Package cz.metacentrum.perun.core.blImpl

Class GroupsManagerBlImpl

java.lang.Object

cz.metacentrum.perun.core.blImpl.GroupsManagerBlImpl

All Implemented Interfaces:

GroupsManagerBl

public class GroupsManagerBlImpl
extends Object
implements GroupsManagerBl

GroupsManager business logic

Author:

Michal Prochazka michalp@ics.muni.cz, Slavek Licehammer glory@ics.muni.cz

Field Summary

Fields

Modifier and Type	Field	Description
static final String	GROUP_DESCRIPTION
static final String	GROUP_LOGIN
static final String	GROUP_NAME
static final Set<String>	GROUP_SYNC_DEFAULT_DATA
static final String	MERGE_GROUP_ATTRIBUTES
static final String	MERGE_MEMBER_ATTRIBUTES
static final String	OVERWRITE_USER_ATTRIBUTES
static final String	PARENT_GROUP_LOGIN

Constructor Summary

Constructors

Constructor	Description
GroupsManagerBlImpl(GroupsManagerImplApi groupsManagerImpl)	Create new instance of this class.

Method Summary

Modifier and Type	Method	Description
protected void	addDirectMember(PerunSession sess, Group group, Member member)	Add a record of the member with a DIRECT membership type to the group.
void	addGroupsToAutoRegistration(PerunSession sess, List<Group> groups)	Adds groups to a list of groups which can be registered into during vo registration.
void	addGroupsToAutoRegistration(PerunSession sess, List<Group> groups, ApplicationFormItem formItem)	Adds groups to a list of groups which can be registered into during vo or group registration.
protected List<Member>	addIndirectMembers(PerunSession sess, Group group, List<Member> members, int sourceGroupId)	Add records of the members with an INDIRECT membership type to the group.
void	addMember(PerunSession sess, Group group, Member member)	Adds member of the VO to the group in the same VO.
void	addMember(PerunSession sess, List<Group> groups, Member member)	Adds member of the VO to the groups in the same VO.
void	addMembers(PerunSession sess, Group group, List<Member> members)	Adds members of the VO to the group in the same VO.
void	addMemberToMembersGroup(PerunSession sess, Group group, Member member)	Special addMember which is able to add members into the members and administrators group.
void	addMissingMemberWhileSynchronization(PerunSession sess, Group group, Candidate candidate, List<String> overwriteUserAttributesList, List<String> mergeMemberAttributesList, List<String> skippedMembers)	Get new candidate and add him to the Group.
void	addRelationMembers(PerunSession sess, Group resultGroup, List<Member> changedMembers, int sourceGroupId)	Method recalculates all relations between groups.
void	allowGroupToHierarchicalVo(PerunSession sess, Group group, Vo vo)	Sets flag required for including group to parent vo in a vo hierarchy.
boolean	canExtendMembershipInGroup(PerunSession sess, Member member, Group group)	Returns true if member in given group can extend membership or if no rules were set for the membershipExpiration
boolean	canExtendMembershipInGroupWithReason(PerunSession sess, Member member, Group group)	Returns true if member in given group can extend membership or throws exception with reason why use can't extends membership
void	checkGroupExists(PerunSession sess, Group group)
List<RichGroup>	convertGroupsToRichGroupsWithAttributes(PerunSession sess, Member member, Resource resource, List<Group> groups, List<String> attrNames)	This method takes list of groups, resource, member and list of attrNames and then creates list of RichGroups containing all selected group, group-resource and member-group attributes filtered by list (attributes from other namespaces are skipped without any warning).
List<RichGroup>	convertGroupsToRichGroupsWithAttributes(PerunSession sess, Member member, List<Group> groups)	This method takes list of groups and member and then creates list of RichGroups containing all group and member-group attributes
List<RichGroup>	convertGroupsToRichGroupsWithAttributes(PerunSession sess, Member member, List<Group> groups, List<String> attrNames)	This method takes list of groups, member and list of attrNames and then creates list of RichGroups containing all selected group and member-group attributes by list (attributes from other namespaces are skipped).
List<RichGroup>	convertGroupsToRichGroupsWithAttributes(PerunSession sess, Resource resource, List<Group> groups)	This method takes list of groups and resource and then creates list of RichGroups containing all group and group-resource attributes
List<RichGroup>	convertGroupsToRichGroupsWithAttributes(PerunSession sess, Resource resource, List<Group> groups, List<String> attrNames)	This method takes list of groups, resource and list of attrNames and then creates list of RichGroups containing all selected group and group-resource attributes by list (attributes from other namespaces are skipped).
List<RichGroup>	convertGroupsToRichGroupsWithAttributes(PerunSession sess, List<Group> groups)	This method takes list of groups and creates list of RichGroups containing all attributes
List<RichGroup>	convertGroupsToRichGroupsWithAttributes(PerunSession sess, List<Group> groups, List<String> attrNames)	This method takes list of groups and creates list of RichGroups containing selected attributes
RichGroup	convertGroupToRichGroupWithAttributes(PerunSession sess, Group group)	This method takes group and creates RichGroup containing all attributes
RichGroup	convertGroupToRichGroupWithAttributesByName(PerunSession sess, Group group, List<String> attrNames)	This method takes group and creates RichGroup containing selected attributes
EnrichedGroup	convertToEnrichedGroup(PerunSession sess, Group group, List<String> attrNames)	Creates enrichedGroup from given group and load attributes with given names.
void	copyMembers(PerunSession sess, Group sourceGroup, List<Group> destinationGroups, List<Member> members)	Copies direct members from one group to other groups in the same VO.
Group	createGroup(PerunSession sess, Group parentGroup, Group group)	Creates a new subgroup of the existing group.
Group	createGroup(PerunSession sess, Vo vo, Group group)	Creates a new top-level group and associates it with the VO from parameter.
Group	createGroupUnion(PerunSession sess, Group resultGroup, Group operandGroup, boolean parentFlag)	Performs union operation on two groups.
void	deleteAllGroups(PerunSession sess, Vo vo)	Deletes all groups under the VO except built-in groups (members, admins groups).
void	deleteGroup(PerunSession sess, Group group, boolean forceDelete)	If forceDelete is false, delete only group and if this group has members or subgroups, throw an exception.
void	deleteGroups(PerunSession perunSession, List<Group> groups, boolean forceDelete)	Delete all groups in list from perun.
void	deleteGroupsFromAutoRegistration(PerunSession sess, List<Group> groups)	Deletes groups from a list of groups which can be registered into during vo registration.
void	deleteGroupsFromAutoRegistration(PerunSession sess, List<Group> groups, ApplicationFormItem formItem)	Deletes groups from a list of groups which can be registered into during vo or group registration.
void	deleteMembersGroup(PerunSession sess, Vo vo)	Deletes built-in members group.
void	disallowGroupToHierarchicalVo(PerunSession sess, Group group, Vo vo)	Unsets flag required for including group to parent vo in a vo hierarchy
void	expireMemberInGroup(PerunSession sess, Member member, Group group)	Set member's status in given group to EXPIRED
void	extendMembershipInGroup(PerunSession sess, Member member, Group group)	Extend member membership in given group using membershipExpirationRules attribute defined in Group.
List<Member>	filterMembersByMembershipTypeInGroup(List<Member> members)	This method take list of members (also with duplicit) and: 1] add all members with direct membership to target list 2] add all members with indirect membership who are not already in target list to the target list
EnrichedGroup	filterOnlyAllowedAttributes(PerunSession sess, EnrichedGroup enrichedGroup)	For enrichedGroup filter all its group attributes and remove all which principal has no access to.
RichGroup	filterOnlyAllowedAttributes(PerunSession sess, RichGroup richGroup)	For richGroup filter all his group attributes and remove all which principal has no access to.
List<RichGroup>	filterOnlyAllowedAttributes(PerunSession sess, List<RichGroup> richGroups)	For list of richGroups filter all their group attributes and remove all which principal has no access to.
List<RichGroup>	filterOnlyAllowedAttributes(PerunSession sess, List<RichGroup> richGroups, Member member, Resource resource, boolean useContext)	For list of richGroups filter all their group attributes and remove all which principal has no access to.
List<RichGroup>	filterOnlyAllowedAttributes(PerunSession sess, List<RichGroup> richGroups, Resource resource, boolean useContext)	For list of richGroups filter all their group attributes and remove all which principal has no access to.
void	forceAllSubGroupsSynchronization(PerunSession sess, Group group)	Force synchronization for all subgroups (recursively - whole tree) of the group (useful for group structure)
void	forceGroupStructureSynchronization(PerunSession sess, Group group)	Synchronize the group structure with an external group structure.
void	forceGroupSynchronization(PerunSession sess, Group group)	Synchronize the group with external group.
List<Member>	getActiveGroupMembers(PerunSession sess, Group group)	Return all members of the group who are active (valid) in the group.
List<Member>	getActiveGroupMembers(PerunSession sess, Group group, Status status)	Return all members of the group who are active (valid) in the group and have specific status in the Vo.
List<Group>	getAdminGroups(PerunSession sess, Group group)	Gets list of all group administrators of this group.
List<User>	getAdmins(PerunSession sess, Group group)	Deprecated.
List<User>	getAdmins(PerunSession perunSession, Group group, boolean onlyDirectAdmins)	Gets list of all administrators of this group.
List<Group>	getAllAllowedGroupsToHierarchicalVo(PerunSession sess, Vo vo)	Returns all groups which can be included to VO.
List<Group>	getAllAllowedGroupsToHierarchicalVo(PerunSession sess, Vo vo, Vo memberVo)	Returns groups which can be included to VO from specific member VO.
List<Group>	getAllGroups(PerunSession sess)	Get all groups from all vos.
List<Group>	getAllGroups(PerunSession sess, Vo vo)	Get all groups of the VO.
List<Group>	getAllGroupsForAutoRegistration(PerunSession sess)	Returns all groups which can be registered into during any vo registration.
List<Group>	getAllGroupsWhereMemberIsActive(PerunSession sess, Member member)	Returns all member's groups where member is in active state (is valid there) Included members group.
Map<Group,Object>	getAllGroupsWithHierarchy(PerunSession sess, Vo vo)	Get all groups of the VO stored in the map reflecting the hierarchy.
List<Group>	getAllMemberGroups(PerunSession sess, Member member)	Return all member's groups.
List<RichGroup>	getAllRichGroupsWithAttributesByNames(PerunSession sess, Vo vo, List<String> attrNames)	Deprecated.
List<RichGroup>	getAllRichGroupsWithAttributesByNames(PerunSession sess, Vo vo, List<String> attrNames, List<String> roles, List<RoleAssignmentType> types)	Returns all RichGroups containing selected attributes filtered by role and its type
List<RichGroup>	getAllRichSubGroupsWithAttributesByNames(PerunSession sess, Group parentGroup, List<String> attrNames)	Deprecated.
List<RichGroup>	getAllRichSubGroupsWithAttributesByNames(PerunSession sess, Group parentGroup, List<String> attrNames, List<String> roles, List<RoleAssignmentType> types)	Returns all RichSubGroups from parentGroup containing selected attributes filtered by role and its type (all levels subgroups)
List<Group>	getAllSubGroups(PerunSession sess, Group parentGroup)	Get all subgroups of the parentGroup recursively.
List<Group>	getAssignedGroupsToFacility(PerunSession sess, Facility facility)	Return list of assigned groups on all facility resources (without subgroups unless they are assigned too)
List<Group>	getAssignedGroupsToResource(PerunSession sess, Resource resource)	Return list of assigned groups on the resource (without subgroups unless they are assigned too)
List<Group>	getAssignedGroupsToResource(PerunSession sess, Resource resource, boolean withSubGroups)	Return list of assigned groups on the resource.
List<Group>	getAssignedGroupsToResource(PerunSession sess, Resource resource, Member member)	Return list of assigned groups on the resource (without subgroups unless they are assigned too), which contain specific member
List<Group>	getAssociatedGroupsToFacility(PerunSession sess, Facility facility)	Return list of all associated groups from all facility resources (does not require ACTIVE group-resource status)
List<Group>	getAssociatedGroupsToResource(PerunSession sess, Resource resource)	Return list of assigned groups on the resource.
List<Group>	getAssociatedGroupsToResource(PerunSession sess, Resource resource, Member member)	Return list of groups associated with the resource with specified member.
List<User>	getDirectAdmins(PerunSession sess, Group group)	Deprecated.
MemberGroupStatus	getDirectMemberGroupStatus(PerunSession session, Member member, Group group)	Returns members direct status in given group.
List<RichUser>	getDirectRichAdmins(PerunSession perunSession, Group group)	Deprecated.
List<RichUser>	getDirectRichAdminsWithSpecificAttributes(PerunSession perunSession, Group group, List<String> specificAttributes)	Deprecated.
List<Facility>	getFacilitiesWhereGroupIsAdmin(PerunSession perunSession, Group group)	Get list of facilities where the given group is given the admin role.
Group	getGroupById(PerunSession sess, int id)	Search for the group with specified id in all VOs.
Group	getGroupByName(PerunSession sess, Vo vo, String name)	Search for the group with specified name in specified VO.
List<Member>	getGroupDirectMembers(PerunSession sess, Group group)	Return all direct group members.
int	getGroupDirectMembersCount(PerunSession sess, Group group)	Returns count of direct members in the group
List<RichMember>	getGroupDirectRichMembers(PerunSession sess, Group group)	Returns direct group members in the RichMember object, which contains Member+User data.
Member	getGroupMemberById(PerunSession sess, Group group, int memberId)	Get group member by member ID.
List<Member>	getGroupMembers(PerunSession sess, Group group)	Return all group members.
List<Member>	getGroupMembers(PerunSession sess, Group group, MemberGroupStatus statusInGroup, Status status)	Return all members of the group who has specific status in the group and also specific status in the Vo.
List<Member>	getGroupMembers(PerunSession sess, Group group, Status status)	Return group members.
int	getGroupMembersCount(PerunSession sess, Group group)
Map<MemberGroupStatus,Integer>	getGroupMembersCountsByGroupStatus(PerunSession sess, Group group)	Returns counts of group members by their group status.
Map<Status,Integer>	getGroupMembersCountsByVoStatus(PerunSession sess, Group group)	Returns counts of group members by their status in VO.
List<Member>	getGroupMembersExceptInvalid(PerunSession sess, Group group)	Return only valid, suspended, expired and disabled group members.
List<Member>	getGroupMembersExceptInvalidAndDisabled(PerunSession sess, Group group)	Return only valid, suspended and expired group members.
List<Pair<Group,Resource>>	getGroupResourcePairsByAttribute(PerunSession sess, Attribute attribute)	Returns all group-resource which have set the attribute with the value.
List<RichMember>	getGroupRichMembers(PerunSession sess, Group group)	Returns group members in the RichMember object, which contains Member+User data.
List<RichMember>	getGroupRichMembers(PerunSession sess, Group group, Status status)	Returns group members in the RichMember object, which contains Member+User data.
List<RichMember>	getGroupRichMembersExceptInvalid(PerunSession sess, Group group)	Returns only valid, suspended and expired group members in the RichMember object, which contains Member+User data.
List<RichMember>	getGroupRichMembersWithAttributes(PerunSession sess, Group group)	Returns group members in the RichMember object, which contains Member+User data.
List<RichMember>	getGroupRichMembersWithAttributes(PerunSession sess, Group group, Status status)	Returns group members in the RichMember object, which contains Member+User data.
List<RichMember>	getGroupRichMembersWithAttributesExceptInvalid(PerunSession sess, Group group)	Returns only valid, suspended and expired group members in the RichMember object, which contains Member+User data.
List<Group>	getGroups(PerunSession sess, Vo vo)	Get all groups of users under the VO.
List<Group>	getGroupsByAttribute(PerunSession sess, Attribute attribute)	Returns all groups which have set the attribute with the value.
List<Group>	getGroupsByIds(PerunSession sess, List<Integer> ids)	Search for the groups with specified ids in all VOs.
List<Group>	getGroupsByPerunBean(PerunSession sess, Facility facility)	Returns list of groups connected with a facility
List<Group>	getGroupsByPerunBean(PerunSession sess, Host host)	Returns list of groups connected with a host
List<Group>	getGroupsByPerunBean(PerunSession sess, Member member)	Returns list of groups connected with a member
List<Group>	getGroupsByPerunBean(PerunSession sess, Resource resource)	Returns list of groups connected with a resource
List<Group>	getGroupsByPerunBean(PerunSession sess, User user)	Returns list of groups connected with a user
List<Group>	getGroupsByPerunBean(PerunSession sess, Vo vo)	Returns list of groups connected with a vo
int	getGroupsCount(PerunSession sess)	Get count of all groups.
int	getGroupsCount(PerunSession sess, Vo vo)
List<Group>	getGroupsForAutoRegistration(PerunSession sess, Group registrationGroup, ApplicationFormItem formItem)	Returns all groups which can be registered into during group registration.
List<Group>	getGroupsForAutoRegistration(PerunSession sess, Vo vo)	Returns all groups which can be registered into during vo registration.
List<Group>	getGroupsForAutoRegistration(PerunSession sess, Vo vo, ApplicationFormItem formItem)	Returns all groups which can be registered into during vo registration.
GroupsManagerImplApi	getGroupsManagerImpl()	Gets the groupsManagerImpl for this instance.
Paginated<RichGroup>	getGroupsPage(PerunSession sess, Vo vo, GroupsPageQuery query, List<String> attrNames)	Get page of groups from the given vo.
List<Group>	getGroupsToSynchronize(PerunSession sess)	Gets all groups which have enabled synchronization.
List<Group>	getGroupsWhereGroupIsAdmin(PerunSession perunSession, Group group)	Get list of groups where the given group is given the admin role.
List<Group>	getGroupsWhereMemberIsActive(PerunSession sess, Member member)	Returns all member's groups where member is in active state (is valid there) Excluded members group.
List<Group>	getGroupsWhereMemberIsInactive(PerunSession sess, Member member)	Returns all member's groups where member is in inactive state (it is not valid and it is expired there) Excluded members group.
List<Group>	getGroupsWhereUserIsActiveMember(PerunSession sess, User user, Vo vo)	Returns groups in which the user is active member.
List<Group>	getGroupsWithAssignedExtSourceInVo(PerunSession sess, ExtSource source, Vo vo)	Get all groups in specific vo with assigned extSource
List<Group>	getGroupUnions(PerunSession session, Group group, boolean reverseDirection)	Get list of group unions for specified group.
List<User>	getGroupUsers(PerunSession perunSession, Group group)	Return group users sorted by name.
List<Member>	getInactiveGroupMembers(PerunSession sess, Group group)	Return all members of the group who are inactive (expired) in the group.
List<Member>	getInactiveGroupMembers(PerunSession sess, Group group, Status status)	Return all members of the group who are inactive (expired) in the group and have specific status in the Vo.
List<List<Group>>	getIndirectMembershipPaths(PerunSession sess, Member member, Group group)	Get unique paths of groups via which member is indirectly included to the group.
List<Group>	getMemberDirectGroups(PerunSession sess, Member member)	Get all groups (except member groups) where member has direct membership.
List<Group>	getMemberGroups(PerunSession sess, Member member)	Returns all members groups.
List<Group>	getMemberGroupsByAttribute(PerunSession sess, Member member, Attribute attribute)	Method return list of groups for selected member which (groups) has set specific attribute.
List<RichGroup>	getMemberRichGroupsWithAttributesByNames(PerunSession sess, Member member, List<String> attrNames)	Deprecated.
List<RichGroup>	getMemberRichGroupsWithAttributesByNames(PerunSession sess, Member member, List<String> attrNames, List<String> roles, List<RoleAssignmentType> types)	Return all RichGroups for specified member, containing selected attributes filtered by role and its type.
Group	getParentGroup(PerunSession sess, Group group)	Get parent group.
List<Member>	getParentGroupMembers(PerunSession sess, Group group)	Get members from parent group.
List<RichMember>	getParentGroupRichMembers(PerunSession sess, Group group)	Get members form the parent group in RichMember format.
List<RichMember>	getParentGroupRichMembersWithAttributes(PerunSession sess, Group group)	Get members form the parent group in RichMember format including user/member attributes.
PerunBl	getPerunBl()	Gets the perunBl.
List<RichUser>	getRichAdmins(PerunSession perunSession, Group group)	Deprecated.
List<RichUser>	getRichAdmins(PerunSession perunSession, Group group, List<String> specificAttributes, boolean allUserAttributes, boolean onlyDirectAdmins)	Gets list of all richUser administrators of this group.
List<RichUser>	getRichAdminsWithAttributes(PerunSession perunSession, Group group)	Deprecated.
List<RichUser>	getRichAdminsWithSpecificAttributes(PerunSession perunSession, Group group, List<String> specificAttributes)	Deprecated.
RichGroup	getRichGroupByIdWithAttributesByNames(PerunSession sess, int groupId, List<String> attrNames)	Returns RichGroup selected by id containing selected attributes
List<RichGroup>	getRichGroupsWithAttributesAssignedToResource(PerunSession sess, Member member, Resource resource, List<String> attrNames)	Get list of all richGroups with selected attributes assigned to the resource filtered by specific member.
List<RichGroup>	getRichGroupsWithAttributesAssignedToResource(PerunSession sess, Resource resource, List<String> attrNames)	Get all RichGroups with selected attributes assigned to the resource.
List<RichGroup>	getRichSubGroupsWithAttributesByNames(PerunSession sess, Group parentGroup, List<String> attrNames)	Returns RichSubGroups from parentGroup containing selected attributes (only 1 level subgroups)
List<Member>	getServiceGroupMembers(PerunSession sess, Group group)	Return a list of all group members, who are service users
List<Group>	getSubGroups(PerunSession sess, Group parentGroup)	Get all subgroups of the parent group under the VO.
int	getSubGroupsCount(PerunSession sess, Group parentGroup)	Returns number of immediate subgroups of the parent group.
Paginated<RichGroup>	getSubgroupsPage(PerunSession sess, Group group, GroupsPageQuery query, List<String> attrNames)	Get page of subgroups from the given parent group.
Map<Integer,MemberGroupStatus>	getTotalGroupStatusForMembers(PerunSession session, Group group, List<Member> members)	Returns total member's status of given members in given group.
MemberGroupStatus	getTotalMemberGroupStatus(PerunSession session, Member member, Group group)	Returns total member's status in given group.
List<Group>	getUserGroups(PerunSession perunSession, User user)	Return groups where user is member.
List<Group>	getUserGroups(PerunSession perunSession, User user, List<Status> memberStatuses, List<MemberGroupStatus> memberGroupStatuses)	Return groups where user is member with allowed statuses in vo and group.
Vo	getVo(PerunSession sess, Group group)	Gets the Vo which is owner of the group.
List<Vo>	getVosWhereGroupIsAdmin(PerunSession perunSession, Group group)	Get list of VOs where the given group is given the admin role.
protected boolean	hasCandidateExistingMember(Candidate candidate, RichMember richMember)	Compare richMember userExtSources with Candidate's userExtSources, if some of the useExtSource fits.
boolean	hasGroupSynchronizedChild(PerunSession session, Group group)	Check if there is a subgroup of the group, which is defined as synchronized from an external source at this moment.
void	inactivateMember(PerunSession sess, Member member, Group group)	Inactivates member in group and sets its status to EXPIRED.
boolean	isAllowedGroupToHierarchicalVo(PerunSession sess, Group group, Vo vo)	Returns flag representing if the group can be included in the (parent) vo's groups
boolean	isDirectGroupMember(PerunSession sess, Group group, Member member)	Return true if Member is direct member of the Group
boolean	isGroupForAnyAutoRegistration(PerunSession sess, Group group)	Check if group has automatic registration enabled in any form item.
boolean	isGroupForAutoRegistration(PerunSession sess, Group group, List<Integer> formItems)	Check if group has automatic registration enabled in the given form item.
boolean	isGroupInStructureSynchronizationTree(PerunSession session, Group group)	Check if the group or its subgroups are defined as synchronized from an external source at this moment.
boolean	isGroupMember(PerunSession sess, Group group, Member member)	Return true if Member is member of the Group
boolean	isGroupSynchronizedFromExternallSource(PerunSession session, Group group)	Check if the group is defined as synchronized from an external source at this moment.
boolean	isUserMemberOfGroup(PerunSession sess, User user, Group group)	Checks whether the user is member of the group.
void	moveGroup(PerunSession sess, Group destinationGroup, Group movingGroup)	Move one group structure under another group in same vo or as top level group
void	reactivateMember(PerunSession sess, Member member, Group group)	Reactivates member in group and sets its status to VALID.
void	recalculateMemberGroupStatusRecursively(PerunSession sess, Member member, Group group, Map<Integer,Map<Integer,MemberGroupStatus>> previousStatus)	Calculates the state of given member in given group and if it differs from given 'previousState' calls this method recursively for all parent groups.
void	removeFormerMemberWhileSynchronization(PerunSession sess, Group group, RichMember memberToRemove, boolean isAuthoritative)	Remove former member from group (if he is not listed in ExtSource).
void	removeGroupUnion(PerunSession sess, Group resultGroup, Group operandGroup, boolean parentFlag)	Removes a union relation between two groups.
void	removeMember(PerunSession sess, Group group, Member member)	Removes member form the group.
void	removeMember(PerunSession sess, List<Group> groups, Member member)	Removes member from groups.
void	removeMemberFromMembersOrAdministratorsGroup(PerunSession sess, Group group, Member member)	Removes member from members or administrators group only.
void	removeMembers(PerunSession sess, Group group, List<Member> members)	Removes members from the group.
void	removeRelationMembers(PerunSession sess, Group resultGroup, List<Member> changedMembers, int sourceGroupId)	Method recalculates all relations between groups.
void	saveInformationAboutGroupStructureSynchronizationInNestedTransaction(PerunSession sess, Group group, boolean failedDueToException, String exceptionMessage)	This method will set timestamp, state and exceptionMessage to group attributes for the group structure.
void	saveInformationAboutGroupStructureSynchronizationInNewTransaction(PerunSession sess, Group group, boolean failedDueToException, String exceptionMessage)	This method will set timestamp, state and exceptionMessage to group attributes for the group structure.
void	saveInformationAboutGroupSynchronizationInNestedTransaction(PerunSession sess, Group group, long startTime, boolean failedDueToException, String exceptionMessage)	This method will set timestamp, synchronization start time and exceptionMessage to group attributes for the group.
void	saveInformationAboutGroupSynchronizationInNewTransaction(PerunSession sess, Group group, long startTime, boolean failedDueToException, String exceptionMessage)	This method will set timestamp, synchronization start time and exceptionMessage to group attributes for the group.
void	setPerunBl(PerunBl perunBl)
List<String>	synchronizeGroup(PerunSession sess, Group group)	Synchronizes the group with the external group without checking if the synchronization is already in progress.
void	synchronizeGroups(PerunSession sess)	Start and check threads with synchronization of groups.
void	synchronizeGroupsStructures(PerunSession sess)	Synchronize all groups structures which have enabled group structure synchronization.
List<String>	synchronizeGroupStructure(PerunSession sess, Group baseGroup)	Synchronize a group structure with an external source group structure under the group.
void	updateExistingMemberWhileSynchronization(PerunSession sess, Group group, Candidate candidate, RichMember memberToUpdate, List<String> overwriteUserAttributesList, List<String> mergeMemberAttributesList, List<AttributeDefinition> attrDefs)	Get candidate and corresponding memberToUpdate and update his attributes, extSources, expiration and status.
Group	updateGroup(PerunSession sess, Group group)	Updates group by ID.
Group	updateParentGroupId(PerunSession sess, Group group)	Updates parentGroupId.
void	validateMemberInGroup(PerunSession sess, Member member, Group group)	Set member's status in given group to VALID

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

GROUP_LOGIN

public static final String GROUP_LOGIN

See Also:

• Constant Field Values

PARENT_GROUP_LOGIN

public static final String PARENT_GROUP_LOGIN

See Also:

• Constant Field Values

GROUP_NAME

public static final String GROUP_NAME

See Also:

• Constant Field Values

GROUP_DESCRIPTION

public static final String GROUP_DESCRIPTION

See Also:

• Constant Field Values

OVERWRITE_USER_ATTRIBUTES

public static final String OVERWRITE_USER_ATTRIBUTES

See Also:

• Constant Field Values

MERGE_MEMBER_ATTRIBUTES

public static final String MERGE_MEMBER_ATTRIBUTES

See Also:

• Constant Field Values

MERGE_GROUP_ATTRIBUTES

public static final String MERGE_GROUP_ATTRIBUTES

See Also:

• Constant Field Values

GROUP_SYNC_DEFAULT_DATA

public static final Set<String> GROUP_SYNC_DEFAULT_DATA

Constructor Details

GroupsManagerBlImpl

public GroupsManagerBlImpl(GroupsManagerImplApi groupsManagerImpl)

Create new instance of this class.

Method Details

addDirectMember

protected void addDirectMember(PerunSession sess,
 Group group,
 Member member)
                        throws AlreadyMemberException,
WrongAttributeValueException,
WrongReferenceAttributeValueException,
GroupNotExistsException

Add a record of the member with a DIRECT membership type to the group.

Parameters:

sess - perun session

group - group to add member to

member - member to be added as DIRECT

Throws:

InternalErrorException

AlreadyMemberException

WrongAttributeValueException

WrongReferenceAttributeValueException

GroupNotExistsException

addGroupsToAutoRegistration

public void addGroupsToAutoRegistration(PerunSession sess,
 List<Group> groups)
                                 throws GroupNotAllowedToAutoRegistrationException

Description copied from interface: GroupsManagerBl

Adds groups to a list of groups which can be registered into during vo registration. This will NOT create empty application form for groups and will throw exception if none exists.

Specified by:

addGroupsToAutoRegistration in interface GroupsManagerBl

Parameters:

sess - session

groups - list of groups

Throws:

GroupNotAllowedToAutoRegistrationException - if given group cannot be added to auto registration

addGroupsToAutoRegistration

public void addGroupsToAutoRegistration(PerunSession sess,
 List<Group> groups,
 ApplicationFormItem formItem)
                                 throws GroupNotAllowedToAutoRegistrationException,
FormItemNotExistsException

Description copied from interface: GroupsManagerBl

Adds groups to a list of groups which can be registered into during vo or group registration. This will NOT create empty application form for groups and will throw exception if none exists.

Specified by:

addGroupsToAutoRegistration in interface GroupsManagerBl

Parameters:

sess - session

groups - list of groups

formItem - application form item

Throws:

GroupNotAllowedToAutoRegistrationException - if given group cannot be added to auto registration

FormItemNotExistsException

addIndirectMembers

protected List<Member> addIndirectMembers(PerunSession sess,
 Group group,
 List<Member> members,
 int sourceGroupId)
                                   throws AlreadyMemberException,
WrongAttributeValueException,
WrongReferenceAttributeValueException

Add records of the members with an INDIRECT membership type to the group.

Parameters:

sess - perun session

group - group to add members to

members - list of members to add as INDIRECT

sourceGroupId - id of a group from which members originate

Returns:

list of members that were not members already

Throws:

InternalErrorException

AlreadyMemberException

WrongAttributeValueException

WrongReferenceAttributeValueException

addMember

public void addMember(PerunSession sess,
 Group group,
 Member member)
               throws WrongReferenceAttributeValueException,
AlreadyMemberException,
WrongAttributeValueException,
GroupNotExistsException

Description copied from interface: GroupsManagerBl

Adds member of the VO to the group in the same VO. But not to administrators and members group.

Specified by:

addMember in interface GroupsManagerBl

Throws:

WrongReferenceAttributeValueException

AlreadyMemberException

WrongAttributeValueException

GroupNotExistsException

addMember

public void addMember(PerunSession sess,
 List<Group> groups,
 Member member)
               throws WrongReferenceAttributeValueException,
AlreadyMemberException,
WrongAttributeValueException,
GroupNotExistsException

Description copied from interface: GroupsManagerBl

Adds member of the VO to the groups in the same VO. But not to administrators and members group.

Specified by:

addMember in interface GroupsManagerBl

Throws:

WrongReferenceAttributeValueException

AlreadyMemberException

WrongAttributeValueException

GroupNotExistsException

addMemberToMembersGroup

public void addMemberToMembersGroup(PerunSession sess,
 Group group,
 Member member)
                             throws AlreadyMemberException,
WrongAttributeValueException,
WrongReferenceAttributeValueException,
GroupNotExistsException

Description copied from interface: GroupsManagerBl

Special addMember which is able to add members into the members and administrators group.

Specified by:

addMemberToMembersGroup in interface GroupsManagerBl

Throws:

AlreadyMemberException

WrongAttributeValueException

WrongReferenceAttributeValueException

GroupNotExistsException

addMembers

public void addMembers(PerunSession sess,
 Group group,
 List<Member> members)
                throws AlreadyMemberException,
WrongAttributeValueException,
WrongReferenceAttributeValueException,
GroupNotExistsException

Description copied from interface: GroupsManagerBl

Adds members of the VO to the group in the same VO. But not to administrators and members group.

Specified by:

addMembers in interface GroupsManagerBl

Throws:

AlreadyMemberException

WrongAttributeValueException

WrongReferenceAttributeValueException

GroupNotExistsException

addMissingMemberWhileSynchronization

public void addMissingMemberWhileSynchronization(PerunSession sess,
 Group group,
 Candidate candidate,
 List<String> overwriteUserAttributesList,
 List<String> mergeMemberAttributesList,
 List<String> skippedMembers)

Get new candidate and add him to the Group.

If Candidate can't be added to Group, skip him and add this information to skippedMembers list.

When creating new member from Candidate, if user already exists, merge his attributes, if attribute exists in list of overwriteUserAttributesList, update it instead of merging.

This method runs in separate transaction.

Parameters:

sess - perun session

group - to be synchronized

candidate - new member (candidate)

overwriteUserAttributesList - list of attributes to be updated for user if found

mergeMemberAttributesList - list of attributes to be merged for member if found

skippedMembers - list of not successfully synchronized members

addRelationMembers

public void addRelationMembers(PerunSession sess,
 Group resultGroup,
 List<Member> changedMembers,
 int sourceGroupId)
                        throws AlreadyMemberException,
WrongReferenceAttributeValueException,
WrongAttributeValueException,
GroupNotExistsException

Description copied from interface: GroupsManagerBl

Method recalculates all relations between groups. Method recursively adds members from groups and all their relations. The method is called in case of: 1) added relation 2) added member 3) group creation 4) group movement

Specified by:

addRelationMembers in interface GroupsManagerBl

Parameters:

sess - perun session

resultGroup - group to which members are added or removed from

changedMembers - list of changed members which is passed as argument to add indirect members method. List contains records of added indirect members from operand group.

sourceGroupId - id of a group from which members originate

Throws:

AlreadyMemberException

WrongReferenceAttributeValueException

WrongAttributeValueException

GroupNotExistsException

allowGroupToHierarchicalVo

public void allowGroupToHierarchicalVo(PerunSession sess,
 Group group,
 Vo vo)
                                throws RelationNotExistsException,
RelationExistsException

Description copied from interface: GroupsManagerBl

Sets flag required for including group to parent vo in a vo hierarchy.

Specified by:

allowGroupToHierarchicalVo in interface GroupsManagerBl

Parameters:

sess - perun session

group - group

vo - parent vo

Throws:

RelationNotExistsException - if group is not from parent vo's member vos

RelationExistsException - if group is already allowed to be included to parent vo

canExtendMembershipInGroup

public boolean canExtendMembershipInGroup(PerunSession sess,
 Member member,
 Group group)

Description copied from interface: GroupsManagerBl

Returns true if member in given group can extend membership or if no rules were set for the membershipExpiration

Specified by:

canExtendMembershipInGroup in interface GroupsManagerBl

Parameters:

sess - session

member - member

group - group

Returns:

true if given member can extend membership in given group or if no rules were set for the membership expiration, false otherwise

canExtendMembershipInGroupWithReason

public boolean canExtendMembershipInGroupWithReason(PerunSession sess,
 Member member,
 Group group)
                                             throws ExtendMembershipException

Description copied from interface: GroupsManagerBl

Returns true if member in given group can extend membership or throws exception with reason why use can't extends membership

Specified by:

canExtendMembershipInGroupWithReason in interface GroupsManagerBl

Parameters:

sess - session

member - member

group - group

Returns:

true if given member can extend membership in given group or throws exception with reason why not

Throws:

ExtendMembershipException - reason why user can't extend membership

checkGroupExists

public void checkGroupExists(PerunSession sess,
 Group group)
                      throws GroupNotExistsException

Specified by:

checkGroupExists in interface GroupsManagerBl

Throws:

GroupNotExistsException

convertGroupToRichGroupWithAttributes

public RichGroup convertGroupToRichGroupWithAttributes(PerunSession sess,
 Group group)

Description copied from interface: GroupsManagerBl

This method takes group and creates RichGroup containing all attributes

Specified by:

convertGroupToRichGroupWithAttributes in interface GroupsManagerBl

Returns:

RichGroup

convertGroupToRichGroupWithAttributesByName

public RichGroup convertGroupToRichGroupWithAttributesByName(PerunSession sess,
 Group group,
 List<String> attrNames)

Description copied from interface: GroupsManagerBl

This method takes group and creates RichGroup containing selected attributes

Specified by:

convertGroupToRichGroupWithAttributesByName in interface GroupsManagerBl

attrNames - list of selected attributes

Returns:

RichGroup

convertGroupsToRichGroupsWithAttributes

public List<RichGroup> convertGroupsToRichGroupsWithAttributes(PerunSession sess,
 List<Group> groups)

Description copied from interface: GroupsManagerBl

This method takes list of groups and creates list of RichGroups containing all attributes

Specified by:

convertGroupsToRichGroupsWithAttributes in interface GroupsManagerBl

groups - list of groups

Returns:

RichGroup

convertGroupsToRichGroupsWithAttributes

public List<RichGroup> convertGroupsToRichGroupsWithAttributes(PerunSession sess,
 Member member,
 List<Group> groups)
                                                        throws MemberGroupMismatchException

Description copied from interface: GroupsManagerBl

This method takes list of groups and member and then creates list of RichGroups containing all group and member-group attributes

Specified by:

convertGroupsToRichGroupsWithAttributes in interface GroupsManagerBl

member - specified member which is assigned to groups

groups - list of groups

Returns:

list of RichGroups with attributes

Throws:

MemberGroupMismatchException

convertGroupsToRichGroupsWithAttributes

public List<RichGroup> convertGroupsToRichGroupsWithAttributes(PerunSession sess,
 Resource resource,
 List<Group> groups)
                                                        throws GroupResourceMismatchException

Description copied from interface: GroupsManagerBl

This method takes list of groups and resource and then creates list of RichGroups containing all group and group-resource attributes

Specified by:

convertGroupsToRichGroupsWithAttributes in interface GroupsManagerBl

resource - specified resource to which are groups assigned

groups - list of groups

Returns:

list of RichGroups with attributes

Throws:

GroupResourceMismatchException

convertGroupsToRichGroupsWithAttributes

public List<RichGroup> convertGroupsToRichGroupsWithAttributes(PerunSession sess,
 List<Group> groups,
 List<String> attrNames)

Description copied from interface: GroupsManagerBl

This method takes list of groups and creates list of RichGroups containing selected attributes

Specified by:

convertGroupsToRichGroupsWithAttributes in interface GroupsManagerBl

groups - list of groups

attrNames - list of selected attributes

Returns:

RichGroup

convertGroupsToRichGroupsWithAttributes

public List<RichGroup> convertGroupsToRichGroupsWithAttributes(PerunSession sess,
 Resource resource,
 List<Group> groups,
 List<String> attrNames)
                                                        throws GroupResourceMismatchException

Description copied from interface: GroupsManagerBl

This method takes list of groups, resource and list of attrNames and then creates list of RichGroups containing all selected group and group-resource attributes by list (attributes from other namespaces are skipped). If attribute is in the list, it can be return with empty value if it is not set.

Specified by:

convertGroupsToRichGroupsWithAttributes in interface GroupsManagerBl

attrNames - list of selected attribute names, if it is null, return all possible non-empty attributes, empty list in attrNames means - no attributes needed

Returns:

list of RichGroups with selected attributes

Throws:

GroupResourceMismatchException

convertGroupsToRichGroupsWithAttributes

public List<RichGroup> convertGroupsToRichGroupsWithAttributes(PerunSession sess,
 Member member,
 List<Group> groups,
 List<String> attrNames)
                                                        throws MemberGroupMismatchException,
MemberNotExistsException,
GroupNotExistsException

Description copied from interface: GroupsManagerBl

This method takes list of groups, member and list of attrNames and then creates list of RichGroups containing all selected group and member-group attributes by list (attributes from other namespaces are skipped). If attribute is in the list, it can be return with empty value if it is not set.

Specified by:

convertGroupsToRichGroupsWithAttributes in interface GroupsManagerBl

attrNames - list of selected attribute names, if it is null, return all possible non-empty attributes, empty list in attrNames means - no attributes needed

Returns:

list of RichGroups with selected attributes

Throws:

MemberGroupMismatchException

MemberNotExistsException

GroupNotExistsException

convertGroupsToRichGroupsWithAttributes

public List<RichGroup> convertGroupsToRichGroupsWithAttributes(PerunSession sess,
 Member member,
 Resource resource,
 List<Group> groups,
 List<String> attrNames)
                                                        throws GroupResourceMismatchException,
MemberGroupMismatchException

Description copied from interface: GroupsManagerBl

This method takes list of groups, resource, member and list of attrNames and then creates list of RichGroups containing all selected group, group-resource and member-group attributes filtered by list (attributes from other namespaces are skipped without any warning). If attribute with correct namespace is in the list, it will be return even with empty value (if no value exists).

Specified by:

convertGroupsToRichGroupsWithAttributes in interface GroupsManagerBl

member - member to get member-resource and member-group attributes for

resource - resource to get group-resource and member-resource attributes for

groups - to convert to richGroups and get group-resource and member-group attributes for

attrNames - list of selected attribute names, if it is null, return all possible non-empty attributes, empty list in attrNames means - no attributes needed

Returns:

list of RichGroups with selected attributes

Throws:

GroupResourceMismatchException - if group is not assigned to resource

MemberGroupMismatchException - if member is not in the same vo as group

convertToEnrichedGroup

public EnrichedGroup convertToEnrichedGroup(PerunSession sess,
 Group group,
 List<String> attrNames)

Description copied from interface: GroupsManagerBl

Creates enrichedGroup from given group and load attributes with given names. If the attrNames are null, all group attributes are added.

Specified by:

convertToEnrichedGroup in interface GroupsManagerBl

Parameters:

sess - session

group - group

attrNames - names of attributes to return

Returns:

EnrichedGroup for given group with desired attributes

copyMembers

public void copyMembers(PerunSession sess,
 Group sourceGroup,
 List<Group> destinationGroups,
 List<Member> members)
                 throws WrongReferenceAttributeValueException,
WrongAttributeValueException,
MemberGroupMismatchException

Description copied from interface: GroupsManagerBl

Copies direct members from one group to other groups in the same VO. The members are copied without their member-group attributes. Copies all direct members if members list is empty or null.

Specified by:

copyMembers in interface GroupsManagerBl

Parameters:

sess - perun session

sourceGroup - group to copy members from

destinationGroups - groups to copy members to

members - members to be copies

Throws:

WrongReferenceAttributeValueException

WrongAttributeValueException

MemberGroupMismatchException

createGroup

public Group createGroup(PerunSession sess,
 Vo vo,
 Group group)
                  throws GroupExistsException

Description copied from interface: GroupsManagerBl

Creates a new top-level group and associates it with the VO from parameter.

For this method the new group has always same shortName like Name. Important: voId in object group is ignored

Specified by:

createGroup in interface GroupsManagerBl

vo - to associates group with

group - new group with name without ":"

Returns:

newly created top-level group

Throws:

GroupExistsException

createGroup

public Group createGroup(PerunSession sess,
 Group parentGroup,
 Group group)
                  throws GroupExistsException,
GroupRelationNotAllowed,
GroupRelationAlreadyExists

Description copied from interface: GroupsManagerBl

Creates a new subgroup of the existing group.

Specified by:

createGroup in interface GroupsManagerBl

group - group.name must contain only shortName (without ":"). Hierarchy is defined by parentGroup parameter.

Returns:

newly created sub group with full group.Name with ":"

Throws:

GroupExistsException

GroupRelationNotAllowed

GroupRelationAlreadyExists

createGroupUnion

public Group createGroupUnion(PerunSession sess,
 Group resultGroup,
 Group operandGroup,
 boolean parentFlag)
                       throws WrongReferenceAttributeValueException,
WrongAttributeValueException,
GroupNotExistsException,
GroupRelationAlreadyExists,
GroupRelationNotAllowed,
VoNotExistsException

Description copied from interface: GroupsManagerBl

Performs union operation on two groups. Members from operand group are added to result group as indirect.

Specified by:

createGroupUnion in interface GroupsManagerBl

Parameters:

sess - perun session

resultGroup - group to which members are added

operandGroup - group from which members are taken

parentFlag - if true union cannot be deleted; false otherwise (it flags relations created by hierarchical structure)

Returns:

result group

Throws:

WrongReferenceAttributeValueException

WrongAttributeValueException

GroupNotExistsException

GroupRelationAlreadyExists

GroupRelationNotAllowed

VoNotExistsException

deleteAllGroups

public void deleteAllGroups(PerunSession sess,
 Vo vo)
                     throws GroupAlreadyRemovedException,
GroupAlreadyRemovedFromResourceException,
GroupRelationDoesNotExist,
GroupRelationCannotBeRemoved

Description copied from interface: GroupsManagerBl

Deletes all groups under the VO except built-in groups (members, admins groups).

Specified by:

deleteAllGroups in interface GroupsManagerBl

vo - VO

Throws:

GroupAlreadyRemovedException

GroupAlreadyRemovedFromResourceException

GroupRelationDoesNotExist

GroupRelationCannotBeRemoved

deleteGroup

public void deleteGroup(PerunSession sess,
 Group group,
 boolean forceDelete)
                 throws RelationExistsException,
GroupAlreadyRemovedException,
GroupAlreadyRemovedFromResourceException,
GroupNotExistsException,
GroupRelationDoesNotExist,
GroupRelationCannotBeRemoved

Description copied from interface: GroupsManagerBl

If forceDelete is false, delete only group and if this group has members or subgroups, throw an exception. If forceDelete is true, delete group with all subgroups, members and administrators, then delete this group.

Specified by:

deleteGroup in interface GroupsManagerBl

group - group to delete

forceDelete - if forceDelete is false, delete group only if is empty and has no subgroups, if is true, delete anyway with all connections

Throws:

RelationExistsException

GroupAlreadyRemovedException

GroupAlreadyRemovedFromResourceException

GroupNotExistsException

GroupRelationDoesNotExist

GroupRelationCannotBeRemoved

deleteGroups

public void deleteGroups(PerunSession perunSession,
 List<Group> groups,
 boolean forceDelete)
                  throws GroupAlreadyRemovedException,
RelationExistsException,
GroupAlreadyRemovedFromResourceException,
GroupNotExistsException,
GroupRelationDoesNotExist,
GroupRelationCannotBeRemoved

Description copied from interface: GroupsManagerBl

Delete all groups in list from perun. (Except members group)

If forceDelete is false, delete groups only if none of them (IN MOMENT OF DELETING) has subgroups and members, in other case throw exception. if forceDelete is true, delete groups with all subgroups and members.

Groups are deleted in order: from longest name to the shortest - ex: Group A:b:c will be deleted sooner than Group A:b etc. - reason for this: with group are deleted its subgroups too

Important: Groups can be from different VOs.

Specified by:

deleteGroups in interface GroupsManagerBl

groups - list of groups to deleted

forceDelete - if forceDelete is false, delete groups only if all of them have no subgroups and no members, if is true, delete anyway with all connections

Throws:

GroupAlreadyRemovedException

RelationExistsException

GroupAlreadyRemovedFromResourceException

GroupNotExistsException

GroupRelationDoesNotExist

GroupRelationCannotBeRemoved

deleteGroupsFromAutoRegistration

public void deleteGroupsFromAutoRegistration(PerunSession sess,
 List<Group> groups)

Description copied from interface: GroupsManagerBl

Deletes groups from a list of groups which can be registered into during vo registration.

Specified by:

deleteGroupsFromAutoRegistration in interface GroupsManagerBl

Parameters:

sess - session

groups - list of groups

deleteGroupsFromAutoRegistration

public void deleteGroupsFromAutoRegistration(PerunSession sess,
 List<Group> groups,
 ApplicationFormItem formItem)
                                      throws FormItemNotExistsException

Description copied from interface: GroupsManagerBl

Deletes groups from a list of groups which can be registered into during vo or group registration.

Specified by:

deleteGroupsFromAutoRegistration in interface GroupsManagerBl

Parameters:

sess - session

groups - list of groups

formItem - application form item

Throws:

FormItemNotExistsException

deleteMembersGroup

public void deleteMembersGroup(PerunSession sess,
 Vo vo)
                        throws GroupAlreadyRemovedException,
GroupAlreadyRemovedFromResourceException,
GroupNotExistsException,
GroupRelationDoesNotExist,
GroupRelationCannotBeRemoved

Description copied from interface: GroupsManagerBl

Deletes built-in members group.

Specified by:

deleteMembersGroup in interface GroupsManagerBl

Throws:

GroupAlreadyRemovedException

GroupAlreadyRemovedFromResourceException

GroupNotExistsException

GroupRelationDoesNotExist

GroupRelationCannotBeRemoved

disallowGroupToHierarchicalVo

public void disallowGroupToHierarchicalVo(PerunSession sess,
 Group group,
 Vo vo)
                                   throws RelationNotExistsException

Description copied from interface: GroupsManagerBl

Unsets flag required for including group to parent vo in a vo hierarchy

Specified by:

disallowGroupToHierarchicalVo in interface GroupsManagerBl

Parameters:

sess - perun session

group - group

vo - parent vo

Throws:

RelationNotExistsException - if group is not allowed to be included in parent vo

expireMemberInGroup

public void expireMemberInGroup(PerunSession sess,
 Member member,
 Group group)

Description copied from interface: GroupsManagerBl

Set member's status in given group to EXPIRED

Specified by:

expireMemberInGroup in interface GroupsManagerBl

Parameters:

sess - perun session

member - member whose status will be changed

group - group in which given member will be expired

extendMembershipInGroup

public void extendMembershipInGroup(PerunSession sess,
 Member member,
 Group group)
                             throws ExtendMembershipException

Description copied from interface: GroupsManagerBl

Extend member membership in given group using membershipExpirationRules attribute defined in Group.

Specified by:

extendMembershipInGroup in interface GroupsManagerBl

Parameters:

sess - session

member - member

group - group

Throws:

ExtendMembershipException - extend membership exception

filterMembersByMembershipTypeInGroup

public List<Member> filterMembersByMembershipTypeInGroup(List<Member> members)

Description copied from interface: GroupsManagerBl

This method take list of members (also with duplicit) and: 1] add all members with direct membership to target list 2] add all members with indirect membership who are not already in target list to the target list

Specified by:

filterMembersByMembershipTypeInGroup in interface GroupsManagerBl

Parameters:

members - list of members to filtering

Returns:

filteredMembers list of members without duplicit after filtering

filterOnlyAllowedAttributes

public RichGroup filterOnlyAllowedAttributes(PerunSession sess,
 RichGroup richGroup)

Description copied from interface: GroupsManagerBl

For richGroup filter all his group attributes and remove all which principal has no access to.

Specified by:

filterOnlyAllowedAttributes in interface GroupsManagerBl

Returns:

richGroup with only allowed attributes

filterOnlyAllowedAttributes

public List<RichGroup> filterOnlyAllowedAttributes(PerunSession sess,
 List<RichGroup> richGroups)

Description copied from interface: GroupsManagerBl

For list of richGroups filter all their group attributes and remove all which principal has no access to.

Specified by:

filterOnlyAllowedAttributes in interface GroupsManagerBl

Returns:

list of RichGroups with only allowed attributes

filterOnlyAllowedAttributes

public List<RichGroup> filterOnlyAllowedAttributes(PerunSession sess,
 List<RichGroup> richGroups,
 Resource resource,
 boolean useContext)

Description copied from interface: GroupsManagerBl

For list of richGroups filter all their group attributes and remove all which principal has no access to. Context usage is safe even for groups from different VOs.

Context means same "combination of authz role for a group"+"attribute_urn (name)". Since privileges are resolved by roles on group and attribute type.

if useContext is true: every attribute is unique in a context of authz roles combination and its URN. So for each combination of users authz roles granted for the group, attributes with same URN has same privilege.

if useContext is false: every attribute is unique in context of group, which means every attribute for more groups need to be check separately, because for example groups can be from different vos where user has different authz (better authorization check, worse performance)

Specified by:

filterOnlyAllowedAttributes in interface GroupsManagerBl

resource - optional resource param used for context

Returns:

list of RichGroups with only allowed attributes

filterOnlyAllowedAttributes

public List<RichGroup> filterOnlyAllowedAttributes(PerunSession sess,
 List<RichGroup> richGroups,
 Member member,
 Resource resource,
 boolean useContext)

Description copied from interface: GroupsManagerBl

For list of richGroups filter all their group attributes and remove all which principal has no access to. Context usage is safe even for groups from different VOs.

Context means same "combination of authz role for a group"+"attribute_urn (name)". Since privileges are resolved by roles on group and attribute type.

if useContext is true: every attribute is unique in a context of authz roles combination and its URN. So for each combination of users authz roles granted for the group, attributes with same URN has same privilege.

if useContext is false: every attribute is unique in context of group, which means every attribute for more groups need to be check separately, because for example groups can be from different vos where user has different authz (better authorization check, worse performance)

Specified by:

filterOnlyAllowedAttributes in interface GroupsManagerBl

member - optional member param used for context

resource - optional resource param used for context

Returns:

list of RichGroups with only allowed attributes

filterOnlyAllowedAttributes

public EnrichedGroup filterOnlyAllowedAttributes(PerunSession sess,
 EnrichedGroup enrichedGroup)

Description copied from interface: GroupsManagerBl

For enrichedGroup filter all its group attributes and remove all which principal has no access to.

Specified by:

filterOnlyAllowedAttributes in interface GroupsManagerBl

Returns:

enrichedGroup with only allowed attributes

forceAllSubGroupsSynchronization

public void forceAllSubGroupsSynchronization(PerunSession sess,
 Group group)

Description copied from interface: GroupsManagerBl

Force synchronization for all subgroups (recursively - whole tree) of the group (useful for group structure)

Specified by:

forceAllSubGroupsSynchronization in interface GroupsManagerBl

group - the group where all its subgroups will be forced to synchronize

forceGroupStructureSynchronization

public void forceGroupStructureSynchronization(PerunSession sess,
 Group group)
                                        throws GroupStructureSynchronizationAlreadyRunningException

Description copied from interface: GroupsManagerBl

Synchronize the group structure with an external group structure. It checks if the synchronization of the same group is already in progress.

Specified by:

forceGroupStructureSynchronization in interface GroupsManagerBl

group - the group to be forced this way

Throws:

GroupStructureSynchronizationAlreadyRunningException

forceGroupSynchronization

public void forceGroupSynchronization(PerunSession sess,
 Group group)
                               throws GroupSynchronizationAlreadyRunningException,
GroupSynchronizationNotEnabledException

Description copied from interface: GroupsManagerBl

Synchronize the group with external group. It checks if the synchronization of the same group is already in progress.

Specified by:

forceGroupSynchronization in interface GroupsManagerBl

Throws:

GroupSynchronizationAlreadyRunningException - when synchronization for the group is already running

GroupSynchronizationNotEnabledException - when group doesn't have synchronization enabled

getActiveGroupMembers

public List<Member> getActiveGroupMembers(PerunSession sess,
 Group group)

Description copied from interface: GroupsManagerBl

Return all members of the group who are active (valid) in the group.

Do not return expired members of the group.

Specified by:

getActiveGroupMembers in interface GroupsManagerBl

Parameters:

sess - perun session

group - to get members from

Returns:

list of active (valid) members

getActiveGroupMembers

public List<Member> getActiveGroupMembers(PerunSession sess,
 Group group,
 Status status)

Description copied from interface: GroupsManagerBl

Return all members of the group who are active (valid) in the group and have specific status in the Vo.

Do not return expired members of the group.

Specified by:

getActiveGroupMembers in interface GroupsManagerBl

Parameters:

sess - perun session

group - to get members from

status - to get only members with this specific status in the Vo

Returns:

list of active (valid) members with specific status in the Vo

getAdminGroups

public List<Group> getAdminGroups(PerunSession sess,
 Group group)

Description copied from interface: GroupsManagerBl

Gets list of all group administrators of this group.

Specified by:

getAdminGroups in interface GroupsManagerBl

Returns:

list of group administrators

getAdmins

public List<User> getAdmins(PerunSession perunSession,
 Group group,
 boolean onlyDirectAdmins)

Description copied from interface: GroupsManagerBl

Gets list of all administrators of this group. If some group is administrator of the given group, all VALID members are included in the list.

If onlyDirectAdmins is true, return only direct users of the group for supported role.

Supported roles: GroupAdmin

Specified by:

getAdmins in interface GroupsManagerBl

onlyDirectAdmins - if true, get only direct user administrators (if false, get both direct and indirect)

Returns:

list of all user administrators of the given group for supported role

getAdmins

@Deprecated
public List<User> getAdmins(PerunSession sess,
 Group group)

Deprecated.

Description copied from interface: GroupsManagerBl

Gets list of all user administrators of this group. If some group is administrator of the given group, all members are included in the list.

Specified by:

getAdmins in interface GroupsManagerBl

Returns:

list of administrators

getAllAllowedGroupsToHierarchicalVo

public List<Group> getAllAllowedGroupsToHierarchicalVo(PerunSession sess,
 Vo vo)

Description copied from interface: GroupsManagerBl

Returns all groups which can be included to VO.

Specified by:

getAllAllowedGroupsToHierarchicalVo in interface GroupsManagerBl

Parameters:

sess - session

vo - VO

Returns:

list of allowed groups to hierarchical VO

getAllAllowedGroupsToHierarchicalVo

public List<Group> getAllAllowedGroupsToHierarchicalVo(PerunSession sess,
 Vo vo,
 Vo memberVo)

Description copied from interface: GroupsManagerBl

Returns groups which can be included to VO from specific member VO.

Specified by:

getAllAllowedGroupsToHierarchicalVo in interface GroupsManagerBl

Parameters:

sess - session

vo - parent VO

memberVo - member VO

Returns:

list of allowed groups to hierarchical VO

getAllGroups

public List<Group> getAllGroups(PerunSession sess)

Description copied from interface: GroupsManagerBl

Get all groups from all vos.

Specified by:

getAllGroups in interface GroupsManagerBl

Parameters:

sess - session

Returns:

list of all groups

getAllGroups

public List<Group> getAllGroups(PerunSession sess,
 Vo vo)

Description copied from interface: GroupsManagerBl

Get all groups of the VO.

Specified by:

getAllGroups in interface GroupsManagerBl

Returns:

list of groups

getAllGroupsForAutoRegistration

public List<Group> getAllGroupsForAutoRegistration(PerunSession sess)

Description copied from interface: GroupsManagerBl

Returns all groups which can be registered into during any vo registration. This method serves only for migration to new functionality related to the new table.

Specified by:

getAllGroupsForAutoRegistration in interface GroupsManagerBl

Parameters:

sess - session

Returns:

list of groups

getAllGroupsWhereMemberIsActive

public List<Group> getAllGroupsWhereMemberIsActive(PerunSession sess,
 Member member)

Description copied from interface: GroupsManagerBl

Returns all member's groups where member is in active state (is valid there) Included members group.

Specified by:

getAllGroupsWhereMemberIsActive in interface GroupsManagerBl

Parameters:

sess - perun session

member - member to get groups for

Returns:

list of groups where member is in active state (valid)

getAllGroupsWithHierarchy

public Map<Group,Object> getAllGroupsWithHierarchy(PerunSession sess,
 Vo vo)

Description copied from interface: GroupsManagerBl

Get all groups of the VO stored in the map reflecting the hierarchy.

Specified by:

getAllGroupsWithHierarchy in interface GroupsManagerBl

Returns:

map of the groups hierarchically organized

getAllMemberGroups

public List<Group> getAllMemberGroups(PerunSession sess,
 Member member)

Description copied from interface: GroupsManagerBl

Return all member's groups. Included members and administrators groups.

Specified by:

getAllMemberGroups in interface GroupsManagerBl

Returns:

getAllRichGroupsWithAttributesByNames

@Deprecated
public List<RichGroup> getAllRichGroupsWithAttributesByNames(PerunSession sess,
 Vo vo,
 List<String> attrNames)

Deprecated.

Description copied from interface: GroupsManagerBl

Returns all RichGroups containing selected attributes

Specified by:

getAllRichGroupsWithAttributesByNames in interface GroupsManagerBl

attrNames - if attrNames is null method will return RichGroups containing all attributes

Returns:

List of RichGroups

getAllRichGroupsWithAttributesByNames

public List<RichGroup> getAllRichGroupsWithAttributesByNames(PerunSession sess,
 Vo vo,
 List<String> attrNames,
 List<String> roles,
 List<RoleAssignmentType> types)

Description copied from interface: GroupsManagerBl

Returns all RichGroups containing selected attributes filtered by role and its type

Specified by:

getAllRichGroupsWithAttributesByNames in interface GroupsManagerBl

Parameters:

sess - perun session

vo - vo

attrNames - if attrNames is null method will return RichGroups containing all attributes

roles - list of selected roles (if empty, then return groups by all roles)

types - list of selected types of roles (if empty, then return by roles of all types)

Returns:

List of RichGroups

getAllRichSubGroupsWithAttributesByNames

@Deprecated
public List<RichGroup> getAllRichSubGroupsWithAttributesByNames(PerunSession sess,
 Group parentGroup,
 List<String> attrNames)

Deprecated.

Description copied from interface: GroupsManagerBl

Returns all RichSubGroups from parentGroup containing selected attributes (all levels subgroups)

Specified by:

getAllRichSubGroupsWithAttributesByNames in interface GroupsManagerBl

attrNames - if attrNames is null method will return RichGroups containing all attributes

Returns:

List of RichGroups

getAllRichSubGroupsWithAttributesByNames

public List<RichGroup> getAllRichSubGroupsWithAttributesByNames(PerunSession sess,
 Group parentGroup,
 List<String> attrNames,
 List<String> roles,
 List<RoleAssignmentType> types)

Description copied from interface: GroupsManagerBl

Returns all RichSubGroups from parentGroup containing selected attributes filtered by role and its type (all levels subgroups)

Specified by:

getAllRichSubGroupsWithAttributesByNames in interface GroupsManagerBl

attrNames - if attrNames is null method will return RichGroups containing all attributes

roles - list of selected roles (if empty, then return groups by all roles)

types - list of selected types of roles (if empty, then return by roles of all types)

Returns:

List of RichGroups

getAllSubGroups

public List<Group> getAllSubGroups(PerunSession sess,
 Group parentGroup)

Description copied from interface: GroupsManagerBl

Get all subgroups of the parentGroup recursively. (parentGroup subgroups, their subgroups etc...)

Specified by:

getAllSubGroups in interface GroupsManagerBl

parentGroup - parent group

Returns:

list of groups

getAssignedGroupsToFacility

public List<Group> getAssignedGroupsToFacility(PerunSession sess,
 Facility facility)

Description copied from interface: GroupsManagerBl

Return list of assigned groups on all facility resources (without subgroups unless they are assigned too)

Specified by:

getAssignedGroupsToFacility in interface GroupsManagerBl

Returns:

list of groups, which are assigned on all facility resources

getAssignedGroupsToResource

public List<Group> getAssignedGroupsToResource(PerunSession sess,
 Resource resource)

Description copied from interface: GroupsManagerBl

Return list of assigned groups on the resource (without subgroups unless they are assigned too)

Specified by:

getAssignedGroupsToResource in interface GroupsManagerBl

Returns:

list of groups, which are assigned on the resource

getAssignedGroupsToResource

public List<Group> getAssignedGroupsToResource(PerunSession sess,
 Resource resource,
 Member member)

Description copied from interface: GroupsManagerBl

Return list of assigned groups on the resource (without subgroups unless they are assigned too), which contain specific member

Specified by:

getAssignedGroupsToResource in interface GroupsManagerBl

Returns:

list of groups, which are assigned on the resource and contain specific member

getAssignedGroupsToResource

public List<Group> getAssignedGroupsToResource(PerunSession sess,
 Resource resource,
 boolean withSubGroups)

Description copied from interface: GroupsManagerBl

Return list of assigned groups on the resource.

Specified by:

getAssignedGroupsToResource in interface GroupsManagerBl

withSubGroups - if true returns also all subgroups of assigned groups

Returns:

list of groups, which are assigned on the resource

getAssociatedGroupsToFacility

public List<Group> getAssociatedGroupsToFacility(PerunSession sess,
 Facility facility)

Description copied from interface: GroupsManagerBl

Return list of all associated groups from all facility resources (does not require ACTIVE group-resource status)

Specified by:

getAssociatedGroupsToFacility in interface GroupsManagerBl

Returns:

list of groups, which are associated with all facility resources

getAssociatedGroupsToResource

public List<Group> getAssociatedGroupsToResource(PerunSession sess,
 Resource resource,
 Member member)

Description copied from interface: GroupsManagerBl

Return list of groups associated with the resource with specified member. Does not require ACTIVE group-resource status.

Specified by:

getAssociatedGroupsToResource in interface GroupsManagerBl

Returns:

list of groups, which are associated with the resource with specified member

getAssociatedGroupsToResource

public List<Group> getAssociatedGroupsToResource(PerunSession sess,
 Resource resource)

Description copied from interface: GroupsManagerBl

Return list of assigned groups on the resource. Similar to assigned groups, but does not require ACTIVE group-resource status.

Specified by:

getAssociatedGroupsToResource in interface GroupsManagerBl

Returns:

list of groups, which are associated with the resource

getDirectAdmins

@Deprecated
public List<User> getDirectAdmins(PerunSession sess,
 Group group)

Deprecated.

Description copied from interface: GroupsManagerBl

Gets list of direct user administrators of this group. 'Direct' means, there aren't included users, who are members of group administrators, in the returned list.

Specified by:

getDirectAdmins in interface GroupsManagerBl

Returns:

list of direct administrators

getDirectMemberGroupStatus

public MemberGroupStatus getDirectMemberGroupStatus(PerunSession session,
 Member member,
 Group group)

Description copied from interface: GroupsManagerBl

Returns members direct status in given group. This method doesn't calculate status from subgroups! If there is no relation, null is returned.

Specified by:

getDirectMemberGroupStatus in interface GroupsManagerBl

Parameters:

session - session

member - member

group - group

Returns:

status of member in given group

getDirectRichAdmins

@Deprecated
public List<RichUser> getDirectRichAdmins(PerunSession perunSession,
 Group group)

Deprecated.

Description copied from interface: GroupsManagerBl

Gets list of all administrators of this group, which are assigned directly, like RichUsers without attributes.

Specified by:

getDirectRichAdmins in interface GroupsManagerBl

getDirectRichAdminsWithSpecificAttributes

@Deprecated
public List<RichUser> getDirectRichAdminsWithSpecificAttributes(PerunSession perunSession,
 Group group,
 List<String> specificAttributes)

Deprecated.

Description copied from interface: GroupsManagerBl

Get list of Group administrators, which are directly assigned (not by group membership) with specific attributes. From list of specificAttributes get all Users Attributes and find those for every RichAdmin (only, other attributes are not searched)

Specified by:

getDirectRichAdminsWithSpecificAttributes in interface GroupsManagerBl

Returns:

list of RichUsers with specific attributes.

getFacilitiesWhereGroupIsAdmin

public List<Facility> getFacilitiesWhereGroupIsAdmin(PerunSession perunSession,
 Group group)

Description copied from interface: GroupsManagerBl

Get list of facilities where the given group is given the admin role.

Specified by:

getFacilitiesWhereGroupIsAdmin in interface GroupsManagerBl

group - with the admin role.

Returns:

List of administered facilities.

getGroupById

public Group getGroupById(PerunSession sess,
 int id)
                   throws GroupNotExistsException

Description copied from interface: GroupsManagerBl

Search for the group with specified id in all VOs.

Specified by:

getGroupById in interface GroupsManagerBl

Returns:

group with specified id or throws

Throws:

GroupNotExistsException

getGroupByName

public Group getGroupByName(PerunSession sess,
 Vo vo,
 String name)
                     throws GroupNotExistsException

Description copied from interface: GroupsManagerBl

Search for the group with specified name in specified VO.

IMPORTANT: need to use full name of group (ex. 'toplevel:a:b', not the shortname which is in this example 'b')

Specified by:

getGroupByName in interface GroupsManagerBl

Returns:

group with specified name or throws in specified VO

Throws:

GroupNotExistsException

getGroupDirectMembers

public List<Member> getGroupDirectMembers(PerunSession sess,
 Group group)

Description copied from interface: GroupsManagerBl

Return all direct group members.

Specified by:

getGroupDirectMembers in interface GroupsManagerBl

Parameters:

sess - perun session

group - group

Returns:

list of direct members

getGroupDirectMembersCount

public int getGroupDirectMembersCount(PerunSession sess,
 Group group)

Description copied from interface: GroupsManagerBl

Returns count of direct members in the group

Specified by:

getGroupDirectMembersCount in interface GroupsManagerBl

Returns:

count

getGroupDirectRichMembers

public List<RichMember> getGroupDirectRichMembers(PerunSession sess,
 Group group)

Description copied from interface: GroupsManagerBl

Returns direct group members in the RichMember object, which contains Member+User data.

Specified by:

getGroupDirectRichMembers in interface GroupsManagerBl

Parameters:

sess - session

group - group

Returns:

list of direct RichMembers

getGroupMemberById

public Member getGroupMemberById(PerunSession sess,
 Group group,
 int memberId)
                          throws NotGroupMemberException

Description copied from interface: GroupsManagerBl

Get group member by member ID.

Specified by:

getGroupMemberById in interface GroupsManagerBl

Returns:

Member

Throws:

NotGroupMemberException

getGroupMembers

public List<Member> getGroupMembers(PerunSession sess,
 Group group)

Description copied from interface: GroupsManagerBl

Return all group members.

Specified by:

getGroupMembers in interface GroupsManagerBl

Returns:

list of users or empty list if the group is empty

getGroupMembers

public List<Member> getGroupMembers(PerunSession sess,
 Group group,
 MemberGroupStatus statusInGroup,
 Status status)

Description copied from interface: GroupsManagerBl

Return all members of the group who has specific status in the group and also specific status in the Vo.

For example: All members with valid status in the Vo and also valid status in the group.

Specified by:

getGroupMembers in interface GroupsManagerBl

Parameters:

sess - perun session

group - to get members from

statusInGroup - to get only members with this specific status in the group

status - to get only members with this specific status in the Vo

Returns:

list of members with specific status in group and specific status in the Vo

getGroupMembers

public List<Member> getGroupMembers(PerunSession sess,
 Group group,
 Status status)

Description copied from interface: GroupsManagerBl

Return group members.

Specified by:

getGroupMembers in interface GroupsManagerBl

Returns:

list users or empty list if there are no users on specified page

getGroupMembersCount

public int getGroupMembersCount(PerunSession sess,
 Group group)

Specified by:

getGroupMembersCount in interface GroupsManagerBl

Returns:

count of members of specified group

getGroupMembersCountsByGroupStatus

public Map<MemberGroupStatus,Integer> getGroupMembersCountsByGroupStatus(PerunSession sess,
 Group group)

Description copied from interface: GroupsManagerBl

Returns counts of group members by their group status.

Specified by:

getGroupMembersCountsByGroupStatus in interface GroupsManagerBl

Returns:

map of member status in group to count of group members with the status

getGroupMembersCountsByVoStatus

public Map<Status,Integer> getGroupMembersCountsByVoStatus(PerunSession sess,
 Group group)

Description copied from interface: GroupsManagerBl

Returns counts of group members by their status in VO.

Specified by:

getGroupMembersCountsByVoStatus in interface GroupsManagerBl

Returns:

map of member status in VO to count of group members with the status

getGroupMembersExceptInvalid

public List<Member> getGroupMembersExceptInvalid(PerunSession sess,
 Group group)

Description copied from interface: GroupsManagerBl

Return only valid, suspended, expired and disabled group members.

Specified by:

getGroupMembersExceptInvalid in interface GroupsManagerBl

Returns:

list members or empty list if there are no such members

getGroupMembersExceptInvalidAndDisabled

public List<Member> getGroupMembersExceptInvalidAndDisabled(PerunSession sess,
 Group group)

Description copied from interface: GroupsManagerBl

Return only valid, suspended and expired group members.

Specified by:

getGroupMembersExceptInvalidAndDisabled in interface GroupsManagerBl

Returns:

list members or empty list if there are no such members

getGroupResourcePairsByAttribute

public List<Pair<Group,Resource>> getGroupResourcePairsByAttribute(PerunSession sess,
 Attribute attribute)
                                                            throws WrongAttributeAssignmentException

Description copied from interface: GroupsManagerBl

Returns all group-resource which have set the attribute with the value. Searching only def and opt attributes.

Specified by:

getGroupResourcePairsByAttribute in interface GroupsManagerBl

Returns:

Throws:

WrongAttributeAssignmentException

getGroupRichMembers

public List<RichMember> getGroupRichMembers(PerunSession sess,
 Group group)

Description copied from interface: GroupsManagerBl

Returns group members in the RichMember object, which contains Member+User data.

Specified by:

getGroupRichMembers in interface GroupsManagerBl

Returns:

list of RichMembers

getGroupRichMembers

public List<RichMember> getGroupRichMembers(PerunSession sess,
 Group group,
 Status status)

Description copied from interface: GroupsManagerBl

Returns group members in the RichMember object, which contains Member+User data.

Specified by:

getGroupRichMembers in interface GroupsManagerBl

Returns:

list of RichMembers

getGroupRichMembersExceptInvalid

public List<RichMember> getGroupRichMembersExceptInvalid(PerunSession sess,
 Group group)

Description copied from interface: GroupsManagerBl

Returns only valid, suspended and expired group members in the RichMember object, which contains Member+User data.

Specified by:

getGroupRichMembersExceptInvalid in interface GroupsManagerBl

Returns:

list of RichMembers

getGroupRichMembersWithAttributes

public List<RichMember> getGroupRichMembersWithAttributes(PerunSession sess,
 Group group)

Description copied from interface: GroupsManagerBl

Returns group members in the RichMember object, which contains Member+User data. Also contains user and member attributes.

Specified by:

getGroupRichMembersWithAttributes in interface GroupsManagerBl

Returns:

list of RichMembers

getGroupRichMembersWithAttributes

public List<RichMember> getGroupRichMembersWithAttributes(PerunSession sess,
 Group group,
 Status status)

Description copied from interface: GroupsManagerBl

Returns group members in the RichMember object, which contains Member+User data. Also contains user and member attributes.

Specified by:

getGroupRichMembersWithAttributes in interface GroupsManagerBl

Returns:

list of RichMembers

getGroupRichMembersWithAttributesExceptInvalid

public List<RichMember> getGroupRichMembersWithAttributesExceptInvalid(PerunSession sess,
 Group group)

Description copied from interface: GroupsManagerBl

Returns only valid, suspended and expired group members in the RichMember object, which contains Member+User data. Also contains user and member attributes.

Specified by:

getGroupRichMembersWithAttributesExceptInvalid in interface GroupsManagerBl

Returns:

list of RichMembers

getGroupUnions

public List<Group> getGroupUnions(PerunSession session,
 Group group,
 boolean reverseDirection)

Description copied from interface: GroupsManagerBl

Get list of group unions for specified group.

Specified by:

getGroupUnions in interface GroupsManagerBl

Parameters:

session - perun session

group - group

reverseDirection - if false get all operand groups of requested result group if true get all result groups of requested operand group

Returns:

list of groups.

getGroupUsers

public List<User> getGroupUsers(PerunSession perunSession,
 Group group)

Description copied from interface: GroupsManagerBl

Return group users sorted by name.

Specified by:

getGroupUsers in interface GroupsManagerBl

Returns:

list users sorted or empty list if there are no users on specified page

getGroups

public List<Group> getGroups(PerunSession sess,
 Vo vo)

Description copied from interface: GroupsManagerBl

Get all groups of users under the VO.

Specified by:

getGroups in interface GroupsManagerBl

vo - vo

Returns:

list of groups

getGroupsByAttribute

public List<Group> getGroupsByAttribute(PerunSession sess,
 Attribute attribute)
                                 throws WrongAttributeAssignmentException

Description copied from interface: GroupsManagerBl

Returns all groups which have set the attribute with the value. Searching only def and opt attributes.

Specified by:

getGroupsByAttribute in interface GroupsManagerBl

Returns:

list of groups

Throws:

WrongAttributeAssignmentException

getGroupsByIds

public List<Group> getGroupsByIds(PerunSession sess,
 List<Integer> ids)

Description copied from interface: GroupsManagerBl

Search for the groups with specified ids in all VOs.

Specified by:

getGroupsByIds in interface GroupsManagerBl

Returns:

groups with specified ids

getGroupsByPerunBean

public List<Group> getGroupsByPerunBean(PerunSession sess,
 Member member)

Description copied from interface: GroupsManagerBl

Returns list of groups connected with a member

Specified by:

getGroupsByPerunBean in interface GroupsManagerBl

Returns:

list of groups connected with member

getGroupsByPerunBean

public List<Group> getGroupsByPerunBean(PerunSession sess,
 Resource resource)

Description copied from interface: GroupsManagerBl

Returns list of groups connected with a resource

Specified by:

getGroupsByPerunBean in interface GroupsManagerBl

Returns:

list of groups connected with resource

getGroupsByPerunBean

public List<Group> getGroupsByPerunBean(PerunSession sess,
 User user)

Description copied from interface: GroupsManagerBl

Returns list of groups connected with a user

Specified by:

getGroupsByPerunBean in interface GroupsManagerBl

Returns:

list of groups connected with user

getGroupsByPerunBean

public List<Group> getGroupsByPerunBean(PerunSession sess,
 Host host)

Description copied from interface: GroupsManagerBl

Returns list of groups connected with a host

Specified by:

getGroupsByPerunBean in interface GroupsManagerBl

Returns:

list of groups connected with host

getGroupsByPerunBean

public List<Group> getGroupsByPerunBean(PerunSession sess,
 Facility facility)

Description copied from interface: GroupsManagerBl

Returns list of groups connected with a facility

Specified by:

getGroupsByPerunBean in interface GroupsManagerBl

Returns:

list of groups connected with facility

getGroupsByPerunBean

public List<Group> getGroupsByPerunBean(PerunSession sess,
 Vo vo)

Description copied from interface: GroupsManagerBl

Returns list of groups connected with a vo

Specified by:

getGroupsByPerunBean in interface GroupsManagerBl

Returns:

list of groups connected with vo

getGroupsCount

public int getGroupsCount(PerunSession sess,
 Vo vo)

Specified by:

getGroupsCount in interface GroupsManagerBl

Returns:

count of VO's groups

getGroupsCount

public int getGroupsCount(PerunSession sess)

Description copied from interface: GroupsManagerBl

Get count of all groups.

Specified by:

getGroupsCount in interface GroupsManagerBl

Returns:

count of all groups

getGroupsForAutoRegistration

public List<Group> getGroupsForAutoRegistration(PerunSession sess,
 Vo vo)

Description copied from interface: GroupsManagerBl

Returns all groups which can be registered into during vo registration.

Specified by:

getGroupsForAutoRegistration in interface GroupsManagerBl

Parameters:

sess - session

vo - vo

Returns:

list of groups

getGroupsForAutoRegistration

public List<Group> getGroupsForAutoRegistration(PerunSession sess,
 Vo vo,
 ApplicationFormItem formItem)

Description copied from interface: GroupsManagerBl

Returns all groups which can be registered into during vo registration.

Specified by:

getGroupsForAutoRegistration in interface GroupsManagerBl

Parameters:

sess - session

vo - vo

formItem - application form item

Returns:

list of groups

getGroupsForAutoRegistration

public List<Group> getGroupsForAutoRegistration(PerunSession sess,
 Group registrationGroup,
 ApplicationFormItem formItem)

Description copied from interface: GroupsManagerBl

Returns all groups which can be registered into during group registration.

Specified by:

getGroupsForAutoRegistration in interface GroupsManagerBl

Parameters:

sess - session

registrationGroup - group

formItem - application form item

Returns:

list of groups

getGroupsManagerImpl

public GroupsManagerImplApi getGroupsManagerImpl()

Gets the groupsManagerImpl for this instance.

Returns:

The groupsManagerImpl.

getGroupsPage

public Paginated<RichGroup> getGroupsPage(PerunSession sess,
 Vo vo,
 GroupsPageQuery query,
 List<String> attrNames)
                                   throws GroupNotExistsException,
MemberNotExistsException,
MemberGroupMismatchException

Description copied from interface: GroupsManagerBl

Get page of groups from the given vo.

Specified by:

getGroupsPage in interface GroupsManagerBl

Parameters:

sess - session

vo - vo

query - query with page information

attrNames - attribute names

Returns:

page of requested rich groups

Throws:

GroupNotExistsException

MemberNotExistsException

MemberGroupMismatchException

getGroupsToSynchronize

public List<Group> getGroupsToSynchronize(PerunSession sess)

Description copied from interface: GroupsManagerBl

Gets all groups which have enabled synchronization.

Specified by:

getGroupsToSynchronize in interface GroupsManagerBl

Returns:

list of groups to synchronize

getGroupsWhereGroupIsAdmin

public List<Group> getGroupsWhereGroupIsAdmin(PerunSession perunSession,
 Group group)

Description copied from interface: GroupsManagerBl

Get list of groups where the given group is given the admin role.

Specified by:

getGroupsWhereGroupIsAdmin in interface GroupsManagerBl

group - with the admin role.

Returns:

List of administered groups.

getGroupsWhereMemberIsActive

public List<Group> getGroupsWhereMemberIsActive(PerunSession sess,
 Member member)

Description copied from interface: GroupsManagerBl

Returns all member's groups where member is in active state (is valid there) Excluded members group.

Specified by:

getGroupsWhereMemberIsActive in interface GroupsManagerBl

Parameters:

sess - perun session

member - member to get groups for

Returns:

list of groups where member is in active state (valid)

getGroupsWhereMemberIsInactive

public List<Group> getGroupsWhereMemberIsInactive(PerunSession sess,
 Member member)

Description copied from interface: GroupsManagerBl

Returns all member's groups where member is in inactive state (it is not valid and it is expired there) Excluded members group.

Specified by:

getGroupsWhereMemberIsInactive in interface GroupsManagerBl

Parameters:

sess - perun session

member - member to get groups for

Returns:

list of groups where member is in inactive state (expired)

getGroupsWhereUserIsActiveMember

public List<Group> getGroupsWhereUserIsActiveMember(PerunSession sess,
 User user,
 Vo vo)

Description copied from interface: GroupsManagerBl

Returns groups in which the user is active member. Groups are looked up only for the specified VO.

Specified by:

getGroupsWhereUserIsActiveMember in interface GroupsManagerBl

Parameters:

sess - session

user - user object

vo - VO object

Returns:

List of groups

getGroupsWithAssignedExtSourceInVo

public List<Group> getGroupsWithAssignedExtSourceInVo(PerunSession sess,
 ExtSource source,
 Vo vo)

Description copied from interface: GroupsManagerBl

Get all groups in specific vo with assigned extSource

Specified by:

getGroupsWithAssignedExtSourceInVo in interface GroupsManagerBl

Returns:

l

getInactiveGroupMembers

public List<Member> getInactiveGroupMembers(PerunSession sess,
 Group group)

Description copied from interface: GroupsManagerBl

Return all members of the group who are inactive (expired) in the group.

Do not return active members of the group.

Specified by:

getInactiveGroupMembers in interface GroupsManagerBl

Parameters:

sess - perun session

group - to get members from

Returns:

list of inactive (expired) members

getInactiveGroupMembers

public List<Member> getInactiveGroupMembers(PerunSession sess,
 Group group,
 Status status)

Description copied from interface: GroupsManagerBl

Return all members of the group who are inactive (expired) in the group and have specific status in the Vo.

Do not return active members of the group.

Specified by:

getInactiveGroupMembers in interface GroupsManagerBl

Parameters:

sess - perun session

group - to get members from

status - to get only members with this specific status in the Vo

Returns:

list of inactive (expired) members with specific status in the Vo

getIndirectMembershipPaths

public List<List<Group>> getIndirectMembershipPaths(PerunSession sess,
 Member member,
 Group group)
                                             throws MemberNotExistsException,
GroupNotExistsException

Description copied from interface: GroupsManagerBl

Get unique paths of groups via which member is indirectly included to the group. Cuts off after first included group.

Specified by:

getIndirectMembershipPaths in interface GroupsManagerBl

Parameters:

sess - perun session

member - member

group - group in which the member is indirectly included

Returns:

lists of groups [CURRENT GROUP -> SUBGROUP -> ... -> MEMBER'S SOURCE GROUP]

Throws:

MemberNotExistsException

GroupNotExistsException

getMemberDirectGroups

public List<Group> getMemberDirectGroups(PerunSession sess,
 Member member)

Description copied from interface: GroupsManagerBl

Get all groups (except member groups) where member has direct membership.

Specified by:

getMemberDirectGroups in interface GroupsManagerBl

member - to get information about

Returns:

list of groups where member is direct member (not members group), empty list if there is no such group

getMemberGroups

public List<Group> getMemberGroups(PerunSession sess,
 Member member)

Description copied from interface: GroupsManagerBl

Returns all members groups. Except 'members' group.

Specified by:

getMemberGroups in interface GroupsManagerBl

Returns:

getMemberGroupsByAttribute

public List<Group> getMemberGroupsByAttribute(PerunSession sess,
 Member member,
 Attribute attribute)
                                       throws WrongAttributeAssignmentException

Description copied from interface: GroupsManagerBl

Method return list of groups for selected member which (groups) has set specific attribute. Attribute can be only from namespace "GROUP"

Specified by:

getMemberGroupsByAttribute in interface GroupsManagerBl

Parameters:

sess - sess

member - member

attribute - attribute from "GROUP" namespace

Returns:

list of groups which contain member and have attribute with same value

Throws:

WrongAttributeAssignmentException

getMemberRichGroupsWithAttributesByNames

@Deprecated
public List<RichGroup> getMemberRichGroupsWithAttributesByNames(PerunSession sess,
 Member member,
 List<String> attrNames)

Deprecated.

Description copied from interface: GroupsManagerBl

Return all RichGroups for specified member, containing selected attributes. "members" group is not included.

Supported are attributes from these namespaces: - group - member-group

Specified by:

getMemberRichGroupsWithAttributesByNames in interface GroupsManagerBl

Parameters:

sess - internal session

member - the member to get the rich groups for

attrNames - list of selected attributes

Returns:

list of rich groups with selected attributes

getMemberRichGroupsWithAttributesByNames

public List<RichGroup> getMemberRichGroupsWithAttributesByNames(PerunSession sess,
 Member member,
 List<String> attrNames,
 List<String> roles,
 List<RoleAssignmentType> types)

Description copied from interface: GroupsManagerBl

Return all RichGroups for specified member, containing selected attributes filtered by role and its type. "members" group is not included.

Supported are attributes from these namespaces: - group - member-group

Specified by:

getMemberRichGroupsWithAttributesByNames in interface GroupsManagerBl

Parameters:

sess - internal session

member - the member to get the rich groups for

attrNames - list of selected attributes

roles - list of selected roles (if empty, then return groups by all roles)

types - list of selected types of roles (if empty, then return by roles of all types)

Returns:

list of rich groups with selected attributes

getParentGroup

public Group getParentGroup(PerunSession sess,
 Group group)
                     throws ParentGroupNotExistsException

Description copied from interface: GroupsManagerBl

Get parent group. If group is topLevel group or Members group, return Members group.

Specified by:

getParentGroup in interface GroupsManagerBl

Returns:

parent group

Throws:

ParentGroupNotExistsException

getParentGroupMembers

public List<Member> getParentGroupMembers(PerunSession sess,
 Group group)

Description copied from interface: GroupsManagerBl

Get members from parent group. If the parent group doesn't exist (this is top level group) return all VO (from which the group is) members instead.

Specified by:

getParentGroupMembers in interface GroupsManagerBl

Returns:

getParentGroupRichMembers

public List<RichMember> getParentGroupRichMembers(PerunSession sess,
 Group group)

Description copied from interface: GroupsManagerBl

Get members form the parent group in RichMember format.

Specified by:

getParentGroupRichMembers in interface GroupsManagerBl

Returns:

list of parent group rich members

getParentGroupRichMembersWithAttributes

public List<RichMember> getParentGroupRichMembersWithAttributes(PerunSession sess,
 Group group)

Description copied from interface: GroupsManagerBl

Get members form the parent group in RichMember format including user/member attributes.

Specified by:

getParentGroupRichMembersWithAttributes in interface GroupsManagerBl

Returns:

list of parent group rich members

getPerunBl

public PerunBl getPerunBl()

Gets the perunBl.

Returns:

The perunBl.

getRichAdmins

public List<RichUser> getRichAdmins(PerunSession perunSession,
 Group group,
 List<String> specificAttributes,
 boolean allUserAttributes,
 boolean onlyDirectAdmins)
                             throws UserNotExistsException

Description copied from interface: GroupsManagerBl

Gets list of all richUser administrators of this group. If some group is administrator of the given group, all VALID members are included in the list.

Supported roles: GroupAdmin

If "onlyDirectAdmins" is "true", return only direct users of the group for supported role with specific attributes. If "allUserAttributes" is "true", do not specify attributes through list and return them all in objects richUser . Ignoring list of specific attributes.

Specified by:

getRichAdmins in interface GroupsManagerBl

specificAttributes - list of specified attributes which are needed in object richUser

allUserAttributes - if true, get all possible user attributes and ignore list of specificAttributes (if false, get only specific attributes)

onlyDirectAdmins - if true, get only direct user administrators (if false, get both direct and indirect)

Returns:

list of RichUser administrators for the group and supported role with attributes

Throws:

UserNotExistsException

getRichAdmins

@Deprecated
public List<RichUser> getRichAdmins(PerunSession perunSession,
 Group group)

Deprecated.

Description copied from interface: GroupsManagerBl

Gets list of all administrators of this group like RichUsers without attributes.

Specified by:

getRichAdmins in interface GroupsManagerBl

getRichAdminsWithAttributes

@Deprecated
public List<RichUser> getRichAdminsWithAttributes(PerunSession perunSession,
 Group group)
                                           throws UserNotExistsException

Deprecated.

Description copied from interface: GroupsManagerBl

Gets list of all administrators of this group like RichUsers with attributes.

Specified by:

getRichAdminsWithAttributes in interface GroupsManagerBl

Throws:

UserNotExistsException

getRichAdminsWithSpecificAttributes

@Deprecated
public List<RichUser> getRichAdminsWithSpecificAttributes(PerunSession perunSession,
 Group group,
 List<String> specificAttributes)

Deprecated.

Description copied from interface: GroupsManagerBl

Get list of Group administrators with specific attributes. From list of specificAttributes get all Users Attributes and find those for every RichAdmin (only, other attributes are not searched)

Specified by:

getRichAdminsWithSpecificAttributes in interface GroupsManagerBl

Returns:

list of RichUsers with specific attributes.

getRichGroupByIdWithAttributesByNames

public RichGroup getRichGroupByIdWithAttributesByNames(PerunSession sess,
 int groupId,
 List<String> attrNames)
                                                throws GroupNotExistsException

Description copied from interface: GroupsManagerBl

Returns RichGroup selected by id containing selected attributes

Specified by:

getRichGroupByIdWithAttributesByNames in interface GroupsManagerBl

attrNames - if attrNames is null method will return RichGroup containing all attributes

Returns:

RichGroup

Throws:

GroupNotExistsException

getRichGroupsWithAttributesAssignedToResource

public List<RichGroup> getRichGroupsWithAttributesAssignedToResource(PerunSession sess,
 Resource resource,
 List<String> attrNames)

Description copied from interface: GroupsManagerBl

Get all RichGroups with selected attributes assigned to the resource.

Specified by:

getRichGroupsWithAttributesAssignedToResource in interface GroupsManagerBl

resource - the resource to get assigned groups from it

attrNames - list of selected attribute names, if it is null, return all possible non-empty attributes, empty list in attrNames means - no attributes needed

Returns:

list of RichGroups with selected attributes assigned to the resource

getRichGroupsWithAttributesAssignedToResource

public List<RichGroup> getRichGroupsWithAttributesAssignedToResource(PerunSession sess,
 Member member,
 Resource resource,
 List<String> attrNames)

Description copied from interface: GroupsManagerBl

Get list of all richGroups with selected attributes assigned to the resource filtered by specific member. Allowed namespaces of attributes are group, group-resource, member-group and member-resource.

Last step is filtration of attributes: Attributes are filtered by rights of user in session. User get only those selected attributes he has rights to read.

Specified by:

getRichGroupsWithAttributesAssignedToResource in interface GroupsManagerBl

member - member used for filtering returned groups (groups have to contain this member to be returned)

resource - resource to get assigned groups for

attrNames - list of selected attribute names, if it is null, return all possible non-empty attributes, empty list in attrNames means - no attributes needed

Returns:

list of RichGroup objects with specific attributes specified by object Resource and object Member

getRichSubGroupsWithAttributesByNames

public List<RichGroup> getRichSubGroupsWithAttributesByNames(PerunSession sess,
 Group parentGroup,
 List<String> attrNames)

Description copied from interface: GroupsManagerBl

Returns RichSubGroups from parentGroup containing selected attributes (only 1 level subgroups)

Specified by:

getRichSubGroupsWithAttributesByNames in interface GroupsManagerBl

attrNames - if attrNames is null method will return RichGroups containing all attributes

Returns:

List of RichGroups

getServiceGroupMembers

public List<Member> getServiceGroupMembers(PerunSession sess,
 Group group)

Description copied from interface: GroupsManagerBl

Return a list of all group members, who are service users

Specified by:

getServiceGroupMembers in interface GroupsManagerBl

Returns:

list of Members from given group who are service users

getSubGroups

public List<Group> getSubGroups(PerunSession sess,
 Group parentGroup)

Description copied from interface: GroupsManagerBl

Get all subgroups of the parent group under the VO.

Specified by:

getSubGroups in interface GroupsManagerBl

parentGroup - parent group

Returns:

list of groups

getSubGroupsCount

public int getSubGroupsCount(PerunSession sess,
 Group parentGroup)

Description copied from interface: GroupsManagerBl

Returns number of immediate subgroups of the parent group.

Specified by:

getSubGroupsCount in interface GroupsManagerBl

Returns:

count of parent group immediate subgroups

getSubgroupsPage

public Paginated<RichGroup> getSubgroupsPage(PerunSession sess,
 Group group,
 GroupsPageQuery query,
 List<String> attrNames)

Description copied from interface: GroupsManagerBl

Get page of subgroups from the given parent group.

Specified by:

getSubgroupsPage in interface GroupsManagerBl

Parameters:

sess - session

group - parent group

query - query with page information

attrNames - attribute names

Returns:

page of requested rich groups

getTotalGroupStatusForMembers

public Map<Integer,MemberGroupStatus> getTotalGroupStatusForMembers(PerunSession session,
 Group group,
 List<Member> members)

Description copied from interface: GroupsManagerBl

Returns total member's status of given members in given group.

Specified by:

getTotalGroupStatusForMembers in interface GroupsManagerBl

Parameters:

session - session

group - group

members - members

Returns:

total status of members in given group

getTotalMemberGroupStatus

public MemberGroupStatus getTotalMemberGroupStatus(PerunSession session,
 Member member,
 Group group)

Description copied from interface: GroupsManagerBl

Returns total member's status in given group. If there is no relation, null is returned.

Specified by:

getTotalMemberGroupStatus in interface GroupsManagerBl

Parameters:

session - session

member - member

group - group

Returns:

total status of member in given group

getUserGroups

public List<Group> getUserGroups(PerunSession perunSession,
 User user)

Description copied from interface: GroupsManagerBl

Return groups where user is member.

Specified by:

getUserGroups in interface GroupsManagerBl

Returns:

list of groups

getUserGroups

public List<Group> getUserGroups(PerunSession perunSession,
 User user,
 List<Status> memberStatuses,
 List<MemberGroupStatus> memberGroupStatuses)

Description copied from interface: GroupsManagerBl

Return groups where user is member with allowed statuses in vo and group. If statuses are empty or null, all statuses are used.

Specified by:

getUserGroups in interface GroupsManagerBl

memberStatuses - allowed statuses of member in VO

memberGroupStatuses - allowed statuses of member in group

Returns:

list of groups

getVo

public Vo getVo(PerunSession sess,
 Group group)

Description copied from interface: GroupsManagerBl

Gets the Vo which is owner of the group.

Specified by:

getVo in interface GroupsManagerBl

Returns:

Vo which is owner of the group.

getVosWhereGroupIsAdmin

public List<Vo> getVosWhereGroupIsAdmin(PerunSession perunSession,
 Group group)

Description copied from interface: GroupsManagerBl

Get list of VOs where the given group is given the admin role.

Specified by:

getVosWhereGroupIsAdmin in interface GroupsManagerBl

group - with the admin role.

Returns:

List of administered VOs.

hasCandidateExistingMember

protected boolean hasCandidateExistingMember(Candidate candidate,
 RichMember richMember)

Compare richMember userExtSources with Candidate's userExtSources, if some of the useExtSource fits.

Parameters:

richMember -

candidate -

Returns:

true if richMember.userExtSources contains some of the candidate.useExtSource

hasGroupSynchronizedChild

public boolean hasGroupSynchronizedChild(PerunSession session,
 Group group)

Description copied from interface: GroupsManagerBl

Check if there is a subgroup of the group, which is defined as synchronized from an external source at this moment.

Specified by:

hasGroupSynchronizedChild in interface GroupsManagerBl

Returns:

inactivateMember

public void inactivateMember(PerunSession sess,
 Member member,
 Group group)
                      throws MemberNotExistsException

Description copied from interface: GroupsManagerBl

Inactivates member in group and sets its status to EXPIRED.

Specified by:

inactivateMember in interface GroupsManagerBl

Parameters:

sess - perun session

member - member

group - group

Throws:

MemberNotExistsException - if given member is not direct member of given group

isAllowedGroupToHierarchicalVo

public boolean isAllowedGroupToHierarchicalVo(PerunSession sess,
 Group group,
 Vo vo)

Description copied from interface: GroupsManagerBl

Returns flag representing if the group can be included in the (parent) vo's groups

Specified by:

isAllowedGroupToHierarchicalVo in interface GroupsManagerBl

Parameters:

sess - perun session

group - group

vo - parent vo

Returns:

true if group can be included in vo's groups, false otherwise

isDirectGroupMember

public boolean isDirectGroupMember(PerunSession sess,
 Group group,
 Member member)

Description copied from interface: GroupsManagerBl

Return true if Member is direct member of the Group

Specified by:

isDirectGroupMember in interface GroupsManagerBl

Parameters:

sess - session

group - group where the membership is to be checked

member - member whose membership is to be checked

Returns:

true if Member is direct member of the Group

isGroupForAnyAutoRegistration

public boolean isGroupForAnyAutoRegistration(PerunSession sess,
 Group group)

Description copied from interface: GroupsManagerBl

Check if group has automatic registration enabled in any form item.

Specified by:

isGroupForAnyAutoRegistration in interface GroupsManagerBl

Parameters:

sess - session

group - group to check

isGroupForAutoRegistration

public boolean isGroupForAutoRegistration(PerunSession sess,
 Group group,
 List<Integer> formItems)

Description copied from interface: GroupsManagerBl

Check if group has automatic registration enabled in the given form item.

Specified by:

isGroupForAutoRegistration in interface GroupsManagerBl

Parameters:

sess - session

group - group to check

formItems - form items for which the group can be configured

isGroupInStructureSynchronizationTree

public boolean isGroupInStructureSynchronizationTree(PerunSession session,
 Group group)

Description copied from interface: GroupsManagerBl

Check if the group or its subgroups are defined as synchronized from an external source at this moment.

Specified by:

isGroupInStructureSynchronizationTree in interface GroupsManagerBl

Returns:

isGroupMember

public boolean isGroupMember(PerunSession sess,
 Group group,
 Member member)

Description copied from interface: GroupsManagerBl

Return true if Member is member of the Group

Specified by:

isGroupMember in interface GroupsManagerBl

Returns:

true if Member is member of the Group

isGroupSynchronizedFromExternallSource

public boolean isGroupSynchronizedFromExternallSource(PerunSession session,
 Group group)

Description copied from interface: GroupsManagerBl

Check if the group is defined as synchronized from an external source at this moment.

Specified by:

isGroupSynchronizedFromExternallSource in interface GroupsManagerBl

Returns:

isUserMemberOfGroup

public boolean isUserMemberOfGroup(PerunSession sess,
 User user,
 Group group)

Description copied from interface: GroupsManagerBl

Checks whether the user is member of the group.

Specified by:

isUserMemberOfGroup in interface GroupsManagerBl

Returns:

true if the user is member of the group

moveGroup

public void moveGroup(PerunSession sess,
 Group destinationGroup,
 Group movingGroup)
               throws GroupMoveNotAllowedException,
WrongAttributeValueException,
WrongReferenceAttributeValueException

Description copied from interface: GroupsManagerBl

Move one group structure under another group in same vo or as top level group

Specified by:

moveGroup in interface GroupsManagerBl

Parameters:

sess - perun session

destinationGroup - group to which is moving group moved, if it's null group will be moved as top level group

movingGroup - group which is moved to destination group

Throws:

GroupMoveNotAllowedException

WrongAttributeValueException

WrongReferenceAttributeValueException

reactivateMember

public void reactivateMember(PerunSession sess,
 Member member,
 Group group)
                      throws MemberNotExistsException

Description copied from interface: GroupsManagerBl

Reactivates member in group and sets its status to VALID.

Specified by:

reactivateMember in interface GroupsManagerBl

Parameters:

sess - perun session

member - member

group - group

Throws:

MemberNotExistsException - if given member is not member of given group

recalculateMemberGroupStatusRecursively

public void recalculateMemberGroupStatusRecursively(PerunSession sess,
 Member member,
 Group group,
 Map<Integer,Map<Integer,MemberGroupStatus>> previousStatus)

Calculates the state of given member in given group and if it differs from given 'previousState' calls this method recursively for all parent groups.

Specified by:

recalculateMemberGroupStatusRecursively in interface GroupsManagerBl

Parameters:

member - member

group - group

previousStatus - previousStatus

Throws:

InternalErrorException - internal error

removeFormerMemberWhileSynchronization

public void removeFormerMemberWhileSynchronization(PerunSession sess,
 Group group,
 RichMember memberToRemove,
 boolean isAuthoritative)
                                            throws GroupNotExistsException

Remove former member from group (if he is not listed in ExtSource).

If this is membersGroup (of some Vo) try to disableMember, if not possible then delete him. If this is regular group (of some Vo) remove him and if this group is also his last authoritative group, disable or delete him also in the Vo.

This method runs in separate transaction.

Parameters:

sess - perun session

group - to be synchronized

memberToRemove - member to be removed from Group

Throws:

GroupNotExistsException - if group does not exist

removeGroupUnion

public void removeGroupUnion(PerunSession sess,
 Group resultGroup,
 Group operandGroup,
 boolean parentFlag)
                      throws GroupRelationDoesNotExist,
GroupRelationCannotBeRemoved,
GroupNotExistsException

Description copied from interface: GroupsManagerBl

Removes a union relation between two groups. All indirect members that originate from operand group are removed from result group.

Specified by:

removeGroupUnion in interface GroupsManagerBl

Parameters:

sess - perun session

resultGroup - group from which members are removed

operandGroup - group which members are removed from result group

parentFlag - if true union cannot be deleted; false otherwise (it flags relations created by hierarchical structure)

Throws:

GroupRelationDoesNotExist

GroupRelationCannotBeRemoved

GroupNotExistsException

removeMember

public void removeMember(PerunSession sess,
 Group group,
 Member member)
                  throws NotGroupMemberException,
GroupNotExistsException

Description copied from interface: GroupsManagerBl

Removes member form the group. But not from members or administrators group.

Specified by:

removeMember in interface GroupsManagerBl

Throws:

NotGroupMemberException

GroupNotExistsException

removeMember

public void removeMember(PerunSession sess,
 List<Group> groups,
 Member member)
                  throws NotGroupMemberException,
GroupNotExistsException

Description copied from interface: GroupsManagerBl

Removes member from groups. But not from members or administrators group.

Specified by:

removeMember in interface GroupsManagerBl

Throws:

NotGroupMemberException

GroupNotExistsException

removeMemberFromMembersOrAdministratorsGroup

public void removeMemberFromMembersOrAdministratorsGroup(PerunSession sess,
 Group group,
 Member member)
                                                  throws NotGroupMemberException,
GroupNotExistsException,
WrongAttributeValueException,
WrongReferenceAttributeValueException

Description copied from interface: GroupsManagerBl

Removes member from members or administrators group only.

Specified by:

removeMemberFromMembersOrAdministratorsGroup in interface GroupsManagerBl

Throws:

NotGroupMemberException

GroupNotExistsException

WrongAttributeValueException

WrongReferenceAttributeValueException

removeMembers

public void removeMembers(PerunSession sess,
 Group group,
 List<Member> members)
                   throws NotGroupMemberException,
GroupNotExistsException

Description copied from interface: GroupsManagerBl

Removes members from the group. But not from members or administrators group.

Specified by:

removeMembers in interface GroupsManagerBl

Throws:

NotGroupMemberException

GroupNotExistsException

removeRelationMembers

public void removeRelationMembers(PerunSession sess,
 Group resultGroup,
 List<Member> changedMembers,
 int sourceGroupId)
                           throws WrongReferenceAttributeValueException,
NotGroupMemberException,
WrongAttributeValueException,
GroupNotExistsException

Description copied from interface: GroupsManagerBl

Method recalculates all relations between groups. Method recursively removes members from groups and all their relations. The method is called in case of: 1) removed relation 2) removed member 3) group removal 4) group movement

Specified by:

removeRelationMembers in interface GroupsManagerBl

Parameters:

sess - perun session

resultGroup - group to which members are added or removed from

changedMembers - list of changed members which is passed as argument to add indirect members method. List contains records of removed indirect members from operand group.

sourceGroupId - id of a group from which members originate

Throws:

WrongReferenceAttributeValueException

NotGroupMemberException

WrongAttributeValueException

GroupNotExistsException

saveInformationAboutGroupStructureSynchronizationInNestedTransaction

public void saveInformationAboutGroupStructureSynchronizationInNestedTransaction(PerunSession sess,
 Group group,
 boolean failedDueToException,
 String exceptionMessage)
                                                                          throws AttributeNotExistsException,
WrongReferenceAttributeValueException,
WrongAttributeAssignmentException,
WrongAttributeValueException

Description copied from interface: GroupsManagerBl

This method will set timestamp, state and exceptionMessage to group attributes for the group structure. Also log information about failed group structure synchronization to auditer_log.

IMPORTANT: This method runs in nested transaction. With a nested transaction, this method can be used in method running in the nested transaction, where the group was changed in the database. However, rollback on the outer transaction, where this method is used, will revert saving of given information.

Set timestamp to attribute "group_def_lastGroupStructureSynchronizationTimestamp" Set exception message to attribute "group_def_lastGroupStructureSynchronizationState"

FailedDueToException is true means group structure synchronization failed completely. FailedDueToException is false means group structure synchronization is ok or finished with some errors (some groups were not synchronized)

Specified by:

saveInformationAboutGroupStructureSynchronizationInNestedTransaction in interface GroupsManagerBl

Parameters:

sess - perun session

group - the group structure for synchronization

failedDueToException - if exception means fail of whole synchronization of this group structure or only problem with some data

exceptionMessage - message of an exception, ok if everything is ok

Throws:

AttributeNotExistsException

WrongReferenceAttributeValueException

WrongAttributeAssignmentException

WrongAttributeValueException

saveInformationAboutGroupStructureSynchronizationInNewTransaction

public void saveInformationAboutGroupStructureSynchronizationInNewTransaction(PerunSession sess,
 Group group,
 boolean failedDueToException,
 String exceptionMessage)
                                                                       throws AttributeNotExistsException,
WrongReferenceAttributeValueException,
WrongAttributeAssignmentException,
WrongAttributeValueException

Description copied from interface: GroupsManagerBl

This method will set timestamp, state and exceptionMessage to group attributes for the group structure. Also log information about failed group structure synchronization to auditer_log.

IMPORTANT: This method runs in new transaction (because of it being used in synchronization of groups structures) This method is run in a new transaction to ensure successful saving of given information, in case of a rollback in previous transaction. However, this method cannot be used in method running in the nested transaction, where the group was changed in the database.

Set timestamp to attribute "group_def_lastGroupStructureSynchronizationTimestamp" Set exception message to attribute "group_def_lastGroupStructureSynchronizationState"

FailedDueToException is true means group structure synchronization failed completely. FailedDueToException is false means group structure synchronization is ok or finished with some errors (some groups were not synchronized)

Specified by:

saveInformationAboutGroupStructureSynchronizationInNewTransaction in interface GroupsManagerBl

Parameters:

sess - perun session

group - the group structure for synchronization

failedDueToException - if exception means fail of whole synchronization of this group structure or only problem with some data

exceptionMessage - message of an exception, ok if everything is ok

Throws:

AttributeNotExistsException

WrongReferenceAttributeValueException

WrongAttributeAssignmentException

WrongAttributeValueException

saveInformationAboutGroupSynchronizationInNestedTransaction

public void saveInformationAboutGroupSynchronizationInNestedTransaction(PerunSession sess,
 Group group,
 long startTime,
 boolean failedDueToException,
 String exceptionMessage)
                                                                 throws AttributeNotExistsException,
WrongReferenceAttributeValueException,
WrongAttributeAssignmentException,
WrongAttributeValueException

Description copied from interface: GroupsManagerBl

This method will set timestamp, synchronization start time and exceptionMessage to group attributes for the group. Also log information about failed synchronization to auditer_log.

IMPORTANT: This method runs in nested transaction so it can be used in another transaction With a nested transaction, this method can be used in method running in the nested transaction, where the group was changed in the database. However, rollback on the outer transaction, where this method is used, will revert saving of given information.

Set timestamp to attribute "group_def_lastSynchronizationTimestamp" Set exception message to attribute "group_def_lastSynchronizationState" Set start time to attribute "group_def_startOfLastSuccessSynchronizationTimestamp"

FailedDueToException is true means group synchronization failed completely. FailedDueToException is false means group synchronization is ok or finished with some errors (some members were not synchronized)

Specified by:

saveInformationAboutGroupSynchronizationInNestedTransaction in interface GroupsManagerBl

Parameters:

sess - perun session

group - the group for synchronization

startTime - of the synchronization

failedDueToException - if exception means fail of whole synchronization of this group or only problem with some data

exceptionMessage - message of an exception, ok if everything is ok

Throws:

AttributeNotExistsException

WrongReferenceAttributeValueException

WrongAttributeAssignmentException

WrongAttributeValueException

saveInformationAboutGroupSynchronizationInNewTransaction

public void saveInformationAboutGroupSynchronizationInNewTransaction(PerunSession sess,
 Group group,
 long startTime,
 boolean failedDueToException,
 String exceptionMessage)
                                                              throws AttributeNotExistsException,
WrongReferenceAttributeValueException,
WrongAttributeAssignmentException,
WrongAttributeValueException

Description copied from interface: GroupsManagerBl

This method will set timestamp, synchronization start time and exceptionMessage to group attributes for the group. Also log information about failed synchronization to auditer_log.

IMPORTANT: This method runs in new transaction (because of using in synchronization of groups) This method is run in a new transaction to ensure successful saving of given information, in case of a rollback in previous transaction. However, this method cannot be used in method running in the nested transaction, where the group was changed in the database.

Set timestamp to attribute "group_def_lastSynchronizationTimestamp" Set exception message to attribute "group_def_lastSynchronizationState" Set start time to attribute "group_def_startOfLastSuccessSynchronizationTimestamp"

FailedDueToException is true means group synchronization failed completely. FailedDueToException is false means group synchronization is ok or finished with some errors (some members were not synchronized)

Specified by:

saveInformationAboutGroupSynchronizationInNewTransaction in interface GroupsManagerBl

Parameters:

sess - perun session

group - the group for synchronization

startTime - of the synchronization

failedDueToException - if exception means fail of whole synchronization of this group or only problem with some data

exceptionMessage - message of an exception, ok if everything is ok

Throws:

AttributeNotExistsException

WrongReferenceAttributeValueException

WrongAttributeAssignmentException

WrongAttributeValueException

setPerunBl

public void setPerunBl(PerunBl perunBl)

synchronizeGroup

public List<String> synchronizeGroup(PerunSession sess,
 Group group)
                              throws AttributeNotExistsException,
WrongAttributeAssignmentException,
ExtSourceNotExistsException,
GroupNotExistsException

Description copied from interface: GroupsManagerBl

Synchronizes the group with the external group without checking if the synchronization is already in progress. If some members from extSource of this group were skipped, return info about them. if not, return empty string instead, which means all members was successfully load from extSource.

Specified by:

synchronizeGroup in interface GroupsManagerBl

Returns:

List of strings with skipped users with reasons why were skipped

Throws:

AttributeNotExistsException

WrongAttributeAssignmentException

ExtSourceNotExistsException

GroupNotExistsException

synchronizeGroupStructure

public List<String> synchronizeGroupStructure(PerunSession sess,
 Group baseGroup)
                                       throws AttributeNotExistsException,
WrongAttributeAssignmentException,
ExtSourceNotExistsException,
WrongAttributeValueException,
WrongReferenceAttributeValueException

Description copied from interface: GroupsManagerBl

Synchronize a group structure with an external source group structure under the group.

Specified by:

synchronizeGroupStructure in interface GroupsManagerBl

baseGroup - base group under which will be synchronized structure of groups

Returns:

List of strings with skipped groups with reasons why were skipped

Throws:

AttributeNotExistsException

WrongAttributeAssignmentException

ExtSourceNotExistsException

WrongAttributeValueException

WrongReferenceAttributeValueException

synchronizeGroups

public void synchronizeGroups(PerunSession sess)

Start and check threads with synchronization of groups. (max threads is defined by constant) It also add new groups to the queue. This method is run by the scheduler every 5 minutes.

Note: this method is synchronized

Specified by:

synchronizeGroups in interface GroupsManagerBl

Throws:

InternalErrorException

synchronizeGroupsStructures

public void synchronizeGroupsStructures(PerunSession sess)

Description copied from interface: GroupsManagerBl

Synchronize all groups structures which have enabled group structure synchronization. This method is run by the scheduler every 5 minutes.

Specified by:

synchronizeGroupsStructures in interface GroupsManagerBl

updateExistingMemberWhileSynchronization

public void updateExistingMemberWhileSynchronization(PerunSession sess,
 Group group,
 Candidate candidate,
 RichMember memberToUpdate,
 List<String> overwriteUserAttributesList,
 List<String> mergeMemberAttributesList,
 List<AttributeDefinition> attrDefs)

Get candidate and corresponding memberToUpdate and update his attributes, extSources, expiration and status.

For Member - updateAttributes For User - updateAttributes if exists in list of overwriteUserAttributesList, in other case just mergeAttributes.

updateAttributes = store new values mergeAttributes = for List and Map add new values, do not remove old one, for other cases store new values (like String, Integer etc.)

This method runs in separate transaction.

Parameters:

sess - perun session

group - to be synchronized

candidate - candidate to update by

memberToUpdate - richMember for updating in Perun by information from extSource

overwriteUserAttributesList - list of user attributes to be updated instead of merged

mergeMemberAttributesList - list of member attributes to be merged instead of updated

attrDefs - list of attribute definitions to update from candidate, if null the list is filled in process

Throws:

AttributeNotExistsException - if some attributes not exists and for this reason can't be updated

WrongAttributeAssignmentException - if some attribute is updated in bad way (bad assignment)

updateGroup

public Group updateGroup(PerunSession sess,
 Group group)
                  throws GroupExistsException

Description copied from interface: GroupsManagerBl

Updates group by ID.

Update shortName (use shortName) and description. Group.name is ignored. Return Group with correctly set parameters (including group.name)

Specified by:

updateGroup in interface GroupsManagerBl

group - to update (use only ID, shortName and description)

Returns:

updated group with correctly set parameters (including group.name)

Throws:

GroupExistsException - if group with same name already exists in the same VO

updateParentGroupId

public Group updateParentGroupId(PerunSession sess,
 Group group)

Description copied from interface: GroupsManagerBl

Updates parentGroupId.

!! IMPORTANT This method allows to change parentGroupId, but it doesn't update group and subGroup names !!

Specified by:

updateParentGroupId in interface GroupsManagerBl

group - to update

Returns:

group with updated parentGroupId

validateMemberInGroup

public void validateMemberInGroup(PerunSession sess,
 Member member,
 Group group)

Description copied from interface: GroupsManagerBl

Set member's status in given group to VALID

Specified by:

validateMemberInGroup in interface GroupsManagerBl

Parameters:

sess - perun session

member - member whose status will be changed

group - group in which given member will be validated