-
Notifications
You must be signed in to change notification settings - Fork 66
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
EPMRPP-93599 implement create invitations endpoint (#2062)
- Loading branch information
Showing
17 changed files
with
581 additions
and
212 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Submodule reportportal-common-api
updated
10 files
152 changes: 152 additions & 0 deletions
152
src/main/java/com/epam/ta/reportportal/auth/permissions/InvitationPermission.java
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,152 @@ | ||
| /* | ||
| * Copyright 2024 EPAM Systems | ||
| * | ||
| * Licensed under the Apache License, Version 2.0 (the "License"); | ||
| * you may not use this file except in compliance with the License. | ||
| * You may obtain a copy of the License at | ||
| * | ||
| * http://www.apache.org/licenses/LICENSE-2.0 | ||
| * | ||
| * Unless required by applicable law or agreed to in writing, software | ||
| * distributed under the License is distributed on an "AS IS" BASIS, | ||
| * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | ||
| * See the License for the specific language governing permissions and | ||
| * limitations under the License. | ||
| */ | ||
|
|
||
| package com.epam.ta.reportportal.auth.permissions; | ||
|
|
||
| import static com.epam.reportportal.rules.commons.validation.BusinessRule.expect; | ||
| import static com.epam.reportportal.rules.commons.validation.Suppliers.formattedSupplier; | ||
| import static com.epam.reportportal.rules.exception.ErrorType.ACCESS_DENIED; | ||
| import static com.epam.ta.reportportal.commons.Predicates.isNull; | ||
| import static com.epam.ta.reportportal.commons.Predicates.not; | ||
| import static com.epam.ta.reportportal.entity.organization.OrganizationRole.MANAGER; | ||
| import static com.epam.ta.reportportal.entity.organization.OrganizationRole.MEMBER; | ||
| import static com.epam.ta.reportportal.entity.project.ProjectUtils.findUserConfigByLogin; | ||
| import static java.util.function.Predicate.isEqual; | ||
|
|
||
| import com.epam.reportportal.api.model.CreateInvitationRequest; | ||
| import com.epam.reportportal.api.model.UserOrgInfoWithProjects; | ||
| import com.epam.reportportal.api.model.UserProjectInfo; | ||
| import com.epam.reportportal.rules.commons.validation.BusinessRule; | ||
| import com.epam.reportportal.rules.exception.ErrorType; | ||
| import com.epam.reportportal.rules.exception.ReportPortalException; | ||
| import com.epam.ta.reportportal.commons.ReportPortalUser; | ||
| import com.epam.ta.reportportal.commons.ReportPortalUser.OrganizationDetails; | ||
| import com.epam.ta.reportportal.dao.ProjectRepository; | ||
| import com.epam.ta.reportportal.dao.ProjectUserRepository; | ||
| import com.epam.ta.reportportal.dao.organization.OrganizationRepositoryCustom; | ||
| import com.epam.ta.reportportal.dao.organization.OrganizationUserRepository; | ||
| import com.epam.ta.reportportal.entity.organization.Organization; | ||
| import com.epam.ta.reportportal.entity.project.Project; | ||
| import com.epam.ta.reportportal.entity.user.OrganizationUser; | ||
| import com.epam.ta.reportportal.entity.user.ProjectUser; | ||
| import java.util.HashMap; | ||
| import java.util.List; | ||
| import java.util.Map; | ||
| import java.util.Objects; | ||
| import org.apache.commons.collections.CollectionUtils; | ||
| import org.springframework.beans.factory.annotation.Autowired; | ||
| import org.springframework.security.core.Authentication; | ||
| import org.springframework.security.oauth2.provider.OAuth2Authentication; | ||
| import org.springframework.stereotype.Component; | ||
|
|
||
| @Component("invitationPermission") | ||
| @LookupPermission({"invitationAllowed"}) | ||
| public class InvitationPermission implements Permission { | ||
|
|
||
| private final OrganizationUserRepository organizationUserRepository; | ||
|
|
||
| private final OrganizationRepositoryCustom organizationRepositoryCustom; | ||
| private final ProjectRepository projectRepository; | ||
| private final ProjectUserRepository projectUserRepository; | ||
|
|
||
| @Autowired | ||
| InvitationPermission(OrganizationUserRepository organizationUserRepository, | ||
| OrganizationRepositoryCustom organizationRepositoryCustom, | ||
| ProjectRepository projectRepository, ProjectUserRepository projectUserRepository) { | ||
| this.organizationUserRepository = organizationUserRepository; | ||
| this.organizationRepositoryCustom = organizationRepositoryCustom; | ||
| this.projectRepository = projectRepository; | ||
| this.projectUserRepository = projectUserRepository; | ||
| } | ||
|
|
||
| @Override | ||
| public boolean isAllowed(Authentication authentication, Object invitationRequest) { | ||
| if (!authentication.isAuthenticated()) { | ||
| return false; | ||
| } | ||
| OAuth2Authentication oauth = (OAuth2Authentication) authentication; | ||
| ReportPortalUser rpUser = (ReportPortalUser) oauth.getUserAuthentication().getPrincipal(); | ||
| BusinessRule.expect(rpUser, Objects::nonNull).verify(ErrorType.ACCESS_DENIED); | ||
|
|
||
| List<UserOrgInfoWithProjects> orgs = | ||
| ((CreateInvitationRequest) invitationRequest).getOrganizations(); | ||
|
|
||
| expect(CollectionUtils.isEmpty(orgs), isEqual(false)) | ||
| .verify(ACCESS_DENIED, "Only administrators allowed to invite users on instance level"); | ||
|
|
||
| rpUser.setOrganizationDetails(new HashMap<>()); | ||
| orgs.forEach(orgInfo -> checkOrganizationAccess(rpUser, orgInfo)); | ||
|
|
||
| return true; | ||
|
|
||
| } | ||
|
|
||
| private void checkOrganizationAccess(ReportPortalUser rpUser, UserOrgInfoWithProjects orgInfo) { | ||
|
|
||
| var org = organizationRepositoryCustom.findById(orgInfo.getId()) | ||
| .orElseThrow( | ||
| () -> new ReportPortalException(ErrorType.ORGANIZATION_NOT_FOUND, orgInfo.getId())); | ||
|
|
||
| var orgUser = organizationUserRepository | ||
| .findByUserIdAndOrganization_Id(rpUser.getUserId(), org.getId()) | ||
| .orElseThrow(() -> new ReportPortalException(ErrorType.ACCESS_DENIED, orgInfo.getId())); | ||
|
|
||
| fillOrganizationDetails(rpUser, org, orgUser); | ||
|
|
||
| if (CollectionUtils.isEmpty(orgInfo.getProjects())) { | ||
| expect(orgUser.getOrganizationRole().sameOrHigherThan(MANAGER), isEqual(true)) | ||
| .verify(ACCESS_DENIED, | ||
| formattedSupplier("You are not manager of organization '{}'", org.getName()) | ||
| ); | ||
| } | ||
|
|
||
| orgInfo.getProjects() | ||
| .forEach(assigningPrj -> checkProjectAccess(rpUser, orgUser, assigningPrj)); | ||
|
|
||
| } | ||
|
|
||
| private void checkProjectAccess(ReportPortalUser rpUser, OrganizationUser orgUser, | ||
| UserProjectInfo assigningPrj) { | ||
|
|
||
| Project prj = projectRepository.findById(assigningPrj.getId()) | ||
| .orElseThrow( | ||
| () -> new ReportPortalException(ErrorType.ORGANIZATION_NOT_FOUND, | ||
| assigningPrj.getId())); | ||
| if (orgUser.getOrganizationRole().equals(MEMBER)) { | ||
| ProjectUser projectUser = findUserConfigByLogin(prj, rpUser.getUsername()); | ||
| expect(projectUser, not(isNull())).verify(ACCESS_DENIED, | ||
| formattedSupplier("'{}' is not your project", prj.getName()) | ||
| ); | ||
| } | ||
|
|
||
| } | ||
|
|
||
|
|
||
| private void fillOrganizationDetails(ReportPortalUser rpUser, Organization organization, | ||
| OrganizationUser orgUser) { | ||
| final Map<String, OrganizationDetails> organizationDetailsMap = HashMap.newHashMap(2); | ||
|
|
||
| var orgDetails = new OrganizationDetails( | ||
| organization.getId(), | ||
| organization.getName(), | ||
| orgUser.getOrganizationRole(), | ||
| new HashMap<>() | ||
| ); | ||
| rpUser.getOrganizationDetails() | ||
| .put(organization.getId().toString(), orgDetails); | ||
| } | ||
|
|
||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
37 changes: 37 additions & 0 deletions
37
src/main/java/com/epam/ta/reportportal/core/user/UserInvitationHandler.java
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,37 @@ | ||
| /* | ||
| * Copyright 2024 EPAM Systems | ||
| * | ||
| * Licensed under the Apache License, Version 2.0 (the "License"); | ||
| * you may not use this file except in compliance with the License. | ||
| * You may obtain a copy of the License at | ||
| * | ||
| * http://www.apache.org/licenses/LICENSE-2.0 | ||
| * | ||
| * Unless required by applicable law or agreed to in writing, software | ||
| * distributed under the License is distributed on an "AS IS" BASIS, | ||
| * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | ||
| * See the License for the specific language governing permissions and | ||
| * limitations under the License. | ||
| */ | ||
|
|
||
| package com.epam.ta.reportportal.core.user; | ||
|
|
||
| import com.epam.reportportal.api.model.CreateInvitationRequest; | ||
| import com.epam.reportportal.api.model.Invitation; | ||
| import com.epam.ta.reportportal.commons.ReportPortalUser; | ||
|
|
||
|
|
||
| public interface UserInvitationHandler { | ||
|
|
||
| /** | ||
| * Create user bid (send invitation) | ||
| * | ||
| * @param request Create Request | ||
| * @param username Username/User that creates the request | ||
| * @param userRegURL User registration url | ||
| * @return Operation result | ||
| */ | ||
| Invitation createUserInvitation(CreateInvitationRequest request, ReportPortalUser username, | ||
| String userRegURL); | ||
|
|
||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.