X-Git-Url: https://code.wpia.club/?p=gigi.git;a=blobdiff_plain;f=src%2Forg%2Fcacert%2Fgigi%2Futil%2FNotary.java;h=767230b0a82dfd470af7b356500a07dff3b8a056;hp=92b231da5b3bf82abb266dde9fddb32aba629b88;hb=4b91927aa8d90226414872ce5b3006d0e0f5d273;hpb=093f4797bc1e84c4963a67093f2b21393656edab

diff --git a/src/org/cacert/gigi/util/Notary.java b/src/org/cacert/gigi/util/Notary.java
index 92b231da..767230b0 100644
--- a/src/org/cacert/gigi/util/Notary.java
+++ b/src/org/cacert/gigi/util/Notary.java
@@ -1,25 +1,128 @@
 package org.cacert.gigi.util;
 
-import java.sql.PreparedStatement;
-import java.sql.SQLException;
+import java.text.ParseException;
+import java.util.Date;
 
+import org.cacert.gigi.GigiApiException;
 import org.cacert.gigi.database.DatabaseConnection;
+import org.cacert.gigi.database.GigiPreparedStatement;
+import org.cacert.gigi.database.GigiResultSet;
+import org.cacert.gigi.dbObjects.Group;
+import org.cacert.gigi.dbObjects.Name;
+import org.cacert.gigi.dbObjects.User;
+import org.cacert.gigi.output.DateSelector;
 
 public class Notary {
-	public static void writeUserAgreement(int memid, String document,
-			String method, String comment, boolean active, int secmemid)
-			throws SQLException {
-		PreparedStatement q = DatabaseConnection
-				.getInstance()
-				.prepare(
-						"insert into `user_agreements` set `memid`=?, `secmemid`=?,"
-								+ " `document`=?,`date`=NOW(), `active`=?,`method`=?,`comment`=?");
-		q.setInt(1, memid);
-		q.setInt(2, secmemid);
-		q.setString(3, document);
-		q.setInt(4, active ? 1 : 0);
-		q.setString(5, method);
-		q.setString(6, comment);
-		q.execute();
-	}
+
+    public static void writeUserAgreement(User member, String document, String method, String comment, boolean active, int secmemid) {
+        GigiPreparedStatement q = DatabaseConnection.getInstance().prepare("insert into `user_agreements` set `memid`=?, `secmemid`=?," + " `document`=?,`date`=NOW(), `active`=?,`method`=?,`comment`=?");
+        q.setInt(1, member.getId());
+        q.setInt(2, secmemid);
+        q.setString(3, document);
+        q.setInt(4, active ? 1 : 0);
+        q.setString(5, method);
+        q.setString(6, comment);
+        q.execute();
+    }
+
+    public static void checkAssuranceIsPossible(User assurer, User target) throws GigiApiException {
+        if (assurer.getId() == target.getId()) {
+            throw new GigiApiException("You cannot assure yourself.");
+        }
+        GigiPreparedStatement ps = DatabaseConnection.getInstance().prepare("SELECT 1 FROM `notary` where `to`=? and `from`=? AND `deleted` IS NULL");
+        ps.setInt(1, target.getId());
+        ps.setInt(2, assurer.getId());
+        GigiResultSet rs = ps.executeQuery();
+        if (rs.next()) {
+            rs.close();
+            throw new GigiApiException("You have already assured this member.");
+        }
+        rs.close();
+        if ( !assurer.canAssure()) {
+            throw new GigiApiException("You are not an assurer.");
+        }
+    }
+
+    public static final Group ASSURER_BLOCKED = Group.getByString("blockedassurer");
+
+    public static final Group ASSUREE_BLOCKED = Group.getByString("blockedassuree");
+
+    /**
+     * This method assures another user.
+     * 
+     * @see User#canAssure() (for assurer)
+     * @see #checkAssuranceIsPossible(User, User) (for assurer or assuree)
+     * @param assurer
+     *            the person that wants to assure
+     * @param assuree
+     *            the person that should be assured
+     * @param assureeName
+     *            the Name that was personally verified
+     * @param dob
+     *            the Date of birth that the assurer verified
+     * @param awarded
+     *            the points that should be awarded in total
+     * @param location
+     *            the location where the assurance took place
+     * @param date
+     *            the date when the assurance took place
+     * @throws GigiApiException
+     *             if the assurance fails (for various reasons)
+     */
+    public synchronized static void assure(User assurer, User assuree, Name assureeName, Date dob, int awarded, String location, String date) throws GigiApiException {
+        GigiApiException gae = new GigiApiException();
+        if (assuree.isInGroup(ASSUREE_BLOCKED)) {
+            gae.mergeInto(new GigiApiException("The assuree is blocked."));
+        }
+        if (assurer.isInGroup(ASSURER_BLOCKED)) {
+            gae.mergeInto(new GigiApiException("The assurer is blocked."));
+        }
+        if ( !gae.isEmpty()) {
+            throw gae;
+        }
+        if (date == null || date.equals("")) {
+            gae.mergeInto(new GigiApiException("You must enter the date when you met the assuree."));
+        } else {
+            try {
+                Date d = DateSelector.getDateFormat().parse(date);
+                if (d.getTime() > System.currentTimeMillis()) {
+                    gae.mergeInto(new GigiApiException("You must not enter a date in the future."));
+                }
+            } catch (ParseException e) {
+                gae.mergeInto(new GigiApiException("You must enter the date in this format: YYYY-MM-DD."));
+            }
+        }
+        // check location, min 3 characters
+        if (location == null || location.equals("")) {
+            gae.mergeInto(new GigiApiException("You failed to enter a location of your meeting."));
+        } else if (location.length() <= 2) {
+            gae.mergeInto(new GigiApiException("You must enter a location with at least 3 characters eg town and country."));
+        }
+
+        try {
+            checkAssuranceIsPossible(assurer, assuree);
+        } catch (GigiApiException e) {
+            gae.mergeInto(e);
+        }
+
+        if ( !assuree.getName().equals(assureeName) || !assuree.getDoB().equals(dob)) {
+            gae.mergeInto(new GigiApiException("The person you are assuring changed his personal details."));
+        }
+        if (awarded > assurer.getMaxAssurePoints() || awarded < 0) {
+            gae.mergeInto(new GigiApiException("The points you are trying to award are out of range."));
+        }
+        if ( !gae.isEmpty()) {
+            throw gae;
+        }
+
+        GigiPreparedStatement ps = DatabaseConnection.getInstance().prepare("INSERT INTO `notary` SET `from`=?, `to`=?, `points`=?, `location`=?, `date`=?");
+        ps.setInt(1, assurer.getId());
+        ps.setInt(2, assuree.getId());
+        ps.setInt(3, awarded);
+        ps.setString(4, location);
+        ps.setString(5, date);
+        ps.execute();
+        assurer.invalidateMadeAssurances();
+        assuree.invalidateReceivedAssurances();
+    }
 }