/* * #%L * BroadleafCommerce Open Admin Platform * %% * Copyright (C) 2009 - 2013 Broadleaf Commerce * %% * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * #L% */ package org.broadleafcommerce.openadmin.server.service.persistence.module.criteria; import org.apache.commons.collections.CollectionUtils; import org.apache.commons.lang.StringUtils; import org.broadleafcommerce.common.exception.NoPossibleResultsException; import org.broadleafcommerce.openadmin.dto.ClassTree; import org.broadleafcommerce.openadmin.dto.SortDirection; import org.broadleafcommerce.openadmin.server.dao.DynamicEntityDao; import org.broadleafcommerce.openadmin.server.security.remote.SecurityVerifier; import org.broadleafcommerce.openadmin.server.security.service.RowLevelSecurityService; import org.broadleafcommerce.openadmin.server.service.persistence.module.EmptyFilterValues; import org.hibernate.type.SingleColumnType; import org.springframework.stereotype.Service; import java.io.Serializable; import java.math.BigDecimal; import java.util.ArrayList; import java.util.Calendar; import java.util.Collections; import java.util.Date; import java.util.List; import java.util.Map; import javax.annotation.Resource; import javax.persistence.Query; import javax.persistence.TypedQuery; import javax.persistence.criteria.CriteriaBuilder; import javax.persistence.criteria.CriteriaQuery; import javax.persistence.criteria.Expression; import javax.persistence.criteria.Order; import javax.persistence.criteria.Path; import javax.persistence.criteria.Predicate; import javax.persistence.criteria.Root; /** * @author Jeff Fischer */ @Service("blCriteriaTranslator") public class CriteriaTranslatorImpl implements CriteriaTranslator { @Resource(name = "blCriteriaTranslatorEventHandlers") protected List<CriteriaTranslatorEventHandler> eventHandlers = new ArrayList<CriteriaTranslatorEventHandler>(); @Resource(name = "blRowLevelSecurityService") protected RowLevelSecurityService rowSecurityService; @Resource(name = "blAdminSecurityRemoteService") protected SecurityVerifier adminSecurityService; @Override public TypedQuery<Serializable> translateCountQuery(DynamicEntityDao dynamicEntityDao, String ceilingEntity, List<FilterMapping> filterMappings) { return constructQuery(dynamicEntityDao, ceilingEntity, filterMappings, true, false, null, null, null); } @Override public TypedQuery<Serializable> translateMaxQuery(DynamicEntityDao dynamicEntityDao, String ceilingEntity, List<FilterMapping> filterMappings, String maxField) { return constructQuery(dynamicEntityDao, ceilingEntity, filterMappings, false, true, null, null, maxField); } @Override public TypedQuery<Serializable> translateQuery(DynamicEntityDao dynamicEntityDao, String ceilingEntity, List<FilterMapping> filterMappings, Integer firstResult, Integer maxResults) { return constructQuery(dynamicEntityDao, ceilingEntity, filterMappings, false, false, firstResult, maxResults, null); } /** * Determines the appropriate entity in this current class tree to use as the ceiling entity for the query. Because * we filter with AND instead of OR, we throw an exception if an attempt to utilize properties from mutually exclusive * class trees is made as it would be impossible for such a query to return results. * * @param dynamicEntityDao * @param ceilingMarker * @param filterMappings * @return the root class * @throws NoPossibleResultsException */ @SuppressWarnings("unchecked") protected Class<Serializable> determineRoot(DynamicEntityDao dynamicEntityDao, Class<Serializable> ceilingMarker, List<FilterMapping> filterMappings) throws NoPossibleResultsException { Class<?>[] polyEntities = dynamicEntityDao.getAllPolymorphicEntitiesFromCeiling(ceilingMarker); ClassTree root = dynamicEntityDao.getClassTree(polyEntities); List<ClassTree> parents = new ArrayList<ClassTree>(); for (FilterMapping mapping : filterMappings) { if (mapping.getInheritedFromClass() != null) { root = determineRootInternal(root, parents, mapping.getInheritedFromClass()); if (root == null) { throw new NoPossibleResultsException("AND filter on different class hierarchies produces no results"); } } } for (Class<?> clazz : polyEntities) { if (clazz.getName().equals(root.getFullyQualifiedClassname())) { return (Class<Serializable>) clazz; } } throw new IllegalStateException("Class didn't match - this should not occur"); } /** * Because of the restriction described in {@link #determineRoot(DynamicEntityDao, Class, List)}, we must check * that a class lies inside of the same tree as the current known root. Consider the following situation: * * Class C extends Class B, which extends Class A. * Class E extends Class D, which also extends Class A. * * We can allow filtering on properties that are either all in C/B/A or all in E/D/A. Filtering on properties across * C/B and E/D will always produce no results given an AND style of joining the filtered properties. * * @param root * @param parents * @param classToCheck * @return the (potentially new) root or null if invalid */ protected ClassTree determineRootInternal(ClassTree root, List<ClassTree> parents, Class<?> classToCheck) { // If the class to check is the current root or a parent of this root, we will continue to use the same root if (root.getFullyQualifiedClassname().equals(classToCheck.getName())) { return root; } for (ClassTree parent : parents) { if (parent.getFullyQualifiedClassname().equals(classToCheck.getName())) { return root; } } try { Class<?> rootClass = Class.forName(root.getFullyQualifiedClassname()); if (classToCheck.isAssignableFrom(rootClass)) { return root; } } catch (ClassNotFoundException e) { // Do nothing - we'll continue searching } parents.add(root); for (ClassTree child : root.getChildren()) { ClassTree result = child.find(classToCheck.getName()); if (result != null) { return result; } } return null; } @SuppressWarnings("unchecked") protected TypedQuery<Serializable> constructQuery(DynamicEntityDao dynamicEntityDao, String ceilingEntity, List<FilterMapping> filterMappings, boolean isCount, boolean isMax, Integer firstResult, Integer maxResults, String maxField) { CriteriaBuilder criteriaBuilder = dynamicEntityDao.getStandardEntityManager().getCriteriaBuilder(); Class<Serializable> ceilingMarker; try { ceilingMarker = (Class<Serializable>) Class.forName(ceilingEntity); } catch (ClassNotFoundException e) { throw new RuntimeException(e); } Class<Serializable> securityRoot = rowSecurityService.getFetchRestrictionRoot(adminSecurityService.getPersistentAdminUser(), ceilingMarker, filterMappings); if (securityRoot != null) { ceilingMarker = securityRoot; } Class<Serializable> ceilingClass = determineRoot(dynamicEntityDao, ceilingMarker, filterMappings); CriteriaQuery<Serializable> criteria = criteriaBuilder.createQuery(ceilingMarker); Root<Serializable> original = criteria.from(ceilingClass); if (isCount) { criteria.select(criteriaBuilder.count(original)); } else if (isMax) { criteria.select(criteriaBuilder.max((Path<Number>) ((Object) original.get(maxField)))); } else { criteria.select(original); } List<Predicate> restrictions = new ArrayList<Predicate>(); List<Order> sorts = new ArrayList<Order>(); addRestrictions(ceilingEntity, filterMappings, criteriaBuilder, original, restrictions, sorts, criteria); criteria.where(restrictions.toArray(new Predicate[restrictions.size()])); if (!isCount && !isMax) { criteria.orderBy(sorts.toArray(new Order[sorts.size()])); //If someone provides a firstResult value, then there is generally pagination going on. //In order to produce consistent results, especially with certain databases such as PostgreSQL, //there has to be an "order by" clause. We'll add one here if we can. if (firstResult != null && sorts.isEmpty()) { Map<String, Object> idMetaData = dynamicEntityDao.getIdMetadata(ceilingClass); if (idMetaData != null) { Object idFldName = idMetaData.get("name"); Object type = idMetaData.get("type"); if ((idFldName instanceof String) && (type instanceof SingleColumnType)) { criteria.orderBy(criteriaBuilder.asc(original.get((String) idFldName))); } } } } TypedQuery<Serializable> response = dynamicEntityDao.getStandardEntityManager().createQuery(criteria); if (!isCount && !isMax) { addPaging(response, firstResult, maxResults); } return response; } protected void addPaging(Query response, Integer firstResult, Integer maxResults) { if (firstResult != null) { response.setFirstResult(firstResult); } if (maxResults != null) { response.setMaxResults(maxResults); } } /** * This method is deprecated in favor of {@link #addRestrictions(String, List, CriteriaBuilder, Root, List, List, CriteriaQuery)} * It will be removed in Broadleaf version 3.1.0. * * @param ceilingEntity * @param filterMappings * @param criteriaBuilder * @param original * @param restrictions * @param sorts */ @Deprecated protected void addRestrictions(String ceilingEntity, List<FilterMapping> filterMappings, CriteriaBuilder criteriaBuilder, Root original, List<Predicate> restrictions, List<Order> sorts) { addRestrictions(ceilingEntity, filterMappings, criteriaBuilder, original, restrictions, sorts, null); } protected void addRestrictions(String ceilingEntity, List<FilterMapping> filterMappings, CriteriaBuilder criteriaBuilder, Root original, List<Predicate> restrictions, List<Order> sorts, CriteriaQuery criteria) { Collections.sort(filterMappings, new FilterMapping.ComparatorByOrder()); for (FilterMapping filterMapping : filterMappings) { Path explicitPath = null; if (filterMapping.getFieldPath() != null) { explicitPath = filterMapping.getRestriction().getFieldPathBuilder().getPath(original, filterMapping.getFieldPath(), criteriaBuilder); } if (filterMapping.getRestriction() != null) { List directValues = null; boolean shouldConvert = true; if (CollectionUtils.isNotEmpty(filterMapping.getFilterValues())) { directValues = filterMapping.getFilterValues(); } else if (CollectionUtils.isNotEmpty(filterMapping.getDirectFilterValues()) || (filterMapping.getDirectFilterValues() != null && filterMapping.getDirectFilterValues() instanceof EmptyFilterValues)) { directValues = filterMapping.getDirectFilterValues(); shouldConvert = false; } if (directValues != null) { Predicate predicate = filterMapping.getRestriction().buildRestriction(criteriaBuilder, original, ceilingEntity, filterMapping.getFullPropertyName(), explicitPath, directValues, shouldConvert, criteria, restrictions); if (predicate != null) { restrictions.add(predicate); } } } if (filterMapping.getSortDirection() != null) { Path sortPath = explicitPath; if (sortPath == null && !StringUtils.isEmpty(filterMapping.getFullPropertyName())) { FieldPathBuilder fieldPathBuilder = filterMapping.getRestriction().getFieldPathBuilder(); fieldPathBuilder.setCriteria(criteria); fieldPathBuilder.setRestrictions(restrictions); sortPath = filterMapping.getRestriction().getFieldPathBuilder().getPath(original, filterMapping.getFullPropertyName(), criteriaBuilder); } if (sortPath != null) { addSorting(criteriaBuilder, sorts, filterMapping, sortPath); } } } // add in the row-level security handlers to this as well rowSecurityService.addFetchRestrictions(adminSecurityService.getPersistentAdminUser(), ceilingEntity, restrictions, sorts, original, criteria, criteriaBuilder); for (CriteriaTranslatorEventHandler eventHandler : eventHandlers) { eventHandler.addRestrictions(ceilingEntity, filterMappings, criteriaBuilder, original, restrictions, sorts, criteria); } } protected void addSorting(CriteriaBuilder criteriaBuilder, List<Order> sorts, FilterMapping filterMapping, Path path) { Expression exp = path; if (filterMapping.getNullsLast() != null && filterMapping.getNullsLast()) { Object largeValue = getAppropriateLargeSortingValue(path.getJavaType()); if (largeValue != null) { exp = criteriaBuilder.coalesce(path, largeValue); } } if (SortDirection.ASCENDING == filterMapping.getSortDirection()) { sorts.add(criteriaBuilder.asc(exp)); } else { sorts.add(criteriaBuilder.desc(exp)); } } protected Object getAppropriateLargeSortingValue(Class<?> javaType) { Object response = null; if (Date.class.isAssignableFrom(javaType)) { Calendar calendar = Calendar.getInstance(); calendar.add(Calendar.YEAR, 500); response = calendar.getTime(); } else if (Long.class.isAssignableFrom(javaType)) { response = Long.MAX_VALUE; } else if (Integer.class.isAssignableFrom(javaType)) { response = Integer.MAX_VALUE; } else if (BigDecimal.class.isAssignableFrom(javaType)) { response = new BigDecimal(String.valueOf(Long.MAX_VALUE)); } return response; } }