/**
    * Copyright 2005-2011 The Kuali Foundation
    *
    * Licensed under the Educational Community License, Version 2.0 (the "License");
    * you may not use this file except in compliance with the License.
    * You may obtain a copy of the License at
    *
    * http://www.opensource.org/licenses/ecl2.php
    *
   * Unless required by applicable law or agreed to in writing, software
   * distributed under the License is distributed on an "AS IS" BASIS,
   * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   * See the License for the specific language governing permissions and
   * limitations under the License.
   */
  package org.kuali.rice.krad.service.impl;
  
  import org.kuali.rice.kim.api.identity.Person;
  import org.kuali.rice.krad.datadictionary.AttributeSecurity;
  import org.kuali.rice.krad.document.authorization.DocumentAuthorizer;
  import org.kuali.rice.krad.document.authorization.DocumentPresentationController;
  import org.kuali.rice.krad.document.authorization.MaintenanceDocumentAuthorizer;
  import org.kuali.rice.krad.document.authorization.MaintenanceDocumentPresentationController;
  import org.kuali.rice.krad.service.DataDictionaryService;
  import org.kuali.rice.krad.service.DataObjectAuthorizationService;
  import org.kuali.rice.krad.service.DocumentHelperService;
  import org.kuali.rice.krad.service.KRADServiceLocatorWeb;
  
  /**
   * Implementation of <code>DataObjectAuthorizationService</code> that uses the
   * configured <code>AttributeSecurity</code> for a field to determine authorization
   * checks that need to be performed
   *
   * @author Kuali Rice Team (rice.collab@kuali.org)
   */
  public class DataObjectAuthorizationServiceImpl implements DataObjectAuthorizationService {
  
      private DataDictionaryService dataDictionaryService;
      private DocumentHelperService documentHelperService;
  
      /**
       * @see org.kuali.rice.krad.service.impl.DataObjectAuthorizationServiceImpl#attributeValueNeedsToBeEncryptedOnFormsAndLinks
       */
      @Override
      public boolean attributeValueNeedsToBeEncryptedOnFormsAndLinks(Class<?> dataObjectClass, String attributeName) {
          AttributeSecurity attributeSecurity =
                  getDataDictionaryService().getAttributeSecurity(dataObjectClass.getName(), attributeName);
  
          return attributeSecurity != null && attributeSecurity.hasRestrictionThatRemovesValueFromUI();
      }
  
      /**
       * @see org.kuali.rice.krad.service.impl.DataObjectAuthorizationServiceImpl#canCreate
       */
      @Override
      public boolean canCreate(Class<?> dataObjectClass, Person user, String docTypeName) {
          DocumentPresentationController documentPresentationController =
                  getDocumentHelperService().getDocumentPresentationController(docTypeName);
          boolean canCreate =
                  ((MaintenanceDocumentPresentationController) documentPresentationController).canCreate(dataObjectClass);
          if (canCreate) {
              DocumentAuthorizer documentAuthorizer = getDocumentHelperService().getDocumentAuthorizer(docTypeName);
              canCreate = ((MaintenanceDocumentAuthorizer) documentAuthorizer).canCreate(dataObjectClass, user);
          }
          return canCreate;
      }
  
      /**
       * @see org.kuali.rice.krad.service.impl.DataObjectAuthorizationServiceImpl#canMaintain
       */
      @Override
      public boolean canMaintain(Object dataObject, Person user, String docTypeName) {
          return ((MaintenanceDocumentAuthorizer) getDocumentHelperService().getDocumentAuthorizer(docTypeName))
                  .canMaintain(dataObject, user);
      }
  
      protected DataDictionaryService getDataDictionaryService() {
          if (dataDictionaryService == null) {
              this.dataDictionaryService = KRADServiceLocatorWeb.getDataDictionaryService();
          }
          return dataDictionaryService;
      }
  
      public void setDataDictionaryService(DataDictionaryService dataDictionaryService) {
          this.dataDictionaryService = dataDictionaryService;
      }
  
      protected DocumentHelperService getDocumentHelperService() {
          if (documentHelperService == null) {
              documentHelperService = KRADServiceLocatorWeb.getDocumentHelperService();
          }
          return documentHelperService;
      }
  
      public void setDocumentHelperService(DocumentHelperService documentHelperService) {
          this.documentHelperService = documentHelperService;
      }
  }