]> WPIA git - gigi.git/blob - src/org/cacert/gigi/pages/admin/support/SupportUserDetailsForm.java
Merge "Update notes about password security"
[gigi.git] / src / org / cacert / gigi / pages / admin / support / SupportUserDetailsForm.java
1 package org.cacert.gigi.pages.admin.support;
2
3 import java.io.PrintWriter;
4 import java.util.Iterator;
5 import java.util.Map;
6 import java.util.Set;
7
8 import javax.servlet.http.HttpServletRequest;
9
10 import org.cacert.gigi.GigiApiException;
11 import org.cacert.gigi.dbObjects.Group;
12 import org.cacert.gigi.dbObjects.Name;
13 import org.cacert.gigi.dbObjects.SupportedUser;
14 import org.cacert.gigi.dbObjects.User;
15 import org.cacert.gigi.localisation.Language;
16 import org.cacert.gigi.output.DateSelector;
17 import org.cacert.gigi.output.GroupSelector;
18 import org.cacert.gigi.output.template.Form;
19 import org.cacert.gigi.output.template.IterableDataset;
20 import org.cacert.gigi.output.template.Template;
21 import org.cacert.gigi.pages.PasswordResetPage;
22
23 public class SupportUserDetailsForm extends Form {
24
25     private static Template t;
26
27     private SupportedUser user;
28
29     private DateSelector dobSelector;
30
31     private GroupSelector value = new GroupSelector("groupToModify");
32
33     static {
34         t = new Template(FindDomainForm.class.getResource("SupportUserDetailsForm.templ"));
35     }
36
37     public SupportUserDetailsForm(HttpServletRequest hsr, SupportedUser user) {
38         super(hsr);
39         this.user = user;
40         dobSelector = new DateSelector("dobd", "dobm", "doby", user.getTargetUser().getDoB());
41     }
42
43     @Override
44     public boolean submit(PrintWriter out, HttpServletRequest req) throws GigiApiException {
45         if (user.getTicket() == null) {
46             return false;
47         }
48         if ((req.getParameter("detailupdate") != null ? 1 : 0) + (req.getParameter("grant") != null ? 1 : 0) + (req.getParameter("deny") != null ? 1 : 0) + (req.getParameter("resetPass") != null ? 1 : 0) != 1) {
49             throw new GigiApiException("More than one action requested!");
50         }
51         if (req.getParameter("grant") != null || req.getParameter("deny") != null) {
52             value.update(req);
53             Group toMod = value.getGroup();
54             if (req.getParameter("grant") != null) {
55                 user.grant(toMod);
56             } else {
57                 user.revoke(toMod);
58             }
59             return true;
60         }
61         if (req.getParameter("resetPass") != null) {
62             String aword = req.getParameter("aword");
63             if (aword == null || aword.equals("")) {
64                 throw new GigiApiException("An A-Word is required to perform a password reset.");
65             }
66             Language l = Language.getInstance(user.getTargetUser().getPreferredLocale());
67             String method = l.getTranslation("A password reset was triggered. Please enter the required text sent to you by support on this page:");
68             String subject = l.getTranslation("Password reset by support.");
69             PasswordResetPage.initPasswordResetProcess(out, user.getTargetUser(), req, aword, l, method, subject);
70             return true;
71         }
72         dobSelector.update(req);
73         String fname = req.getParameter("fname");
74         String mname = req.getParameter("mname");
75         String lname = req.getParameter("lname");
76         String suffix = req.getParameter("suffix");
77         if (fname == null || mname == null || lname == null | suffix == null) {
78             throw new GigiApiException("Incomplete request!");
79         }
80         if ( !dobSelector.isValid()) {
81             throw new GigiApiException("Invalid date of birth!");
82         }
83         Name newName = new Name(fname, lname, mname, suffix);
84         synchronized (user.getTargetUser()) {
85             if (user.setDob(dobSelector.getDate()) | user.setName(newName)) {
86                 user.submitSupportAction();
87             }
88         }
89         return true;
90     }
91
92     @Override
93     protected void outputContent(PrintWriter out, Language l, Map<String, Object> vars) {
94         User user = this.user.getTargetUser();
95         Name name = user.getName();
96         vars.put("mail", user.getEmail());
97         vars.put("fname", name.getFname());
98         vars.put("mname", name.getMname());
99         vars.put("lname", name.getLname());
100         vars.put("suffix", name.getSuffix());
101         vars.put("assurer", user.canAssure());
102         vars.put("dob", dobSelector);
103         vars.put("assurancepoints", user.getAssurancePoints());
104         vars.put("exppoints", user.getExperiencePoints());
105         vars.put("id", user.getId());
106         final Set<Group> gr = user.getGroups();
107         vars.put("groups", new IterableDataset() {
108
109             Iterator<Group> i = gr.iterator();
110
111             @Override
112             public boolean next(Language l, Map<String, Object> vars) {
113                 if ( !i.hasNext()) {
114                     return false;
115                 }
116                 Group g = i.next();
117                 vars.put("group_name", g.getName());
118                 return true;
119             }
120         });
121         vars.put("groupSelector", value);
122         t.output(out, l, vars);
123     }
124
125 }