X-Git-Url: https://git.argeo.org/?p=gpl%2Fargeo-suite.git;a=blobdiff_plain;f=org.argeo.app.core%2Fsrc%2Forg%2Fargeo%2Fapp%2Fcore%2FSuiteUtils.java;fp=org.argeo.app.core%2Fsrc%2Forg%2Fargeo%2Fapp%2Fcore%2FSuiteUtils.java;h=0a31b1424e640df0d1aae1b4eaabbc011ba05659;hp=0000000000000000000000000000000000000000;hb=6e56ffa34cb02ab04d028423aea342e3dfed4358;hpb=c285180bece610b2c2921d44fe14b6dde2123efa

diff --git a/org.argeo.app.core/src/org/argeo/app/core/SuiteUtils.java b/org.argeo.app.core/src/org/argeo/app/core/SuiteUtils.java
new file mode 100644
index 0000000..0a31b14
--- /dev/null
+++ b/org.argeo.app.core/src/org/argeo/app/core/SuiteUtils.java
@@ -0,0 +1,123 @@
+package org.argeo.app.core;
+
+import java.util.HashSet;
+import java.util.Set;
+
+import javax.jcr.Node;
+import javax.jcr.RepositoryException;
+import javax.jcr.Session;
+import javax.jcr.nodetype.NodeType;
+import javax.jcr.security.Privilege;
+import javax.naming.ldap.LdapName;
+import javax.security.auth.x500.X500Principal;
+
+import org.argeo.api.cms.CmsConstants;
+import org.argeo.api.cms.CmsSession;
+import org.argeo.app.api.EntityType;
+import org.argeo.app.api.SuiteRole;
+import org.argeo.jackrabbit.security.JackrabbitSecurityUtils;
+import org.argeo.jcr.JcrException;
+import org.argeo.jcr.JcrUtils;
+import org.argeo.util.naming.LdapAttrs;
+
+/** Utilities around the Argeo Suite APIs. */
+public class SuiteUtils {
+
+	public static String getUserNodePath(LdapName userDn) {
+		String uid = userDn.getRdn(userDn.size() - 1).getValue().toString();
+		return EntityType.user.basePath() + '/' + uid;
+	}
+
+	public static Node getOrCreateUserNode(Session adminSession, LdapName userDn) {
+		try {
+			Node usersBase = adminSession.getNode(EntityType.user.basePath());
+			String uid = userDn.getRdn(userDn.size() - 1).getValue().toString();
+			Node userNode;
+			if (!usersBase.hasNode(uid)) {
+				userNode = usersBase.addNode(uid, NodeType.NT_UNSTRUCTURED);
+				userNode.addMixin(EntityType.user.get());
+				userNode.addMixin(NodeType.MIX_CREATED);
+				userNode.setProperty(LdapAttrs.distinguishedName.property(), userDn.toString());
+				userNode.setProperty(LdapAttrs.uid.property(), uid);
+				adminSession.save();
+				JackrabbitSecurityUtils.denyPrivilege(adminSession, userNode.getPath(), SuiteRole.coworker.dn(),
+						Privilege.JCR_READ);
+				JcrUtils.addPrivilege(adminSession, userNode.getPath(), new X500Principal(userDn.toString()).getName(),
+						Privilege.JCR_READ);
+				JcrUtils.addPrivilege(adminSession, userNode.getPath(), CmsConstants.ROLE_USER_ADMIN,
+						Privilege.JCR_ALL);
+			} else {
+				userNode = usersBase.getNode(uid);
+			}
+			return userNode;
+		} catch (RepositoryException e) {
+			throw new JcrException("Cannot create user node for " + userDn, e);
+		}
+	}
+
+	public static Node getCmsSessionNode(Session session, CmsSession cmsSession) {
+		try {
+			return session.getNode(getUserNodePath(cmsSession.getUserDn()) + '/' + cmsSession.getUuid().toString());
+		} catch (RepositoryException e) {
+			throw new JcrException("Cannot get session dir for " + cmsSession, e);
+		}
+	}
+
+	public static Node getOrCreateCmsSessionNode(Session adminSession, CmsSession cmsSession) {
+		try {
+			LdapName userDn = cmsSession.getUserDn();
+//			String uid = userDn.get(userDn.size() - 1);
+			Node userNode = getOrCreateUserNode(adminSession, userDn);
+//			if (!usersBase.hasNode(uid)) {
+//				userNode = usersBase.addNode(uid, NodeType.NT_UNSTRUCTURED);
+//				userNode.addMixin(EntityType.user.get());
+//				userNode.addMixin(NodeType.MIX_CREATED);
+//				usersBase.setProperty(LdapAttrs.uid.property(), uid);
+//				usersBase.setProperty(LdapAttrs.distinguishedName.property(), userDn.toString());
+//				adminSession.save();
+//			} else {
+//				userNode = usersBase.getNode(uid);
+//			}
+			String cmsSessionUuid = cmsSession.getUuid().toString();
+			Node cmsSessionNode;
+			if (!userNode.hasNode(cmsSessionUuid)) {
+				cmsSessionNode = userNode.addNode(cmsSessionUuid, NodeType.NT_UNSTRUCTURED);
+				cmsSessionNode.addMixin(NodeType.MIX_CREATED);
+				adminSession.save();
+				JcrUtils.addPrivilege(adminSession, cmsSessionNode.getPath(), cmsSession.getUserRole(),
+						Privilege.JCR_ALL);
+			} else {
+				cmsSessionNode = userNode.getNode(cmsSessionUuid);
+			}
+			return cmsSessionNode;
+		} catch (RepositoryException e) {
+			throw new JcrException("Cannot create session dir for " + cmsSession, e);
+		}
+	}
+
+	/** Singleton. */
+	private SuiteUtils() {
+
+	}
+
+	public static Set<String> extractRoles(String[] semiColArr) {
+		Set<String> res = new HashSet<>();
+		// TODO factorize and make it more robust
+		final String rolesPrefix = "roles:=\"";
+		// first one is layer id
+		for (int i = 1; i < semiColArr.length; i++) {
+			if (semiColArr[i].startsWith(rolesPrefix)) {
+				String rolesStr = semiColArr[i].substring(rolesPrefix.length());
+				// remove last "
+				rolesStr = rolesStr.substring(0, rolesStr.lastIndexOf('\"'));
+				// TODO support AND (&) as well
+				String[] roles = rolesStr.split("\\|");// OR (|)
+				for (String role : roles) {
+					res.add(role.trim());
+				}
+			}
+		}
+		return res;
+	}
+
+}