All Downloads are FREE. Search and download functionalities are using the official Maven repository.

com.yahoo.elide.modelconfig.validator.DynamicConfigValidator Maven / Gradle / Ivy

There is a newer version: 7.1.2
Show newest version
/*
 * Copyright 2020, Yahoo Inc.
 * Licensed under the Apache License, Version 2.0
 * See LICENSE file in project root for terms.
 */
package com.yahoo.elide.modelconfig.validator;

import static com.yahoo.elide.core.dictionary.EntityDictionary.NO_VERSION;
import static org.apache.commons.lang3.StringUtils.isBlank;
import static org.apache.commons.lang3.StringUtils.isNotBlank;

import com.yahoo.elide.annotation.Include;
import com.yahoo.elide.annotation.SecurityCheck;
import com.yahoo.elide.core.dictionary.EntityDictionary;
import com.yahoo.elide.core.dictionary.EntityPermissions;
import com.yahoo.elide.core.exceptions.BadRequestException;
import com.yahoo.elide.core.security.checks.Check;
import com.yahoo.elide.core.security.checks.FilterExpressionCheck;
import com.yahoo.elide.core.security.checks.UserCheck;
import com.yahoo.elide.core.type.Type;
import com.yahoo.elide.core.utils.ClassScanner;
import com.yahoo.elide.core.utils.DefaultClassScanner;
import com.yahoo.elide.modelconfig.Config;
import com.yahoo.elide.modelconfig.DynamicConfigHelpers;
import com.yahoo.elide.modelconfig.DynamicConfigSchemaValidator;
import com.yahoo.elide.modelconfig.DynamicConfiguration;
import com.yahoo.elide.modelconfig.io.FileLoader;
import com.yahoo.elide.modelconfig.model.Argument;
import com.yahoo.elide.modelconfig.model.DBConfig;
import com.yahoo.elide.modelconfig.model.Dimension;
import com.yahoo.elide.modelconfig.model.ElideDBConfig;
import com.yahoo.elide.modelconfig.model.ElideNamespaceConfig;
import com.yahoo.elide.modelconfig.model.ElideSQLDBConfig;
import com.yahoo.elide.modelconfig.model.ElideSecurityConfig;
import com.yahoo.elide.modelconfig.model.ElideTableConfig;
import com.yahoo.elide.modelconfig.model.Join;
import com.yahoo.elide.modelconfig.model.Measure;
import com.yahoo.elide.modelconfig.model.Named;
import com.yahoo.elide.modelconfig.model.NamespaceConfig;
import com.yahoo.elide.modelconfig.model.Table;
import com.yahoo.elide.modelconfig.model.TableSource;
import com.yahoo.elide.modelconfig.store.models.ConfigFile;
import org.antlr.v4.runtime.tree.ParseTree;
import org.apache.commons.cli.CommandLine;
import org.apache.commons.cli.DefaultParser;
import org.apache.commons.cli.HelpFormatter;
import org.apache.commons.cli.Option;
import org.apache.commons.cli.Options;
import org.apache.commons.collections.CollectionUtils;

import lombok.Getter;
import lombok.extern.slf4j.Slf4j;

import java.io.IOException;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Collection;
import java.util.Collections;
import java.util.HashMap;
import java.util.HashSet;
import java.util.List;
import java.util.Locale;
import java.util.Map;
import java.util.Objects;
import java.util.Set;
import java.util.TreeSet;
import java.util.regex.Matcher;
import java.util.regex.Pattern;
import java.util.stream.Collectors;
import java.util.stream.Stream;

@Slf4j
/**
 * Util class to validate and parse the config files. Optionally compiles config files.
 */
public class DynamicConfigValidator implements DynamicConfiguration, Validator {

    private static final Set SQL_DISALLOWED_WORDS = new HashSet<>(
            Arrays.asList("DROP", "TRUNCATE", "DELETE", "INSERT", "UPDATE", "ALTER", "COMMENT", "CREATE", "DESCRIBE",
                    "SHOW", "USE", "GRANT", "REVOKE", "CONNECT", "LOCK", "EXPLAIN", "CALL", "MERGE", "RENAME"));
    private static final String SQL_SPLIT_REGEX = "\\s+";
    private static final String SEMI_COLON = ";";
    private static final Pattern HANDLEBAR_REGEX = Pattern.compile("<%(.*?)%>");
    private static final String RESOURCES = "resources";
    private static final int RESOURCES_LENGTH = 9; //"resources".length()
    private static final String CLASSPATH_PATTERN = "classpath*:";
    private static final String FILEPATH_PATTERN = "file:";
    private static final String HJSON_EXTN = "**/*.hjson";

    @Getter private final ElideTableConfig elideTableConfig = new ElideTableConfig();
    @Getter private ElideSecurityConfig elideSecurityConfig;
    @Getter private Map modelVariables;
    private Map dbVariables;
    @Getter private final ElideDBConfig elideSQLDBConfig = new ElideSQLDBConfig();
    @Getter private final ElideNamespaceConfig elideNamespaceConfig = new ElideNamespaceConfig();
    private final DynamicConfigSchemaValidator schemaValidator = new DynamicConfigSchemaValidator();
    private final EntityDictionary dictionary;
    private final FileLoader fileLoader;

    private static final Pattern FILTER_VARIABLE_PATTERN = Pattern.compile(".*?\\{\\{(\\w+)\\}\\}");

    public DynamicConfigValidator(ClassScanner scanner, String configDir) {
        dictionary = EntityDictionary.builder().scanner(scanner).build();
        fileLoader = new FileLoader(configDir);

        initialize();
    }

    private void initialize() {
        Set> annotatedClasses =
                        dictionary.getScanner().getAnnotatedClasses(Arrays.asList(Include.class, SecurityCheck.class));

        annotatedClasses.forEach(cls -> {
            if (cls.getAnnotation(Include.class) != null) {
                dictionary.bindEntity(cls);
            } else {
                dictionary.addSecurityCheck(cls);
            }
        });
    }

    public static void main(String[] args) {
        Options options = prepareOptions();

        try {
            CommandLine cli = new DefaultParser().parse(options, args);

            if (cli.hasOption("help")) {
                printHelp(options);
                System.exit(0);
            }
            if (!cli.hasOption("configDir")) {
                printHelp(options);
                System.err.println("Missing required option");
                System.exit(1);
            }
            String configDir = cli.getOptionValue("configDir");

            DynamicConfigValidator dynamicConfigValidator =
                    new DynamicConfigValidator(DefaultClassScanner.getInstance(), configDir);
            dynamicConfigValidator.readAndValidateConfigs();
            System.out.println("Configs Validation Passed!");
            System.exit(0);

        } catch (Exception e) {
            String msg = isBlank(e.getMessage()) ? "Process Failed!" : e.getMessage();
            System.err.println(msg);
            System.exit(2);
        }
    }

    @Override
    public void validate(Map resourceMap) {

        resourceMap.forEach((path, file) -> {
            if (file.getContent() == null || file.getContent().isEmpty()) {
                throw new BadRequestException(String.format("Null or empty file content for %s", file.getPath()));
            }

            //Validate that all the files are ones we know about and are safe to manipulate...
            if (file.getType().equals(ConfigFile.ConfigFileType.UNKNOWN)) {
                throw new BadRequestException(String.format("Unrecognized File: %s", file.getPath()));
            }

            if (path.contains("..")) {
                throw new BadRequestException(String.format("Parent directory traversal not allowed: %s",
                        file.getPath()));
            }

            //Validate that the file types and file paths match...
            if (! file.getType().equals(FileLoader.toType(path))) {
                throw new BadRequestException(String.format("File type %s does not match file path: %s",
                        file.getType(), file.getPath()));
            }
        });

        readConfigs(resourceMap);
        validateConfigs();
    }

    /**
     * Read and validate config files under config directory.
     * @throws IOException IOException
     */
    public void readAndValidateConfigs() throws IOException {
        Map loadedFiles = fileLoader.loadResources();

        validate(loadedFiles);
    }

    public void readConfigs() throws IOException {
        readConfigs(fileLoader.loadResources());
    }

    public void readConfigs(Map resourceMap) {
        this.modelVariables = readVariableConfig(Config.MODELVARIABLE, resourceMap);
        this.elideSecurityConfig = readSecurityConfig(resourceMap);
        this.dbVariables = readVariableConfig(Config.DBVARIABLE, resourceMap);
        this.elideSQLDBConfig.setDbconfigs(readDbConfig(resourceMap));
        this.elideTableConfig.setTables(readTableConfig(resourceMap));
        this.elideNamespaceConfig.setNamespaceconfigs(readNamespaceConfig(resourceMap));
        populateInheritance(this.elideTableConfig);
    }

    public void validateConfigs() {
        validateSecurityConfig();
        boolean configurationExists = validateRequiredConfigsProvided();

        if (configurationExists) {
            validateNameUniqueness(this.elideSQLDBConfig.getDbconfigs(),
                    "Multiple DB configs found with the same name: ");
            validateNameUniqueness(this.elideTableConfig.getTables(),
                    "Multiple Table configs found with the same name: ");
            validateTableConfig();
            validateNameUniqueness(this.elideNamespaceConfig.getNamespaceconfigs(),
                    "Multiple Namespace configs found with the same name: ");
            validateNamespaceConfig();
            validateJoinedTablesDBConnectionName(this.elideTableConfig);
        }
    }

    @Override
    public Set getTables() {
        return elideTableConfig.getTables();
    }

    @Override
    public Set getRoles() {
        return elideSecurityConfig.getRoles();
    }

    @Override
    public Set getDatabaseConfigurations() {
        return elideSQLDBConfig.getDbconfigs();
    }

    @Override
    public Set getNamespaceConfigurations() {
        return elideNamespaceConfig.getNamespaceconfigs();
    }

    private static void validateInheritance(ElideTableConfig tables) {
        tables.getTables().stream().forEach(table -> validateInheritance(tables, table, new HashSet<>()));
    }

    private static void validateInheritance(ElideTableConfig tables, Table table, Set
visited) { visited.add(table); if (!table.hasParent()) { return; } Table parent = table.getParent(tables); if (parent == null) { throw new IllegalStateException( "Undefined model: " + table.getExtend() + " is used as a Parent(extend) for another model."); } if (visited.contains(parent)) { throw new IllegalStateException( String.format("Inheriting from table '%s' creates an illegal cyclic dependency.", parent.getName())); } validateInheritance(tables, parent, visited); } private void populateInheritance(ElideTableConfig elideTableConfig) { //ensures validation is run before populate always. validateInheritance(this.elideTableConfig); Set
processed = new HashSet<>(); elideTableConfig.getTables().stream().forEach(table -> populateInheritance(table, processed)); } private void populateInheritance(Table table, Set
processed) { if (processed.contains(table)) { return; } processed.add(table); if (!table.hasParent()) { return; } Table parent = table.getParent(this.elideTableConfig); if (!processed.contains(parent)) { populateInheritance(parent, processed); } Map measures = getInheritedMeasures(parent, attributesListToMap(table.getMeasures())); table.setMeasures(new ArrayList<>(measures.values())); Map dimensions = getInheritedDimensions(parent, attributesListToMap(table.getDimensions())); table.setDimensions(new ArrayList<>(dimensions.values())); Map joins = getInheritedJoins(parent, attributesListToMap(table.getJoins())); table.setJoins(new ArrayList<>(joins.values())); String schema = getInheritedSchema(parent, table.getSchema()); table.setSchema(schema); String dbConnectionName = getInheritedConnection(parent, table.getDbConnectionName()); table.setDbConnectionName(dbConnectionName); String sql = getInheritedSql(parent, table.getSql()); table.setSql(sql); String tableName = getInheritedTable(parent, table.getTable()); table.setTable(tableName); List arguments = getInheritedArguments(parent, table.getArguments()); table.setArguments(arguments); // isFact, isHidden, ReadAccess, namespace have default Values in schema, so can not be inherited. // Other properties (tags, cardinality, etc.) have been categorized as non-inheritable too. } private Map attributesListToMap(List attributes) { return attributes.stream().collect(Collectors.toMap(T::getName, attribute -> attribute)); } @FunctionalInterface public interface Inheritance { public T inherit(); } private Map getInheritedMeasures(Table table, Map measures) { Inheritance action = () -> { table.getMeasures().forEach(measure -> { if (!measures.containsKey(measure.getName())) { measures.put(measure.getName(), measure); } }); return measures; }; action.inherit(); return measures; } private Map getInheritedDimensions(Table table, Map dimensions) { Inheritance action = () -> { table.getDimensions().forEach(dimension -> { if (!dimensions.containsKey(dimension.getName())) { dimensions.put(dimension.getName(), dimension); } }); return dimensions; }; action.inherit(); return dimensions; } private Map getInheritedJoins(Table table, Map joins) { Inheritance action = () -> { table.getJoins().forEach(join -> { if (!joins.containsKey(join.getName())) { joins.put(join.getName(), join); } }); return joins; }; action.inherit(); return joins; } private T getInheritedAttribute(Inheritance action, T property) { return property == null ? (T) action.inherit() : property; } private Collection getInheritedAttribute(Inheritance action, Collection property) { return CollectionUtils.isEmpty(property) ? (Collection) action.inherit() : property; } private String getInheritedSchema(Table table, String schema) { Inheritance action = table::getSchema; return getInheritedAttribute(action, schema); } private String getInheritedConnection(Table table, String connection) { Inheritance action = table::getDbConnectionName; return getInheritedAttribute(action, connection); } private String getInheritedSql(Table table, String sql) { Inheritance action = table::getSql; return getInheritedAttribute(action, sql); } private String getInheritedTable(Table table, String tableName) { Inheritance action = table::getTable; return getInheritedAttribute(action, tableName); } private List getInheritedArguments(Table table, List arguments) { Inheritance action = table::getArguments; return (List) getInheritedAttribute(action, arguments); } /** * Read variable file config. * @param config Config Enum * @return Map A map containing all the variables if variable config exists else empty map */ private Map readVariableConfig(Config config, Map resourceMap) { return resourceMap .entrySet() .stream() .filter(entry -> entry.getKey().startsWith(config.getConfigPath())) .map(entry -> { try { return DynamicConfigHelpers.stringToVariablesPojo(entry.getKey(), entry.getValue().getContent(), schemaValidator); } catch (IOException e) { throw new IllegalStateException(e); } }) .findFirst() .orElse(new HashMap<>()); } /** * Read and validates security config file. */ private ElideSecurityConfig readSecurityConfig(Map resourceMap) { return resourceMap .entrySet() .stream() .filter(entry -> entry.getKey().startsWith(Config.SECURITY.getConfigPath())) .map(entry -> { try { String content = entry.getValue().getContent(); validateConfigForMissingVariables(content, this.modelVariables); return DynamicConfigHelpers.stringToElideSecurityPojo(entry.getKey(), content, this.modelVariables, schemaValidator); } catch (IOException e) { throw new IllegalStateException(e); } }) .findAny() .orElse(new ElideSecurityConfig()); } /** * Read and validates db config files. * @return Set Set of SQL DB Configs */ private Set readDbConfig(Map resourceMap) { return resourceMap .entrySet() .stream() .filter(entry -> entry.getKey().startsWith(Config.SQLDBConfig.getConfigPath())) .map(entry -> { try { String content = entry.getValue().getContent(); validateConfigForMissingVariables(content, this.dbVariables); return DynamicConfigHelpers.stringToElideDBConfigPojo(entry.getKey(), content, this.dbVariables, schemaValidator); } catch (IOException e) { throw new IllegalStateException(e); } }) .flatMap(dbconfig -> dbconfig.getDbconfigs().stream()) .collect(Collectors.toSet()); } /** * Read and validates namespace config files. * @return Set Set of Namespace Configs */ private Set readNamespaceConfig(Map resourceMap) { return resourceMap .entrySet() .stream() .filter(entry -> entry.getKey().startsWith(Config.NAMESPACEConfig.getConfigPath())) .map(entry -> { try { String content = entry.getValue().getContent(); validateConfigForMissingVariables(content, this.modelVariables); String fileName = entry.getKey(); return DynamicConfigHelpers.stringToElideNamespaceConfigPojo(fileName, content, this.modelVariables, schemaValidator); } catch (IOException e) { throw new IllegalStateException(e); } }) .flatMap(namespaceconfig -> namespaceconfig.getNamespaceconfigs().stream()) .collect(Collectors.toSet()); } /** * Read and validates table config files. */ private Set
readTableConfig(Map resourceMap) { return resourceMap .entrySet() .stream() .filter(entry -> entry.getKey().startsWith(Config.TABLE.getConfigPath())) .map(entry -> { try { String content = entry.getValue().getContent(); validateConfigForMissingVariables(content, this.modelVariables); return DynamicConfigHelpers.stringToElideTablePojo(entry.getKey(), content, this.modelVariables, schemaValidator); } catch (IOException e) { throw new IllegalStateException(e); } }) .flatMap(table -> table.getTables().stream()) .collect(Collectors.toSet()); } /** * Checks if neither Table nor DB config files provided. */ private boolean validateRequiredConfigsProvided() { return !(this.elideTableConfig.getTables().isEmpty() && this.elideSQLDBConfig.getDbconfigs().isEmpty()); } /** * Extracts any handlebar variables in config file and checks if they are * defined in variable config. Throw exception for undefined variables. * @param config config file * @param variables A map of defined variables */ private static void validateConfigForMissingVariables(String config, Map variables) { Matcher regexMatcher = HANDLEBAR_REGEX.matcher(config); while (regexMatcher.find()) { String str = regexMatcher.group(1).trim(); if (!variables.containsKey(str)) { throw new IllegalStateException(str + " is used as a variable in either table or security config files " + "but is not defined in variables config file."); } } } /** * Validate table configs. * @return boolean true if all provided table properties passes validation */ private boolean validateTableConfig() { Set extractedFieldChecks = new HashSet<>(); Set extractedTableChecks = new HashSet<>(); PermissionExpressionVisitor visitor = new PermissionExpressionVisitor(); for (Table table : elideTableConfig.getTables()) { validateSql(table.getSql()); validateArguments(table, table.getArguments(), table.getFilterTemplate()); //TODO - once tables support versions - replace NO_VERSION with apiVersion validateNamespaceExists(table.getNamespace(), NO_VERSION); Set tableFields = new HashSet<>(); table.getDimensions().forEach(dim -> { validateFieldNameUniqueness(tableFields, dim.getName(), table.getName()); validateSql(dim.getDefinition()); validateTableSource(dim.getTableSource()); validateArguments(table, dim.getArguments(), dim.getFilterTemplate()); extractChecksFromExpr(dim.getReadAccess(), extractedFieldChecks, visitor); }); table.getMeasures().forEach(measure -> { validateFieldNameUniqueness(tableFields, measure.getName(), table.getName()); validateSql(measure.getDefinition()); validateArguments(table, measure.getArguments(), measure.getFilterTemplate()); extractChecksFromExpr(measure.getReadAccess(), extractedFieldChecks, visitor); }); table.getJoins().forEach(join -> { validateFieldNameUniqueness(tableFields, join.getName(), table.getName()); validateSql(join.getDefinition()); validateModelExists(join.getTo()); //TODO - once tables support versions - replace NO_VERSION with apiVersion validateNamespaceExists(join.getNamespace(), NO_VERSION); }); extractChecksFromExpr(table.getReadAccess(), extractedTableChecks, visitor); } validateChecks(extractedTableChecks, extractedFieldChecks); return true; } /** * Validate namespace configs. * @return boolean true if all provided namespace properties passes validation */ private boolean validateNamespaceConfig() { Set extractedChecks = new HashSet<>(); PermissionExpressionVisitor visitor = new PermissionExpressionVisitor(); for (NamespaceConfig namespace : elideNamespaceConfig.getNamespaceconfigs()) { extractChecksFromExpr(namespace.getReadAccess(), extractedChecks, visitor); } validateChecks(extractedChecks, Collections.EMPTY_SET); return true; } private void validateArguments(Table table, List arguments, String requiredFilter) { List allArguments = new ArrayList<>(arguments); /* Check for table arguments added in the required filter template */ if (requiredFilter != null) { Matcher matcher = FILTER_VARIABLE_PATTERN.matcher(requiredFilter); while (matcher.find()) { allArguments.add(Argument.builder() .name(matcher.group(1)) .build()); } } validateNameUniqueness(allArguments, "Multiple Arguments found with the same name: "); arguments.forEach(arg -> validateTableSource(arg.getTableSource())); } private void validateChecks(Set tableChecks, Set fieldChecks) { if (tableChecks.isEmpty() && fieldChecks.isEmpty()) { return; // Nothing to validate } Set staticChecks = dictionary.getCheckIdentifiers(); List undefinedChecks = Stream.concat(tableChecks.stream(), fieldChecks.stream()) .filter(check -> !(elideSecurityConfig.hasCheckDefined(check) || staticChecks.contains(check))) .sorted() .collect(Collectors.toList()); if (!undefinedChecks.isEmpty()) { throw new IllegalStateException("Found undefined security checks: " + undefinedChecks); } tableChecks.stream() .filter(check -> dictionary.getCheckMappings().containsKey(check)) .forEach(check -> { Class checkClass = dictionary.getCheck(check); //Validates if the permission check either user Check or FilterExpressionCheck Check if (!(UserCheck.class.isAssignableFrom(checkClass) || FilterExpressionCheck.class.isAssignableFrom(checkClass))) { throw new IllegalStateException("Table or Namespace cannot have Operation Checks. Given: " + checkClass); } }); fieldChecks.stream() .filter(check -> dictionary.getCheckMappings().containsKey(check)) .forEach(check -> { Class checkClass = dictionary.getCheck(check); //Validates if the permission check is User check if (!UserCheck.class.isAssignableFrom(checkClass)) { throw new IllegalStateException("Field can only have User checks or Roles. Given: " + checkClass); } }); } private static void extractChecksFromExpr(String readAccess, Set extractedChecks, PermissionExpressionVisitor visitor) { if (isNotBlank(readAccess)) { ParseTree root = EntityPermissions.parseExpression(readAccess); extractedChecks.addAll(visitor.visit(root)); } } private static void validateFieldNameUniqueness(Set alreadyFoundFields, String fieldName, String tableName) { if (!alreadyFoundFields.add(fieldName.toLowerCase(Locale.ENGLISH))) { throw new IllegalStateException(String.format("Duplicate!! Field name: %s is not unique for table: %s", fieldName, tableName)); } } /** * Validates tableSource is in format: modelName.logicalColumnName and refers to a defined model and a defined * column with in that model. */ private void validateTableSource(TableSource tableSource) { if (tableSource == null) { return; // Nothing to validate } String modelName = Table.getModelName(tableSource.getTable(), tableSource.getNamespace()); if (elideTableConfig.hasTable(modelName)) { Table lookupTable = elideTableConfig.getTable(modelName); if (!lookupTable.hasField(tableSource.getColumn())) { throw new IllegalStateException("Invalid tableSource : " + tableSource + " . Field : " + tableSource.getColumn() + " is undefined for hjson model: " + tableSource.getTable()); } return; } //TODO - once tables support versions - replace NO_VERSION with apiVersion if (hasStaticModel(modelName, NO_VERSION)) { if (!hasStaticField(modelName, NO_VERSION, tableSource.getColumn())) { throw new IllegalStateException("Invalid tableSource : " + tableSource + " . Field : " + tableSource.getColumn() + " is undefined for non-hjson model: " + tableSource.getTable()); } return; } throw new IllegalStateException("Invalid tableSource : " + tableSource + " . Undefined model: " + tableSource.getTable()); } /** * Validates join clause does not refer to a Table which is not in the same DBConnection. If joined table is not * part of dynamic configuration, then ignore */ private static void validateJoinedTablesDBConnectionName(ElideTableConfig elideTableConfig) { for (Table table : elideTableConfig.getTables()) { if (!table.getJoins().isEmpty()) { Set joinedTables = table.getJoins() .stream() //TODO - NOT SURE .map(Join::getTo) .collect(Collectors.toSet()); Set connections = elideTableConfig.getTables() .stream() .filter(t -> joinedTables.contains(t.getGlobalName())) .map(Table::getDbConnectionName) .collect(Collectors.toSet()); if (connections.size() > 1 || (connections.size() == 1 && !Objects.equals(table.getDbConnectionName(), connections.iterator().next()))) { throw new IllegalStateException("DBConnection name mismatch between table: " + table.getName() + " and tables in its Join Clause."); } } } } /** * Validates table (or db connection) name is unique across all the dynamic table (or db connection) configs. */ public static void validateNameUniqueness(Collection configs, String errorMsg) { Set names = new HashSet<>(); configs.forEach(obj -> { if (!names.add(obj.getGlobalName().toLowerCase(Locale.ENGLISH))) { throw new IllegalStateException(errorMsg + obj.getGlobalName()); } }); } /** * Check if input sql definition contains either semicolon or any of disallowed * keywords. Throw exception if check fails. */ private static void validateSql(String sqlDefinition) { if (isNotBlank(sqlDefinition) && (sqlDefinition.contains(SEMI_COLON) || containsDisallowedWords(sqlDefinition, SQL_SPLIT_REGEX, SQL_DISALLOWED_WORDS))) { throw new IllegalStateException("sql/definition provided in table config contain either '" + SEMI_COLON + "' or one of these words: " + Arrays.toString(SQL_DISALLOWED_WORDS.toArray())); } } /** * Validate role name provided in security config. * @return boolean true if all role name passes validation else throw exception */ private boolean validateSecurityConfig() { Set alreadyDefinedRoles = new TreeSet<>(String.CASE_INSENSITIVE_ORDER); alreadyDefinedRoles.addAll(dictionary.getCheckIdentifiers()); elideSecurityConfig.getRoles().forEach(role -> { if (alreadyDefinedRoles.contains(role)) { throw new IllegalStateException(String.format( "Duplicate!! Role name: '%s' is already defined. Please use different role.", role)); } alreadyDefinedRoles.add(role); }); return true; } private void validateModelExists(String name) { if (!(elideTableConfig.hasTable(name) || hasStaticModel(name, NO_VERSION))) { throw new IllegalStateException( "Model: " + name + " is neither included in dynamic models nor in static models"); } } private void validateNamespaceExists(String name, String version) { if (!elideNamespaceConfig.hasNamespace(name, version)) { throw new IllegalStateException( "Namespace: " + name + " is not included in dynamic configs"); } } /** * Checks if any word in the input string matches any of the disallowed words. * @param str input string to validate * @param splitter regex for splitting input string * @param keywords Set of disallowed words * @return boolean true if any word in the input string matches any of the * disallowed words else false */ private static boolean containsDisallowedWords(String str, String splitter, Set keywords) { return isNotBlank(str) && Arrays.stream(str.trim().toUpperCase(Locale.ENGLISH).split(splitter)).anyMatch(keywords::contains); } /** * Define Arguments. */ private static final Options prepareOptions() { Options options = new Options(); options.addOption(new Option("h", "help", false, "Print a help message and exit.")); options.addOption(new Option("c", "configDir", true, "Path for Configs Directory.\n" + "Expected Directory Structure under Configs Directory:\n" + "./models/security.hjson(optional)\n" + "./models/variables.hjson(optional)\n" + "./models/tables/(optional)\n" + "./models/tables/table1.hjson\n" + "./models/tables/table2.hjson\n" + "./models/tables/tableN.hjson\n" + "./db/variables.hjson(optional)\n" + "./db/sql/(optional)\n" + "./db/sql/db1.hjson\n" + "./db/sql/db2.hjson\n" + "./db/sql/dbN.hjson\n")); return options; } /** * Print Help. */ private static void printHelp(Options options) { HelpFormatter formatter = new HelpFormatter(); formatter.printHelp( "java -cp com.yahoo.elide.modelconfig.validator.DynamicConfigValidator", options); } private boolean hasStaticField(String modelName, String version, String fieldName) { Type modelType = dictionary.getEntityClass(modelName, version); if (modelType == null) { return false; } try { return (modelType.getDeclaredField(fieldName) != null); } catch (NoSuchFieldException e) { return false; } } private boolean hasStaticModel(String modelName, String version) { Type modelType = dictionary.getEntityClass(modelName, version); return modelType != null; } }