1 | |
|
2 | |
|
3 | |
|
4 | |
|
5 | |
|
6 | |
|
7 | |
|
8 | |
|
9 | |
|
10 | |
|
11 | |
|
12 | |
|
13 | |
|
14 | |
|
15 | |
|
16 | |
package org.kuali.rice.kim.rules.ui; |
17 | |
|
18 | |
import org.apache.commons.lang.StringUtils; |
19 | |
import org.kuali.rice.core.api.util.RiceKeyConstants; |
20 | |
import org.kuali.rice.kim.bo.ui.PersonDocumentGroup; |
21 | |
import org.kuali.rice.kim.document.IdentityManagementPersonDocument; |
22 | |
import org.kuali.rice.kim.rule.event.ui.AddGroupEvent; |
23 | |
import org.kuali.rice.kim.rule.ui.AddGroupRule; |
24 | |
import org.kuali.rice.kim.util.KimConstants; |
25 | |
import org.kuali.rice.krad.rules.DocumentRuleBase; |
26 | |
import org.kuali.rice.krad.util.GlobalVariables; |
27 | |
|
28 | |
import java.util.HashMap; |
29 | |
import java.util.Map; |
30 | |
|
31 | |
|
32 | |
|
33 | |
|
34 | |
|
35 | |
|
36 | |
|
37 | 0 | public class PersonDocumentGroupRule extends DocumentRuleBase implements AddGroupRule { |
38 | |
protected static final String NEW_GROUP = "newGroup"; |
39 | |
protected static final String GROUP_ID_ERROR_PATH = NEW_GROUP+".groupId"; |
40 | |
|
41 | |
public boolean processAddGroup(AddGroupEvent addGroupEvent) { |
42 | 0 | IdentityManagementPersonDocument document = (IdentityManagementPersonDocument)addGroupEvent.getDocument(); |
43 | 0 | PersonDocumentGroup newGroup = addGroupEvent.getGroup(); |
44 | 0 | boolean rulePassed = true; |
45 | 0 | rulePassed = validAssignGroup(document, newGroup); |
46 | |
|
47 | |
|
48 | 0 | if (newGroup == null || StringUtils.isBlank(newGroup.getGroupId())) { |
49 | 0 | rulePassed = false; |
50 | 0 | GlobalVariables.getMessageMap().putError(GROUP_ID_ERROR_PATH, RiceKeyConstants.ERROR_EMPTY_ENTRY, new String[] {"Group"}); |
51 | |
|
52 | |
} else { |
53 | 0 | for (PersonDocumentGroup group : document.getGroups()) { |
54 | 0 | if (group.getGroupId().equals(newGroup.getGroupId())) { |
55 | 0 | rulePassed = false; |
56 | 0 | GlobalVariables.getMessageMap().putError(GROUP_ID_ERROR_PATH, RiceKeyConstants.ERROR_DUPLICATE_ENTRY, new String[] {"Group"}); |
57 | |
|
58 | |
} |
59 | |
} |
60 | |
} |
61 | |
|
62 | |
|
63 | |
|
64 | |
|
65 | |
|
66 | |
|
67 | |
|
68 | |
|
69 | |
|
70 | 0 | return rulePassed; |
71 | |
} |
72 | |
|
73 | |
protected boolean validAssignGroup(IdentityManagementPersonDocument document, PersonDocumentGroup newGroup){ |
74 | 0 | boolean rulePassed = true; |
75 | 0 | Map<String,String> additionalPermissionDetails = new HashMap<String,String>(); |
76 | 0 | additionalPermissionDetails.put(KimConstants.AttributeConstants.NAMESPACE_CODE, newGroup.getNamespaceCode()); |
77 | 0 | additionalPermissionDetails.put(KimConstants.AttributeConstants.GROUP_NAME, newGroup.getGroupName()); |
78 | 0 | if(!getDocumentHelperService().getDocumentAuthorizer(document).isAuthorizedByTemplate( |
79 | |
document, KimConstants.NAMESPACE_CODE, KimConstants.PermissionTemplateNames.POPULATE_GROUP, |
80 | |
GlobalVariables.getUserSession().getPrincipalId(), additionalPermissionDetails, null)){ |
81 | 0 | GlobalVariables.getMessageMap().putError(GROUP_ID_ERROR_PATH, |
82 | |
RiceKeyConstants.ERROR_ASSIGN_GROUP, |
83 | |
new String[] {newGroup.getNamespaceCode(), newGroup.getGroupName()}); |
84 | 0 | rulePassed = false; |
85 | |
} |
86 | 0 | return rulePassed; |
87 | |
} |
88 | |
|
89 | |
} |