/* 
    P/P   *  Method: net.sourceforge.pebble.web.action.ManageUsersAction__static_init
          * 
          *  Postconditions:
          *    init'ed(log)
          */
     1  /*
     2   * Copyright (c) 2003-2006, Simon Brown
     3   * All rights reserved.
     4   *
     5   * Redistribution and use in source and binary forms, with or without
     6   * modification, are permitted provided that the following conditions are met:
     7   *
     8   *   - Redistributions of source code must retain the above copyright
     9   *     notice, this list of conditions and the following disclaimer.
    10   *
    11   *   - Redistributions in binary form must reproduce the above copyright
    12   *     notice, this list of conditions and the following disclaimer in
    13   *     the documentation and/or other materials provided with the
    14   *     distribution.
    15   *
    16   *   - Neither the name of Pebble nor the names of its contributors may
    17   *     be used to endorse or promote products derived from this software
    18   *     without specific prior written permission.
    19   *
    20   * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
    21   * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
    22   * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
    23   * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
    24   * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
    25   * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
    26   * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
    27   * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
    28   * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
    29   * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
    30   * POSSIBILITY OF SUCH DAMAGE.
    31   */
    32  package net.sourceforge.pebble.web.action;
    33  
    34  import net.sourceforge.pebble.Constants;
    35  import net.sourceforge.pebble.PebbleContext;
    36  import net.sourceforge.pebble.domain.AbstractBlog;
    37  import net.sourceforge.pebble.security.SecurityRealm;
    38  import net.sourceforge.pebble.security.SecurityRealmException;
    39  import net.sourceforge.pebble.web.security.RequireSecurityToken;
    40  import net.sourceforge.pebble.web.view.RedirectView;
    41  import net.sourceforge.pebble.web.view.View;
    42  import org.apache.commons.logging.Log;
    43  import org.apache.commons.logging.LogFactory;
    44  
         /* 
    P/P   *  Method: void net.sourceforge.pebble.web.action.ManageUsersAction()
          */
    45  import javax.servlet.ServletException;
    46  import javax.servlet.http.HttpServletRequest;
    47  import javax.servlet.http.HttpServletResponse;
    48  
    49  /**
    50   * Allows the user to manage users.
    51   *
    52   * @author    Simon Brown
    53   */
    54  @RequireSecurityToken
    55  public class ManageUsersAction extends SecureAction {
    56  
    57    /** the log used by this class */
    58    private static final Log log = LogFactory.getLog(ManageUsersAction.class);
    59  
    60    /**
    61     * Peforms the processing associated with this action.
    62     *
    63     * @param request  the HttpServletRequest instance
    64     * @param response the HttpServletResponse instance
    65     * @return the name of the next view
    66     */
    67    public View process(HttpServletRequest request, HttpServletResponse response) throws ServletException {
    68      try {
               /* 
    P/P         *  Method: View process(HttpServletRequest, HttpServletResponse)
                * 
                *  Preconditions:
                *    net.sourceforge.pebble.PebbleContext__static_init.new PebbleContext(PebbleContext__static_init#1).configuration != null
                *    request != null
                *    this.model != null
                *    this.model.data != null
                * 
                *  Presumptions:
                *    java.util.HashMap:get(...)@63 != null
                *    javax.servlet.http.HttpServletRequest:getParameter(...)@71 != null
                *    net.sourceforge.pebble.Configuration:getSecurityRealm(...)@73 != null
                *    realm.configuration@73 != null
                *    realm.passwordEncoder@73 != null
                *    ...
                * 
                *  Postconditions:
                *    return_value == &new RedirectView(process#1)
                *    new RedirectView(process#1) num objects == 1
                * 
                *  Test Vectors:
                *    java.lang.String:equalsIgnoreCase(...)@76: {0}, {1}
                *    java.lang.String:equalsIgnoreCase(...)@78: {0}, {1}
                *    javax.servlet.http.HttpServletRequest:getParameterValues(...)@70: Addr_Set{null}, Inverse{null}
                */
    69        AbstractBlog blog = (AbstractBlog)getModel().get(Constants.BLOG_KEY);
    70        String usernames[] = request.getParameterValues("user");
    71        String submit = request.getParameter("submit");
    72  
    73        SecurityRealm realm = PebbleContext.getInstance().getConfiguration().getSecurityRealm();
    74        if (usernames != null) {
    75          for (String username : usernames) {
    76            if (submit.equalsIgnoreCase("Remove")) {
    77              realm.removeUser(username);
    78            } else if (submit.equalsIgnoreCase("Reset Password")) {
    79              realm.changePassword(username, "password");
    80            }
    81          }
    82        }
    83  
    84        return new RedirectView(blog.getUrl() + "viewUsers.secureaction");
    85      } catch (SecurityRealmException e) {
    86        throw new ServletException(e);
    87      }
    88    }
    89  
    90    /**
    91     * Gets a list of all roles that are allowed to access this action.
    92     *
    93     * @return  an array of Strings representing role names
    94     * @param request
    95     */
    96    public String[] getRoles(HttpServletRequest request) {
             /* 
    P/P       *  Method: String[] getRoles(HttpServletRequest)
              * 
              *  Presumptions:
              *    init'ed(net.sourceforge.pebble.Constants.BLOG_ADMIN_ROLE)
              * 
              *  Postconditions:
              *    return_value == &new String[](getRoles#1)
              *    new String[](getRoles#1) num objects == 1
              *    return_value.length == 1
              *    return_value[0] == net.sourceforge.pebble.Constants.BLOG_ADMIN_ROLE
              *    (soft) init'ed(return_value[0])
              */
    97      return new String[]{Constants.BLOG_ADMIN_ROLE};
    98    }
    99  
   100  }