//# 1 errors, 186 messages
//#
/*
    //#changepasswordaction.java:1:1: class: net.sourceforge.pebble.web.action.ChangePasswordAction
 * Copyright (c) 2003-2006, Simon Brown
 * All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions are met:
 *
 *   - Redistributions of source code must retain the above copyright
 *     notice, this list of conditions and the following disclaimer.
 *
 *   - Redistributions in binary form must reproduce the above copyright
 *     notice, this list of conditions and the following disclaimer in
 *     the documentation and/or other materials provided with the
 *     distribution.
 *
 *   - Neither the name of Pebble nor the names of its contributors may
 *     be used to endorse or promote products derived from this software
 *     without specific prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
 * POSSIBILITY OF SUCH DAMAGE.
 */
package net.sourceforge.pebble.web.action;

import net.sourceforge.pebble.Constants;
import net.sourceforge.pebble.PebbleContext;
import net.sourceforge.pebble.security.PebbleUserDetails;
import net.sourceforge.pebble.security.SecurityRealm;
import net.sourceforge.pebble.security.SecurityRealmException;
import net.sourceforge.pebble.util.SecurityUtils;
import net.sourceforge.pebble.web.security.RequireSecurityToken;
import net.sourceforge.pebble.web.validation.ValidationContext;
import net.sourceforge.pebble.web.view.ForbiddenView;
import net.sourceforge.pebble.web.view.View;
import net.sourceforge.pebble.web.view.impl.ChangePasswordView;
import net.sourceforge.pebble.web.view.impl.PasswordChangedView;
import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;

import javax.servlet.ServletException;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

/**
 * Changes the user's password.
 *
 * @author    Simon Brown
 */
@RequireSecurityToken
public class ChangePasswordAction extends SecureAction {
    //#changepasswordaction.java:59: method: void net.sourceforge.pebble.web.action.ChangePasswordAction.net.sourceforge.pebble.web.action.ChangePasswordAction()
    //#input(void net.sourceforge.pebble.web.action.ChangePasswordAction()): this
    //#changepasswordaction.java:59: end of method: void net.sourceforge.pebble.web.action.ChangePasswordAction.net.sourceforge.pebble.web.action.ChangePasswordAction()

  /** the log used by this class */
  private static final Log log = LogFactory.getLog(ChangePasswordAction.class);
    //#changepasswordaction.java:62: method: net.sourceforge.pebble.web.action.ChangePasswordAction.net.sourceforge.pebble.web.action.ChangePasswordAction__static_init
    //#changepasswordaction.java:62: Warning: method not available
    //#    -- call on Log org.apache.commons.logging.LogFactory:getLog(Class)
    //#    severity: INFORMATIONAL
    //#    class: net.sourceforge.pebble.web.action.ChangePasswordAction
    //#    method: net.sourceforge.pebble.web.action.ChangePasswordAction__static_init
    //#    unanalyzed callee: Log org.apache.commons.logging.LogFactory:getLog(Class)
    //#output(net.sourceforge.pebble.web.action.ChangePasswordAction__static_init): __Descendant_Table[net/sourceforge/pebble/web/action/ChangePasswordAction]
    //#output(net.sourceforge.pebble.web.action.ChangePasswordAction__static_init): __Dispatch_Table.getLocalizedString(Ljava/lang/String;)Ljava/lang/String;
    //#output(net.sourceforge.pebble.web.action.ChangePasswordAction__static_init): __Dispatch_Table.getModel()Lnet/sourceforge/pebble/web/model/Model;
    //#output(net.sourceforge.pebble.web.action.ChangePasswordAction__static_init): __Dispatch_Table.getRoles(Ljavax/servlet/http/HttpServletRequest;)[Ljava/lang/String;
    //#output(net.sourceforge.pebble.web.action.ChangePasswordAction__static_init): __Dispatch_Table.process(Ljavax/servlet/http/HttpServletRequest;Ljavax/servlet/http/HttpServletResponse;)Lnet/sourceforge/pebble/web/view/View;
    //#output(net.sourceforge.pebble.web.action.ChangePasswordAction__static_init): __Dispatch_Table.setModel(Lnet/sourceforge/pebble/web/model/Model;)V
    //#output(net.sourceforge.pebble.web.action.ChangePasswordAction__static_init): log
    //#output(net.sourceforge.pebble.web.action.ChangePasswordAction__static_init): net/sourceforge/pebble/web/action/Action.__Descendant_Table[net/sourceforge/pebble/web/action/ChangePasswordAction]
    //#output(net.sourceforge.pebble.web.action.ChangePasswordAction__static_init): net/sourceforge/pebble/web/action/SecureAction.__Descendant_Table[net/sourceforge/pebble/web/action/ChangePasswordAction]
    //#post(net.sourceforge.pebble.web.action.ChangePasswordAction__static_init): __Descendant_Table[net/sourceforge/pebble/web/action/ChangePasswordAction] == &__Dispatch_Table
    //#post(net.sourceforge.pebble.web.action.ChangePasswordAction__static_init): net/sourceforge/pebble/web/action/Action.__Descendant_Table[net/sourceforge/pebble/web/action/ChangePasswordAction] == &__Dispatch_Table
    //#post(net.sourceforge.pebble.web.action.ChangePasswordAction__static_init): net/sourceforge/pebble/web/action/SecureAction.__Descendant_Table[net/sourceforge/pebble/web/action/ChangePasswordAction] == &__Dispatch_Table
    //#post(net.sourceforge.pebble.web.action.ChangePasswordAction__static_init): __Dispatch_Table.getLocalizedString(Ljava/lang/String;)Ljava/lang/String; == &net/sourceforge/pebble/web/action/Action.getLocalizedString
    //#post(net.sourceforge.pebble.web.action.ChangePasswordAction__static_init): __Dispatch_Table.getModel()Lnet/sourceforge/pebble/web/model/Model; == &net/sourceforge/pebble/web/action/Action.getModel
    //#post(net.sourceforge.pebble.web.action.ChangePasswordAction__static_init): __Dispatch_Table.getRoles(Ljavax/servlet/http/HttpServletRequest;)[Ljava/lang/String; == &getRoles
    //#post(net.sourceforge.pebble.web.action.ChangePasswordAction__static_init): __Dispatch_Table.process(Ljavax/servlet/http/HttpServletRequest;Ljavax/servlet/http/HttpServletResponse;)Lnet/sourceforge/pebble/web/view/View; == &process
    //#post(net.sourceforge.pebble.web.action.ChangePasswordAction__static_init): __Dispatch_Table.setModel(Lnet/sourceforge/pebble/web/model/Model;)V == &net/sourceforge/pebble/web/action/Action.setModel
    //#post(net.sourceforge.pebble.web.action.ChangePasswordAction__static_init): init'ed(log)
    //#changepasswordaction.java:62: end of method: net.sourceforge.pebble.web.action.ChangePasswordAction.net.sourceforge.pebble.web.action.ChangePasswordAction__static_init

  /**
   * Peforms the processing associated with this action.
   *
   * @param request  the HttpServletRequest instance
   * @param response the HttpServletResponse instance
   * @return the name of the next view
   */
  public View process(HttpServletRequest request, HttpServletResponse response) throws ServletException {
    try {
      SecurityRealm realm = PebbleContext.getInstance().getConfiguration().getSecurityRealm();
    //#changepasswordaction.java:73: method: View net.sourceforge.pebble.web.action.ChangePasswordAction.process(HttpServletRequest, HttpServletResponse)
    //#changepasswordaction.java:73: Warning: method not available
    //#    -- call on SecurityRealm net.sourceforge.pebble.Configuration:getSecurityRealm()
    //#    severity: INFORMATIONAL
    //#    class: net.sourceforge.pebble.web.action.ChangePasswordAction
    //#    method: View process(HttpServletRequest, HttpServletResponse)
    //#    unanalyzed callee: SecurityRealm net.sourceforge.pebble.Configuration:getSecurityRealm()
    //#input(View process(HttpServletRequest, HttpServletResponse)): __Descendant_Table[net/sourceforge/pebble/web/action/ChangePasswordAction]
    //#input(View process(HttpServletRequest, HttpServletResponse)): __Descendant_Table[others]
    //#input(View process(HttpServletRequest, HttpServletResponse)): __Dispatch_Table.getModel()Lnet/sourceforge/pebble/web/model/Model;
    //#input(View process(HttpServletRequest, HttpServletResponse)): net.sourceforge.pebble.PebbleContext__static_init.new PebbleContext(PebbleContext__static_init#1).__Tag
    //#input(View process(HttpServletRequest, HttpServletResponse)): net.sourceforge.pebble.PebbleContext__static_init.new PebbleContext(PebbleContext__static_init#1).configuration
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/PebbleContext.__Descendant_Table[net/sourceforge/pebble/PebbleContext]
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/PebbleContext.__Dispatch_Table.getConfiguration()Lnet/sourceforge/pebble/Configuration;
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/PebbleContext.instance
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/security/DefaultSecurityRealm.__Descendant_Table[net/sourceforge/pebble/security/DefaultSecurityRealm]
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/security/DefaultSecurityRealm.__Descendant_Table[others]
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/security/DefaultSecurityRealm.__Dispatch_Table.changePassword(Ljava/lang/String;Ljava/lang/String;)V
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/security/DefaultSecurityRealm.__Dispatch_Table.getFileForRealm()Ljava/io/File;
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/security/DefaultSecurityRealm.__Dispatch_Table.getFileForUser(Ljava/lang/String;)Ljava/io/File;
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/security/DefaultSecurityRealm.__Dispatch_Table.getUser(Ljava/lang/String;)Lnet/sourceforge/pebble/security/PebbleUserDetails;
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/security/PebbleUserDetails.__Descendant_Table[net/sourceforge/pebble/security/PebbleUserDetails]
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/security/PebbleUserDetails.__Descendant_Table[others]
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/security/PebbleUserDetails.__Dispatch_Table.getAuthorities()[Lorg/acegisecurity/GrantedAuthority;
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/security/PebbleUserDetails.__Dispatch_Table.getEmailAddress()Ljava/lang/String;
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/security/PebbleUserDetails.__Dispatch_Table.getName()Ljava/lang/String;
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/security/PebbleUserDetails.__Dispatch_Table.getPassword()Ljava/lang/String;
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/security/PebbleUserDetails.__Dispatch_Table.getPreferences()Ljava/util/Map;
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/security/PebbleUserDetails.__Dispatch_Table.getProfile()Ljava/lang/String;
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/security/PebbleUserDetails.__Dispatch_Table.getRolesAsString()Ljava/lang/String;
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/security/PebbleUserDetails.__Dispatch_Table.getUsername()Ljava/lang/String;
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/security/PebbleUserDetails.__Dispatch_Table.getWebsite()Ljava/lang/String;
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/security/PebbleUserDetails.__Dispatch_Table.isDetailsUpdateable()Z
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/security/PebbleUserDetails.__Dispatch_Table.setPassword(Ljava/lang/String;)V
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/security/SecurityRealm.__Descendant_Table[net/sourceforge/pebble/security/DefaultSecurityRealm]
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/security/SecurityRealm.__Descendant_Table[net/sourceforge/pebble/security/SecurityRealm]
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/security/SecurityRealm.__Descendant_Table[others]
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/security/SecurityRealm.__Dispatch_Table.changePassword(Ljava/lang/String;Ljava/lang/String;)V
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/security/SecurityRealm.__Dispatch_Table.getUser(Ljava/lang/String;)Lnet/sourceforge/pebble/security/PebbleUserDetails;
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/util/SecurityUtils.log
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/web/model/Model.__Descendant_Table[net/sourceforge/pebble/web/model/Model]
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/web/model/Model.__Descendant_Table[others]
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/web/model/Model.__Dispatch_Table.put(Ljava/lang/String;Ljava/lang/Object;)V
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/web/validation/ValidationContext.__Descendant_Table[net/sourceforge/pebble/web/validation/ValidationContext]
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/web/validation/ValidationContext.__Descendant_Table[others]
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/web/validation/ValidationContext.__Dispatch_Table.addError(Ljava/lang/String;)V
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/web/validation/ValidationContext.__Dispatch_Table.addError(Lnet/sourceforge/pebble/web/validation/ValidationError;)V
    //#input(View process(HttpServletRequest, HttpServletResponse)): net/sourceforge/pebble/web/validation/ValidationContext.__Dispatch_Table.hasErrors()Z
    //#input(View process(HttpServletRequest, HttpServletResponse)): request
    //#input(View process(HttpServletRequest, HttpServletResponse)): this
    //#input(View process(HttpServletRequest, HttpServletResponse)): this.__Tag
    //#input(View process(HttpServletRequest, HttpServletResponse)): this.model
    //#input(View process(HttpServletRequest, HttpServletResponse)): this.model.__Tag
    //#input(View process(HttpServletRequest, HttpServletResponse)): this.model.data
    //#output(View process(HttpServletRequest, HttpServletResponse)): new ChangePasswordView(process#2) num objects
    //#output(View process(HttpServletRequest, HttpServletResponse)): new ChangePasswordView(process#5) num objects
    //#output(View process(HttpServletRequest, HttpServletResponse)): new ForbiddenView(process#1) num objects
    //#output(View process(HttpServletRequest, HttpServletResponse)): new ForbiddenView(process#1).__Tag
    //#output(View process(HttpServletRequest, HttpServletResponse)): new PasswordChangedView(process#4) num objects
    //#output(View process(HttpServletRequest, HttpServletResponse)): return_value
    //#new obj(View process(HttpServletRequest, HttpServletResponse)): new ChangePasswordView(process#2)
    //#new obj(View process(HttpServletRequest, HttpServletResponse)): new ChangePasswordView(process#5)
    //#new obj(View process(HttpServletRequest, HttpServletResponse)): new ForbiddenView(process#1)
    //#new obj(View process(HttpServletRequest, HttpServletResponse)): new PasswordChangedView(process#4)
    //#pre[1] (View process(HttpServletRequest, HttpServletResponse)): net.sourceforge.pebble.PebbleContext__static_init.new PebbleContext(PebbleContext__static_init#1).configuration != null
    //#pre[2] (View process(HttpServletRequest, HttpServletResponse)): request != null
    //#pre[4] (View process(HttpServletRequest, HttpServletResponse)): (soft) this.__Tag == net/sourceforge/pebble/web/action/ChangePasswordAction
    //#pre[5] (View process(HttpServletRequest, HttpServletResponse)): (soft) this.model != null
    //#pre[6] (View process(HttpServletRequest, HttpServletResponse)): (soft) this.model.__Tag == net/sourceforge/pebble/web/model/Model
    //#pre[7] (View process(HttpServletRequest, HttpServletResponse)): (soft) this.model.data != null
    //#presumption(View process(HttpServletRequest, HttpServletResponse)): currentUserDetails.__Tag == net/sourceforge/pebble/security/PebbleUserDetails
    //#presumption(View process(HttpServletRequest, HttpServletResponse)): java.io.File:exists(...)@103 == 1
    //#presumption(View process(HttpServletRequest, HttpServletResponse)): java.util.Iterator:hasNext(...)@126 == 0
    //#presumption(View process(HttpServletRequest, HttpServletResponse)): net.sourceforge.pebble.Configuration:getSecurityRealm(...)@73 != null
    //#presumption(View process(HttpServletRequest, HttpServletResponse)): realm.__Tag@73 == net/sourceforge/pebble/security/DefaultSecurityRealm
    //#presumption(View process(HttpServletRequest, HttpServletResponse)): realm.configuration@73 != null
    //#presumption(View process(HttpServletRequest, HttpServletResponse)): realm.passwordEncoder@73 != null
    //#presumption(View process(HttpServletRequest, HttpServletResponse)): realm.saltSource@73 != null
    //#post(View process(HttpServletRequest, HttpServletResponse)): return_value in Addr_Set{&new ChangePasswordView(process#5),&new PasswordChangedView(process#4),&new ChangePasswordView(process#2),&new ForbiddenView(process#1)}
    //#post(View process(HttpServletRequest, HttpServletResponse)): new ChangePasswordView(process#2) num objects <= 1
    //#post(View process(HttpServletRequest, HttpServletResponse)): new ChangePasswordView(process#5) num objects <= 1
    //#post(View process(HttpServletRequest, HttpServletResponse)): new ForbiddenView(process#1) num objects <= 1
    //#post(View process(HttpServletRequest, HttpServletResponse)): new ForbiddenView(process#1).__Tag == net/sourceforge/pebble/web/view/ForbiddenView
    //#post(View process(HttpServletRequest, HttpServletResponse)): new PasswordChangedView(process#4) num objects <= 1
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:org.acegisecurity.Authentication:getName
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:org.acegisecurity.context.SecurityContextHolder:getContext
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:org.acegisecurity.context.SecurityContext:getAuthentication
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:net.sourceforge.pebble.Configuration:getSecurityRealm
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:getUser
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:net.sourceforge.pebble.Configuration:getDataDirectory
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.io.File
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.lang.StringBuilder
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.lang.StringBuilder:append
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.lang.StringBuilder:toString
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:getFileForUser
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.io.File:exists
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.io.FileInputStream
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.util.Properties
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.util.Properties:load
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.io.FileInputStream:close
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.util.Properties:getProperty
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.lang.String:split
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.lang.String:equalsIgnoreCase
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.util.HashMap
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.util.Properties:keySet
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.util.Set:iterator
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.util.Iterator:hasNext
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.util.Iterator:next
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.lang.String:startsWith
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.lang.String:length
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.lang.String:substring
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.util.Map:put
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.util.HashSet
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.lang.String:trim
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:org.acegisecurity.GrantedAuthorityImpl
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.util.Set:add
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.util.Set:toArray
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:net.sourceforge.pebble.PebbleException
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.lang.String:valueOf
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:org.apache.commons.logging.Log:error
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:net.sourceforge.pebble.web.view.View
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.util.ArrayList
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.util.List:add
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.util.List:isEmpty
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:updateUser
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:org.acegisecurity.providers.dao.SaltSource:getSalt
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:org.acegisecurity.providers.encoding.PasswordEncoder:encodePassword
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.util.Properties:setProperty
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.lang.StringBuffer
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:org.acegisecurity.GrantedAuthority:getAuthority
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.lang.StringBuffer:append
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.lang.StringBuffer:toString
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.util.Map:keySet
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.util.Map:get
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.io.FileOutputStream
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.util.Properties:store
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.io.FileOutputStream:flush
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.io.FileOutputStream:close
    //#unanalyzed(View process(HttpServletRequest, HttpServletResponse)): Effects-of-calling:java.util.HashMap:put
    //#test_vector(View process(HttpServletRequest, HttpServletResponse)): currentUserDetails.detailsUpdateable: {1}, {0}
    //#test_vector(View process(HttpServletRequest, HttpServletResponse)): java.lang.String:equals(...)@92: {1}, {0}
    //#test_vector(View process(HttpServletRequest, HttpServletResponse)): java.lang.String:length(...)@84: {1..4_294_967_295}, {0}
    //#test_vector(View process(HttpServletRequest, HttpServletResponse)): java.lang.String:length(...)@90: {1..4_294_967_295}, {0}
    //#test_vector(View process(HttpServletRequest, HttpServletResponse)): javax.servlet.http.HttpServletRequest:getParameter(...)@75: Addr_Set{null}, Inverse{null}
    //#test_vector(View process(HttpServletRequest, HttpServletResponse)): javax.servlet.http.HttpServletRequest:getParameter(...)@77: Addr_Set{null}, Inverse{null}
      PebbleUserDetails currentUserDetails = SecurityUtils.getUserDetails();
      String password1 = request.getParameter("password1");
      String password2 = request.getParameter("password2");
      String submit = request.getParameter("submit");

      // can the user change their user details?
      if (!currentUserDetails.isDetailsUpdateable()) {
    //#changepasswordaction.java:80: ?null dereference
    //#    currentUserDetails != null
    //#    severity: MEDIUM
    //#    class: net.sourceforge.pebble.web.action.ChangePasswordAction
    //#    method: View process(HttpServletRequest, HttpServletResponse)
    //#    basic block: bb_2
    //#    assertion: currentUserDetails != null
    //#    VN: getUserDetails(...)
    //#    Expected: Inverse{null}
    //#    Bad: Addr_Set{null}
    //#    Attribs:  Ptr  null in Bad
        return new ForbiddenView();
      }

      if (submit == null || submit.length() == 0) {
        return new ChangePasswordView();
    //#changepasswordaction.java:85: Warning: method not available
    //#    -- call on void net.sourceforge.pebble.web.view.impl.ChangePasswordView()
    //#    severity: INFORMATIONAL
    //#    class: net.sourceforge.pebble.web.action.ChangePasswordAction
    //#    method: View process(HttpServletRequest, HttpServletResponse)
    //#    unanalyzed callee: void net.sourceforge.pebble.web.view.impl.ChangePasswordView()
      }

      ValidationContext validationContext = new ValidationContext();

      if (password1 == null || password1.length() == 0) {
        validationContext.addError("Password can not be empty");
      } else if (!password1.equals(password2)) {
        validationContext.addError("Passwords do not match");
      }

      if (!validationContext.hasErrors()) {
          realm.changePassword(currentUserDetails.getUsername(), password1);
    //#changepasswordaction.java:97: Warning: method not available
    //#    -- call on void changePassword(String, String)
    //#    severity: INFORMATIONAL
    //#    class: net.sourceforge.pebble.web.action.ChangePasswordAction
    //#    method: View process(HttpServletRequest, HttpServletResponse)
    //#    unanalyzed callee: void changePassword(String, String)

          return new PasswordChangedView();
    //#changepasswordaction.java:99: Warning: method not available
    //#    -- call on void net.sourceforge.pebble.web.view.impl.PasswordChangedView()
    //#    severity: INFORMATIONAL
    //#    class: net.sourceforge.pebble.web.action.ChangePasswordAction
    //#    method: View process(HttpServletRequest, HttpServletResponse)
    //#    unanalyzed callee: void net.sourceforge.pebble.web.view.impl.PasswordChangedView()
      }

      getModel().put("validationContext", validationContext);
      return new ChangePasswordView();
    //#changepasswordaction.java:103: Warning: method not available
    //#    -- call on void net.sourceforge.pebble.web.view.impl.ChangePasswordView()
    //#    severity: INFORMATIONAL
    //#    class: net.sourceforge.pebble.web.action.ChangePasswordAction
    //#    method: View process(HttpServletRequest, HttpServletResponse)
    //#    unanalyzed callee: void net.sourceforge.pebble.web.view.impl.ChangePasswordView()
    } catch (SecurityRealmException e) {
      throw new ServletException(e);
    //#changepasswordaction.java:105: end of method: View net.sourceforge.pebble.web.action.ChangePasswordAction.process(HttpServletRequest, HttpServletResponse)
    }
  }

  /**
   * Gets a list of all roles that are allowed to access this action.
   *
   * @return  an array of Strings representing role names
   * @param request
   */
  public String[] getRoles(HttpServletRequest request) {
    return new String[]{Constants.ANY_ROLE};
    //#changepasswordaction.java:116: method: String[] net.sourceforge.pebble.web.action.ChangePasswordAction.getRoles(HttpServletRequest)
    //#input(String[] getRoles(HttpServletRequest)): net.sourceforge.pebble.Constants.ANY_ROLE
    //#output(String[] getRoles(HttpServletRequest)): new String[](getRoles#1) num objects
    //#output(String[] getRoles(HttpServletRequest)): return_value.length
    //#output(String[] getRoles(HttpServletRequest)): return_value[0]
    //#output(String[] getRoles(HttpServletRequest)): return_value
    //#new obj(String[] getRoles(HttpServletRequest)): new String[](getRoles#1)
    //#presumption(String[] getRoles(HttpServletRequest)): init'ed(net.sourceforge.pebble.Constants.ANY_ROLE)
    //#post(String[] getRoles(HttpServletRequest)): return_value == &new String[](getRoles#1)
    //#post(String[] getRoles(HttpServletRequest)): new String[](getRoles#1) num objects == 1
    //#post(String[] getRoles(HttpServletRequest)): return_value.length == 1
    //#post(String[] getRoles(HttpServletRequest)): return_value[0] == net.sourceforge.pebble.Constants.ANY_ROLE
    //#post(String[] getRoles(HttpServletRequest)): (soft) init'ed(return_value[0])
    //#changepasswordaction.java:116: end of method: String[] net.sourceforge.pebble.web.action.ChangePasswordAction.getRoles(HttpServletRequest)
  }

}    //#changepasswordaction.java:: end of class: net.sourceforge.pebble.web.action.ChangePasswordAction
