View Javadoc
1   /**
2    * This file Copyright (c) 2012-2018 Magnolia International
3    * Ltd.  (http://www.magnolia-cms.com). All rights reserved.
4    *
5    *
6    * This file is dual-licensed under both the Magnolia
7    * Network Agreement and the GNU General Public License.
8    * You may elect to use one or the other of these licenses.
9    *
10   * This file is distributed in the hope that it will be
11   * useful, but AS-IS and WITHOUT ANY WARRANTY; without even the
12   * implied warranty of MERCHANTABILITY or FITNESS FOR A
13   * PARTICULAR PURPOSE, TITLE, or NONINFRINGEMENT.
14   * Redistribution, except as permitted by whichever of the GPL
15   * or MNA you select, is prohibited.
16   *
17   * 1. For the GPL license (GPL), you can redistribute and/or
18   * modify this file under the terms of the GNU General
19   * Public License, Version 3, as published by the Free Software
20   * Foundation.  You should have received a copy of the GNU
21   * General Public License, Version 3 along with this program;
22   * if not, write to the Free Software Foundation, Inc., 51
23   * Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
24   *
25   * 2. For the Magnolia Network Agreement (MNA), this file
26   * and the accompanying materials are made available under the
27   * terms of the MNA which accompanies this distribution, and
28   * is available at http://www.magnolia-cms.com/mna.html
29   *
30   * Any modifications to this file must keep this entire header
31   * intact.
32   *
33   */
34  package info.magnolia.security.app.dialog.field.validator;
35  
36  import info.magnolia.cms.security.MgnlUserManager;
37  import info.magnolia.cms.security.SecuritySupport;
38  import info.magnolia.cms.security.UserManager;
39  import info.magnolia.ui.vaadin.integration.jcr.JcrNewNodeAdapter;
40  import info.magnolia.ui.vaadin.integration.jcr.JcrNodeAdapter;
41  
42  import javax.jcr.RepositoryException;
43  
44  import org.apache.commons.lang3.StringUtils;
45  import org.slf4j.Logger;
46  import org.slf4j.LoggerFactory;
47  
48  import com.vaadin.v7.data.Item;
49  import com.vaadin.v7.data.validator.AbstractStringValidator;
50  
51  /**
52   * Ensures uniqueness of the user name.
53   */
54  public class UniqueUserNameValidator extends AbstractStringValidator {
55  
56      private static final Logger log = LoggerFactory.getLogger(UniqueUserNameValidator.class);
57  
58      private final Item item;
59      private SecuritySupport securitySupport;
60  
61      public UniqueUserNameValidator(Item item, String errorMessage, SecuritySupport securitySupport) {
62          super(errorMessage);
63          this.item = item;
64          this.securitySupport = securitySupport;
65      }
66  
67      @Override
68      protected boolean isValidValue(String value) {
69  
70          if (item instanceof JcrNodeAdapter) {
71              // If we're editing an existing node then its allowed to use the current username of course
72              if (!(item instanceof JcrNewNodeAdapter)) {
73                  try {
74                      String currentName = ((JcrNodeAdapter)item).getJcrItem().getName();
75                      if (StringUtils.equals(value, currentName)) {
76                          return true;
77                      }
78                  } catch (RepositoryException e) {
79                      log.error("Exception occurred getting node name of node [{}]", ((JcrNodeAdapter) item).getItemId(), e);
80                      return false;
81                  }
82              }
83  
84              // In the case of JcrNewNodeAdapter this is path of the parent node, but that's enough
85              String path;
86              try {
87                  path = ((JcrNodeAdapter) item).getJcrItem().getPath();
88              } catch (RepositoryException e) {
89                  log.error("Exception getting path of node [{}]", ((JcrNodeAdapter) item).getItemId(), e);
90                  return false;
91              }
92  
93              UserManager userManager = securitySupport.getUserManager(getRealmName(path));
94              if (!(userManager instanceof MgnlUserManager) || !((MgnlUserManager) userManager).isAllowCrossRealmDuplicateNames()) {
95                  // if allow duplicate names across realms is not supported by usermanager or when it's disallowed
96                  userManager = securitySupport.getUserManager();
97              }
98  
99              // Check if user with such name already exists
100             if (userManager.getUser(value) == null) {
101                 return true;
102             }
103         }
104         return false;
105     }
106 
107     private String getRealmName(String path) {
108         path = path.substring(1); // remove slash from the beginning of the string
109         int idx = path.indexOf("/");
110         if (idx == -1) {
111             return path;
112         }
113         return StringUtils.substringBefore(path, "/");
114     }
115 }