org.ligoj.app.plugin.id.resource.CompanyResource Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of plugin-id Show documentation
There is a newer version: 2.2.5
/*
 * Licensed under MIT (https://github.com/ligoj/ligoj/blob/master/LICENSE)
 */
package org.ligoj.app.plugin.id.resource;

import jakarta.transaction.Transactional;
import jakarta.ws.rs.GET;
import jakarta.ws.rs.Path;
import jakarta.ws.rs.Produces;
import jakarta.ws.rs.core.Context;
import jakarta.ws.rs.core.MediaType;
import jakarta.ws.rs.core.UriInfo;
import org.apache.commons.lang3.ObjectUtils;
import org.ligoj.app.iam.CompanyOrg;
import org.ligoj.app.iam.ContainerOrg;
import org.ligoj.app.iam.ICompanyRepository;
import org.ligoj.app.iam.UserOrg;
import org.ligoj.app.iam.dao.CacheCompanyRepository;
import org.ligoj.app.iam.model.CacheCompany;
import org.ligoj.app.model.ContainerType;
import org.ligoj.app.plugin.id.DnUtils;
import org.ligoj.app.plugin.id.model.ContainerScope;
import org.ligoj.bootstrap.core.json.TableItem;
import org.ligoj.bootstrap.core.json.datatable.DataTableAttributes;
import org.ligoj.bootstrap.core.validation.ValidationJsonException;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Service;

import java.util.Collections;
import java.util.stream.Collectors;

/**
 * Resource for companies.
 */
@Path(IdentityResource.SERVICE_URL + "/company")
@Service
@Produces(MediaType.APPLICATION_JSON)
@Transactional
public class CompanyResource extends AbstractContainerResource {

	@Autowired
	private CacheCompanyRepository cacheCompanyRepository;

	/**
	 * Default constructor specifying the type as {@link ContainerType#COMPANY}
	 */
	protected CompanyResource() {
		super(ContainerType.COMPANY);
	}

	@Override
	public CacheCompanyRepository getCacheRepository() {
		return cacheCompanyRepository;
	}

	@Override
	public ICompanyRepository getRepository() {
		return getCompany();
	}

	/**
	 * Return the company name of current user.
	 *
	 * @return The company name of current user or null if the current user is not in the repository.
	 */
	public CompanyOrg getUserCompany() {
		final var user = getUser().findById(securityHelper.getLogin());
		if (user == null) {
			return null;
		}
		return getRepository().findById(ObjectUtils.defaultIfNull(user.getCompany(), ""));
	}

	/**
	 * Return the company DN of current user.
	 *
	 * @return the company DN of current user or null if the current user is not in the repository.
	 */
	private String getUserCompanyDn() {
		final var company = getUserCompany();
		if (company == null) {
			return null;
		}
		return company.getDn();
	}

	/**
	 * Indicates the current user is inside the internal scope of people.
	 *
	 * @return true when the current user is inside the internal scope of people.
	 */
	public boolean isUserInternalCompany() {
		return ObjectUtils.defaultIfNull(getUserCompanyDn(), "")
				.endsWith(ObjectUtils.defaultIfNull(getUser().getPeopleInternalBaseDn(), ""));
	}

	/**
	 * Return groups matching to given criteria. The visible groups, trees and companies are checked. The returned
	 * groups of each user depends on the groups the user can see/write in CN form.
	 *
	 * @param uriInfo filter data.
	 * @return found groups.
	 */
	@GET
	public TableItem findAll(@Context final UriInfo uriInfo) {
		final var pageRequest = paginationJson.getPageRequest(uriInfo, ORDERED_COLUMNS);

		final var types = containerScopeResource.findAllDescOrder(ContainerType.COMPANY);
		final var visibleCompanies = getContainers();
		final var visibleCompaniesAsString = visibleCompanies.stream().map(CompanyOrg::getId)
				.collect(Collectors.toSet());
		final var writeCompanies = getContainersIdForWrite();
		final var adminCompanies = getContainersIdForAdmin();
		final var users = getUser().findAll();
		final var companies = getCompany().findAll();

		// Search the companies
		final var findAll = getRepository().findAll(visibleCompanies,
				DataTableAttributes.getSearch(uriInfo), pageRequest,
				Collections.singletonMap(TYPE_ATTRIBUTE, new TypeComparator(types)));

		// Apply pagination and secure the users data
		return paginationJson.applyPagination(uriInfo, findAll, rawCompany -> {
			// Build the secured company with counter
			final var securedCompany = new ContainerCountVo();
			fillContainerCountVo(rawCompany, writeCompanies, adminCompanies, types, securedCompany, companies);

			// Computed the total members, unrestricted visibility
			securedCompany.setCount(
					(int) users.values().stream().filter(user -> rawCompany.getId().equals(user.getCompany())).count());

			// Computed the visible members : same company and visible company
			securedCompany.setCountVisible(
					(int) users.values().stream().filter(user -> rawCompany.getId().equals(user.getCompany()))
							.filter(user -> visibleCompaniesAsString.contains(user.getCompany())).count());
			return securedCompany;
		});
	}

	@Override
	protected void checkForDeletion(final ContainerOrg container) {
		super.checkForDeletion(container);

		// Company deletion is only possible where there is no user inside this company, or inside any sub-company
		final var users = getUser().findAll();
		if (getRepository().findAll().values().stream()
				.filter(c -> DnUtils.equalsOrParentOf(container.getDn(), c.getDn()))
				.anyMatch(c -> users.values().stream().map(UserOrg::getCompany).anyMatch(c.getId()::equals))) {
			// Locked container is inside the container to delete
			throw new ValidationJsonException(getTypeName(), "not-empty-company", "0", getTypeName(), "1",
					container.getId());
		}
	}

	@Override
	protected String toDn(final ContainerEditionVo container, final ContainerScope scope) {
		return "ou=" + container.getName() + "," + scope.getDn();
	}

}