base.jee.api.cassandra.GetGroupMembers Maven / Gradle / Ivy

Go to download
/**
 * Creative commons Attribution-NonCommercial license.
 *
 * http://creativecommons.org/licenses/by-nc/2.5/au/deed.en_GB
 *
 * NO WARRANTY IS GIVEN OR IMPLIED, USE AT YOUR OWN RISK.
 */
package base.jee.api.cassandra;

import base.Query;
import base.jee.Constants;
import base.security.PermissionException;
import base.security.Person;
import base.security.User;
import com.datastax.driver.core.PreparedStatement;
import com.datastax.driver.core.Row;
import com.datastax.driver.core.Session;

import java.io.IOException;
import java.util.Collections;
import java.util.LinkedList;
import java.util.List;
import java.util.Map;
import java.util.UUID;

import static base.jee.api.cassandra.util.Log.log;

public class GetGroupMembers extends Query {

	private CassandraAPI api;
	private User user;
	private UUID group;

	public GetGroupMembers() {
	}

	public GetGroupMembers(CassandraAPI api, User user, UUID group) throws PermissionException {

		if(api == null) {
			throw new IllegalArgumentException("Invalid parameter: api");
		}
		if(group == null) {
			throw new IllegalArgumentException("Invalid parameter: group");
		}
		if(user == null || !user.isAuthenticated()) {
			throw new PermissionException(getClass().getSimpleName(), user, "Requires authenticated user.", Constants.GROUP_MANAGE_ROLE);
		}

		this.api = api;
		this.user = user;
		this.group = group;
	}

	@Override
	public Query newWithParameters(Map parameters) throws PermissionException {
		return new GetGroupMembers(
				(CassandraAPI)parameters.get("api"),
				(User)parameters.get("user"),
				UUID.fromString((String)parameters.get("uuid")));
	}

	public List execute() throws IOException {
		List results = new LinkedList<>();
		Session s = api.getCassandraSession();

		boolean userInGroup = false;
		PreparedStatement q = s.prepare("select first_name, last_name from person where uuid=?");
		for(Row r : s.execute(s.prepare("select person_uuid from group_member where group_uuid=? allow filtering").bind(group))) {
			for(Row r2 : s.execute(q.bind(r.getUUID(0)))) {
				results.add(new Person(r.getUUID(0), r2.getString(0), r2.getString(1)));
			}
			if(r.getUUID(0).equals(user.getPersonUuid())) {
				userInGroup = true;
			}
		}

		if(user != null && !user.hasRole(Constants.GROUP_MANAGE_ROLE) && !userInGroup) {
			log(s, "WARN", user, "Permission denied invoking: " + GetSettings.class.getSimpleName() + " " + getJsonParameters());
			throw new IllegalStateException("You do not have permission to lookup this persons group information");
		}

		Collections.sort(results);

		return results;
	}

	@Override
	public String getJsonParameters() {
		return "{" +
				"\"person\":\"" + user.getPersonUuid() + "\"," +
				"\"group.uuid\":\"" + group + "\"" +
				"}";
	}

}