393 lines
16 KiB
Java
393 lines
16 KiB
Java
package org.gcube.portlets.user.gcubeloggedin.server;
|
|
|
|
import java.util.ArrayList;
|
|
import java.util.List;
|
|
import java.util.Map;
|
|
import java.util.Set;
|
|
|
|
import javax.servlet.http.HttpServletRequest;
|
|
|
|
import org.gcube.application.framework.core.session.ASLSession;
|
|
import org.gcube.application.framework.core.session.SessionManager;
|
|
import org.gcube.common.homelibrary.home.HomeLibrary;
|
|
import org.gcube.common.homelibrary.home.exceptions.InternalErrorException;
|
|
import org.gcube.common.homelibrary.home.workspace.exceptions.ItemNotFoundException;
|
|
import org.gcube.common.portal.PortalContext;
|
|
import org.gcube.portal.custom.communitymanager.SiteManagerUtil;
|
|
import org.gcube.portal.custom.scopemanager.scopehelper.ScopeHelper;
|
|
import org.gcube.portlets.user.gcubeloggedin.client.LoggedinService;
|
|
import org.gcube.portlets.user.gcubeloggedin.shared.VObject;
|
|
import org.gcube.portlets.user.gcubeloggedin.shared.VObject.UserBelongingClient;
|
|
import org.gcube.portlets.user.gcubeloggedin.shared.VREClient;
|
|
import org.gcube.portlets.user.gcubewidgets.server.ScopeServiceImpl;
|
|
import org.gcube.vomanagement.usermanagement.GroupManager;
|
|
import org.gcube.vomanagement.usermanagement.UserManager;
|
|
import org.gcube.vomanagement.usermanagement.exception.UserManagementSystemException;
|
|
import org.gcube.vomanagement.usermanagement.impl.LiferayGroupManager;
|
|
import org.gcube.vomanagement.usermanagement.impl.LiferayUserManager;
|
|
import org.gcube.vomanagement.usermanagement.model.GCubeGroup;
|
|
import org.gcube.vomanagement.usermanagement.model.GCubeRole;
|
|
import org.gcube.vomanagement.usermanagement.model.GCubeUser;
|
|
import org.slf4j.Logger;
|
|
import org.slf4j.LoggerFactory;
|
|
|
|
import com.google.gwt.user.server.rpc.RemoteServiceServlet;
|
|
import com.liferay.portal.kernel.bean.BeanLocatorException;
|
|
import com.liferay.portal.kernel.exception.PortalException;
|
|
import com.liferay.portal.kernel.exception.SystemException;
|
|
import com.liferay.portal.model.Group;
|
|
import com.liferay.portal.model.User;
|
|
import com.liferay.portal.security.permission.PermissionChecker;
|
|
import com.liferay.portal.security.permission.PermissionCheckerFactoryUtil;
|
|
import com.liferay.portal.security.permission.PermissionThreadLocal;
|
|
import com.liferay.portal.service.GroupLocalServiceUtil;
|
|
import com.liferay.portal.service.UserLocalServiceUtil;
|
|
|
|
/**
|
|
* The server side implementation of the RPC service.
|
|
*/
|
|
@SuppressWarnings("serial")
|
|
public class LoggedinServiceImpl extends RemoteServiceServlet implements LoggedinService {
|
|
|
|
private static final Logger _log = LoggerFactory.getLogger(LoggedinServiceImpl.class);
|
|
private static final String MANDATORY_GROUP = "Mandatory";
|
|
private static final String REQUEST_BASED_GROUP = "Requestbasedgroup";
|
|
|
|
/**
|
|
* the current ASLSession
|
|
* @return .
|
|
*/
|
|
private ASLSession getASLSession() {
|
|
String sessionID = this.getThreadLocalRequest().getSession().getId();
|
|
String user = (String) this.getThreadLocalRequest().getSession().getAttribute(ScopeHelper.USERNAME_ATTRIBUTE);
|
|
if (user == null) {
|
|
_log.warn("LOGGEDIN PORTLET: USER IS NULL \n\n SESSION ID READ: " +sessionID );
|
|
user = "test.user";
|
|
_log.warn("session ID= *" + sessionID + "* user= *" + user + "*" );
|
|
|
|
}
|
|
|
|
return SessionManager.getInstance().getASLSession(sessionID, user);
|
|
|
|
}
|
|
/**
|
|
*
|
|
* @return true if you're running into the portal, false if in development
|
|
*/
|
|
private boolean isWithinPortal() {
|
|
try {
|
|
UserLocalServiceUtil.getService();
|
|
return true;
|
|
}
|
|
catch (com.liferay.portal.kernel.bean.BeanLocatorException ex) {
|
|
_log.trace("Development Mode ON");
|
|
return false;
|
|
}
|
|
}
|
|
/**
|
|
* return the current selected VRE
|
|
*/
|
|
|
|
public VObject getSelectedRE(String portalURL) {
|
|
ASLSession aslSession = getASLSession();
|
|
String username = aslSession.getUsername();
|
|
String friendlyURL = ScopeServiceImpl.extractOrgFriendlyURL(portalURL);
|
|
|
|
if (friendlyURL == null) {//the URL is not a portal URL, we are in devmode.
|
|
return new VREClient("Test", "", "" +
|
|
"Fishery and Aquaculture Resources Management (FARM) Virtual Organisation</b> The FARM Virtual Organisation is the <b><i>dynamic group of individuals</i></b> and/or <b><i>institutions</i></b> defined around a set of <b><i>sharing rules</i></b> in which <b><i>resource providers</i></b> and <b><i>consumers</i></b> specify clearly and carefully just what is shared, who is allowed to share, and the conditions under which sharing occurs to serve the needs of the <b><i>Fisheries and Aquaculture Resources Management</i></b>. This VO is conceived to support various application scenarios arising in the FARM Community including the production of Fisheries and Aquaculture Country Profiles, the management of catch statistics including harmonisation, the dynamic generation of biodiversity maps and species distribution maps. This Virtual Organisation currently consists of:<ul> <li> approximately <b><i>13 gCube nodes</i></b>, i.e. machines dedicated to run the gCube system;</li> <li> approximately <b><i>89 running instances</i></b>, i.e. running gCube services supporting the operation of the infrastructure;</li> <li> approximately <b><i>25 collections</i></b>, i.e. set of D4Science Information Objects including Earth images, AquaMaps, Graphs on catch statistics;</li> <li> approximately <b><i>66 metadata collections</i></b>, i.e. set of Metadata Objects describing the Information Objects through various features and schemas;</li> <li> approximately <b><i>58 other resources</i></b> including transformation programs, index types, etc.</li></ul></div>" +
|
|
"", "", "", UserBelongingClient.BELONGING, false, true);
|
|
}
|
|
_log.trace("getting Selected Research Environment");
|
|
GroupManager gm = new LiferayGroupManager();
|
|
GCubeGroup currSite = null;
|
|
try {
|
|
List<GCubeGroup> groups = gm.listGroups();
|
|
for (GCubeGroup g : groups) {
|
|
if (g.getFriendlyURL().compareTo(friendlyURL) == 0) {
|
|
long groupId = g.getGroupId();
|
|
String scopeToSet = gm.getInfrastructureScope(groupId);
|
|
getASLSession().setScope(scopeToSet);
|
|
_log.info("GOT Selected Research Environment: " + scopeToSet);
|
|
currSite = g;
|
|
}
|
|
}
|
|
} catch (Exception e) {
|
|
e.printStackTrace();
|
|
}
|
|
|
|
/**
|
|
* set the current ORG bean in session
|
|
*/
|
|
aslSession.setAttribute(ScopeHelper.CURR_ORG, currSite);
|
|
|
|
aslSession.setGroupModelInfos(currSite.getGroupName(), currSite.getGroupId());
|
|
|
|
_log.trace("CURRENT ORG SET IN SESSION: " + currSite.getGroupName());
|
|
|
|
|
|
String name = currSite.getGroupName();
|
|
String logoURL = "/image/layout_set_logo?img_id="+currSite.getLogoId();
|
|
String desc = "";
|
|
//set the description for the vre
|
|
if (currSite.getDescription() != null)
|
|
desc = currSite.getDescription();
|
|
Group currGroup = null;
|
|
try {
|
|
currGroup = GroupLocalServiceUtil.getGroup(currSite.getGroupId());
|
|
} catch (PortalException e) {
|
|
e.printStackTrace();
|
|
} catch (SystemException e) {
|
|
e.printStackTrace();
|
|
}
|
|
VREClient vre = new VREClient(name, "", desc, logoURL, "", UserBelongingClient.BELONGING, isEnabled(username, currGroup, MANDATORY_GROUP), isEnabled(username, currGroup, REQUEST_BASED_GROUP));
|
|
return vre;
|
|
}
|
|
|
|
|
|
private Boolean isEnabled(String username, Group currOrg, String attrToCheck) {
|
|
Boolean isEnabled = false;
|
|
if (username.compareTo("test.user") == 0) {
|
|
_log.warn("Found test.user maybe you are in dev mode, returning ... ");
|
|
return true;
|
|
}
|
|
try {
|
|
|
|
long companyId = SiteManagerUtil.getCompany().getCompanyId();
|
|
_log.trace("Setting Thread Permission");
|
|
User user = UserLocalServiceUtil.getUserByScreenName(companyId, ScopeHelper.getAdministratorUsername());
|
|
PermissionChecker permissionChecker = PermissionCheckerFactoryUtil.create(user);
|
|
PermissionThreadLocal.setPermissionChecker(permissionChecker);
|
|
_log.trace("Setting Permission ok!");
|
|
|
|
User currentUser = SiteManagerUtil.validateUser(username);
|
|
if (currOrg.getExpandoBridge().getAttribute(attrToCheck) == null || currOrg.getExpandoBridge().getAttribute(attrToCheck).equals("")) {
|
|
_log.trace("Attribute " + attrToCheck + " must be initialized");
|
|
setOrgCustomAttribute(username, currOrg, attrToCheck);
|
|
isEnabled = true;
|
|
}
|
|
else {
|
|
String currVal = (String) currOrg.getExpandoBridge().getAttribute(attrToCheck);
|
|
isEnabled = (currVal.compareTo("true") == 0);
|
|
}
|
|
|
|
_log.trace("Setting Thread Permission back to regular");
|
|
permissionChecker = PermissionCheckerFactoryUtil.create(currentUser);
|
|
PermissionThreadLocal.setPermissionChecker(permissionChecker);
|
|
_log.trace("Setting Permission ok! returning ...");
|
|
_log.debug(" returning *********** isEnabled=" + isEnabled);
|
|
return isEnabled;
|
|
} catch (BeanLocatorException ex) {
|
|
ex.printStackTrace();
|
|
_log.warn("Could not read the property " + attrToCheck + " from LR DB, maybe you are in dev mode, returning true");
|
|
return true;
|
|
}
|
|
catch (Exception e) {
|
|
e.printStackTrace();
|
|
return false;
|
|
}
|
|
}
|
|
/**
|
|
*
|
|
* @param username
|
|
* @param attribute2Set
|
|
*/
|
|
private void setOrgCustomAttribute(String username, Group currGroup, String attribute2Set) {
|
|
User currUser = null;
|
|
if (username.compareTo("test.user") == 0) {
|
|
_log.warn("Found Test User, returning ... ");
|
|
return;
|
|
}
|
|
try {
|
|
long companyId = SiteManagerUtil.getCompany().getCompanyId();
|
|
_log.trace("Setting Thread Permission");
|
|
User user = UserLocalServiceUtil.getUserByScreenName(companyId, ScopeHelper.getAdministratorUsername());
|
|
PermissionChecker permissionChecker = PermissionCheckerFactoryUtil.create(user);
|
|
PermissionThreadLocal.setPermissionChecker(permissionChecker);
|
|
_log.trace("Setting Permission ok!");
|
|
|
|
_log.debug("Creating and Setting custom attribute for colName " + attribute2Set + " to " +true);
|
|
//add the custom attrs
|
|
currUser = UserLocalServiceUtil.getUserByScreenName(companyId, username);
|
|
|
|
if (! currGroup.getExpandoBridge().hasAttribute(attribute2Set))
|
|
currGroup.getExpandoBridge().addAttribute(attribute2Set);
|
|
|
|
currGroup.getExpandoBridge().setAttribute(attribute2Set, "true");
|
|
_log.trace("setAttribute true");
|
|
|
|
|
|
_log.trace("Setting Thread Permission back to regular");
|
|
permissionChecker = PermissionCheckerFactoryUtil.create(currUser);
|
|
PermissionThreadLocal.setPermissionChecker(permissionChecker);
|
|
}
|
|
catch (Exception e) {
|
|
e.printStackTrace();
|
|
}
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
*
|
|
* @return the portal basic url, e.g. http://www.foo.com
|
|
*/
|
|
private String getPortalBasicUrl() {
|
|
HttpServletRequest request = this.getThreadLocalRequest();
|
|
String toReturn = "";
|
|
//protocol
|
|
String protocol = (request.isSecure()) ? "https://" : "http://" ;
|
|
toReturn += protocol;
|
|
//server name
|
|
toReturn += request.getServerName();
|
|
//port
|
|
toReturn += (request.getServerPort() == 80) ? "" : ":"+request.getServerPort() ;
|
|
|
|
request.getQueryString();
|
|
|
|
_log.trace("\n getPortalBasicUrl: " +toReturn + "queryString: " + request.getQueryString());
|
|
return toReturn;
|
|
}
|
|
|
|
/**
|
|
*@return the redirect url if everything goes ok, null otherwise
|
|
*/
|
|
@Override
|
|
public String removeUserFromVRE() {
|
|
String username = getASLSession().getUsername();
|
|
if (username.compareTo("test.user") == 0)
|
|
return null;
|
|
_log.debug("Going to remove user from the current Group: " + getCurrentGroupID() + ". Username is: " + username);
|
|
UserManager userM = new LiferayUserManager();
|
|
try {
|
|
userM.dismissUserFromGroup(getCurrentGroupID(), userM.getUserId(username));
|
|
removeUserFromHLGroup(username, getASLSession().getScope());
|
|
sendUserUnregisteredNotification(username, getASLSession().getScope(), getPortalBasicUrl(), PortalContext.getConfiguration().getGatewayName());
|
|
return "/";
|
|
} catch (Exception e) {
|
|
e.printStackTrace();
|
|
return null;
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Get the current group ID
|
|
*
|
|
* @return the current group ID or null if an exception is thrown
|
|
* @throws Exception
|
|
*/
|
|
private long getCurrentGroupID(){
|
|
ASLSession session = getASLSession();
|
|
_log.debug("The current group NAME is --> " + session.getGroupName());
|
|
try {
|
|
try {
|
|
GroupManager groupM = new LiferayGroupManager();
|
|
return groupM.getGroupId(session.getGroupName());
|
|
} catch (UserManagementSystemException e) {
|
|
throw new Exception(e.getMessage(), e.getCause());
|
|
}
|
|
} catch (Exception e) {
|
|
e.printStackTrace();
|
|
}
|
|
return -1;
|
|
}
|
|
|
|
private void removeUserFromHLGroup(String username, String group) {
|
|
try {
|
|
org.gcube.common.homelibrary.home.workspace.usermanager.UserManager um = HomeLibrary.getHomeManagerFactory().getUserManager();
|
|
um.removeUserFromGroup(group, username, getASLSession().getUsername());
|
|
} catch (InternalErrorException e) {
|
|
_log.error("Failed to get the usermanager from HL. Could not add remove user from the HL group");
|
|
} catch (ItemNotFoundException e1) {
|
|
|
|
}
|
|
}
|
|
|
|
protected static ArrayList<String> getAdministratorsEmails(String scope) {
|
|
LiferayUserManager userManager = new LiferayUserManager();
|
|
LiferayGroupManager groupManager = new LiferayGroupManager();
|
|
long groupId = -1;
|
|
try {
|
|
List<GCubeGroup> allGroups = groupManager.listGroups();
|
|
_log.debug("Number of groups retrieved: " + allGroups.size());
|
|
for (int i = 0; i < allGroups.size(); i++) {
|
|
long grId = allGroups.get(i).getGroupId();
|
|
String groupScope = groupManager.getScope(grId);
|
|
_log.debug("Comparing: " + groupScope + " " + scope);
|
|
if (groupScope.equals(scope)) {
|
|
groupId = allGroups.get(i).getGroupId();
|
|
break;
|
|
}
|
|
}
|
|
} catch (Exception e) {
|
|
e.printStackTrace();
|
|
}
|
|
Map<GCubeUser, List<GCubeRole>> usersAndRoles = null;
|
|
try {
|
|
usersAndRoles = userManager.listUsersAndRolesByGroup(groupId);
|
|
} catch (Exception e) {
|
|
e.printStackTrace();
|
|
}
|
|
Set<GCubeUser> users = usersAndRoles.keySet();
|
|
ArrayList<String> adminEmailsList = new ArrayList<String>();
|
|
for (GCubeUser usr:users) {
|
|
List<GCubeRole> roles = usersAndRoles.get(usr);
|
|
for (int i = 0; i < roles.size(); i++) {
|
|
if (roles.get(i).getRoleName().equals("VO-Admin") || roles.get(i).getRoleName().equals("VRE-Manager")) {
|
|
adminEmailsList.add(usr.getEmail());
|
|
_log.debug("Admin: " + usr.getFullname());
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
return adminEmailsList;
|
|
}
|
|
|
|
/**
|
|
*
|
|
* @param scope .
|
|
* @param optionalMessage .
|
|
*/
|
|
public static void sendUserUnregisteredNotification(String username, String scope, String portalbasicurl, String gatewayName) {
|
|
ArrayList<String> adminEmails = getAdministratorsEmails(scope);
|
|
UserManager um = new LiferayUserManager();
|
|
GCubeUser currUser = null;
|
|
try {
|
|
currUser = um.getUserByUsername(username);
|
|
} catch (Exception e) {
|
|
|
|
}
|
|
String name = currUser.getFirstName();
|
|
String lastname = currUser.getLastName();
|
|
|
|
StringBuffer body = new StringBuffer();
|
|
body.append("<p>Dear manager of "+ scope +",<br />this email message was automatically generated by " + portalbasicurl +" to inform you that ");
|
|
body.append("</p>");
|
|
body.append("<p>");
|
|
body.append("<b>"+name + " " + lastname +"</b> has left to the following environment: ");
|
|
body.append("<br /><br />");
|
|
body.append("<b>" + scope+"</b>");
|
|
body.append("<br />");
|
|
body.append("<br />");
|
|
body.append("<b>Username: </b>" + username);
|
|
body.append("<br />");
|
|
body.append("<b>e-mail: </b>" + currUser.getEmail());
|
|
body.append("</p>");
|
|
body.append("<p>");
|
|
body.append("WARNING / LEGAL TEXT: This message is intended only for the use of the individual or entity to which it is addressed and may contain"+
|
|
" information which is privileged, confidential, proprietary, or exempt from disclosure under applicable law. " +
|
|
"If you are not the intended recipient or the person responsible for delivering the message to the intended recipient, you are strictly prohibited from disclosing, distributing, copying, or in any way using this message.");
|
|
body.append("</p>");
|
|
|
|
String[] allMails = new String[adminEmails.size()];
|
|
|
|
adminEmails.toArray(allMails);
|
|
|
|
EmailNotification mailToAdmin = new EmailNotification("no-reply@d4science.org", allMails , "[" + gatewayName + "] - unregistration from VRE", body.toString());
|
|
|
|
mailToAdmin.sendEmail();
|
|
}
|
|
|
|
|
|
}
|