package org.cacert.gigi.dbObjects;
-import java.sql.Date;
+import java.io.IOException;
+import java.util.HashMap;
+import java.util.Locale;
-import org.cacert.gigi.database.DatabaseConnection;
+import javax.servlet.http.HttpServletRequest;
+
+import org.cacert.gigi.GigiApiException;
import org.cacert.gigi.database.GigiPreparedStatement;
+import org.cacert.gigi.dbObjects.Certificate.CertificateStatus;
+import org.cacert.gigi.localisation.Language;
+import org.cacert.gigi.output.template.MailTemplate;
+import org.cacert.gigi.output.template.Outputable;
+import org.cacert.gigi.output.template.SprintfCommand;
+import org.cacert.gigi.output.template.TranslateCommand;
+import org.cacert.gigi.pages.PasswordResetPage;
+import org.cacert.gigi.util.DayDate;
+import org.cacert.gigi.util.ServerConstants;
public class SupportedUser {
- private User target, supporter;
+ private User target;
+
+ private User supporter;
private String ticket;
this.ticket = ticket;
}
- public void setName(String fname, String mname, String lname, String suffix) {
- writeSELog("SE Name change");
- target.setName(new Name(fname, lname, mname, suffix));
- }
-
- public void setDob(Date dob) {
+ public boolean setDob(DayDate dob) throws GigiApiException {
+ if (dob.equals(target.getDoB())) {
+ return false;
+ }
writeSELog("SE dob change");
- target.setDoB(dob);
+ target.setDoBAsSupport(dob);
+ String subject = "Change DoB Data";
+ // send notification to support
+ Outputable message = new TranslateCommand("The DoB was changed.");
+ sendSupportNotification(subject, message);
+ // send notification to user
+ message = SprintfCommand.createSimple("The DoB in your account was changed to {0}.", dob);
+ sendSupportUserNotification(subject, message);
+ return true;
}
- public void revokeAllCertificates() {
+ public void revokeAllCertificates() throws GigiApiException {
writeSELog("SE Revoke certificates");
Certificate[] certs = target.getCertificates(false);
+ // TODO Check for open jobs!
for (int i = 0; i < certs.length; i++) {
- certs[i].revoke();
+ if (certs[i].getStatus() == CertificateStatus.ISSUED) {
+ certs[i].revoke();
+ }
}
+ // send notification to support
+ Outputable message = SprintfCommand.createSimple("All certificates in the account {0} <{1}> have been revoked.", target.getPreferredName().toString(), target.getEmail());
+ sendSupportNotification("Revoke certificates", message);
+ // send notification to user
+ sendSupportUserNotification("Revoke certificate", new TranslateCommand("All certificates in your account have been revoked."));
}
- public void writeSELog(String type) {
- GigiPreparedStatement prep = DatabaseConnection.getInstance().prepare("INSERT INTO adminLog SET uid=?, admin=?, type=?, information=?");
- prep.setInt(1, target.getId());
- prep.setInt(2, supporter.getId());
- prep.setString(3, type);
- prep.setString(4, ticket);
- prep.executeUpdate();
+ public void revokeCertificate(Certificate cert) throws GigiApiException {
+
+ // TODO Check for open jobs!
+ if (cert.getStatus() == CertificateStatus.ISSUED) {
+ writeSELog("SE Revoke certificate");
+ cert.revoke().waitFor(60000);
+ // send notification to support
+ String subject = "Revoke certificate";
+ Outputable message = SprintfCommand.createSimple("Certificate with serial number {0} for {1} <{2}> has been revoked.", cert.getSerial(), target.getPreferredName().toString(), target.getEmail());
+ sendSupportNotification(subject, message);
+ // send notification to user
+ subject = "Revoke certificate";
+ message = SprintfCommand.createSimple("Certificate with serial number {0} with subject distinguished name {1} has been revoked.", cert.getSerial(), cert.getDistinguishedName());
+ sendSupportUserNotification(subject, message);
+ }
+ }
+
+ private void writeSELog(String type) throws GigiApiException {
+ if (ticket == null) {
+ throw new GigiApiException("No ticket set!");
+ }
+ try (GigiPreparedStatement prep = new GigiPreparedStatement("INSERT INTO `adminLog` SET uid=?, admin=?, type=?, information=?")) {
+ prep.setInt(1, target.getId());
+ prep.setInt(2, supporter.getId());
+ prep.setString(3, type);
+ prep.setString(4, ticket);
+ prep.executeUpdate();
+ }
}
public int getId() {
return ticket;
}
+ public User getTargetUser() {
+ return target;
+ }
+
+ public void grant(Group toMod) throws GigiApiException {
+ target.grantGroup(supporter, toMod);
+ String subject = "Change Group Permissions";
+ // send notification to support
+ Outputable message = SprintfCommand.createSimple("The group permission '{0}' was granted.", toMod.getName());
+ sendSupportNotification(subject, message);
+ // send notification to user
+ message = SprintfCommand.createSimple("The group permission '{0}' was granted to your account.", toMod.getName());
+ sendSupportUserNotification(subject, message);
+ if (toMod == Group.SUPPORTER) {
+ subject = "Support role granted";
+ message = SprintfCommand.createSimple("The group permission '{0}' was granted for '{1}'.", toMod.getName(), target.getPreferredName().toString());
+ sendBoardNotification(subject, message);
+ }
+ }
+
+ public void revoke(Group toMod) throws GigiApiException {
+ target.revokeGroup(supporter, toMod);
+ String subject = "Change Group Permissions";
+ // send notification to support
+ Outputable message = SprintfCommand.createSimple("The group permission '{0}' was revoked.", toMod.getName());
+ sendSupportNotification(subject, message);
+ // send notification to user
+ message = SprintfCommand.createSimple("The group permission '{0}' was revoked from your account.", toMod.getName());
+ sendSupportUserNotification(subject, message);
+ if (toMod == Group.SUPPORTER) {
+ subject = "Support role revoked";
+ message = SprintfCommand.createSimple("The group permission '{0}' was revoked for '{1}'.", toMod.getName(), target.getPreferredName().toString());
+ sendBoardNotification(subject, message);
+ }
+ }
+
+ private static final MailTemplate supportNotification = new MailTemplate(SupportedUser.class.getResource("SupportNotificationMail.templ"));
+
+ private void sendSupportNotification(String subject, Outputable message) {
+ try {
+ HashMap<String, Object> vars = new HashMap<>();
+ vars.put("supporter", supporter.getPreferredName().toString());
+ vars.put("action", message);
+ vars.put("ticket", this.getTicket());
+ vars.put("subject", subject);
+
+ String supportemailaddress = ServerConstants.getSupportMailAddress();
+ supportNotification.sendMail(Language.getInstance(Locale.ENGLISH), vars, supportemailaddress);
+ } catch (IOException e) {
+ e.printStackTrace();
+ }
+ }
+
+ private static final MailTemplate supportUserNotification = new MailTemplate(SupportedUser.class.getResource("SupportUserNotificationMail.templ"));
+
+ private void sendSupportUserNotification(String subject, Outputable message) {
+ try {
+ HashMap<String, Object> vars = new HashMap<>();
+ vars.put("action", message);
+ vars.put("ticket", this.getTicket());
+ vars.put("subject", subject);
+
+ supportUserNotification.sendMail(Language.getInstance(Locale.ENGLISH), vars, target.getEmail());
+ } catch (IOException e) {
+ e.printStackTrace();
+ }
+ }
+
+ public void triggerPasswordReset(String aword, HttpServletRequest req) {
+ Language l = Language.getInstance(target.getPreferredLocale());
+ String method = l.getTranslation("A password reset was triggered. Please enter the required text sent to you by support on this page:");
+ String subject = l.getTranslation("Password reset by support.");
+ PasswordResetPage.initPasswordResetProcess(target, req, aword, l, method, subject);
+ Outputable message = new TranslateCommand("A password reset was triggered and an email was sent to user.");
+ sendSupportNotification(subject, message);
+ }
+
+ private void sendBoardNotification(String subject, Outputable message) {
+ try {
+ HashMap<String, Object> vars = new HashMap<>();
+ vars.put("supporter", supporter.getPreferredName().toString());
+ vars.put("action", message);
+ vars.put("ticket", this.getTicket());
+ vars.put("subject", subject);
+
+ String boardemailaddress = ServerConstants.getBoardMailAddress();
+ supportNotification.sendMail(Language.getInstance(Locale.ENGLISH), vars, boardemailaddress);
+ } catch (IOException e) {
+ e.printStackTrace();
+ }
+ }
}