]> WPIA git - gigi.git/blob - src/org/cacert/gigi/pages/orga/ViewOrgPage.java
Update notes about password security
[gigi.git] / src / org / cacert / gigi / pages / orga / ViewOrgPage.java
1 package org.cacert.gigi.pages.orga;
2
3 import java.io.IOException;
4 import java.io.PrintWriter;
5 import java.util.HashMap;
6 import java.util.List;
7 import java.util.Map;
8
9 import javax.servlet.http.HttpServletRequest;
10 import javax.servlet.http.HttpServletResponse;
11
12 import org.cacert.gigi.GigiApiException;
13 import org.cacert.gigi.dbObjects.Organisation;
14 import org.cacert.gigi.dbObjects.User;
15 import org.cacert.gigi.localisation.Language;
16 import org.cacert.gigi.output.template.Form;
17 import org.cacert.gigi.output.template.IterableDataset;
18 import org.cacert.gigi.output.template.Template;
19 import org.cacert.gigi.pages.LoginPage;
20 import org.cacert.gigi.pages.Page;
21 import org.cacert.gigi.util.AuthorizationContext;
22
23 public class ViewOrgPage extends Page {
24
25     private final Template orgas = new Template(ViewOrgPage.class.getResource("ViewOrgs.templ"));
26
27     private final Template mainTempl = new Template(ViewOrgPage.class.getResource("EditOrg.templ"));
28
29     public static final String DEFAULT_PATH = "/orga";
30
31     public ViewOrgPage() {
32         super("View Organisation");
33     }
34
35     @Override
36     public boolean isPermitted(AuthorizationContext ac) {
37         return ac != null && (ac.isInGroup(CreateOrgPage.ORG_ASSURER) || ac.getActor().getOrganisations(true).size() != 0);
38     }
39
40     @Override
41     public void doPost(HttpServletRequest req, HttpServletResponse resp) throws IOException {
42         try {
43             User u = LoginPage.getUser(req);
44             if (req.getParameter("do_affiliate") != null || req.getParameter("del") != null) {
45                 AffiliationForm form = Form.getForm(req, AffiliationForm.class);
46                 if (form.submit(resp.getWriter(), req)) {
47                     resp.sendRedirect(DEFAULT_PATH + "/" + form.getOrganisation().getId());
48                 }
49                 return;
50             } else if (req.getParameter("addDomain") != null) {
51                 if (Form.getForm(req, OrgDomainAddForm.class).submit(resp.getWriter(), req)) {
52                     // resp.sendRedirect(DEFAULT_PATH + "/" +
53                     // form.getOrganisation().getId());
54                 }
55             } else {
56                 if ( !u.isInGroup(CreateOrgPage.ORG_ASSURER)) {
57                     resp.sendError(403, "Access denied");
58                     return;
59                 }
60                 Form.getForm(req, CreateOrgForm.class).submit(resp.getWriter(), req);
61             }
62
63         } catch (GigiApiException e) {
64             e.format(resp.getWriter(), getLanguage(req));
65         }
66     }
67
68     @Override
69     public void doGet(HttpServletRequest req, HttpServletResponse resp) throws IOException {
70         User u = LoginPage.getUser(req);
71         String idS = req.getPathInfo();
72         Language lang = getLanguage(req);
73         PrintWriter out = resp.getWriter();
74         if (idS.length() < DEFAULT_PATH.length() + 2) {
75             final Organisation[] orgas = Organisation.getOrganisations(0, 30);
76             HashMap<String, Object> map = new HashMap<>();
77             final List<Organisation> myOrgs = u.getOrganisations(true);
78             final boolean orgAss = u.isInGroup(CreateOrgPage.ORG_ASSURER);
79             if (orgAss) {
80                 map.put("orgas", makeOrgDataset(orgas));
81             } else {
82                 map.put("orgas", makeOrgDataset(myOrgs.toArray(new Organisation[myOrgs.size()])));
83             }
84             this.orgas.output(out, lang, map);
85             return;
86         }
87         idS = idS.substring(DEFAULT_PATH.length() + 1);
88         int id = Integer.parseInt(idS);
89         Organisation o;
90         try {
91             o = Organisation.getById(id);
92         } catch (IllegalArgumentException e) {
93             resp.sendError(404);
94             return;
95         }
96         final List<Organisation> myOrgs = u.getOrganisations();
97         final boolean orgAss = u.isInGroup(CreateOrgPage.ORG_ASSURER);
98         if ( !orgAss && !myOrgs.contains(o)) {
99             resp.sendError(404);
100             return;
101         }
102         HashMap<String, Object> vars = new HashMap<>();
103         if (orgAss) {
104             vars.put("editForm", new CreateOrgForm(req, o));
105             vars.put("affForm", new AffiliationForm(req, o));
106             vars.put("addDom", new OrgDomainAddForm(req, o));
107         } else {
108             vars.put("affForm", new AffiliationForm(req, o));
109             vars.put("orgName", o.getName());
110         }
111         mainTempl.output(out, lang, vars);
112     }
113
114     private IterableDataset makeOrgDataset(final Organisation[] orgas) {
115         return new IterableDataset() {
116
117             int count = 0;
118
119             @Override
120             public boolean next(Language l, Map<String, Object> vars) {
121                 if (count >= orgas.length) {
122                     return false;
123                 }
124                 Organisation org = orgas[count++];
125                 vars.put("id", Integer.toString(org.getId()));
126                 vars.put("name", org.getName());
127                 vars.put("country", org.getState());
128                 return true;
129             }
130         };
131     }
132 }