001/*
002 *  Copyright 2017 Anyware Services
003 *
004 *  Licensed under the Apache License, Version 2.0 (the "License");
005 *  you may not use this file except in compliance with the License.
006 *  You may obtain a copy of the License at
007 *
008 *      http://www.apache.org/licenses/LICENSE-2.0
009 *
010 *  Unless required by applicable law or agreed to in writing, software
011 *  distributed under the License is distributed on an "AS IS" BASIS,
012 *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
013 *  See the License for the specific language governing permissions and
014 *  limitations under the License.
015 */
016package org.ametys.plugins.bpm.workflowsdef;
017
018import java.util.Map;
019
020import org.apache.avalon.framework.service.ServiceException;
021import org.apache.avalon.framework.service.ServiceManager;
022
023import org.ametys.core.user.CurrentUserProvider;
024import org.ametys.core.user.UserIdentity;
025import org.ametys.core.util.JSONUtils;
026import org.ametys.plugins.workflow.AbstractWorkflowComponent;
027
028import com.opensymphony.module.propertyset.PropertySet;
029import com.opensymphony.workflow.Condition;
030import com.opensymphony.workflow.WorkflowException;
031
032/**
033 * Condition for checking rights of an user for the current action.
034 */
035public class CheckAllowedUsersCondition extends AbstractWorkflowComponent implements Condition
036{
037    private CurrentUserProvider _currentUserProvider;
038    private JSONUtils _jsonUtils;
039
040    @Override
041    public void service(ServiceManager manager) throws ServiceException
042    {
043        super.service(manager);
044        _currentUserProvider = (CurrentUserProvider) manager.lookup(CurrentUserProvider.ROLE);
045        _jsonUtils = (JSONUtils) manager.lookup(JSONUtils.ROLE);
046    }
047    
048    public boolean passesCondition(Map transientVars, Map args, PropertySet ps) throws WorkflowException
049    {
050        if (!args.containsKey("users"))
051        {
052            return true;
053        }
054        
055        String users = (String) args.get("users");
056        UserIdentity currentUser = _currentUserProvider.getUser();
057        for (Object obj : _jsonUtils.convertJsonToList(users))
058        {
059            @SuppressWarnings("unchecked")
060            Map<String, Object> grantedUser = (Map<String, Object>) obj;
061            String login = (String) grantedUser.get("login");
062            String populationId = (String) grantedUser.get("populationId");
063            
064            if (login != null && populationId != null)
065            {
066                UserIdentity userIdentity = new UserIdentity(login, populationId);
067                if (userIdentity.equals(currentUser))
068                {
069                    return true;
070                }
071            }
072        }
073        
074        return false;
075    }
076
077}