content: /*
   * This file is a part of BSL Language Server.
   *
   * Copyright (c) 2018-2025
   * Alexey Sosnoviy <labotamy@gmail.com>, Nikita Fedkin <nixel2007@gmail.com> and contributors
   *
   * SPDX-License-Identifier: LGPL-3.0-or-later
   *
   * BSL Language Server is free software; you can redistribute it and/or
   * modify it under the terms of the GNU Lesser General Public
   * License as published by the Free Software Foundation; either
   * version 3.0 of the License, or (at your option) any later version.
   *
   * BSL Language Server is distributed in the hope that it will be useful,
   * but WITHOUT ANY WARRANTY; without even the implied warranty of
   * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
   * Lesser General Public License for more details.
   *
   * You should have received a copy of the GNU Lesser General Public
   * License along with BSL Language Server.
   */
  package com.github._1c_syntax.bsl.languageserver.diagnostics;
  
  import com.github._1c_syntax.bsl.languageserver.diagnostics.metadata.DiagnosticMetadata;
  import com.github._1c_syntax.bsl.languageserver.diagnostics.metadata.DiagnosticParameter;
  import com.github._1c_syntax.bsl.languageserver.diagnostics.metadata.DiagnosticScope;
  import com.github._1c_syntax.bsl.languageserver.diagnostics.metadata.DiagnosticSeverity;
  import com.github._1c_syntax.bsl.languageserver.diagnostics.metadata.DiagnosticTag;
  import com.github._1c_syntax.bsl.languageserver.diagnostics.metadata.DiagnosticType;
  import com.github._1c_syntax.bsl.languageserver.utils.Ranges;
  import com.github._1c_syntax.bsl.mdo.Role;
  import com.github._1c_syntax.bsl.types.ModuleType;
  
  import java.util.Map;
  import java.util.Set;
  import java.util.function.Predicate;
  
  @DiagnosticMetadata(
    type = DiagnosticType.VULNERABILITY,
    severity = DiagnosticSeverity.CRITICAL,
    scope = DiagnosticScope.BSL,
    modules = {
      ModuleType.ManagedApplicationModule
    },
    minutesToFix = 1,
    tags = {
      DiagnosticTag.STANDARD,
      DiagnosticTag.BADPRACTICE,
      DiagnosticTag.DESIGN
    }
  )
  public class SetPermissionsForNewObjectsDiagnostic extends AbstractDiagnostic {
  
    private static final String NAMES_FULL_ACCESS_ROLE = "FullAccess,ПолныеПрава";
  
    @DiagnosticParameter(
      type = String.class,
      defaultValue = NAMES_FULL_ACCESS_ROLE
    )
  
    private Set<String> namesFullAccessRole = getSetFromString(NAMES_FULL_ACCESS_ROLE);
  
    @Override
    public void check() {
      var range = documentContext.getSymbolTree().getModule().getSelectionRange();
      if (Ranges.isEmpty(range)) {
        return;
      }
  
      documentContext.getServerContext().getConfiguration().getRoles().stream()
        .filter(role -> role.getData().isSetForNewObjects())
        .map(Role::getName)
        .filter(Predicate.not(namesFullAccessRole::contains))
        .map(info::getMessage)
        .forEach((String diagnosticMessage) -> diagnosticStorage.addDiagnostic(range, diagnosticMessage)
        );
    }
  
    @Override
    public void configure(Map<String, Object> configuration) {
      var namesFullAccessRoleString = (String) configuration
        .getOrDefault("namesFullAccessRole", NAMES_FULL_ACCESS_ROLE);
      this.namesFullAccessRole = getSetFromString(namesFullAccessRoleString);
    }
  
    private static Set<String> getSetFromString(String inputParam) {
      return Set.of(inputParam.split(","));
    }
  
  }
  