package org.cacert.gigi.util;
-import java.sql.PreparedStatement;
-import java.sql.ResultSet;
-import java.sql.SQLException;
+import java.text.ParseException;
+import java.util.Date;
+import org.cacert.gigi.GigiApiException;
import org.cacert.gigi.database.DatabaseConnection;
+import org.cacert.gigi.database.GigiPreparedStatement;
+import org.cacert.gigi.database.GigiResultSet;
+import org.cacert.gigi.dbObjects.Group;
+import org.cacert.gigi.dbObjects.Name;
import org.cacert.gigi.dbObjects.User;
+import org.cacert.gigi.output.DateSelector;
public class Notary {
- public static void writeUserAgreement(int memid, String document, String method, String comment, boolean active, int secmemid) throws SQLException {
- PreparedStatement q = DatabaseConnection.getInstance().prepare("insert into `user_agreements` set `memid`=?, `secmemid`=?," + " `document`=?,`date`=NOW(), `active`=?,`method`=?,`comment`=?");
- q.setInt(1, memid);
+ public static void writeUserAgreement(User member, String document, String method, String comment, boolean active, int secmemid) {
+ GigiPreparedStatement q = DatabaseConnection.getInstance().prepare("insert into `user_agreements` set `memid`=?, `secmemid`=?," + " `document`=?,`date`=NOW(), `active`=?,`method`=?,`comment`=?");
+ q.setInt(1, member.getId());
q.setInt(2, secmemid);
q.setString(3, document);
q.setInt(4, active ? 1 : 0);
q.execute();
}
- public static AssuranceResult checkAssuranceIsPossible(User assurer, User target) {
+ public static void checkAssuranceIsPossible(User assurer, User target) throws GigiApiException {
if (assurer.getId() == target.getId()) {
- return AssuranceResult.CANNOT_ASSURE_SELF;
+ throw new GigiApiException("You cannot assure yourself.");
}
- try {
- PreparedStatement ps = DatabaseConnection.getInstance().prepare("SELECT 1 FROM `notary` where `to`=? and `from`=? AND `deleted`=0");
- ps.setInt(1, target.getId());
- ps.setInt(2, assurer.getId());
- ResultSet rs = ps.executeQuery();
- if (rs.next()) {
- rs.close();
- return AssuranceResult.ALREADY_ASSUREED;
- }
+ GigiPreparedStatement ps = DatabaseConnection.getInstance().prepare("SELECT 1 FROM `notary` where `to`=? and `from`=? AND `deleted` IS NULL");
+ ps.setInt(1, target.getId());
+ ps.setInt(2, assurer.getId());
+ GigiResultSet rs = ps.executeQuery();
+ if (rs.next()) {
rs.close();
- if ( !assurer.canAssure()) {
- return AssuranceResult.NO_ASSURER;
- }
- } catch (SQLException e) {
- e.printStackTrace();
+ throw new GigiApiException("You have already assured this member.");
+ }
+ rs.close();
+ if ( !assurer.canAssure()) {
+ throw new GigiApiException("You are not an assurer.");
}
- return AssuranceResult.ASSURANCE_SUCCEDED;
}
- public enum AssuranceResult {
- NO_ASSURER("You are not an assurer."), ALREADY_ASSUREED("You already assured this person."), CANNOT_ASSURE_SELF("Cannot assure myself."), ASSURANCE_SUCCEDED(""), ASSUREE_CHANGED("Person details changed. Please start over again."), POINTS_OUT_OF_RANGE("Points out of range.");
+ public static final Group ASSURER_BLOCKED = Group.getByString("blockedassurer");
- private final String message;
+ public static final Group ASSUREE_BLOCKED = Group.getByString("blockedassuree");
- private AssuranceResult(String message) {
- this.message = message;
+ /**
+ * This method assures another user.
+ *
+ * @see User#canAssure() (for assurer)
+ * @see #checkAssuranceIsPossible(User, User) (for assurer or assuree)
+ * @param assurer
+ * the person that wants to assure
+ * @param assuree
+ * the person that should be assured
+ * @param assureeName
+ * the Name that was personally verified
+ * @param dob
+ * the Date of birth that the assurer verified
+ * @param awarded
+ * the points that should be awarded in total
+ * @param location
+ * the location where the assurance took place
+ * @param date
+ * the date when the assurance took place
+ * @throws GigiApiException
+ * if the assurance fails (for various reasons)
+ */
+ public synchronized static void assure(User assurer, User assuree, Name assureeName, Date dob, int awarded, String location, String date) throws GigiApiException {
+ GigiApiException gae = new GigiApiException();
+ if (assuree.isInGroup(ASSUREE_BLOCKED)) {
+ gae.mergeInto(new GigiApiException("The assuree is blocked."));
}
-
- public String getMessage() {
- return message;
+ if (assurer.isInGroup(ASSURER_BLOCKED)) {
+ gae.mergeInto(new GigiApiException("The assurer is blocked."));
+ }
+ if ( !gae.isEmpty()) {
+ throw gae;
+ }
+ if (date == null || date.equals("")) {
+ gae.mergeInto(new GigiApiException("You must enter the date when you met the assuree."));
+ } else {
+ try {
+ Date d = DateSelector.getDateFormat().parse(date);
+ if (d.getTime() > System.currentTimeMillis()) {
+ gae.mergeInto(new GigiApiException("You must not enter a date in the future."));
+ }
+ } catch (ParseException e) {
+ gae.mergeInto(new GigiApiException("You must enter the date in this format: YYYY-MM-DD."));
+ }
+ }
+ // check location, min 3 characters
+ if (location == null || location.equals("")) {
+ gae.mergeInto(new GigiApiException("You failed to enter a location of your meeting."));
+ } else if (location.length() <= 2) {
+ gae.mergeInto(new GigiApiException("You must enter a location with at least 3 characters eg town and country."));
}
- }
- public synchronized static AssuranceResult assure(User assurer, User target, int awarded, String location, String date) throws SQLException {
- AssuranceResult can = checkAssuranceIsPossible(assurer, target);
- if (can != AssuranceResult.ASSURANCE_SUCCEDED) {
- return can;
+ try {
+ checkAssuranceIsPossible(assurer, assuree);
+ } catch (GigiApiException e) {
+ gae.mergeInto(e);
}
- User u = new User(target.getId());
- if ( !u.equals(target)) {
- return AssuranceResult.ASSUREE_CHANGED;
+
+ if ( !assuree.getName().equals(assureeName) || !assuree.getDoB().equals(dob)) {
+ gae.mergeInto(new GigiApiException("The person you are assuring changed his personal details."));
}
if (awarded > assurer.getMaxAssurePoints() || awarded < 0) {
- return AssuranceResult.POINTS_OUT_OF_RANGE;
+ gae.mergeInto(new GigiApiException("The points you are trying to award are out of range."));
+ }
+ if ( !gae.isEmpty()) {
+ throw gae;
}
- PreparedStatement ps = DatabaseConnection.getInstance().prepare("INSERT INTO `notary` SET `from`=?, `to`=?, `points`=?, `location`=?, `date`=?");
+ GigiPreparedStatement ps = DatabaseConnection.getInstance().prepare("INSERT INTO `notary` SET `from`=?, `to`=?, `points`=?, `location`=?, `date`=?");
ps.setInt(1, assurer.getId());
- ps.setInt(2, target.getId());
+ ps.setInt(2, assuree.getId());
ps.setInt(3, awarded);
ps.setString(4, location);
ps.setString(5, date);
ps.execute();
assurer.invalidateMadeAssurances();
- target.invalidateReceivedAssurances();
- return AssuranceResult.ASSURANCE_SUCCEDED;
+ assuree.invalidateReceivedAssurances();
}
}
projects / gigi.git / blobdiff