/*
 *  Copyright (C) 2014-2015 Stichting Akvo (Akvo Foundation)
 *
 *  This file is part of Akvo FLOW.
 *
 *  Akvo FLOW is free software: you can redistribute it and modify it under the terms of
 *  the GNU Affero General Public License (AGPL) as published by the Free Software Foundation,
 *  either version 3 of the License or any later version.
 *
 *  Akvo FLOW is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY;
 *  without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
 *  See the GNU Affero General Public License included below for more details.
 *
 *  The full license text can also be seen at <http://www.gnu.org/licenses/agpl.html>.
 */

package org.waterforpeople.mapping.app.web.rest.dto;

import java.util.Collection;

import org.apache.commons.lang.StringUtils;
import org.codehaus.jackson.annotate.JsonIgnore;
import org.springframework.security.core.GrantedAuthority;
import org.springframework.security.core.context.SecurityContextHolder;
import org.waterforpeople.mapping.app.web.rest.security.AppRole;

import com.gallatinsystems.framework.gwt.dto.client.BaseDto;
import com.gallatinsystems.user.domain.UserAuthorization;

/**
 * Wrapper and DTO class to hide the internals of @{link com.gallatinsystems.user.UserAuthorization}
 * class and pass data to and from REST requests
 *
 * @author emmanuel
 */
public class UserAuthorizationPayload extends BaseDto {

    private static final long serialVersionUID = -2483907342483369954L;

    private UserAuthorization userAuthorization;

    public UserAuthorizationPayload(UserAuthorization userAuthorization) {
        this.userAuthorization = userAuthorization;
        if (userAuthorization.getKey() != null) {
            this.setKeyId(userAuthorization.getKey().getId());
        }
    }

    public UserAuthorizationPayload() {
        this.userAuthorization = new UserAuthorization();
    }

    public Long getUserId() {
        return userAuthorization.getUserId();
    }

    public void setUserId(Long userId) {
        if (userId == null) {
            throw new IllegalArgumentException("Invalid userId (" + userId + ")");
        }
        this.userAuthorization.setUserId(userId);
    }

    public Long getRoleId() {
        return userAuthorization.getRoleId();
    }

    public void setRoleId(Long roleId) {
        if (roleId == null) {
            throw new IllegalArgumentException("Invalid roleId (" + roleId + ")");
        }
        this.userAuthorization.setRoleId(roleId);
    }

    public String getObjectPath() {
        return userAuthorization.getObjectPath();
    }

    public void setObjectPath(String objectPath) {
        if (isAcceptablePath(objectPath)) {
            this.userAuthorization.setObjectPath(objectPath);
        } else {
            throw new IllegalArgumentException("The specified path is not acceptable ("
                    + objectPath + ")");
        }
    }

    public Long getSecuredObjectId() {
        return userAuthorization.getSecuredObjectId();
    }

    public void setSecuredObjectId(Long objectId) {
        if (objectId == null) {
            throw new IllegalArgumentException("Invalid objectId (" + objectId + ")");
        }
        userAuthorization.setSecuredObjectId(objectId);
    }

    private boolean isAcceptablePath(String objectPath) {
        if (StringUtils.isNotBlank(objectPath)) {
            if ("/".equals(objectPath)) {
                Collection<? extends GrantedAuthority> authorities = SecurityContextHolder
                        .getContext().getAuthentication().getAuthorities();

                return authorities.contains(AppRole.SUPER_ADMIN)
                        || authorities.contains(AppRole.ADMIN);

            } else {
                return true;
            }
        } else {
            return false;
        }
    }

    @JsonIgnore
    public UserAuthorization getUserAuthorisation() {
        return userAuthorization;
    }
}