Package ru.cg.webbpm.modules.security.api.impl.service

Class UserServiceImpl

java.lang.Object

ru.cg.webbpm.modules.security.api.impl.service.UserServiceImpl

All Implemented Interfaces:

UserService

@Service
public class UserServiceImpl
extends Object
implements UserService

Author:

Tim Urmancheev

Constructor Summary

Constructors

Constructor	Description
UserServiceImpl(SecurityContext securityContext, AccessLevelService accessLevelService, UserDao userDao, UserGroupDao userGroupDao, UserRoleDao userRoleDao)	User service constructor - creates new user service.

Method Summary

Modifier and Type	Method	Description
String	bindGroup(String userId, String groupId)	Binds group to user by user account id and group id.
String	bindGroupByUser(String userId, String groupId, String bindingUserId)	Binds group to user by user account id, group id and user account id of binding user.
String	create(User user)	Inserts user into database.
void	delete(String userId)	Sets user's "locked" field to true according to user id.
void	delete(Collection<String> userIds)	Sets user's "locked" field to true according to user account ids collection.
User	get(String userId)	Gets user by user account id.
Collection<User>	get(Collection<String> userIds)	Gets user by user account ids.
List<User>	get(LoadOptions options)	Gets users according to load options.
User	getByEmail(String email)	Gets user by email.
User	getByUsername(String username)	Gets user by username.
List<Group>	getGroups(String userId, LoadOptions options)	Gets groups by user account id according to load options.
List<User>	getLdapUsers()
List<String>	getRoleNamesInOrg(String orgUnitCode)	Gets all role names of org unit by org unit code.
List<Role>	getRoles(String userId, LoadOptions options)	Gets roles by user account id according to load options.
User	getSuperAdmin()	Gets user with maximal access level.
List<UserGroup>	getUserGroupLinks(String userId, LoadOptions options)	Gets groups by user account id with binding timestamp according to load options.
UserSourceType	getUserSourceByUserId(String id)
Collection<User>	getUsersWithAuthorityIn(Collection<String> authorityIds)
Collection<User>	getUsersWithGroupIn(Collection<String> groupIds)
Collection<User>	getUsersWithRoleIn(Collection<String> roleIds)
List<User>	getUsersWithRoleInOrg(String roleName, String orgUnitCode)	Gets users with role name in org unit.
User	getUserWithMaxAccessLevel()	Gets any existing(not locked) user with max access level (maybe super admin)
boolean	isCurrentUserSuperAdmin()	Checks current user access level equals to maximal access level.
void	unbindGroup(String userId, String groupId)	Unbinds group from user by user account id and group id.
void	unbindGroupByUser(String userId, String groupId, String unbindingUserId)	Unbinds group from user by user account id, group id and user account id of unbinding user.
void	update(User user)	Updates user in database.
void	updateGroups(String userId, Collection<String> addedGroupIds, Collection<String> deletedGroupIds)	Updates user group links by user account id, added group ids collection and deleted group ids collection Checks current user's access level to binding and unbinding groups.
void	updateLockedAndEmailConfirmed(String userId, boolean locked, boolean emailConfirmed)	Updates user's emailConfirmed status.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

UserServiceImpl

@Autowired
public UserServiceImpl(SecurityContext securityContext,
 AccessLevelService accessLevelService,
 UserDao userDao,
 UserGroupDao userGroupDao,
 UserRoleDao userRoleDao)

User service constructor - creates new user service.

Parameters:

securityContext - user's security context. Instance of SecurityContext type.

accessLevelService - access level service. Instance of AccessLevelService type.

userDao - user account data access object. Instance of UserDao type.

userGroupDao - link user account user group data access object. Instance of UserGroupDao type.

userRoleDao - link user account user role data access object. Instance of UserRoleDao type.

Method Details

get

@Cacheable(value="user-service-id",
           unless="#result == null")
public User get(String userId)

Gets user by user account id.

Specified by:

get in interface UserService

Parameters:

userId - user account id of user to receive. Instance of String type.

Returns:

requested user or null if does not exist. Instance of User type.

See Also:

• UserDao.getUser(String)

get

public List<User> get(LoadOptions options)

Gets users according to load options.

Specified by:

get in interface UserService

Parameters:

options - indicates load options properties. Instance of LoadOptions type.

Returns:

list of users. Instance of List type.

See Also:

• UserDao.getUsers(LoadOptions)

get

public Collection<User> get(Collection<String> userIds)

Gets user by user account ids.

Specified by:

get in interface UserService

Parameters:

userIds - user account ids of objects to receive. Instance of Collection type.

Returns:

collection of users. Instance of Collection type.

See Also:

• UserDao.getUsers(Collection)

getLdapUsers

public List<User> getLdapUsers()

Specified by:

getLdapUsers in interface UserService

getByUsername

public User getByUsername(String username)

Gets user by username.

Specified by:

getByUsername in interface UserService

Parameters:

username - username of user to receive. Instance of String type.

Returns:

requested user or null if does not exist. Instance of User type.

See Also:

• UserDao.getUserByUsername(String, boolean)

getByEmail

public User getByEmail(String email)

Gets user by email.

Specified by:

getByEmail in interface UserService

Parameters:

email - email of user to receive. Instance of String type.

Returns:

requested user or null if does not exist. Instance of User type.

See Also:

• UserDao.getUserByEmail(String)

create

public String create(User user)

Inserts user into database. User id will be generated if it is null.

Specified by:

create in interface UserService

Parameters:

user - user to add. Instance of User type.

Returns:

user id. Instance of String type.

Throws:

org.springframework.dao.DataAccessException - if username already exists.

org.springframework.dao.DataAccessException - if user's org unit does not exist.

See Also:

• UserDao.createUser(User)

update

@CacheEvict(value="user-service-id",key="#user.id()") @CacheEvict(value="runtime-user-id",key="#user.id()") @CacheEvict(value="runtime-user-username",key="#user.username()",condition="#user.username() != null")
public void update(User user)

Updates user in database. User's username is ignored.

Specified by:

update in interface UserService

Parameters:

user - user to update. Instance of User type.

Throws:

org.springframework.dao.DataAccessException - if user's org unit doesn't exist.

See Also:

• UserDao.updateUser(User)

updateLockedAndEmailConfirmed

@CacheEvict(value="user-service-id",key="#userId") @CacheEvict(value="runtime-user-id",key="#userId")
public void updateLockedAndEmailConfirmed(String userId,
 boolean locked,
 boolean emailConfirmed)

Updates user's emailConfirmed status.

Specified by:

updateLockedAndEmailConfirmed in interface UserService

Parameters:

userId - user account id of the user to update. Instance of String type.

locked -

emailConfirmed - emailConfirmed status of the user. Instance of boolean type.

See Also:

• UserDao.updateLockedAndEmailConfirmed(String, Timestamp, boolean, boolean)

delete

@CacheEvict(value="user-service-id",key="#userId") @CacheEvict(value="runtime-user-id",key="#userId") @CacheEvict(value="runtime-user-username",allEntries=true)
public void delete(String userId)

Sets user's "locked" field to true according to user id.

Specified by:

delete in interface UserService

Parameters:

userId - user account id of user to mark removed. Instance of String type.

See Also:

• delete(Collection)

delete

@CacheEvict(value="user-service-id",allEntries=true) @CacheEvict(value="runtime-user-id",allEntries=true) @CacheEvict(value="runtime-user-username",allEntries=true)
public void delete(Collection<String> userIds)

Sets user's "locked" field to true according to user account ids collection.

Specified by:

delete in interface UserService

Parameters:

userIds - user account ids collection of users to mark removed. Instance of Collection type.

See Also:

• UserDao.updateUserAccountLocked(Collection, Timestamp, boolean)

getGroups

public List<Group> getGroups(String userId,
 LoadOptions options)

Gets groups by user account id according to load options. Filters groups according to current user's access level.

Specified by:

getGroups in interface UserService

Parameters:

userId - user account id of user to receive groups. Instance of String type.

options - indicates load options properties. Instance of LoadOptions type.

Returns:

list of groups. Instance of List type.

See Also:

• AccessLevelService.getCurrentUserAccessLevel()
• UserGroupDao.getUserGroupsByUserId(LoadOptions, String, short)

getUserGroupLinks

public List<UserGroup> getUserGroupLinks(String userId,
 LoadOptions options)

Gets groups by user account id with binding timestamp according to load options. Groups are filtered according to current user's access level.

Specified by:

getUserGroupLinks in interface UserService

Parameters:

userId - user account id of user to receive groups. Instance of String type.

options - indicates load options properties. Instance of LoadOptions type.

Returns:

list of user and group links. Instance of List type.

See Also:

• AccessLevelService.getCurrentUserAccessLevel()
• UserGroupDao.getUserGroupsByUserId(LoadOptions, String, short)

updateGroups

@Transactional
@CacheEvict(value="user-service-id",key="#userId") @CacheEvict(value="runtime-user-id",key="#userId") @CacheEvict(value="runtime-user-username",allEntries=true)
public void updateGroups(String userId,
 Collection<String> addedGroupIds,
 Collection<String> deletedGroupIds)

Updates user group links by user account id, added group ids collection and deleted group ids collection Checks current user's access level to binding and unbinding groups.

Specified by:

updateGroups in interface UserService

Parameters:

userId - user account id which groups to update. Instance of String type.

addedGroupIds - collection of group ids to add. Instance of Collection type.

deletedGroupIds - collection of group ids to remove. Instance of Collection type.

Throws:

org.springframework.dao.DataAccessException - if user already has any of groups.

See Also:

• AccessLevelService.checkGroupsAccessLevelByIds(Collection)
• UserGroupDao.createUserGroups(Collection)
• UserGroupDao.deleteUserGroups(String, Collection)
• UserDao.updateUserAccountUpdated(String, Timestamp)

bindGroup

@Transactional
@CacheEvict(value="user-service-id",key="#userId") @CacheEvict(value="runtime-user-id",key="#userId") @CacheEvict(value="runtime-user-username",allEntries=true)
public String bindGroup(String userId,
 String groupId)

Binds group to user by user account id and group id. Checks current user's access level to binding group.

Specified by:

bindGroup in interface UserService

Parameters:

userId - user account id of user to bind. Instance of String type.

groupId - group id of binding group. Instance of String type.

Returns:

id of user group link. Instance of String type.

Throws:

org.springframework.dao.DataAccessException - if user already has group.

See Also:

• SecurityContext.getCurrentUserAccountId()
• bindGroupByUser(String, String, String)

bindGroupByUser

@Transactional
@CacheEvict(value="user-service-id",key="#userId") @CacheEvict(value="runtime-user-id",key="#userId") @CacheEvict(value="runtime-user-username",allEntries=true)
public String bindGroupByUser(String userId,
 String groupId,
 String bindingUserId)

Binds group to user by user account id, group id and user account id of binding user. Checks user's access level to binding group.

Specified by:

bindGroupByUser in interface UserService

Parameters:

userId - user account id of user to bind. Instance of String type.

groupId - group id of binding group. Instance of String type.

bindingUserId - user account id of binding user. Instance of String type.

Returns:

id of user group link. Instance of String type.

Throws:

org.springframework.dao.DataAccessException - if user already has group.

See Also:

• AccessLevelService.checkGroupAccessLevelById(String, String)
• UserGroupDao.createUserGroup(UserGroup)
• UserDao.updateUserAccountUpdated(String, Timestamp)

unbindGroup

@Transactional
@CacheEvict(value="user-service-id",key="#userId") @CacheEvict(value="runtime-user-id",key="#userId") @CacheEvict(value="runtime-user-username",allEntries=true)
public void unbindGroup(String userId,
 String groupId)

Unbinds group from user by user account id and group id. Checks current user's access level to unbinding group.

Specified by:

unbindGroup in interface UserService

Parameters:

userId - user account id of user to unbind. Instance of String type.

groupId - group id of unbinding group. Instance of String type.

See Also:

• SecurityContext.getCurrentUserAccountId()
• unbindGroupByUser(String, String, String)

unbindGroupByUser

@Transactional
@CacheEvict(value="user-service-id",key="#userId") @CacheEvict(value="runtime-user-id",key="#userId") @CacheEvict(value="runtime-user-username",allEntries=true)
public void unbindGroupByUser(String userId,
 String groupId,
 String unbindingUserId)

Unbinds group from user by user account id, group id and user account id of unbinding user. Checks user's access level to unbinding group.

Specified by:

unbindGroupByUser in interface UserService

Parameters:

userId - user account id of user to unbind. Instance of String type.

groupId - group id of unbinding group. Instance of String type.

unbindingUserId - user account id of unbinding user. Instance of String type.

See Also:

• AccessLevelService.checkGroupAccessLevelById(String, String)
• UserGroupDao.deleteUserGroup(String, String)
• UserDao.updateUserAccountUpdated(String, Timestamp)

getRoles

public List<Role> getRoles(String userId,
 LoadOptions options)

Gets roles by user account id according to load options. Filters groups according to current user's access level.

Specified by:

getRoles in interface UserService

Parameters:

userId - user account id of user to receive roles. Instance of String type.

options - indicates load options properties. Instance of LoadOptions type.

Returns:

list of roles. Instance of List type.

See Also:

• AccessLevelService.getCurrentUserAccessLevel()
• UserRoleDao.getUserRolesByUserId(LoadOptions, String, short)

getUsersWithRoleInOrg

public List<User> getUsersWithRoleInOrg(String roleName,
 String orgUnitCode)

Gets users with role name in org unit.

Specified by:

getUsersWithRoleInOrg in interface UserService

Parameters:

roleName - user's role name. Instance of String type.

orgUnitCode - user's org unit code. Instance of String type.

Returns:

list of users. Instance of List type.

See Also:

• UserDao.getUserAccountsByRoleNameAndOrgUnitCode(String, String)

getRoleNamesInOrg

public List<String> getRoleNamesInOrg(String orgUnitCode)

Gets all role names of org unit by org unit code.

Specified by:

getRoleNamesInOrg in interface UserService

Parameters:

orgUnitCode - user's org unit code. Instance of String type.

Returns:

list of role names. Instance of List type.

See Also:

• UserDao.getRoleNamesInOrg(String)

getSuperAdmin

public User getSuperAdmin()

Gets user with maximal access level.

Specified by:

getSuperAdmin in interface UserService

Returns:

requested user or null if does not exist. Instance of User type.

See Also:

• AccessLevelService.getMaxAccessLevelId()
• UserDao.getUserWithAccessLevelId(String)

getUserWithMaxAccessLevel

public User getUserWithMaxAccessLevel()

Gets any existing(not locked) user with max access level (maybe super admin)

Specified by:

getUserWithMaxAccessLevel in interface UserService

Returns:

requested user or null if does not exist. Instance of User type.

See Also:

• UserDao.getUserWithMaxAccessLevel()

getUserSourceByUserId

public UserSourceType getUserSourceByUserId(String id)

Specified by:

getUserSourceByUserId in interface UserService

isCurrentUserSuperAdmin

public boolean isCurrentUserSuperAdmin()

Checks current user access level equals to maximal access level.

Specified by:

isCurrentUserSuperAdmin in interface UserService

Returns:

boolean result of check. Instance of boolean type.

See Also:

• AccessLevelService.getMaxAccessLevel()
• AccessLevelService.getCurrentUserAccessLevel()

getUsersWithAuthorityIn

public Collection<User> getUsersWithAuthorityIn(Collection<String> authorityIds)

Specified by:

getUsersWithAuthorityIn in interface UserService

getUsersWithRoleIn

public Collection<User> getUsersWithRoleIn(Collection<String> roleIds)

Specified by:

getUsersWithRoleIn in interface UserService

getUsersWithGroupIn

public Collection<User> getUsersWithGroupIn(Collection<String> groupIds)

Specified by:

getUsersWithGroupIn in interface UserService