X-Git-Url: https://code.wpia.club/?p=gigi.git;a=blobdiff_plain;f=src%2Forg%2Fcacert%2Fgigi%2FdbObjects%2FOrganisation.java;h=6b5b28f44234dd006ab6f3f8d3bef29edcc542e8;hp=7151203df7347d72dfe5962693bbbe4c7c672fbf;hb=a0232b6e40e7e09767f0444d24e18bf12dafc362;hpb=123b7724f9b8ab944a7aa6ab2df9499f34b02a4b diff --git a/src/org/cacert/gigi/dbObjects/Organisation.java b/src/org/cacert/gigi/dbObjects/Organisation.java index 7151203d..6b5b28f4 100644 --- a/src/org/cacert/gigi/dbObjects/Organisation.java +++ b/src/org/cacert/gigi/dbObjects/Organisation.java @@ -1,43 +1,87 @@ package org.cacert.gigi.dbObjects; -import org.cacert.gigi.database.DatabaseConnection; +import java.util.ArrayList; +import java.util.List; + +import org.cacert.gigi.GigiApiException; import org.cacert.gigi.database.GigiPreparedStatement; import org.cacert.gigi.database.GigiResultSet; +import org.cacert.gigi.dbObjects.Certificate.CertificateStatus; public class Organisation extends CertificateOwner { - private final String name; + public class Affiliation { + + private final User target; + + private final boolean master; + + private final String fixedOU; - private final String state; + public Affiliation(User target, boolean master, String fixedOU) { + this.target = target; + this.master = master; + this.fixedOU = fixedOU; + } + + public User getTarget() { + return target; + } - private final String province; + public boolean isMaster() { + return master; + } + + public String getFixedOU() { + return fixedOU; + } + + public Organisation getOrganisation() { + return Organisation.this; + } + } - private final String city; + private String name; - public Organisation(String name, String state, String province, String city, User creator) { + private String state; + + private String province; + + private String city; + + private String email; + + public Organisation(String name, String state, String province, String city, String email, User creator) throws GigiApiException { + if ( !creator.isInGroup(Group.ORGASSURER)) { + throw new GigiApiException("Only org-assurers may create organisations."); + } this.name = name; this.state = state; this.province = province; this.city = city; - int id = super.insert(); - GigiPreparedStatement ps = DatabaseConnection.getInstance().prepare("INSERT INTO organisations SET id=?, name=?, state=?, province=?, city=?, creator=?"); - ps.setInt(1, id); - ps.setString(2, name); - ps.setString(3, state); - ps.setString(4, province); - ps.setString(5, city); - ps.setInt(6, creator.getId()); - synchronized (Organisation.class) { - ps.execute(); + this.email = email; + int id = getId(); + try (GigiPreparedStatement ps = new GigiPreparedStatement("INSERT INTO organisations SET id=?, name=?, state=?, province=?, city=?, contactEmail=?, creator=?")) { + ps.setInt(1, id); + ps.setString(2, name); + ps.setString(3, state); + ps.setString(4, province); + ps.setString(5, city); + ps.setString(6, email); + ps.setInt(7, creator.getId()); + synchronized (Organisation.class) { + ps.execute(); + } } - } protected Organisation(GigiResultSet rs) { + super(rs.getInt("id")); name = rs.getString("name"); state = rs.getString("state"); province = rs.getString("province"); city = rs.getString("city"); + email = rs.getString("contactEmail"); } public String getName() { @@ -56,6 +100,10 @@ public class Organisation extends CertificateOwner { return city; } + public String getContactEmail() { + return email; + } + public static synchronized Organisation getById(int id) { CertificateOwner co = CertificateOwner.getById(id); if (co instanceof Organisation) { @@ -63,4 +111,105 @@ public class Organisation extends CertificateOwner { } return null; } + + public synchronized void addAdmin(User admin, User actor, boolean master) throws GigiApiException { + if ( !admin.canAssure()) { + throw new GigiApiException("Cannot add non-assurer."); + } + if ( !actor.isInGroup(Group.ORGASSURER) && !isMaster(actor)) { + throw new GigiApiException("Only org assurer or master-admin may add admins to an organisation."); + } + try (GigiPreparedStatement ps1 = new GigiPreparedStatement("SELECT 1 FROM `org_admin` WHERE `orgid`=? AND `memid`=? AND `deleted` IS NULL")) { + ps1.setInt(1, getId()); + ps1.setInt(2, admin.getId()); + GigiResultSet result = ps1.executeQuery(); + if (result.next()) { + return; + } + } + try (GigiPreparedStatement ps2 = new GigiPreparedStatement("INSERT INTO `org_admin` SET `orgid`=?, `memid`=?, `creator`=?, `master`=?::`yesno`")) { + ps2.setInt(1, getId()); + ps2.setInt(2, admin.getId()); + ps2.setInt(3, actor.getId()); + ps2.setString(4, master ? "y" : "n"); + ps2.execute(); + } + } + + public void removeAdmin(User admin, User actor) throws GigiApiException { + if ( !actor.isInGroup(Group.ORGASSURER) && !isMaster(actor)) { + throw new GigiApiException("Only org assurer or master-admin may delete admins from an organisation."); + } + try (GigiPreparedStatement ps = new GigiPreparedStatement("UPDATE org_admin SET deleter=?, deleted=NOW() WHERE orgid=? AND memid=?")) { + ps.setInt(1, actor.getId()); + ps.setInt(2, getId()); + ps.setInt(3, admin.getId()); + ps.execute(); + } + } + + public List getAllAdmins() { + try (GigiPreparedStatement ps = new GigiPreparedStatement("SELECT `memid`, `master` FROM `org_admin` WHERE `orgid`=? AND `deleted` IS NULL", true)) { + ps.setInt(1, getId()); + GigiResultSet rs = ps.executeQuery(); + rs.last(); + ArrayList al = new ArrayList<>(rs.getRow()); + rs.beforeFirst(); + while (rs.next()) { + al.add(new Affiliation(User.getById(rs.getInt(1)), rs.getString(2).equals("y"), null)); + } + return al; + } + } + + public static Organisation[] getOrganisations(int offset, int count) { + try (GigiPreparedStatement ps = new GigiPreparedStatement("SELECT `certOwners`.`id` FROM `organisations` INNER JOIN `certOwners` ON `certOwners`.`id`=`organisations`.`id` WHERE `certOwners`.`deleted` IS NULL OFFSET ? LIMIT ?", true)) { + ps.setInt(1, offset); + ps.setInt(2, count); + GigiResultSet res = ps.executeQuery(); + res.last(); + Organisation[] resu = new Organisation[res.getRow()]; + res.beforeFirst(); + int i = 0; + while (res.next()) { + resu[i++] = getById(res.getInt(1)); + } + return resu; + } + } + + public void update(String o, String c, String st, String l, String mail) { + for (Certificate cert : getCertificates(false)) { + if (cert.getStatus() == CertificateStatus.ISSUED) { + cert.revoke(); + } + } + try (GigiPreparedStatement ps = new GigiPreparedStatement("UPDATE `organisations` SET `name`=?, `state`=?, `province`=?, `city`=?, `contactEmail`=?")) { + ps.setString(1, o); + ps.setString(2, c); + ps.setString(3, st); + ps.setString(4, l); + ps.setString(5, mail); + ps.execute(); + } + email = mail; + name = o; + state = c; + province = st; + city = l; + } + + public boolean isMaster(User u) { + for (Affiliation i : getAllAdmins()) { + if (i.isMaster() && i.getTarget() == u) { + return true; + } + } + return false; + } + + @Override + public boolean isValidEmail(String email) { + return isValidDomain(email.split("@", 2)[1]); + } }