path: root/portal-BE/src/main/java/org/onap/portal/service/ExternalAccessRolesService.java

/*
 * ============LICENSE_START==========================================
 * ONAP Portal
 * ===================================================================
 * Copyright (C) 2019 AT&T Intellectual Property. All rights reserved.
 * ===================================================================
 * Modifications Copyright (c) 2019 Samsung
 * ===================================================================
 *
 * Unless otherwise specified, all software contained herein is licensed
 * under the Apache License, Version 2.0 (the "License");
 * you may not use this software except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *             http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 *
 * Unless otherwise specified, all documentation contained herein is licensed
 * under the Creative Commons License, Attribution 4.0 Intl. (the "License");
 * you may not use this documentation except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *             https://creativecommons.org/licenses/by/4.0/
 *
 * Unless required by applicable law or agreed to in writing, documentation
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 *
 * ============LICENSE_END============================================
 *
 *
 */

package org.onap.portal.service;

import java.util.ArrayList;
import java.util.HashMap;
import java.util.List;
import java.util.Map;
import java.util.Objects;
import java.util.SortedSet;
import java.util.TreeSet;
import java.util.stream.Collectors;
import javax.persistence.EntityManager;
import javax.persistence.Tuple;
import org.onap.portal.domain.db.ep.EpAppFunction;
import org.onap.portal.domain.db.fn.FnApp;
import org.onap.portal.domain.db.fn.FnFunction;
import org.onap.portal.domain.db.fn.FnRole;
import org.onap.portal.domain.db.fn.FnRoleFunction;
import org.onap.portal.domain.dto.transport.CentralV2Role;
import org.onap.portal.domain.dto.transport.GlobalRoleWithApplicationRoleFunction;
import org.onap.portal.exception.RoleFunctionException;
import org.onap.portal.logging.logic.EPLogUtil;
import org.onap.portal.service.appFunction.EpAppFunctionService;
import org.onap.portal.service.app.FnAppService;
import org.onap.portal.service.role.FnRoleService;
import org.onap.portal.utils.EPCommonSystemProperties;
import org.onap.portal.utils.EPUserUtils;
import org.onap.portal.utils.EcompPortalUtils;
import org.onap.portal.utils.PortalConstants;
import org.onap.portalsdk.core.logging.logic.EELFLoggerDelegate;
import org.onap.portalsdk.core.util.SystemProperties;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.http.HttpEntity;
import org.springframework.http.HttpMethod;
import org.springframework.http.ResponseEntity;
import org.springframework.stereotype.Service;
import org.springframework.web.client.RestTemplate;

@Service
public class ExternalAccessRolesService {

  private static final String APP_ROLE_NAME_PARAM = "appRoleName";
  private static final String GET_ROLE_TO_UPDATE_IN_EXTERNAL_AUTH_SYSTEM = "getRoletoUpdateInExternalAuthSystem";
  private static final String GET_PORTAL_APP_ROLES_QUERY = "getPortalAppRoles";
  private static final String GET_ROLE_FUNCTION_QUERY = "getRoleFunction";
  private static final String FUNCTION_CODE_PARAMS = "functionCode";
  private static final String AND_FUNCTION_CD_EQUALS = " and function_cd = '";
  private static final String OWNER = ".owner";
  private static final String ADMIN = ".admin";
  private static final String ACCOUNT_ADMINISTRATOR = ".Account_Administrator";
  private static final String FUNCTION_PIPE = "|";
  private static final String EXTERNAL_AUTH_PERMS = "perms";
  private static final String EXTERNAL_AUTH_ROLE_DESCRIPTION = "description";
  private static final String IS_EMPTY_JSON_STRING = "{}";
  private static final String CONNECTING_TO_EXTERNAL_AUTH_SYSTEM_LOG_MESSAGE = "Connecting to External Auth system";
  private static final String APP_ID = "appId";
  private static final String ROLE_NAME = "name";
  private static final String APP_ID_EQUALS = " app_id = ";

  private static final String GET_GLOBAL_ROLE_WITH_APPLICATION_ROLE_FUNCTIONS = "select"
      + "  distinct d.roleId as roleId,"
      + "  d.roleName as roleName,"
      + "  d.activeYn as active,"
      + "  d.priority as priority,"
      + "  c.epAppFunction.functionCd as functionCd,"
      + "  e.functionName as functionName,"
      + "  c.epAppFunction.appId as appId,"
      + "  c.roleAppId as roleAppId"
      + " from"
      + "  FnUserRole a,"
      + "  FnApp b,"
      + "  EpAppRoleFunction c,"
      + "  FnRole d,"
      + "  EpAppFunction e"
      + " where"
      + "  b.appId = c.appId.appId"
      + "  and a.appId = c.roleAppId"
      + "  and b.enabled = 'Y'"
      + "  and c.fnRole.roleId = d.roleId"
      + "  and d.activeYn = 'Y'"
      + "  and e.functionCd = c.epAppFunction.functionCd"
      + "  and c.appId.appId = :appId"
      + "  and e.appId.appId = c.appId.appId";

  private static final EELFLoggerDelegate logger = EELFLoggerDelegate.getLogger(ExternalAccessRolesService.class);
  private final RestTemplate template = new RestTemplate();

  private final FnRoleService fnRoleService;
  private final FnAppService fnAppService;
  private final EntityManager entityManager;
  private final EpAppFunctionService epAppFunctionService;

  @Autowired
  public ExternalAccessRolesService(FnRoleService fnRoleService,
      FnAppService fnAppService, EntityManager entityManager,
      EpAppFunctionService epAppFunctionService) {
    this.fnRoleService = fnRoleService;
    this.fnAppService = fnAppService;
    this.entityManager = entityManager;
    this.epAppFunctionService = epAppFunctionService;
  }

  String getFunctionCodeType(String roleFuncItem) {
    String type = null;
    if ((roleFuncItem.contains(FUNCTION_PIPE) && roleFuncItem.contains("menu"))
        || (!roleFuncItem.contains(FUNCTION_PIPE) && roleFuncItem.contains("menu"))) {
      type = "menu";
    } else if (checkIfCodeHasNoPipesAndHasTypeUrl(roleFuncItem) || checkIfCodeHasPipesAndHasTypeUrl(roleFuncItem)
        || checkIfCodeHasNoPipesAndHasNoTypeUrl(roleFuncItem)) {
      type = "url";
    } else if (roleFuncItem.contains(FUNCTION_PIPE)
        && (!roleFuncItem.contains("menu") || roleFuncItem.contains("url"))) {
      type = EcompPortalUtils.getFunctionType(roleFuncItem);
    }
    return type;
  }

  private boolean checkIfCodeHasNoPipesAndHasTypeUrl(String roleFuncItem) {
    return !roleFuncItem.contains(FUNCTION_PIPE) && roleFuncItem.contains("url");
  }

  private boolean checkIfCodeHasPipesAndHasTypeUrl(String roleFuncItem) {
    return roleFuncItem.contains(FUNCTION_PIPE) && roleFuncItem.contains("url");
  }

  private boolean checkIfCodeHasNoPipesAndHasNoTypeUrl(String roleFuncItem) {
    return !roleFuncItem.contains(FUNCTION_PIPE) && !roleFuncItem.contains("url");
  }

  List<FnRole> getPortalAppRoleInfo(Long roleId) {
    return fnRoleService.retrieveAppRoleByRoleIdWhereAppIdIsNull(roleId);
  }

  ResponseEntity<String> getUserRolesFromExtAuthSystem(String name, HttpEntity<String> getUserRolesEntity) {
    logger.debug(EELFLoggerDelegate.debugLogger, "Connecting to external system to get current user roles");
    ResponseEntity<String> getResponse = template
        .exchange(SystemProperties.getProperty(EPCommonSystemProperties.EXTERNAL_CENTRAL_ACCESS_URL)
            + "roles/user/" + name, HttpMethod.GET, getUserRolesEntity, String.class);
    if (getResponse.getStatusCode().value() == 200) {
      logger.debug(EELFLoggerDelegate.debugLogger,
          "getAllUserRoleFromExtAuthSystem: Finished GET user roles from external system and received user roles {}",
          getResponse.getBody());
    } else {
      logger.error(EELFLoggerDelegate.errorLogger,
          "getAllUserRoleFromExtAuthSystem: Failed GET user roles from external system and received user roles {}",
          getResponse.getBody());
      EPLogUtil.logExternalAuthAccessAlarm(logger, getResponse.getStatusCode());
    }
    return getResponse;
  }

  Map<String, FnRole> getAppRoleNamesWithUnderscoreMap(FnApp app) {
    final Map<String, FnRole> currentRolesInDB = new HashMap<>();
    List<FnRole> getCurrentRoleList = null;
    final Map<String, Long> appParams = new HashMap<>();
    if (app.getId().equals(PortalConstants.PORTAL_APP_ID)) {
      getCurrentRoleList = fnRoleService.retrieveAppRolesWhereAppIdIsNull();
    } else {
      appParams.put("appId", app.getId());
      getCurrentRoleList = fnRoleService.retrieveAppRolesByAppId(app.getId());
    }
    for (FnRole role : getCurrentRoleList) {
      currentRolesInDB.put(role.getRoleName()
          .replaceAll(EcompPortalUtils.EXTERNAL_CENTRAL_AUTH_ROLE_HANDLE_SPECIAL_CHARACTERS, "_"), role);
    }
    return currentRolesInDB;
  }

  List<CentralV2Role> createCentralRoleObject(List<FnApp> app, List<FnRole> roleInfo,
      List<CentralV2Role> roleList) throws RoleFunctionException {
    for (FnRole role : roleInfo) {
      List<EpAppFunction> cenRoleFuncList = epAppFunctionService
          .getAppRoleFunctionList(role.getId(), app.get(0).getId());
      SortedSet<FnRoleFunction> roleFunctionSet = new TreeSet<>();
      for (EpAppFunction roleFunc : cenRoleFuncList) {
        String functionCode = EcompPortalUtils.getFunctionCode(roleFunc.getFunctionCd());
        functionCode = EPUserUtils.decodeFunctionCode(functionCode);
        String type = getFunctionCodeType(roleFunc.getFunctionCd());
        String action = getFunctionCodeAction(roleFunc.getFunctionCd());
        FnRoleFunction cenRoleFunc = new FnRoleFunction(role, FnFunction.builder().code(functionCode).name(roleFunc.getFunctionName()).type(type).action(action).build());
      }
      SortedSet<CentralV2Role> childRoles = new TreeSet<>();
      SortedSet<CentralV2Role> parentRoles = new TreeSet<>();
      CentralV2Role cenRole;
      if (role.getAppRoleId() == null) {
        cenRole = CentralV2Role.builder().id(role.getId()).created(role.getCreated())
            .modified(role.getModified())
.rowNum(role.getRowNum()).name(role.getRoleName())
            .active(role.getActiveYn()).priority(role.getPriority()).roleFunctions(roleFunctionSet)
            .childRoles(childRoles).parentRoles(parentRoles).build();
      } else {
        cenRole = CentralV2Role.builder().id(role.getAppRoleId())
            .created(role.getCreated()).modified(role.getModified())
.rowNum(role.getRowNum()).name(role.getRoleName())
            .active(role.getActiveYn()).priority(role.getPriority()).roleFunctions(roleFunctionSet)
            .childRoles(childRoles).parentRoles(parentRoles).build();
      }
      roleList.add(cenRole);
    }
    return roleList;
  }

  String getFunctionCodeAction(String roleFuncItem) {
    return (!roleFuncItem.contains(FUNCTION_PIPE)) ? "*" : EcompPortalUtils.getFunctionAction(roleFuncItem);
  }

  List<CentralV2Role> getRolesForApp(String uebkey) throws Exception {
    logger.debug(EELFLoggerDelegate.debugLogger, "getRolesForApp: Entering into getRolesForApp");
    List<CentralV2Role> roleList = new ArrayList<>();
    try {
      List<FnApp> app = fnAppService.getByUebKey(uebkey);
      List<FnRole> appRolesList = fnRoleService.getAppRoles(app.get(0).getId());
      roleList = createCentralRoleObject(app, appRolesList, roleList);
      if (!Objects.equals(app.get(0).getId(), PortalConstants.PORTAL_APP_ID)) {
        List<CentralV2Role> globalRoleList = getGlobalRolesOfApplication(app.get(0).getId());
        List<FnRole> globalRolesList = fnRoleService.getGlobalRolesOfPortal();
        List<CentralV2Role> portalsGlobalRolesFinlaList = new ArrayList<>();
        if (!globalRolesList.isEmpty()) {
          for (FnRole eprole : globalRolesList) {
            CentralV2Role cenRole = convertRoleToCentralV2Role(eprole);
            portalsGlobalRolesFinlaList.add(cenRole);
          }
          roleList.addAll(globalRoleList);
          for (CentralV2Role role : portalsGlobalRolesFinlaList) {
            CentralV2Role result = roleList.stream().filter(x -> role.getId().equals(x.getId())).findAny()
                .orElse(null);
            if (result == null) {
              roleList.add(role);
            }
          }
        } else {
          for (FnRole role : globalRolesList) {
            CentralV2Role cenRole = convertRoleToCentralV2Role(role);
            roleList.add(cenRole);
          }
        }
      }
    } catch (Exception e) {
      logger.error(EELFLoggerDelegate.errorLogger, "getRolesForApp: Failed!", e);
      throw e;
    }
    logger.debug(EELFLoggerDelegate.debugLogger, "getRolesForApp: Finished!");
    return roleList.stream().distinct().collect(Collectors.toList());
  }

  private CentralV2Role convertRoleToCentralV2Role(FnRole role) {
    return CentralV2Role.builder().id(role.getId()).created(role.getCreated())
        .modified(role.getModified())
        .rowNum(role.getRowNum()).name(role.getRoleName()).active(role.getActiveYn())
        .priority(role.getPriority()).roleFunctions(new TreeSet<>()).childRoles(new TreeSet<>())
        .parentRoles(new TreeSet<>()).build();
  }

  private List<CentralV2Role> getGlobalRolesOfApplication(Long appId) {
    List<GlobalRoleWithApplicationRoleFunction> globalRoles = new ArrayList<>();
    try {
      List<Tuple> tuples = entityManager.createQuery(GET_GLOBAL_ROLE_WITH_APPLICATION_ROLE_FUNCTIONS, Tuple.class)
          .setParameter("appId", appId)
          .getResultList();
      globalRoles = tuples.stream().map(this::tupleToGlobalRoleWithApplicationRoleFunction).collect(Collectors.toList());
    } catch (Exception e) {
      logger.error(EELFLoggerDelegate.errorLogger, "getCentralizedAppsOfUser failed", e);
    }
    List<CentralV2Role> roleList = new ArrayList<>();
    if (globalRoles.size() > 0) {
      roleList = finalListOfCentralRoles(globalRoles);
    }
    return roleList;
  }

  private GlobalRoleWithApplicationRoleFunction tupleToGlobalRoleWithApplicationRoleFunction(Tuple tuple) {
    return GlobalRoleWithApplicationRoleFunction.builder().roleId((Long) tuple.get("roleId"))
        .roleName((String) tuple.get("roleName"))
        .functionCd((String) tuple.get("functionCd")).functionName((String) tuple.get("functionName"))
        .active((Boolean) tuple.get("active")).priority((Integer) tuple.get("priority"))
        .appId((Long) tuple.get("appId")).roleAppId((Long) tuple.get("roleAppId")).build();
  }

  private List<CentralV2Role> finalListOfCentralRoles(List<GlobalRoleWithApplicationRoleFunction> globalRoles) {
    List<CentralV2Role> rolesfinalList = new ArrayList<>();
    for (GlobalRoleWithApplicationRoleFunction role : globalRoles) {
      boolean found = false;
      for (CentralV2Role cenRole : rolesfinalList) {
        if (role.getRoleId().equals(cenRole.getId())) {
          SortedSet<FnRoleFunction> roleFunctions = cenRole.getRoleFunctions();
          FnRoleFunction cenRoleFun = createCentralRoleFunctionForGlobalRole(role);
          roleFunctions.add(cenRoleFun);
          cenRole.setRoleFunctions(roleFunctions);
          found = true;
          break;
        }
      }
      if (!found) {
        CentralV2Role cenrole = new CentralV2Role();
        cenrole.setName(role.getRoleName());
        cenrole.setId(role.getRoleId());
        cenrole.setActive(role.getActive());
        cenrole.setPriority(role.getPriority());
        SortedSet<FnRoleFunction> roleFunctions = new TreeSet<>();
        FnRoleFunction cenRoleFun = createCentralRoleFunctionForGlobalRole(role);
        roleFunctions.add(cenRoleFun);
        cenrole.setRoleFunctions(roleFunctions);
        rolesfinalList.add(cenrole);
      }
    }
    return rolesfinalList;
  }

  private FnRoleFunction createCentralRoleFunctionForGlobalRole(GlobalRoleWithApplicationRoleFunction role) {
    String instance;
    String type;
    String action;
    FnRoleFunction cenRoleFun = null;
    if (role.getFunctionCd().contains(FUNCTION_PIPE)) {
      instance = EcompPortalUtils.getFunctionCode(role.getFunctionCd());
      type = EcompPortalUtils.getFunctionType(role.getFunctionCd());
      action = EcompPortalUtils.getFunctionAction(role.getFunctionCd());
      cenRoleFun = FnRoleFunction.builder().build();
      FnRole fnRole = new FnRole();
      FnFunction fnFunction = FnFunction.builder().functionCd(instance).name(role.getFunctionName()).type(type).action(action).build();
      cenRoleFun.setRole(fnRole);
      cenRoleFun.setFunctionCd(fnFunction);
    } else {
      type = getFunctionCodeType(role.getFunctionCd());
      action = getFunctionCodeAction(role.getFunctionCd());
      FnFunction fnFunction = FnFunction.builder().functionCd(role.getFunctionCd()).name(role.getFunctionName()).type(type).action(action).build();
      cenRoleFun.setRole(new FnRole());
      cenRoleFun.setFunctionCd(fnFunction);
    }
    return cenRoleFun;
  }
}