Delegation Caching Methods

     // -----------------------------------------------------------------------------------------------------------------

         /**

          * Generates a String key to use for storing or retrieving a KimDelegationImpl to/from the cache.

          * 

          * @param delegationId The ID of the KimDelegationImpl to generate a key for.

          * @return A cache key for the KimDelegationImpl with the given ID.

          */

         protected String getDelegationCacheKey(String delegationId) {

                 return DELEGATION_IMPL_CACHE_PREFIX + delegationId;

         }

     /**

      * Generates a String key to use for storing or retrieving a List of KimDelegationImpls to/from the cache based on a role's ID.

      * @param roleId The ID of the role that the KIM delegations belong to.

      * @return A cache key for the KimDelegationImpls with the given role ID.

      */

     protected String getDelegationListCacheKey(String roleId) {

             return DELEGATION_IMPL_LIST_CACHE_PREFIX + (StringUtils.isBlank(roleId) ? "" : roleId);

     }

     /** Calls the KimRoleDao's "getDelegationImplMapFromRoleIds" method and/or retrieves any corresponding delegations from the cache. */

         protected Map<String,KimDelegationImpl> getStoredDelegationImplMapFromRoleIds(Collection<String> roleIds) {

                 Map<String,KimDelegationImpl> finalResults = Collections.emptyMap();

                 if (roleIds != null && !roleIds.isEmpty()) {

                         Map<String,List<KimDelegationImpl>> uncachedLists = new HashMap<String,List<KimDelegationImpl>>();

                         // Retrieve any existing results from the cache.

                         finalResults = getKimDelegationImplMap(uncachedLists, roleIds);

                         // Retrieve any uncached results from the database and then cache them.

                         if (!uncachedLists.isEmpty()) {

                                 Map<String,KimDelegationImpl> uncachedResults = roleDao.getDelegationImplMapFromRoleIds(uncachedLists.keySet());

                                 for (Map.Entry<String,KimDelegationImpl> uncachedResult : uncachedResults.entrySet()) {

                                         finalResults.put(uncachedResult.getKey(), uncachedResult.getValue());

                                         addKimDelegationImplToCache(uncachedResult.getValue());

                                         uncachedLists.get(uncachedResult.getValue().getRoleId()).add(uncachedResult.getValue());

                                 }

                                 for (Map.Entry<String,List<KimDelegationImpl>> uncachedList : uncachedLists.entrySet()) {

                                         getCacheAdministrator().putInCache(getDelegationListCacheKey(uncachedList.getKey()),

                                                         uncachedList.getValue(), DELEGATION_IMPL_CACHE_GROUP);

                                 }

                         }

                 }

                 return finalResults;

         }

         /** Calls the KimRoleDao's "getDelegationImplsForRoleIds" method and/or retrieves any corresponding delegations from the cache. */

         protected List<KimDelegationImpl> getStoredDelegationImplsForRoleIds(Collection<String> roleIds) {

                 List<KimDelegationImpl> finalResults = new ArrayList<KimDelegationImpl>();

                 if (roleIds != null && !roleIds.isEmpty()) {

                         Map<String,List<KimDelegationImpl>> uncachedLists = new HashMap<String,List<KimDelegationImpl>>();

                         // Retrieve any existing results from the cache.

                         Map<String,KimDelegationImpl> tempDelegations = getKimDelegationImplMap(uncachedLists, roleIds);

                         finalResults.addAll(tempDelegations.values());

                         // Retrieve any uncached results from the database and then cache them.

                         if (!uncachedLists.isEmpty()) {

                                 List<KimDelegationImpl> uncachedResults = roleDao.getDelegationImplsForRoleIds(uncachedLists.keySet());

                                 for (KimDelegationImpl uncachedResult : uncachedResults) {

                                         addKimDelegationImplToCache(uncachedResult);

                                         uncachedLists.get(uncachedResult.getRoleId()).add(uncachedResult);

                                 }

                                 for (Map.Entry<String,List<KimDelegationImpl>> uncachedList : uncachedLists.entrySet()) {

                                         getCacheAdministrator().putInCache(getDelegationListCacheKey(uncachedList.getKey()),

                                                         uncachedList.getValue(), DELEGATION_IMPL_CACHE_GROUP);

                                 }

                                 finalResults.addAll(uncachedResults);

                         }

                 }

                 return finalResults;

         }

         /**

          * Retrieves any existing delegation lists from the cache for the given role IDs. If the delegations for a given role have not been cached,

          * then a new entry containing the uncached role ID and an empty List will be added to the given Map.

          * 

          * @param uncachedLists The Map in which to place any uncached lists; cannot be null.

          * @param roleIds The IDs of the roles containing the delegations.

          * @return A mutable Map containing any existing results from the cache and which maps the delegations' IDs to the delegation objects.

          * @throws IllegalArgumentException if the provided Map is null.

          */

         protected Map<String,KimDelegationImpl> getKimDelegationImplMap(Map<String,List<KimDelegationImpl>> uncachedLists, Collection<String> roleIds) {

                 if (uncachedLists == null) {

                         throw new IllegalArgumentException("'uncachedLists' parameter cannot be null!");

                 }

                 Map<String,KimDelegationImpl> delegationMap = new HashMap<String,KimDelegationImpl>();

                 // Retrieve any existing results from the cache.

                 if (roleIds != null && !roleIds.isEmpty()) {

                         for (String roleId : roleIds) {

                                 List<KimDelegationImpl> tempDelegations = (List<KimDelegationImpl>) getCacheAdministrator().getFromCache(getDelegationListCacheKey(roleId));

                                 if (tempDelegations != null) {

                                         for (KimDelegationImpl tempDelegation : tempDelegations) {

                                                 delegationMap.put(tempDelegation.getDelegationId(), tempDelegation);

                                         }

                                 } else {

                                         uncachedLists.put(roleId, new ArrayList<KimDelegationImpl>());

                                 }

                         }

                 }

                 return delegationMap;

         }

         protected void addKimDelegationImplToCache(KimDelegationImpl delegation) {

                 if (delegation != null) {

                         getCacheAdministrator().putInCache(getDelegationCacheKey(delegation.getDelegationId()),

                                         delegation, DELEGATION_IMPL_CACHE_GROUP);

                 }

         }

         protected KimDelegationImpl getDelegationFromCache(String delegationId) {

                 return (KimDelegationImpl)getCacheAdministrator().getFromCache(getDelegationCacheKey(delegationId));

         }

         public void flushInternalDelegationCache() {

                 getCacheAdministrator().flushGroup(DELEGATION_IMPL_CACHE_GROUP);

         }

         /**

          * Retrieves a KimDelegationImpl object by its ID. If the delegation already exists in the cache, this method will return the cached

          * version; otherwise, it will retrieve the uncached version from the database and then cache it before returning it.

          */

     protected KimDelegationImpl getKimDelegationImpl( String delegationId ) {

             if (StringUtils.isBlank(delegationId)) {

                     return null;

             }

             // If the KimDelegationImpl exists in the cache, return the cached one.

             KimDelegationImpl tempDelegation = getDelegationFromCache(delegationId);

             if (tempDelegation != null) {

                     return tempDelegation;

             }

             // Otherwise, retrieve it normally.

             tempDelegation = (KimDelegationImpl)getBusinessObjectService().findByPrimaryKey( KimDelegationImpl.class,

                             Collections.singletonMap(KimConstants.PrimaryKeyConstants.DELEGATION_ID, delegationId) );

             addKimDelegationImplToCache(tempDelegation);

             return tempDelegation;

     }

     // -----------------------------------------------------------------------------------------------------------------

     // Delegation Membership Caching Methods

     // -----------------------------------------------------------------------------------------------------------------

         /**

          * Generates a String key to use for storing or retrieving a KimDelegationMemberImpl to/from the cache.

          * 

          * @param delegationMemberId The ID of the KimDelegationMemberImpl to generate a key for.

          * @return A cache key for the KimDelegationMemberImpl with the given ID.

          */

         protected String getDelegationMemberCacheKey(String delegationMemberId) {

                 return DELEGATION_MEMBER_IMPL_CACHE_PREFIX + delegationMemberId;

         }

         /**

          * Generates a String key to use for storing or retrieving a KimDelegationMemberImpl to/from the cache by both delegation ID and delegation member ID.

          * 

          * @param delegationId The ID of the delegation that the KimDelegationMemberImpl belongs to.

          * @param delegationMemberId The ID of the KimDelegationMemberImpl to generate a key for.

          * @return A cache key for the KimDelegationMemberImpl with the given delegation ID and delegation member ID.

          */

         protected String getDelegationMemberByDelegationAndIdCacheKey(String delegationId, String delegationMemberId) {

                 return new StringBuilder(DELEGATION_MEMBER_IMPL_BY_DLGN_AND_ID_CACHE_PREFIX).append(delegationId).append('-').append(delegationMemberId).toString();

         }

         /**

          * Generates a String key to use for storing or retrieving a KimDelegationMemberImpl List to/from the cache by both delegation ID and member ID.

          * 

          * @param memberId The principal/group/role ID of the KimDelegationMemberImpl(s) in the List.

          * @param delegationId The ID of the delegation that the KimDelegationMemberImpl(s) in the List belong to.

          * @return A cache key for the KimDelegationMemberImpl List with the given delegation ID and member ID.

          */

         protected String getDelegationMemberListByMemberAndDelegationIdCacheKey(String memberId, String delegationId) {

                 return new StringBuilder(DELEGATION_MEMBER_IMPL_LIST_BY_MBR_DLGN_CACHE_PREFIX).append(StringUtils.isBlank(memberId) ? "" : memberId).append(

                                 '-').append(StringUtils.isBlank(delegationId) ? "" : delegationId).toString();

         }

         /**

          * Generates a String key to use for storing or retrieving a List of KimDelegationMemberImpl lists to/from the cache. Some parameters may get

          * ignored depending on which KimRoleDao call is desired.

          * 

          * @param daoAction The RoleDaoAction signifying which KimRoleDao call found this list; will determine how and which parameters are used.

          * @param delegationId The ID of the KimDelegationImpl that the indicated delegation member belongs to; will be interpreted as an empty String if blank.

          * @param principalId The (principal) member ID of the delegation members; will be interpreted as an empty String if blank.

          * @param groupId The (group) member ID of the delegation members; will be interpreted as an empty String if blank.

          * @return A cache key for the KimDelegationMemberImpl List with the given criteria.

          * @throws IllegalArgumentException if daoAction does not represent a delegation-member-related enumeration value.

          */

         protected String getDelegationMemberListCacheKey(RoleDaoAction daoAction, String delegationId, String principalId, String groupId) {

                 switch (daoAction) {

                         case DELEGATION_PRINCIPALS_FOR_PRINCIPAL_ID_AND_DELEGATION_IDS : // Search for principal delegation members.

                                 return new StringBuilder(DELEGATION_MEMBER_IMPL_LIST_CACHE_PREFIX).append(daoAction.DAO_ACTION_CACHE_PREFIX).append(

                                                 StringUtils.isBlank(delegationId) ? "" : delegationId).append('-').append(

                                                                 StringUtils.isBlank(principalId) ? "" : principalId).toString();

                         case DELEGATION_GROUPS_FOR_GROUP_IDS_AND_DELEGATION_IDS : // Search for group delegation members.

                                 return new StringBuilder(DELEGATION_MEMBER_IMPL_LIST_CACHE_PREFIX).append(daoAction.DAO_ACTION_CACHE_PREFIX).append(

                                                 StringUtils.isBlank(delegationId) ? "" : delegationId).append('-').append(StringUtils.isBlank(groupId) ? "" : groupId).toString();

                         case DELEGATION_MEMBERS_FOR_DELEGATION_IDS : // Search for delegation members regardless of their member type.

                                 return new StringBuilder(DELEGATION_MEMBER_IMPL_LIST_CACHE_PREFIX).append(daoAction.DAO_ACTION_CACHE_PREFIX).append(

                                                 StringUtils.isBlank(delegationId) ? "" : delegationId).toString();

                         default : // daoActionToTake is invalid; throw an exception.

                                 throw new IllegalArgumentException("The 'daoActionToTake' parameter cannot refer to a non-delegation-member-related value!");

                 }

         }

         /**

          * Retrieves a List of delegation members from the cache and/or the KimRoleDao as appropriate.

          * 

          * @param daoActionToTake An indicator for which KimRoleDao method to use for retrieving uncached results.

          * @param delegationIds The IDs of the delegations that the members belong to.

          * @param principalId The principal ID of the principal delegation members; may get ignored depending on the RoleDaoAction value.

          * @param groupIds The group IDs of the group delegation members; may get ignored depending on the RoleDaoAction value.

          * @return A List of KimDelegationMemberImpl objects based on the provided parameters.

          * @throws IllegalArgumentException if daoActionToTake does not represent a delegation-member-list-related enumeration value.

          */

         protected List<KimDelegationMemberImpl> getKimDelegationMemberImplList(RoleDaoAction daoActionToTake, Collection<String> delegationIds,

                         String principalId, List<String> groupIds) {

                 List<KimDelegationMemberImpl> finalResults = new ArrayList<KimDelegationMemberImpl>();

                 List<String[]> uncachedKeys = new ArrayList<String[]>();

                 Set<String> usedKeys = new HashSet<String>();

                 if (delegationIds == null || delegationIds.isEmpty()) { delegationIds = Collections.singletonList(null); }

                 if (groupIds == null || groupIds.isEmpty()) { groupIds = Collections.singletonList(null); }

                 // Search for cached values based on the intended search action.

                 switch (daoActionToTake) {

                         case DELEGATION_PRINCIPALS_FOR_PRINCIPAL_ID_AND_DELEGATION_IDS : // Search for principal delegation members.

                                 for (String delegationId : delegationIds) {

                                         String tempKey = getDelegationMemberListCacheKey(daoActionToTake, delegationId, principalId, null);

                                         if (!usedKeys.contains(tempKey)) {

                                                 List<KimDelegationMemberImpl> tempMembers = (List<KimDelegationMemberImpl>) getCacheAdministrator().getFromCache(tempKey);

                                                 if (tempMembers != null) {

                                                         finalResults.addAll(tempMembers);

                                                 } else {

                                                         uncachedKeys.add(new String[] {delegationId, principalId, null});

                                                 }

                                                 usedKeys.add(tempKey);

                                         }

                                 }

                                 break;

                         case DELEGATION_GROUPS_FOR_GROUP_IDS_AND_DELEGATION_IDS : // Search for group delegation members.

                                 for (String delegationId : delegationIds) {

                                         for (String groupId : groupIds) {

                                                 String tempKey = getDelegationMemberListCacheKey(daoActionToTake, delegationId, null, groupId);

                                                 if (!usedKeys.contains(tempKey)) {

                                                         List<KimDelegationMemberImpl> tempMembers = (List<KimDelegationMemberImpl>) getCacheAdministrator().getFromCache(tempKey);

                                                         if (tempMembers != null) {

                                                                 finalResults.addAll(tempMembers);

                                                         } else {

                                                                 uncachedKeys.add(new String[] {delegationId, null, groupId});

                                                         }

                                                 }

                                         }

                                 }

                                 break;

                         default : // daoActionToTake is invalid; throw an exception.

                                 throw new IllegalArgumentException("The 'daoActionToTake' parameter cannot refer to a non-delegation-member-list-related value!");

                 }

                 // Retrieve any uncached values based on the intended search action.

                 if (!uncachedKeys.isEmpty()) {

                         List<KimDelegationMemberImpl> uncachedResults = new ArrayList<KimDelegationMemberImpl>();

                         Set<String> uncachedDelegationSet = new HashSet<String>();

                         Set<String> uncachedGroupSet = new HashSet<String>();

                         for (String[] uncachedKey : uncachedKeys) {

                                 if (uncachedKey[0] != null) { uncachedDelegationSet.add(uncachedKey[0]); }

                                 if (uncachedKey[2] != null) { uncachedGroupSet.add(uncachedKey[2]); }

                         }

                         List<String> uncachedDelegations = (uncachedDelegationSet.isEmpty()) ? null : new ArrayList<String>(uncachedDelegationSet);

                         List<String> uncachedGroups = (uncachedGroupSet.isEmpty()) ? null : new ArrayList<String>(uncachedGroupSet);

                         String memberTypeCode = null;

                         // Search for uncached values based on the intended search action.

                         switch (daoActionToTake) {

                                 case DELEGATION_PRINCIPALS_FOR_PRINCIPAL_ID_AND_DELEGATION_IDS : // Search for principal delegation members.

                                         uncachedResults = roleDao.getDelegationPrincipalsForPrincipalIdAndDelegationIds(uncachedDelegations, principalId);

                                         memberTypeCode = Role.PRINCIPAL_MEMBER_TYPE;

                                         break;

                                 case DELEGATION_GROUPS_FOR_GROUP_IDS_AND_DELEGATION_IDS : // Search for group delegation members.

                                         uncachedResults = roleDao.getDelegationGroupsForGroupIdsAndDelegationIds(uncachedDelegations, uncachedGroups);

                                         memberTypeCode = Role.GROUP_MEMBER_TYPE;

                                         break;

                                 default : // This should never happen since the previous switch block should handle this case appropriately.

                                         throw new IllegalArgumentException("The 'daoActionToTake' parameter cannot refer to a non-delegation-member-list-related value!");

                         }

                         // Cache the delegation members and add them to the final results.

                         cacheDelegationMemberLists(daoActionToTake, uncachedKeys, memberTypeCode, uncachedResults);

                         for (KimDelegationMemberImpl uncachedResult : uncachedResults) {

                                 addKimDelegationMemberImplToCache(uncachedResult);

                         }

                         finalResults.addAll(uncachedResults);

                 }

                 return finalResults;

         }

         /**

          * Caches several Lists of delegation members that are constructed based on the given search parameters.

          * 

          * @param daoActionToTake The enumeration constant representing the KimRoleDao call that returned the results.

          * @param uncachedKeys The keys of the delegation member Lists that will be used to store the uncached results.

          * @param memberTypeCode The member type code of all the delegation members in the uncached results.

          * @param uncachedMembers The uncached delegation members.

          */

         private void cacheDelegationMemberLists(RoleDaoAction daoActionToTake, List<String[]> uncachedKeys,

                         String memberTypeCode, List<KimDelegationMemberImpl> uncachedMembers) {

                 // Place the uncached delegation members into the list cache appropriately.

                 for (String[] uncachedKey : uncachedKeys) {

                         List<KimDelegationMemberImpl> tempMembers = new ArrayList<KimDelegationMemberImpl>();

                         for (KimDelegationMemberImpl uncachedMember : uncachedMembers) {

                                 if ( (memberTypeCode == null || memberTypeCode.equals(uncachedMember.getMemberTypeCode())) &&

                                                 (uncachedKey[0] == null || uncachedKey[0].equals(uncachedMember.getDelegationId())) &&

                                                                 (uncachedKey[1] == null || uncachedKey[1].equals(uncachedMember.getMemberId())) &&

                                                                                 (uncachedKey[2] == null || uncachedKey[2].equals(uncachedMember.getMemberId())) ) {

                                         tempMembers.add(uncachedMember);

                                 }

                         }

                         getCacheAdministrator().putInCache(getDelegationMemberListCacheKey(daoActionToTake, uncachedKey[0], uncachedKey[1], uncachedKey[2]),

                                         tempMembers, DELEGATION_MEMBER_IMPL_CACHE_GROUP);

                 }

         }

         /** Calls the KimRoleDao's "getDelegationPrincipalsForPrincipalIdAndDelegationIds" method and/or retrieves any corresponding members from the cache. */

         protected List<KimDelegationMemberImpl> getStoredDelegationPrincipalsForPrincipalIdAndDelegationIds(Collection<String> delegationIds,String principalId){

                 return getKimDelegationMemberImplList(RoleDaoAction.DELEGATION_PRINCIPALS_FOR_PRINCIPAL_ID_AND_DELEGATION_IDS, delegationIds, principalId, null);

         }

         /** Calls the KimRoleDao's "getDelegationGroupsForGroupIdAndDelegationIds" method and/or retrieves any corresponding members from the cache. */

         protected List<KimDelegationMemberImpl> getStoredDelegationGroupsForGroupIdsAndDelegationIds(Collection<String> delegationIds, List<String> groupIds) {

                 return getKimDelegationMemberImplList(RoleDaoAction.DELEGATION_GROUPS_FOR_GROUP_IDS_AND_DELEGATION_IDS, delegationIds, null, groupIds);

         }

         /** Calls the KimRoleDao's "getDelegationMembersForDelegationIds" method and/or retrieves any corresponding members from the cache. */

         protected Map<String,List<KimDelegationMemberImpl>> getStoredDelegationMembersForDelegationIds(List<String> delegationIds) {

                 Map<String,List<KimDelegationMemberImpl>> finalResults = new HashMap<String,List<KimDelegationMemberImpl>>();

                 Set<String> uncachedDelegationIds = new HashSet<String>();

                 boolean idListWasNullOrEmpty = (delegationIds == null || delegationIds.isEmpty());

                 if (idListWasNullOrEmpty) { delegationIds = Collections.singletonList(null); }

                 // Retrieve any existing Lists from the cache.

                 for (String delegationId : delegationIds) {

                         List<KimDelegationMemberImpl> tempMembers = (List<KimDelegationMemberImpl>) getCacheAdministrator().getFromCache(

                                         getDelegationMemberListCacheKey(RoleDaoAction.DELEGATION_MEMBERS_FOR_DELEGATION_IDS, delegationId, null, null));

                         if (tempMembers != null) {

                                 finalResults.put(delegationId, tempMembers);

                         } else {

                                 uncachedDelegationIds.add(delegationId);

                         }

                 }

                 // Retrieve and cache any uncached results. If the initial delegation ID List was null or empty, then also cache a List holding all the results.

                 if (!uncachedDelegationIds.isEmpty()) {

                         List<String> uncachedIdsList = (idListWasNullOrEmpty) ? new ArrayList<String>() : new ArrayList<String>(uncachedDelegationIds);

                         Map<String,List<KimDelegationMemberImpl>> tempMemberMap = roleDao.getDelegationMembersForDelegationIds(uncachedIdsList);

                         List<KimDelegationMemberImpl> allMembers = new ArrayList<KimDelegationMemberImpl>();

                         for (Map.Entry<String,List<KimDelegationMemberImpl>> tempMemberEntry : tempMemberMap.entrySet()) {

                                 getCacheAdministrator().putInCache(getDelegationMemberListCacheKey(RoleDaoAction.DELEGATION_MEMBERS_FOR_DELEGATION_IDS,

                                                 tempMemberEntry.getKey(), null, null), tempMemberEntry.getValue(), DELEGATION_MEMBER_IMPL_CACHE_GROUP);

                                 for (KimDelegationMemberImpl tempMember : tempMemberEntry.getValue()) {

                                         addKimDelegationMemberImplToCache(tempMember);

                                 }

                                 if (idListWasNullOrEmpty) {

                                         allMembers.addAll(tempMemberEntry.getValue());

                                 }

                                 finalResults.put(tempMemberEntry.getKey(), tempMemberEntry.getValue());

                         }

                         if (idListWasNullOrEmpty) {

                                 getCacheAdministrator().putInCache(getDelegationMemberListCacheKey(RoleDaoAction.DELEGATION_MEMBERS_FOR_DELEGATION_IDS,

                                                 null, null, null), allMembers, DELEGATION_MEMBER_IMPL_CACHE_GROUP);

                         }

                 }

                 return finalResults;

         }

         protected void addKimDelegationMemberImplToCache(KimDelegationMemberImpl delegationMember) {

                 if (delegationMember != null) {

                         getCacheAdministrator().putInCache(getDelegationMemberCacheKey(delegationMember.getDelegationMemberId()),

                                         delegationMember, DELEGATION_MEMBER_IMPL_CACHE_GROUP);

                         getCacheAdministrator().putInCache(getDelegationMemberByDelegationAndIdCacheKey(delegationMember.getDelegationId(),

                                         delegationMember.getDelegationMemberId()), delegationMember, DELEGATION_MEMBER_IMPL_CACHE_GROUP);

                 }

         }

         protected void addKimDelegationMemberImplListByMemberAndDelegationIdToCache(

                         List<KimDelegationMemberImpl> memberList, String memberId, String delegationId) {

                 if (memberList != null) {

                         getCacheAdministrator().putInCache(getDelegationMemberListByMemberAndDelegationIdCacheKey(memberId, delegationId),

                                         memberList, DELEGATION_MEMBER_IMPL_CACHE_GROUP);

                 }

         }

         protected KimDelegationMemberImpl getDelegationMemberFromCache(String delegationMemberId) {

                 return (KimDelegationMemberImpl)getCacheAdministrator().getFromCache(getDelegationMemberCacheKey(delegationMemberId));

         }

         protected KimDelegationMemberImpl getDelegationMemberByDelegationAndIdFromCache(String delegationId, String delegationMemberId) {

                 return (KimDelegationMemberImpl)getCacheAdministrator().getFromCache(getDelegationMemberByDelegationAndIdCacheKey(delegationId,delegationMemberId));

         }

         protected List<KimDelegationMemberImpl> getDelegationMemberListByMemberAndDelegationIdFromCache(String memberId, String delegationId) {

                 return (List<KimDelegationMemberImpl>)

                                 getCacheAdministrator().getFromCache(getDelegationMemberListByMemberAndDelegationIdCacheKey(memberId, delegationId));

         }

         public void flushInternalDelegationMemberCache() {

                 getCacheAdministrator().flushGroup(DELEGATION_MEMBER_IMPL_CACHE_GROUP);

         }

         /**

          * Retrieves a KimDelegationMemberImpl object by its ID. If the delegation member already exists in the cache, this method will return the cached

          * version; otherwise, it will retrieve the uncached version from the database and then cache it before returning it.

          */

     protected KimDelegationMemberImpl getKimDelegationMemberImpl( String delegationMemberId ) {

             if (StringUtils.isBlank(delegationMemberId)) {

                     return null;

             }

             // If the KimDelegationMemberImpl exists in the cache, return the cached one.

             KimDelegationMemberImpl tempDelegationMember = getDelegationMemberFromCache(delegationMemberId);

             if (tempDelegationMember != null) {

                     return tempDelegationMember;

             }

             // Otherwise, retrieve it normally.

             tempDelegationMember = (KimDelegationMemberImpl)getBusinessObjectService().findByPrimaryKey( KimDelegationMemberImpl.class,

                             Collections.singletonMap(KimConstants.PrimaryKeyConstants.DELEGATION_MEMBER_ID, delegationMemberId) );

             addKimDelegationMemberImplToCache(tempDelegationMember);

             return tempDelegationMember;

     }

     /**

          * Retrieves a KimDelegationMemberImpl object by its ID and the ID of the delegation it belongs to. If the delegation member exists in the cache,

          * this method will return the cached one; otherwise, it will retrieve the uncached version from the database and then cache it before returning it.

          */

         protected KimDelegationMemberImpl getKimDelegationMemberImplByDelegationAndId(String delegationId, String delegationMemberId) {

                 if (StringUtils.isBlank(delegationId) || StringUtils.isBlank(delegationMemberId)) {

                     return null;

             }

             // If the KimDelegationMemberImpl exists in the cache, return the cached one.

             KimDelegationMemberImpl tempDelegationMember = getDelegationMemberByDelegationAndIdFromCache(delegationId, delegationMemberId);

             if (tempDelegationMember != null) {

                     return tempDelegationMember;

             }

             // Otherwise, retrieve it normally.

             Map<String,String> searchCriteria = new HashMap<String,String>();

             searchCriteria.put(KimConstants.PrimaryKeyConstants.DELEGATION_ID, delegationId);

             searchCriteria.put(KimConstants.PrimaryKeyConstants.DELEGATION_MEMBER_ID, delegationMemberId);

             List<KimDelegationMemberImpl> memberList =

                     (List<KimDelegationMemberImpl>) getBusinessObjectService().findMatching(KimDelegationMemberImpl.class, searchCriteria);

             if (memberList != null && !memberList.isEmpty()) {

                     tempDelegationMember = memberList.get(0);

                     addKimDelegationMemberImplToCache(tempDelegationMember);

             }

             return tempDelegationMember;

         }

         /**

          * Retrieves a KimDelegationMemberImpl List by (principal/group/role) member ID and delegation ID. If the List already exists in the cache,

          * this method will return the cached one; otherwise, it will retrieve the uncached version from the database and then cache it before returning it.

          */

         protected List<KimDelegationMemberImpl> getKimDelegationMemberImplListByMemberAndDelegationId(String memberId, String delegationId) {

                 // If the KimDelegationMemberImpl List exists in the cache, return the cached one.

             List<KimDelegationMemberImpl> memberList = getDelegationMemberListByMemberAndDelegationIdFromCache(memberId, delegationId);

             if (memberList != null) {

                     return memberList;

             }

             // Otherwise, retrieve it normally.

             Map<String,String> searchCriteria = new HashMap<String,String>();

                 searchCriteria.put(KimConstants.PrimaryKeyConstants.MEMBER_ID, memberId);

             searchCriteria.put(KimConstants.PrimaryKeyConstants.DELEGATION_ID, delegationId);

             List<KimDelegationMemberImpl> tempList =

                     (List<KimDelegationMemberImpl>)getBusinessObjectService().findMatching(KimDelegationMemberImpl.class, searchCriteria);

             if (tempList != null && !tempList.isEmpty()) {

                     memberList = new ArrayList<KimDelegationMemberImpl>();

                     memberList.addAll(tempList);

                     addKimDelegationMemberImplListByMemberAndDelegationIdToCache(memberList, memberId, delegationId);

             }

                 return memberList;

         }

         public void flushInternalRoleCache() {

             getCacheAdministrator().flushGroup(ROLE_IMPL_CACHE_GROUP);

     }

         public RoleMemberCompleteInfo findRoleMemberCompleteInfo(String roleMemberId){

             Map<String, String> fieldValues = new HashMap<String, String>();

             fieldValues.put(KimConstants.PrimaryKeyConstants.ROLE_MEMBER_ID, roleMemberId);

             List<RoleMemberCompleteInfo> roleMemberInfos = findRoleMembersCompleteInfo(fieldValues);

             if(roleMemberInfos!=null && roleMemberInfos.size()>0)

                     return roleMemberInfos.get(0);

             return null;

     }

         public List<RoleMemberCompleteInfo> findRoleMembersCompleteInfo(Map<String, String> fieldValues){

             List<RoleMemberCompleteInfo> roleMembersCompleteInfos = new ArrayList<RoleMemberCompleteInfo>();

             RoleMemberCompleteInfo roleMembersCompleteInfo;

             List<RoleMemberImpl> roleMembers = (List<RoleMemberImpl>)getLookupService().findCollectionBySearchHelper(

                                 RoleMemberImpl.class, fieldValues, true);

             for(RoleMemberImpl roleMember: roleMembers){

                     roleMembersCompleteInfo = roleMember.toSimpleInfo();

                         Object member = getMember(roleMembersCompleteInfo.getMemberTypeCode(), roleMembersCompleteInfo.getMemberId());

                         roleMembersCompleteInfo.setMemberName(getMemberName(member));

                         roleMembersCompleteInfo.setMemberNamespaceCode(getMemberNamespaceCode(member));

                         roleMembersCompleteInfo.setRoleRspActions(getRoleMemberResponsibilityActionInfo(roleMember.getRoleMemberId()));

                         roleMembersCompleteInfos.add(roleMembersCompleteInfo);

             }

             return roleMembersCompleteInfos;

     }

         public List<RoleResponsibilityActionInfo> getRoleMemberResponsibilityActionInfo(String roleMemberId){

                 Map<String, String> criteria = new HashMap<String, String>(1);                

                 criteria.put(KimConstants.PrimaryKeyConstants.ROLE_MEMBER_ID, roleMemberId);

                 List<RoleResponsibilityActionImpl> responsibilityImpls = (List<RoleResponsibilityActionImpl>)

                         getBusinessObjectService().findMatching(RoleResponsibilityActionImpl.class, criteria);

                 List<RoleResponsibilityActionInfo> roleResponsibilityActionInfos = new ArrayList<RoleResponsibilityActionInfo>();

                 RoleResponsibilityActionInfo roleResponsibilityActionInfo;

                 for(RoleResponsibilityActionImpl responsibilityActionImpl: responsibilityImpls){

                         roleResponsibilityActionInfo = new RoleResponsibilityActionInfo();

                         KimCommonUtilsInternal.copyProperties(roleResponsibilityActionInfo, responsibilityActionImpl);

                         roleResponsibilityActionInfos.add(roleResponsibilityActionInfo);

                 }

                 return roleResponsibilityActionInfos;

         }

         public List<DelegateMemberCompleteInfo> findDelegateMembersCompleteInfo(final Map<String, String> fieldValues){

             List<DelegateMemberCompleteInfo> delegateMembersCompleteInfo = new ArrayList<DelegateMemberCompleteInfo>();

             DelegateMemberCompleteInfo delegateMemberCompleteInfo;

             List<KimDelegationImpl> delegations = (List<KimDelegationImpl>)getLookupService().findCollectionBySearchHelper(

                                 KimDelegationImpl.class, fieldValues, true);

             if(delegations!=null && !delegations.isEmpty()){

                     Map<String, String> delegationMemberFieldValues = new HashMap<String, String>();

                     for(String key: fieldValues.keySet()){

                             if(key.startsWith(KimConstants.KimUIConstants.MEMBER_ID_PREFIX)){

                                     delegationMemberFieldValues.put(

                                                     key.substring(key.indexOf(

                                                     KimConstants.KimUIConstants.MEMBER_ID_PREFIX)+KimConstants.KimUIConstants.MEMBER_ID_PREFIX.length()), 

                                                     fieldValues.get(key));

                             }

                     }

                         StringBuffer memberQueryString = new StringBuffer();

                     for(KimDelegationImpl delegation: delegations)

                             memberQueryString.append(delegation.getDelegationId()+KimConstants.KimUIConstants.OR_OPERATOR);

                     delegationMemberFieldValues.put(KimConstants.PrimaryKeyConstants.DELEGATION_ID, 

                                     KimCommonUtilsInternal.stripEnd(memberQueryString.toString(), KimConstants.KimUIConstants.OR_OPERATOR));

                     List<KimDelegationMemberImpl> delegateMembers = (List<KimDelegationMemberImpl>)getLookupService().findCollectionBySearchHelper(

                                         KimDelegationMemberImpl.class, delegationMemberFieldValues, true);

                     KimDelegationImpl delegationTemp;

                     for(KimDelegationMemberImpl delegateMember: delegateMembers){

                             delegateMemberCompleteInfo = delegateMember.toSimpleInfo();

                             delegationTemp = getDelegationImpl(delegations, delegateMember.getDelegationId());

                             delegateMemberCompleteInfo.setRoleId(delegationTemp.getRoleId());

                             delegateMemberCompleteInfo.setDelegationTypeCode(delegationTemp.getDelegationTypeCode());

                                 Object member = getMember(delegateMemberCompleteInfo.getMemberTypeCode(), delegateMemberCompleteInfo.getMemberId());

                                 delegateMemberCompleteInfo.setMemberName(getMemberName(member));

                                 delegateMemberCompleteInfo.setMemberNamespaceCode(getMemberNamespaceCode(member));

                                 delegateMembersCompleteInfo.add(delegateMemberCompleteInfo);

                     }

             }

             return delegateMembersCompleteInfo;

     }

         protected KimDelegationImpl getDelegationImpl(List<KimDelegationImpl> delegations, String delegationId){

             if(StringUtils.isEmpty(delegationId) || delegations==null)

                     return null;

             for(KimDelegationImpl delegation: delegations){

                     if(StringUtils.equals(delegation.getDelegationId(), delegationId))

                             return delegation;

             }

             return null;

     }

         protected Object getMember(String memberTypeCode, String memberId){

                 if ( StringUtils.isBlank(memberId) ) {

                         return null;

                 }

         if(KimConstants.KimUIConstants.MEMBER_TYPE_PRINCIPAL_CODE.equals(memberTypeCode)){

                 return getIdentityManagementService().getPrincipal(memberId);

         } else if(KimConstants.KimUIConstants.MEMBER_TYPE_GROUP_CODE.equals(memberTypeCode)){

                 return getIdentityManagementService().getGroup(memberId);

         } else if(KimConstants.KimUIConstants.MEMBER_TYPE_ROLE_CODE.equals(memberTypeCode)){

                 return getRoleImpl(memberId);

         }

         return null;

     }

         protected String getMemberName(Object member){

         if( member == null ) {

                 return "";

         }

         if ( member instanceof KimPrincipal ) {

                 return ((KimPrincipal)member).getPrincipalName();

         }

         if ( member instanceof Group ) {

                 return ((Group)member).getGroupName();

         }

         if ( member instanceof Role ) {

                 return ((Role)member).getRoleName();

         }

         return member.toString();

     }

         protected String getMemberNamespaceCode(Object member){

         if( member == null ) {

                 return "";

         }

         if ( member instanceof KimPrincipal ) {

                 return "";

         }

         if ( member instanceof Group ) {

                 return ((Group)member).getNamespaceCode();

         }

         if ( member instanceof Role ) {

                 return ((Role)member).getNamespaceCode();

         }

         return "";

     }

         protected RoleImpl getRoleImpl(String roleId) {

                 if ( StringUtils.isBlank( roleId ) ) {

                         return null;

                 }

                 // check for a non-null result in the cache, return it if found

                 RoleImpl cachedResult = getRoleFromCache( roleId );

                 if ( cachedResult != null ) {

                         return cachedResult;

                 }

                 // otherwise, run the query

                 RoleImpl result = (RoleImpl)getBusinessObjectService().findBySinglePrimaryKey(RoleImpl.class, roleId);

                 addRoleImplToCache( result );

                 return result;

         }

         protected KimDelegationImpl getDelegationOfType(String roleId, String delegationTypeCode){

             List<KimDelegationImpl> roleDelegations = getRoleDelegations(roleId);

         if(isDelegationPrimary(delegationTypeCode))

             return getPrimaryDelegation(roleId, roleDelegations);

         else

             return getSecondaryDelegation(roleId, roleDelegations);

     }

         private KimDelegationImpl getSecondaryDelegation(String roleId, List<KimDelegationImpl> roleDelegations){

         KimDelegationImpl secondaryDelegation = null;

         RoleImpl roleImpl = getRoleImpl(roleId);

         for(KimDelegationImpl delegation: roleDelegations){

             if(isDelegationSecondary(delegation.getDelegationTypeCode()))

                 secondaryDelegation = delegation;

         }

         if(secondaryDelegation==null){

             secondaryDelegation = new KimDelegationImpl();

             secondaryDelegation.setRoleId(roleId);

             secondaryDelegation.setDelegationId(getNewDelegationId());

             secondaryDelegation.setDelegationTypeCode(KEWConstants.DELEGATION_SECONDARY);

             secondaryDelegation.setKimTypeId(roleImpl.getKimTypeId());

         }

         return secondaryDelegation;

     }

         protected KimDelegationImpl getPrimaryDelegation(String roleId, List<KimDelegationImpl> roleDelegations){

         KimDelegationImpl primaryDelegation = null;

         RoleImpl roleImpl = getRoleImpl(roleId);

         for(KimDelegationImpl delegation: roleDelegations){

             if(isDelegationPrimary(delegation.getDelegationTypeCode()))

                 primaryDelegation = delegation;

         }

         if(primaryDelegation==null){

             primaryDelegation = new KimDelegationImpl();

             primaryDelegation.setRoleId(roleId);

             primaryDelegation.setDelegationId(getNewDelegationId());

             primaryDelegation.setDelegationTypeCode(KEWConstants.DELEGATION_PRIMARY);

             primaryDelegation.setKimTypeId(roleImpl.getKimTypeId());

         }

         return primaryDelegation;

     }

         protected RoleMemberImpl matchingMemberRecord( List<RoleMemberImpl> roleMembers, String memberId, String memberTypeCode, AttributeSet qualifier ) {

                 for ( RoleMemberImpl rm : roleMembers ) {

                         if ( doesMemberMatch( rm, memberId, memberTypeCode, qualifier ) ) {

                                 return rm;

                         }

                 }

                 return null;

         }

         protected boolean isDelegationPrimary(String delegationTypeCode){

         return KEWConstants.DELEGATION_PRIMARY.equals(delegationTypeCode);

     }

         protected boolean isDelegationSecondary(String delegationTypeCode){

         return KEWConstants.DELEGATION_SECONDARY.equals(delegationTypeCode);

     }

         private List<KimDelegationImpl> getRoleDelegations(String roleId){

                 if(roleId==null)

                         return new ArrayList<KimDelegationImpl>();

                 return getStoredDelegationImplsForRoleIds(Collections.singletonList(roleId));

         }

         protected RoleImpl getRoleImplByName( String namespaceCode, String roleName ) {

                 if ( StringUtils.isBlank( namespaceCode )

                                 || StringUtils.isBlank( roleName ) ) {

                         return null;

                 }

                 // check for a non-null result in the cache, return it if found

                 RoleImpl cachedResult = getRoleFromCache( namespaceCode, roleName );

                 if ( cachedResult != null ) {

                         return cachedResult;

                 }

                 AttributeSet criteria = new AttributeSet();

                 criteria.put(KimConstants.UniqueKeyConstants.NAMESPACE_CODE, namespaceCode);

                 criteria.put(KimConstants.UniqueKeyConstants.ROLE_NAME, roleName);

                 criteria.put(KNSPropertyConstants.ACTIVE, "Y");

                 // while this is not actually the primary key - there will be at most one row with these criteria

                 RoleImpl result = (RoleImpl)getBusinessObjectService().findByPrimaryKey(RoleImpl.class, criteria);

                 addRoleImplToCache( result );

                 return result;

         }

         protected boolean doAnyMemberRecordsMatch( List<RoleMemberImpl> roleMembers, String memberId, String memberTypeCode, AttributeSet qualifier ) {

                 for ( RoleMemberImpl rm : roleMembers ) {

                         if ( doesMemberMatch( rm, memberId, memberTypeCode, qualifier ) ) {

                                 return true;

                         }

                 }

                 return false;

         }

         protected boolean doesMemberMatch( RoleMemberImpl roleMember, String memberId, String memberTypeCode, AttributeSet qualifier ) {

                 if ( roleMember.getMemberId().equals( memberId ) && roleMember.getMemberTypeCode().equals( memberTypeCode ) ) {

                         // member ID/type match

                     AttributeSet roleQualifier = roleMember.getQualifier();

                     if ( (qualifier == null || qualifier.isEmpty())

                                     && (roleQualifier == null || roleQualifier.isEmpty()) ) {

                             return true; // blank qualifier match

                     } else {

                             if ( qualifier != null && roleQualifier != null && qualifier.equals( roleQualifier ) ) {

                                     return true; // qualifier match

                             }

                     }

                 }

                 return false;

         }

         /**

          * 

          * This method tests to see if assigning a role to another role will create a circular reference.

          * The Role is checked to see if it is a member (direct or nested) of the role to be assigned as a member.

          * 

          * @param newMemberId

          * @param role

          * @return true  - assignment is allowed, no circular reference will be created.

          *         false - illegal assignment, it will create a circular membership

          */