/*

  * Copyright 2008 The Kuali Foundation

  *

  * Licensed under the Educational Community License, Version 2.0 (the "License");

  * you may not use this file except in compliance with the License.

  * You may obtain a copy of the License at

  *

  * http://www.opensource.org/licenses/ecl2.php

  *

  * Unless required by applicable law or agreed to in writing, software

  * distributed under the License is distributed on an "AS IS" BASIS,

  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

  * See the License for the specific language governing permissions and

  * limitations under the License.

  */

 package org.kuali.rice.kim.service.support.impl;

 import java.util.ArrayList;

 import java.util.List;

 import org.kuali.rice.core.util.AttributeSet;

 import org.kuali.rice.kim.api.entity.principal.Principal;

 import org.kuali.rice.kim.api.services.IdentityManagementService;

 import org.kuali.rice.kim.api.services.KimApiServiceLocator;

 import org.kuali.rice.kim.bo.Role;

 import org.kuali.rice.kim.bo.entity.dto.KimEntityDefaultInfo;

 import org.kuali.rice.kim.bo.role.dto.RoleMembershipInfo;

 import org.kuali.rice.kim.util.KimConstants;

 /**

  * This is a description of what this class does - kellerj don't forget to fill this in. 

  * 

  * @author Kuali Rice Team (rice.collab@kuali.org)

  *

  */

 public class PrincipalDerivedRoleTypeServiceImpl extends KimDerivedRoleTypeServiceBase {

         private IdentityManagementService identityManagementService;

         {

                 requiredAttributes.add( KimConstants.AttributeConstants.PRINCIPAL_ID );

                 checkRequiredAttributes = false;

         }

         /**

          * @see org.kuali.rice.kim.service.support.impl.KimTypeServiceBase#performMatch(org.kuali.rice.core.util.AttributeSet, org.kuali.rice.core.util.AttributeSet)

          */

         @Override

         public boolean performMatch(AttributeSet inputAttributeSet, AttributeSet storedAttributeSet) {

                 return true;

         }

         /**

          * Since this is potentially the entire set of users, just check the qualification for the user we are interested in and return it.

          * 

          * @see org.kuali.rice.kim.service.support.impl.RoleTypeServiceBase#getRoleMembersFromApplicationRole(String, String, AttributeSet)

          */

         @Override

     public List<RoleMembershipInfo> getRoleMembersFromApplicationRole(String namespaceCode, String roleName, AttributeSet qualification) {

                 ArrayList<RoleMembershipInfo> tempIdList = new ArrayList<RoleMembershipInfo>();

                 if ( qualification == null || qualification.isEmpty() ) {

                         return tempIdList;

                 }

                 qualification = translateInputAttributeSet(qualification);

                 // check that the principal ID is not null

                 String principalId = qualification.get( KimConstants.AttributeConstants.PRINCIPAL_ID );

                 if ( hasApplicationRole(principalId, null, namespaceCode, roleName, qualification)) {

                 tempIdList.add( new RoleMembershipInfo(null/*roleId*/, null, principalId, Role.PRINCIPAL_MEMBER_TYPE, null) );

                 }

                 return tempIdList;

         }

         @Override

         public boolean hasApplicationRole(String principalId, List<String> groupIds, String namespaceCode, String roleName, AttributeSet qualification) {

         // check that the principal exists and is active

         Principal principal = getIdentityManagementService().getPrincipal( principalId );

         if ( principal == null || !principal.isActive() ) {

             return false;

         }

         // check that the entity is active

         KimEntityDefaultInfo entity = getIdentityManagementService().getEntityDefaultInfo( principal.getEntityId() );

         if ( entity == null || !entity.isActive() ) {

             return false;

         }

         return true;

         }

         protected IdentityManagementService getIdentityManagementService() {

                 if ( identityManagementService == null ) {

                         identityManagementService = KimApiServiceLocator.getIdentityManagementService();

                 }

                 return identityManagementService;

         }

 }