/*
 * CDDL HEADER START
 *
 * The contents of this file are subject to the terms of the
 * Common Development and Distribution License (the "License").
 * You may not use this file except in compliance with the License.
 *
 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
 * or http://www.opensolaris.org/os/licensing.
 * See the License for the specific language governing permissions
 * and limitations under the License.
 *
 * When distributing Covered Code, include this CDDL HEADER in each
 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
 * If applicable, add the following below this CDDL HEADER, with the
 * fields enclosed by brackets "[]" replaced with your own identifying
 * information: Portions Copyright [yyyy] [name of copyright owner]
 *
 * CDDL HEADER END
 */

/*
 * Copyright (c) 2010, 2012, Oracle and/or its affiliates. All rights reserved.
 */

package com.oracle.solaris.vp.panels.usermgr.client.swing;

import java.util.*;
import java.util.logging.Level;
import javax.management.ObjectName;
import javax.swing.Icon;
import com.oracle.solaris.adr.Stability;
import com.oracle.solaris.rad.ObjectException;
import com.oracle.solaris.vp.panel.common.*;
import com.oracle.solaris.vp.panel.common.action.*;
import com.oracle.solaris.vp.panel.common.api.panel.MBeanUtil;
import com.oracle.solaris.vp.panel.common.control.*;
import com.oracle.solaris.vp.panel.common.model.*;
import com.oracle.solaris.vp.panel.swing.control.PanelFrameControl;
import com.oracle.solaris.vp.panel.swing.model.SwingPanelDescriptor;
import com.oracle.solaris.rad.usermgr.*;
import com.oracle.solaris.vp.util.misc.*;
import com.oracle.solaris.vp.util.misc.finder.Finder;
import com.oracle.solaris.vp.util.misc.property.*;
import com.oracle.solaris.vp.util.swing.HasIcons;

public class UserMgrPanelDescriptor
    extends AbstractPanelDescriptor<UserManagedObject>
    implements SwingPanelDescriptor<UserManagedObject>, HasIcons,
    ConnectionListener {

    //
    // Static data
    //

    // Constants needed for registering the MBean
    public static final String INTERFACE_NAME =
    	"com.oracle.solaris.rad.usermgr";
    public static final ObjectName OBJECT_NAME =
        MBeanUtil.makeObjectName(INTERFACE_NAME, "UserMgr");

    public static final String USER_TYPE_NORMAL = "normal";
    public static final String SCOPE_FILES = "files";
    public static final String MATCH_ALL = "";

    public static final String PASSWORD = "PASSWORD";
    public static final String NOTACTIVATED = "NOTACTIVATED";
    public static final String LOCKED = "LOCKED";
    public static final String UNKNOWN = "UNKNOWN";

    //
    // Instance data
    //

    private MainControl mc;
    private DefaultControl control;
    private MXBeanTracker<UserMgrMXBean> beanTracker;
    private UserType uType;

    private String scopeStr = SCOPE_FILES;
    private String typeStr = USER_TYPE_NORMAL;
    private String matchStr = MATCH_ALL;

    // Assignable lists
    private List<String> scopeList = null;
    private List<String> shellList = null;
    private List<Group> groupList = null;
    private List<String> profileList = null;
    private List<String> authList = null;
    private List<String> roleList = null;
    private List<String> supplgroups = null;

    private User defUser = null;

    //
    // Constructors
    //

    /**
     * Constructs a {@code UserMgrPanelDescriptor}.
     *
     * @param	    id
     *		    a unique identifier for this Panel, taken from the panel
     *		    registration
     *
     * @param	    context
     *		    a handle to interact with the Visual Panels client
     */
    public UserMgrPanelDescriptor(String id, ClientContext context)
	throws TrackerException, ActionFailedException {

        super(id, context);

	beanTracker = new MXBeanTracker<UserMgrMXBean>(
	    OBJECT_NAME, UserMgrMXBean.class, Stability.PRIVATE, context);

	setComparator(SimpleHasId.COMPARATOR);

	// Initialize list of users
	initUsers(SCOPE_FILES, USER_TYPE_NORMAL, MATCH_ALL);

        control = new PanelFrameControl<UserMgrPanelDescriptor>(this);
        mc = new MainControl(this);
	control.addChildren(mc);
	context.addConnectionListener(this);
    }

    //
    // PanelDescriptor methods
    //

    /**
     * Returns the top-most Control for this PanelDescriptor.
     */
    @Override
    public Control getControl() {
        return control;
    }

    //
    // HasIcons methods
    //

    /**
     * Returns a list of icons.
     */
    @Override
    public List<? extends Icon> getIcons() {
	return UserManagedObject.userIcons;
    }

    //
    // ManagedObject methods
    //

    /**
     * Stops monitoring the connection to the remote host.
     */
    @Override
    public void dispose() {
	beanTracker.dispose();
	super.dispose();
    }

    /**
     * Returns the name of this Managed Object.
     */
    @Override
    public String getName() {
	return Finder.getString("panel.usermgr.name");
    }

    //
    // AbstractManagedObject methods
    //

    @Override
    public void addChildren(UserManagedObject... toAdd) {
	super.addChildren(toAdd);

	ChangeableAggregator aggregator = getChangeableAggregator();
	for (UserManagedObject umo : toAdd) {
	    aggregator.addChangeables(umo.getChangeableAggregator());
	}
    }

    //
    // UserMgrPanelDescriptor methods
    //

    public void removeChildren(UserManagedObject toRemove) {
	super.removeChildren(toRemove);

	ChangeableAggregator aggregator = getChangeableAggregator();
	aggregator.removeChangeable(toRemove.getChangeableAggregator());
    }

    public void removeAllChildren() {
	super.clearChildren();
	ChangeableAggregator aggregator = getChangeableAggregator();
	aggregator.reset();
    }

    public UserMgrMXBean getUserMgrBean() {
        return beanTracker.getBean();
    }

    public UserManagedObject getUserManagedObject(String id) {

	SimpleHasId tmpHasId = new SimpleHasId();
	synchronized (children) {
	    tmpHasId.setId(id);
	    int index = Collections.binarySearch(children, tmpHasId,
		SimpleHasId.COMPARATOR);

	    if (index >= 0) {
		return children.get(index);
	    }

	    return null;
	}
    }

    public void deleteUserManagedObject(UserManagedObject toRemove) {
	removeChildren(toRemove);
    }

    public void addUserManagedObject(UserManagedObject toAdd) {
	addChildren(toAdd);
    }

    public void saveDeletedUser(UserManagedObject umo)
        throws ActionAbortedException,
	ActionFailedException, ActionUnauthorizedException {

	try {
	    getUserMgrBean().deleteUser(umo.getName());
	    deleteUserManagedObject(umo);
	} catch (SecurityException se) {
	    throw new ActionUnauthorizedException(se);
	} catch (ObjectException e) {
	    UserMgrError ume = e.getPayload(UserMgrError.class);
	    String msg = Finder.getString("usermgr.error.invalidData");
	    String err = Finder.getString(
		"usermgr.error.delete", umo.getUsername());
	    getLog().log(Level.SEVERE, err + msg, e);
	    throw new ActionFailedException(err + msg);
	// Any other remaining exceptions
	} catch (Exception e) {
	    String msg = Finder.getString("usermgr.error.system");
	    String err = Finder.getString(
		"usermgr.error.delete", umo.getUsername());
	    getLog().log(Level.SEVERE, err + msg, e);
	    throw new ActionFailedException(err + msg);
	}
    }

    public void saveAddedUser(UserManagedObject umo)
        throws ActionAbortedException,
	ActionFailedException, ActionUnauthorizedException {

	try {
	    char[] password = umo.getPassword();
	    User user = getUserMgrBean().addUser(umo.getNewUser(), password);
	    addUserManagedObject(umo);
	    Arrays.fill(password, (char)0);
	    umo.updateUser(user);

	} catch (SecurityException se) {
	    throw new ActionUnauthorizedException(se);
	} catch (ObjectException e) {
		UserMgrError ume = e.getPayload(UserMgrError.class);
		String msg;
		UserMgrErrorType error = (ume != null) ?
		    ume.getErrorCode() : UserMgrErrorType.INVALIDDATA;
		switch (error) {
		    case USEREXISTS:
			msg = Finder.getString("usermgr.error.userExists");
			break;
		    case PASSERROR:
			msg = Finder.getString("usermgr.error.passError");
			break;
		    default: // Invalid Data
			msg = Finder.getString("usermgr.error.invalidData");
			break;
		}
		String err = Finder.getString("usermgr.error.add",
		    umo.getUsername());
		getLog().log(Level.SEVERE, err + msg, e);
    		deleteUserManagedObject(umo);
		throw new ActionFailedException(err + msg);
	// Any other remaining exceptions
	} catch (Exception e) {
		String msg = Finder.getString("usermgr.error.system");
		String err = Finder.getString(
		    "usermgr.error.add", umo.getUsername());
		getLog().log(Level.SEVERE, err + msg, e);
		throw new ActionFailedException(err + msg);
	}
    }

    public void saveModifiedUsers() throws ActionAbortedException,
	ActionFailedException, ActionUnauthorizedException {

	List<UserManagedObject> kids = getChildren();
	for (UserManagedObject umo : kids) {
	    if (umo.getChangeableAggregator().isChanged()) {
		User user = umo.getModifiedUser();
		UserChangeFields changes = umo.getModifiedChanges();
		try {
		    if (user != null) {
			char[] password = null;
			if (umo.getPassProperty().isChanged())
			    password = umo.getPassword();
			getUserMgrBean().modifyUser(user, password, changes);
			if (password != null)
			    Arrays.fill(password, (char)0);
		    }
		} catch (SecurityException se) {
		    throw new ActionUnauthorizedException(se);
		} catch (ObjectException e) {
		    UserMgrError ume = e.getPayload(UserMgrError.class);
		    String msg;
		    UserMgrErrorType error = (ume != null) ?
			ume.getErrorCode() : UserMgrErrorType.INVALIDDATA;
		    switch (error) {
			case PASSERROR:
			    msg = Finder.getString("usermgr.error.passError");
			    break;
			default:
			    msg = Finder.getString("usermgr.error.invalidData");
			    break;
		    }
		    String err = Finder.getString(
			"usermgr.error.modify", umo.getUsername());
		    getLog().log(Level.SEVERE, err + msg, e);
		    throw new ActionFailedException(err + msg);
		// Any other remaining exceptions
		} catch (Exception e) {
		    String msg = Finder.getString("usermgr.error.system");
		    String err = Finder.getString(
			"usermgr.error.modify", umo.getUsername());
		    getLog().log(Level.SEVERE, err + msg, e);
		    throw new ActionFailedException(err + msg);
		}
		umo.getChangeableAggregator().save();
	    }
	}
    }

    public List<Group> getGroups() {
	return groupList;
    }

    public List<String> getSupplGroups() {
	return supplgroups;
    }

    public List<String> getShells() {
        return shellList;
    }

    public List<String> getScopes() {
        return scopeList;
    }

    public List<String> getProfiles() {
        return profileList;
    }

    public List<String> getAuths() {
        return authList;
    }

    public List<String> getRoles() {
        return roleList;
    }

    public UserImpl getDefaultUser() {
	UserImpl defaultUser = new UserImpl(
		"", 0L, defUser.getGroupID(),
		"", "", defUser.getDefaultShell(),
		0, 0, 0, 0,
		"", "", "", "", "", "",
		"", "", "", "", "", "",
		null, null, null, null, null, null);

        return defaultUser;
    }

    public void initUsers(String scopeStr,
    		String typeStr, String matchStr)
		throws ActionFailedException {
	int count = 0;
	String statusStr;
	String listTitle;



	statusStr = Finder.getString("usermgr.status.scope") +
	    " " + scopeStr;
	if (typeStr.equals(USER_TYPE_NORMAL)) {
	    uType = UserType.NORMAL;
	    listTitle = Finder.getString("usermgr.list.title.user");
	} else {
	    uType = UserType.ROLE;
	    listTitle = Finder.getString("usermgr.list.title.role");
	}


	removeAllChildren();
	try {
	    UserMgrMXBean bean = getUserMgrBean();

	    // Set scope only if the scope changed
	    if (scopeStr.equals(this.scopeStr) == false) {
		ScopeType sType;
		if (scopeStr.equals(SCOPE_FILES)) {
		    sType = ScopeType.FILES;
		} else {
		    sType = ScopeType.LDAP;
		}
		bean.selectScope(sType);
		this.scopeStr = scopeStr;
	    }

	    setFilter(uType, matchStr);
	    this.typeStr = typeStr;
	    this.matchStr = matchStr;

	    List<User> users = getUsers();

	    boolean uTypeSet = false;

	    for (User user : users) {
		String username = user.getUsername();
		if (uTypeSet == false) {
		    uType = bean.getUserType(username);
		    uTypeSet = true;
		}

		UserManagedObject umo = new UserManagedObject(this,
		    user, uType, null, false);
		addChildren(umo);
	    }

	    // Get Assignable Lists
	    scopeList = bean.getscopes();
	    groupList = bean.getgroups();
	    shellList = bean.getshells();
	    authList = bean.getauths();
	    profileList = bean.getprofiles();
	    roleList = bean.getroles();
	    supplgroups = bean.getsupplGroups();
	    defUser = bean.getdefaultUser();

	} catch (Exception e) {
	    String msg = Finder.getString("usermgr.error.system");
	    throw new ActionFailedException(msg);
	} finally {
	    setStatusText(statusStr);
	    if (mc != null) {
		mc.setListTitle(listTitle);
	    }
        }
    }

    /*
     * Solaris provides 3 levels of password change:
     *  1. Can change any password
     *  2. Can only set initial password
     *  3. Cannot change any password
     */
    public boolean canChangePassword(UserManagedObject umo) {
	String statusStr =  defUser.getAccountStatus();

	if (statusStr.equals(PASSWORD)) {
	    return true;
	} else if (statusStr.equals(LOCKED)) {
            return false;
	} else if (statusStr.equals(NOTACTIVATED) && (umo == null ||
		umo.getAccountStatus().equals(UNKNOWN) ||
		umo.getAccountStatus().equals(NOTACTIVATED))) {
	    return true;
	}

        return false;
    }

    public boolean isTypeRole() {
        return (uType == UserType.ROLE ? true : false);
    }

    public String getTypeString() {
        return (uType == UserType.ROLE ? "role" : "user");
    }

    public String getScope() {
        return (scopeStr);
    }

    public String getType() {
        return (typeStr);
    }


    public String getMatch() {
        return (matchStr);
    }

    /*
     * Connection Listener interfaces
     */

    /*
     * If a role assumption or user change occurs because
     * of permission/auth failure, initialize the users list
     */
    public void connectionChanged(ConnectionEvent ce) {
	try {
	    initUsers(scopeStr, typeStr, matchStr);
        } catch (Exception e) {
            getLog().log(Level.SEVERE, "Error setting filter.", e);
	}
    }

    public void connectionFailed(ConnectionEvent ce) {
	setStatusText(Finder.getString("usermgr.error.connfailed"));
    }

    //
    // Get the user for the given user name
    //
    public User getUser(String name) {

	User user = null;

	try {
	    user = getUserMgrBean().getUser(name);
        } catch (ObjectException e) {
            getLog().log(Level.SEVERE, "Error getting user " +
		name + " : ", e);
	}

	return user;
    }

    //
    // Private methods
    //

    private List<User> getUsers() {

	List<User> users = null;
	try {
	    users = getUserMgrBean().getusers();
        } catch (ObjectException e) {
            getLog().log(Level.SEVERE, "Error getting user list.", e);
	}
	return users;
    }

    private void setFilter(UserType utype, String search) {
	try {
	    getUserMgrBean().setFilter(utype, search);
        } catch (Exception e) {
            getLog().log(Level.SEVERE, "Error setting filter.", e);
	}
    }
}