content: /*
   * Symphony - A modern community (forum/BBS/SNS/blog) platform written in Java.
   * Copyright (C) 2012-present, b3log.org
   *
   * This program is free software: you can redistribute it and/or modify
   * it under the terms of the GNU Affero General Public License as published by
   * the Free Software Foundation, either version 3 of the License, or
   * (at your option) any later version.
   *
   * This program is distributed in the hope that it will be useful,
   * but WITHOUT ANY WARRANTY; without even the implied warranty of
   * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   * GNU Affero General Public License for more details.
   *
   * You should have received a copy of the GNU Affero General Public License
   * along with this program.  If not, see <https://www.gnu.org/licenses/>.
   */
  package org.b3log.symphony.service;
  
  import org.apache.logging.log4j.Level;
  import org.apache.logging.log4j.LogManager;
  import org.apache.logging.log4j.Logger;
  import org.b3log.latke.ioc.Inject;
  import org.b3log.latke.model.User;
  import org.b3log.latke.repository.FilterOperator;
  import org.b3log.latke.repository.PropertyFilter;
  import org.b3log.latke.repository.Query;
  import org.b3log.latke.repository.RepositoryException;
  import org.b3log.latke.repository.annotation.Transactional;
  import org.b3log.latke.service.annotation.Service;
  import org.b3log.symphony.model.Permission;
  import org.b3log.symphony.model.Role;
  import org.b3log.symphony.repository.RolePermissionRepository;
  import org.b3log.symphony.repository.RoleRepository;
  import org.b3log.symphony.repository.UserRepository;
  import org.json.JSONObject;
  
  import java.util.Set;
  
  /**
   * Role management service.
   *
   * @author <a href="http://88250.b3log.org">Liang Ding</a>
   * @version 1.1.0.0, Jun 23, 2018
   * @since 1.8.0
   */
  @Service
  public class RoleMgmtService {
  
      /**
       * Logger.
       */
      private static final Logger LOGGER = LogManager.getLogger(RoleMgmtService.class);
  
      /**
       * Role repository.
       */
      @Inject
      private RoleRepository roleRepository;
  
      /**
       * Role-Permission repository.
       */
      @Inject
      private RolePermissionRepository rolePermissionRepository;
  
      /**
       * User repository.
       */
      @Inject
      private UserRepository userRepository;
  
      /**
       * Removes the specified role.
       *
       * @param roleId the specified role id
       */
      @Transactional
      public void removeRole(final String roleId) {
          try {
              final Query userCountQuery = new Query().setFilter(new PropertyFilter(User.USER_ROLE, FilterOperator.EQUAL, roleId));
              final int count = (int) userRepository.count(userCountQuery);
              if (0 < count) {
                  return;
              }
  
              rolePermissionRepository.removeByRoleId(roleId);
              roleRepository.remove(roleId);
          } catch (final Exception e) {
              LOGGER.log(Level.ERROR, "Removes a role [id=" + roleId + "] failed", e);
          }
      }
  
      /**
       * Adds the specified role.
       *
       * @param role the specified role
       */
      @Transactional
      public void addRole(final JSONObject role) {
          try {
              final String roleName = role.optString(Role.ROLE_NAME);
  
              final Query query = new Query().
                      setFilter(new PropertyFilter(Role.ROLE_NAME, FilterOperator.EQUAL, roleName));
              if (roleRepository.count(query) > 0) {
                  return;
              }
  
              roleRepository.add(role);
          } catch (final RepositoryException e) {
              LOGGER.log(Level.ERROR, "Adds role failed", e);
          }
      }
  
      /**
       * Updates role permissions.
       *
       * @param roleId the specified role id
       */
      @Transactional
      public void updateRolePermissions(final String roleId, final Set<String> permissionIds) {
          try {
              rolePermissionRepository.removeByRoleId(roleId);
  
              for (final String permissionId : permissionIds) {
                  final JSONObject rel = new JSONObject();
                  rel.put(Role.ROLE_ID, roleId);
                  rel.put(Permission.PERMISSION_ID, permissionId);
  
                  rolePermissionRepository.add(rel);
              }
          } catch (final RepositoryException e) {
              LOGGER.log(Level.ERROR, "Updates role permissions failed", e);
          }
      }
  }
  