]> WPIA git - gigi.git/blobdiff - src/org/cacert/gigi/dbObjects/SupportedUser.java
add: notify board if a support role is granted or removed
[gigi.git] / src / org / cacert / gigi / dbObjects / SupportedUser.java
index 975ef9b51e02055fb444819a4330d43a42cadbab..940e67fc89b689c7bfa8e8e2ecdda5100fbab81d 100644 (file)
@@ -1,15 +1,21 @@
 package org.cacert.gigi.dbObjects;
 
 import java.io.IOException;
+import java.io.PrintWriter;
 import java.util.HashMap;
 import java.util.Locale;
 
+import javax.servlet.http.HttpServletRequest;
+
 import org.cacert.gigi.GigiApiException;
 import org.cacert.gigi.database.GigiPreparedStatement;
 import org.cacert.gigi.dbObjects.Certificate.CertificateStatus;
 import org.cacert.gigi.localisation.Language;
 import org.cacert.gigi.output.template.MailTemplate;
 import org.cacert.gigi.output.template.Outputable;
+import org.cacert.gigi.output.template.SprintfCommand;
+import org.cacert.gigi.output.template.TranslateCommand;
+import org.cacert.gigi.pages.PasswordResetPage;
 import org.cacert.gigi.util.DayDate;
 import org.cacert.gigi.util.ServerConstants;
 
@@ -33,6 +39,13 @@ public class SupportedUser {
         }
         writeSELog("SE dob change");
         target.setDoBAsSupport(dob);
+        String subject = "Change DoB Data";
+        // send notification to support
+        Outputable message = new TranslateCommand("The DoB was changed.");
+        sendSupportNotification(subject, message);
+        // send notification to user
+        message = SprintfCommand.createSimple("The DoB in your account was changed to {0}.", dob);
+        sendSupportUserNotification(subject, message);
         return true;
     }
 
@@ -45,6 +58,28 @@ public class SupportedUser {
                 certs[i].revoke();
             }
         }
+        // send notification to support
+        Outputable message = SprintfCommand.createSimple("All certificates in the account {0} <{1}> have been revoked.", target.getPreferredName().toString(), target.getEmail());
+        sendSupportNotification("Revoke certificates", message);
+        // send notification to user
+        sendSupportUserNotification("Revoke certificate", new TranslateCommand("All certificates in your account have been revoked."));
+    }
+
+    public void revokeCertificate(Certificate cert) throws GigiApiException {
+
+        // TODO Check for open jobs!
+        if (cert.getStatus() == CertificateStatus.ISSUED) {
+            writeSELog("SE Revoke certificate");
+            cert.revoke().waitFor(60000);
+            // send notification to support
+            String subject = "Revoke certificate";
+            Outputable message = SprintfCommand.createSimple("Certificate with serial number {0} for {1} <{2}> has been revoked.", cert.getSerial(), target.getPreferredName().toString(), target.getEmail());
+            sendSupportNotification(subject, message);
+            // send notification to user
+            subject = "Revoke certificate";
+            message = SprintfCommand.createSimple("Certificate with serial number {0} with subject distinguished name {1} has been revoked.", cert.getSerial(), cert.getDistinguishedName());
+            sendSupportUserNotification(subject, message);
+        }
     }
 
     private void writeSELog(String type) throws GigiApiException {
@@ -76,17 +111,41 @@ public class SupportedUser {
         return target;
     }
 
-    public void grant(Group toMod) {
+    public void grant(Group toMod) throws GigiApiException {
         target.grantGroup(supporter, toMod);
+        String subject = "Change Group Permissions";
+        // send notification to support
+        Outputable message = SprintfCommand.createSimple("The group permission '{0}' was granted.", toMod.getName());
+        sendSupportNotification(subject, message);
+        // send notification to user
+        message = SprintfCommand.createSimple("The group permission '{0}' was granted to your account.", toMod.getName());
+        sendSupportUserNotification(subject, message);
+        if (toMod == Group.SUPPORTER) {
+            subject = "Support role granted";
+            message = SprintfCommand.createSimple("The group permission '{0}' was granted for '{1}'.", toMod.getName(), target.getPreferredName().toString());
+            sendBoardNotification(subject, message);
+        }
     }
 
     public void revoke(Group toMod) {
         target.revokeGroup(supporter, toMod);
+        String subject = "Change Group Permissions";
+        // send notification to support
+        Outputable message = SprintfCommand.createSimple("The group permission '{0}' was revoked.", toMod.getName());
+        sendSupportNotification(subject, message);
+        // send notification to user
+        message = SprintfCommand.createSimple("The group permission '{0}' was revoked from your account.", toMod.getName());
+        sendSupportUserNotification(subject, message);
+        if (toMod == Group.SUPPORTER) {
+            subject = "Support role revoked";
+            message = SprintfCommand.createSimple("The group permission '{0}' was revoked for '{1}'.", toMod.getName(), target.getPreferredName().toString());
+            sendBoardNotification(subject, message);
+        }
     }
 
     private static final MailTemplate supportNotification = new MailTemplate(SupportedUser.class.getResource("SupportNotificationMail.templ"));
 
-    public void sendSupportNotification(String subject, Outputable message) {
+    private void sendSupportNotification(String subject, Outputable message) {
         try {
             HashMap<String, Object> vars = new HashMap<>();
             vars.put("supporter", supporter.getPreferredName().toString());
@@ -94,10 +153,49 @@ public class SupportedUser {
             vars.put("ticket", this.getTicket());
             vars.put("subject", subject);
 
-            String supportemailaddress = "support@" + ServerConstants.getWwwHostName().replaceFirst("^www\\.", "");
+            String supportemailaddress = ServerConstants.getSupportMailAddress();
             supportNotification.sendMail(Language.getInstance(Locale.ENGLISH), vars, supportemailaddress);
         } catch (IOException e) {
             e.printStackTrace();
         }
     }
+
+    private static final MailTemplate supportUserNotification = new MailTemplate(SupportedUser.class.getResource("SupportUserNotificationMail.templ"));
+
+    private void sendSupportUserNotification(String subject, Outputable message) {
+        try {
+            HashMap<String, Object> vars = new HashMap<>();
+            vars.put("action", message);
+            vars.put("ticket", this.getTicket());
+            vars.put("subject", subject);
+
+            supportUserNotification.sendMail(Language.getInstance(Locale.ENGLISH), vars, target.getEmail());
+        } catch (IOException e) {
+            e.printStackTrace();
+        }
+    }
+
+    public void triggerPasswordReset(String aword, PrintWriter out, HttpServletRequest req) {
+        Language l = Language.getInstance(target.getPreferredLocale());
+        String method = l.getTranslation("A password reset was triggered. Please enter the required text sent to you by support on this page:");
+        String subject = l.getTranslation("Password reset by support.");
+        PasswordResetPage.initPasswordResetProcess(out, target, req, aword, l, method, subject);
+        Outputable message = new TranslateCommand("A password reset was triggered and an email was sent to user.");
+        sendSupportNotification(subject, message);
+    }
+
+    private void sendBoardNotification(String subject, Outputable message) {
+        try {
+            HashMap<String, Object> vars = new HashMap<>();
+            vars.put("supporter", supporter.getPreferredName().toString());
+            vars.put("action", message);
+            vars.put("ticket", this.getTicket());
+            vars.put("subject", subject);
+
+            String boardemailaddress = ServerConstants.getBoardMailAddress();
+            supportNotification.sendMail(Language.getInstance(Locale.ENGLISH), vars, boardemailaddress);
+        } catch (IOException e) {
+            e.printStackTrace();
+        }
+    }
 }