001// --------------------------------------------------------------------------------
002// Copyright 2002-2026 Echo Three, LLC
003//
004// Licensed under the Apache License, Version 2.0 (the "License");
005// you may not use this file except in compliance with the License.
006// You may obtain a copy of the License at
007//
008//     http://www.apache.org/licenses/LICENSE-2.0
009//
010// Unless required by applicable law or agreed to in writing, software
011// distributed under the License is distributed on an "AS IS" BASIS,
012// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
013// See the License for the specific language governing permissions and
014// limitations under the License.
015// --------------------------------------------------------------------------------
016
017package com.echothree.model.control.security.server.logic;
018
019import com.echothree.control.user.security.common.spec.SecurityRoleGroupUniversalSpec;
020import com.echothree.model.control.core.common.ComponentVendors;
021import com.echothree.model.control.core.common.EntityTypes;
022import com.echothree.model.control.core.common.exception.InvalidParameterCountException;
023import com.echothree.model.control.core.server.logic.EntityInstanceLogic;
024import com.echothree.model.control.security.common.exception.DuplicateSecurityRoleGroupNameException;
025import com.echothree.model.control.security.common.exception.UnknownDefaultSecurityRoleGroupException;
026import com.echothree.model.control.security.common.exception.UnknownSecurityRoleGroupNameException;
027import com.echothree.model.control.security.server.control.SecurityControl;
028import com.echothree.model.data.party.server.entity.Language;
029import com.echothree.model.data.security.server.entity.SecurityRoleGroup;
030import com.echothree.util.common.exception.BaseException;
031import com.echothree.util.common.message.ExecutionErrors;
032import com.echothree.util.common.persistence.BasePK;
033import com.echothree.util.server.control.BaseLogic;
034import com.echothree.util.server.message.ExecutionErrorAccumulator;
035import com.echothree.util.server.persistence.EntityPermission;
036import javax.enterprise.context.ApplicationScoped;
037import javax.inject.Inject;
038
039@ApplicationScoped
040public class SecurityRoleGroupLogic
041        extends BaseLogic {
042
043    @Inject
044    protected SecurityControl securityControl;
045
046    @Inject
047    EntityInstanceLogic entityInstanceLogic;
048
049    protected SecurityRoleGroupLogic() {
050        super();
051    }
052
053    public SecurityRoleGroup createSecurityRoleGroup(final ExecutionErrorAccumulator eea, final String securityRoleGroupName,
054            final SecurityRoleGroup parentSecurityRoleGroup, final Boolean isDefault, final Integer sortOrder,
055            final Language language, final String description, final BasePK createdBy) {
056        var securityRoleGroup = securityControl.getSecurityRoleGroupByName(securityRoleGroupName);
057
058        if(securityRoleGroup == null) {
059            securityRoleGroup = securityControl.createSecurityRoleGroup(securityRoleGroupName, parentSecurityRoleGroup,
060                    isDefault, sortOrder, createdBy);
061
062            if(description != null) {
063                securityControl.createSecurityRoleGroupDescription(securityRoleGroup, language, description, createdBy);
064            }
065        } else {
066            handleExecutionError(DuplicateSecurityRoleGroupNameException.class, eea, ExecutionErrors.DuplicateSecurityRoleGroupName.name(), securityRoleGroupName);
067        }
068
069        return securityRoleGroup;
070    }
071
072    public SecurityRoleGroup getSecurityRoleGroupByName(final Class<? extends BaseException> unknownException, final ExecutionErrors unknownExecutionError,
073            final ExecutionErrorAccumulator eea, final String securityRoleGroupName, final EntityPermission entityPermission) {
074        var securityRoleGroup = securityControl.getSecurityRoleGroupByName(securityRoleGroupName, entityPermission);
075
076        if(securityRoleGroup == null) {
077            handleExecutionError(unknownException, eea, unknownExecutionError.name(), securityRoleGroupName);
078        }
079
080        return securityRoleGroup;
081    }
082
083    public SecurityRoleGroup getSecurityRoleGroupByName(final ExecutionErrorAccumulator eea, final String securityRoleGroupName,
084            final EntityPermission entityPermission) {
085        return getSecurityRoleGroupByName(UnknownSecurityRoleGroupNameException.class, ExecutionErrors.UnknownSecurityRoleGroupName, eea,
086                securityRoleGroupName, entityPermission);
087    }
088
089    public SecurityRoleGroup getSecurityRoleGroupByName(final ExecutionErrorAccumulator eea, final String securityRoleGroupName) {
090        return getSecurityRoleGroupByName(eea, securityRoleGroupName, EntityPermission.READ_ONLY);
091    }
092
093    public SecurityRoleGroup getSecurityRoleGroupByNameForUpdate(final ExecutionErrorAccumulator eea, final String securityRoleGroupName) {
094        return getSecurityRoleGroupByName(eea, securityRoleGroupName, EntityPermission.READ_WRITE);
095    }
096
097    public SecurityRoleGroup getSecurityRoleGroupByUniversalSpec(final ExecutionErrorAccumulator eea,
098            final SecurityRoleGroupUniversalSpec universalSpec, boolean allowDefault, final EntityPermission entityPermission) {
099        SecurityRoleGroup securityRoleGroup = null;
100        var securityRoleGroupName = universalSpec.getSecurityRoleGroupName();
101        var parameterCount = (securityRoleGroupName == null ? 0 : 1) + entityInstanceLogic.countPossibleEntitySpecs(universalSpec);
102
103        switch(parameterCount) {
104            case 0 -> {
105                if(allowDefault) {
106                    securityRoleGroup = securityControl.getDefaultSecurityRoleGroup(entityPermission);
107
108                    if(securityRoleGroup == null) {
109                        handleExecutionError(UnknownDefaultSecurityRoleGroupException.class, eea, ExecutionErrors.UnknownDefaultSecurityRoleGroup.name());
110                    }
111                } else {
112                    handleExecutionError(InvalidParameterCountException.class, eea, ExecutionErrors.InvalidParameterCount.name());
113                }
114            }
115            case 1 -> {
116                if(securityRoleGroupName == null) {
117                    var entityInstance = entityInstanceLogic.getEntityInstance(eea, universalSpec,
118                            ComponentVendors.ECHO_THREE.name(), EntityTypes.SecurityRoleGroup.name());
119
120                    if(eea == null || !eea.hasExecutionErrors()) {
121                        securityRoleGroup = securityControl.getSecurityRoleGroupByEntityInstance(entityInstance, entityPermission);
122                    }
123                } else {
124                    securityRoleGroup = getSecurityRoleGroupByName(eea, securityRoleGroupName, entityPermission);
125                }
126            }
127            default ->
128                    handleExecutionError(InvalidParameterCountException.class, eea, ExecutionErrors.InvalidParameterCount.name());
129        }
130
131        return securityRoleGroup;
132    }
133
134    public SecurityRoleGroup getSecurityRoleGroupByUniversalSpec(final ExecutionErrorAccumulator eea,
135            final SecurityRoleGroupUniversalSpec universalSpec, boolean allowDefault) {
136        return getSecurityRoleGroupByUniversalSpec(eea, universalSpec, allowDefault, EntityPermission.READ_ONLY);
137    }
138
139    public SecurityRoleGroup getSecurityRoleGroupByUniversalSpecForUpdate(final ExecutionErrorAccumulator eea,
140            final SecurityRoleGroupUniversalSpec universalSpec, boolean allowDefault) {
141        return getSecurityRoleGroupByUniversalSpec(eea, universalSpec, allowDefault, EntityPermission.READ_WRITE);
142    }
143
144    public void deleteSecurityRoleGroup(final ExecutionErrorAccumulator eea, final SecurityRoleGroup securityRoleGroup,
145            final BasePK deletedBy) {
146        securityControl.deleteSecurityRoleGroup(securityRoleGroup, deletedBy);
147    }
148
149}