Class UsersManagerBlImpl
- All Implemented Interfaces:
UsersManagerBl
- Author:
- Michal Prochazka michalp@ics.muni.cz, Slavek Licehammer glory@ics.muni.cz, Sona Mastrakova
-
Field Summary
Fields inherited from interface cz.metacentrum.perun.core.bl.UsersManagerBl
ADDITIONAL_IDENTIFIERS_ATTRIBUTE_NAME, ADDITIONAL_IDENTIFIERS_PERUN_ATTRIBUTE_NAME, MULTIVALUE_ATTRIBUTE_SEPARATOR_REGEX, ORIGIN_IDENTITY_PROVIDER_KEY
-
Constructor Summary
-
Method Summary
Modifier and TypeMethodDescriptionvoid
addSpecificUserOwner
(PerunSession sess, User user, User specificUser) Add specificUser owner (the user) If not exists, create new ownership.addUserExtSource
(PerunSession sess, User user, UserExtSource userExtSource) Adds user's external sources.void
anonymizeUser
(PerunSession sess, User user, boolean force) Anonymizes user - according to configuration, each of user's attributes is either anonymized, kept untouched or deleted.void
blockLogins
(PerunSession sess, List<String> logins, String namespace, Integer relatedUserId) Block logins for given namespace or block logins globally (if no namespace is selected)void
changeNonAuthzPassword
(PerunSession sess, UUID token, String password, String lang) Changes user password in defined login-namespace based on token of the password reset request.void
changePassword
(PerunSession sess, User user, String loginNamespace, String oldPassword, String newPassword, boolean checkOldPassword) Changes user password in defined login-namespace.changePasswordRandom
(PerunSession session, User user, String namespace) Generates new random password for given user and returns String representing HTML where is the new password.void
checkBlockedLogins
(PerunSession sess, String namespace, String userLogin, boolean ignoreCase) Check if login is blocked.void
checkPasswordResetRequestIsValid
(PerunSession sess, UUID token) Checks if the password reset request link is valid.void
checkPasswordStrength
(PerunSession sess, String password, String namespace, String login) Check password strength for the given namespace.void
checkReservedLogins
(PerunSession sess, String namespace, String login, boolean ignoreCase) Check if login exists in specified namespace or in any namespace (if namespace is null).void
checkUserExists
(PerunSession sess, User user) void
checkUserExtSourceExists
(PerunSession sess, UserExtSource userExtSource) void
checkUserExtSourceExistsById
(PerunSession sess, int id) convertRichUsersToRichUsersWithAttributes
(PerunSession sess, List<RichUser> richUsers) From List of Rich Users without attribute make list of Rich Users with attributesGet user and convert values of his object attributes: - firstName - lastName - middleName - titleBefore - titleAfter from emptyString (like "") to null.convertUsersToRichUsers
(PerunSession sess, List<User> users) From List of Users make list of RichUsers (without attributes)convertUsersToRichUsersWithAttributes
(PerunSession sess, List<RichUser> richUsers, List<AttributeDefinition> attrsDef) Convert RichUsers without attribute to RichUsers with specific attributes.convertUsersToRichUsersWithAttributesByNames
(PerunSession sess, List<User> users, List<String> attrNames) From List of Users make list of RichUsers (with attributes by names)convertUserToRichUserWithAttributesByNames
(PerunSession sess, User user, List<String> attrNames) From User make Rich user (with attributes by names)void
createAlternativePassword
(PerunSession sess, User user, String description, String loginNamespace, String password) Creates alternative password in external system.createServiceUser
(PerunSession sess, Candidate candidate, List<User> owners) From given candidate, creates a service user and assign given owners to him.createUser
(PerunSession sess, Candidate candidate) From given candidate, creates a user.createUser
(PerunSession sess, User user) Inserts user into DB.void
deleteAlternativePassword
(PerunSession sess, User user, String loginNamespace, String passwordId) Deletes alternative password in external system.void
deletePassword
(PerunSession sess, User user, String loginNamespace) Deletes password in external system for existing user.void
deletePassword
(PerunSession sess, String userLogin, String loginNamespace) Deletes password in external system.void
deleteReservedLoginsForNamespace
(PerunSession sess, String namespace) Deletes all reserved logins in given namespacevoid
deleteReservedLoginsOnlyByGivenApp
(PerunSession sess, int appId) Deletes reserved logins which can be deleted - they are used only in the given application.void
deleteUser
(PerunSession sess, User user) Deletes user.void
deleteUser
(PerunSession sess, User user, boolean forceDelete) Deletes user.filterOnlyAllowedAttributes
(PerunSession sess, RichUser richUser) For richUser filter all his user attributes and remove all which principal has no access to.filterOnlyAllowedAttributes
(PerunSession sess, List<RichUser> richUsers) For list of richUser filter all their user attributes and remove all which principal has no access to.filterOnlyAllowedAttributesForRichUserExtSources
(PerunSession sess, List<RichUserExtSource> richUserExtSources) From given list ofRichUserExtSource
removes the attributes which are not allowed for the current principal.findRichUsers
(PerunSession sess, String searchString) Returns list of richusers with attributes who matches the searchString, searching name, id, uuid, email, logins.findRichUsersByExactMatch
(PerunSession sess, String searchString) Returns list of richusers with attributes who matches the searchString, searching name, id, uuid, email, logins.findRichUsersWithAttributes
(PerunSession sess, String searchString, List<String> attrsName) Returns list of RichUsers with selected attributes who matches the searchString, searching name, id, uuid, email, logins.findRichUsersWithAttributesByExactMatch
(PerunSession sess, String searchString, List<String> attrsName) Returns list of RichUsers with selected attributes who matches the searchString, searching name, id, uuid, email, logins.findRichUsersWithoutSpecificVoWithAttributes
(PerunSession sess, Vo vo, String searchString, List<String> attrsName) Return list of RichUsers who matches the searchString, searching name, email and logins and are not member in specific VO and contain selected attributes.findUsers
(PerunSession sess, String searchString) Returns list of users' who matches the searchString, searching name, id, uuid, email and logins.findUsersByExactMatch
(PerunSession sess, String searchString) findUsersByExactName
(PerunSession sess, String searchString) Returns list of users who exactly matches the searchStringfindUsersByName
(PerunSession sess, String searchString) Returns list of users who matches the searchStringfindUsersByName
(PerunSession sess, String titleBefore, String firstName, String middleName, String lastName, String titleAfter) Returns list of users who matches the fields.findUsersWithExtSourceAttributeValueEnding
(PerunSessionImpl sess, String attributeName, String valueEnd, List<String> excludeValueEnds) Finds users with UserExtSource with attribute value that ends with specified string but not with specified exclude strings.generateAccount
(PerunSession sess, String loginNamespace, Map<String, String> parameters) Generate user account in a backend system associated with login-namespace in Perun.getActiveUserExtSources
(PerunSession sess, User user) Get all users userExtSources with last_access not older than (now - m), where 'm' is number of months defined in CONSTANT in UsersManagerImpl.Returns all blocked logins in namespaces (if namespace is null, then this login is blocked globally)getAllowedResources
(PerunSession sess, Facility facility, User user) Get all resources from the facility which have the user access on.getAllowedResources
(PerunSession sess, User user) Get all resources which have the user access on.getAllRichUsers
(PerunSession sess, boolean includedSpecificUsers) Get All richUsers with or without specificUsers.getAllRichUsersWithAttributes
(PerunSession sess, boolean includedSpecificUsers) Get All richUsers with or without specificUsers.getAllRichUsersWithAttributes
(PerunSession sess, boolean includedSpecificUsers, List<String> attrsName) Get User to RichUser with attributes.getAllUserExtSourcesByTypeAndLogin
(PerunSession sess, String extType, String extLogin) Gets list of all users external sources by specific type and extLogin.getAssignedResources
(PerunSession sess, Facility facility, User user) Get all resources from the facility where the user is assigned.getAssignedResources
(PerunSession sess, User user) Get all resources where the user is assigned.getAssignedRichResources
(PerunSession sess, User user) Get all rich resources where the user is assigned.getAssociatedResources
(PerunSession sess, Facility facility, User user) Return all resources of specified facility with which user is associated through all his members.getAssociatedResources
(PerunSession sess, User user) Get all resources with which user can be associated (similar to assigned resources, but does not require ACTIVE group-resource assignment).getBlockedLoginsPage
(PerunSession sess, BlockedLoginsPageQuery query) Get page of blocked logins.getGroupsWhereUserIsActive
(PerunSession sess, Facility facility, User user) Return all groups where user is active (has VALID status in VO and Group together) for specified user and facilitygetGroupsWhereUserIsActive
(PerunSession sess, Resource resource, User user) Return all groups where user is active (has VALID status in VO and Group together) for specified user and resourcegetGroupsWhereUserIsAdmin
(PerunSession sess, User user) Returns list of Groups in Perun, where the User is a direct Administrator or he is a VALID member of any group which is Administrator of some of these Groups.getGroupsWhereUserIsAdmin
(PerunSession sess, Vo vo, User user) Returns list of Groups in selected Vo, where the User is a direct Administrator or he is a VALID member of any group which is Administrator of some of these Groups.int
getIdOfBlockedLogin
(PerunSession sess, String login, String namespace) Return ID of blocked logingetPasswordManagerModule
(PerunSession session, String namespace) Returns password manager module for specified login-namespace or falls back on generic password manager module.getPendingPreferredEmailChanges
(PerunSession sess, User user) Return list of email addresses of user, which are awaiting validation and are inside time window for validation.Gets the perunBl for this instance.getRelatedUserIdByBlockedLoginInNamespace
(PerunSession sess, String login, String namespace) Get user id of the user who was related to the given login in the pastgetReservedLoginsByApp
(PerunSession sess, int appId) Gets reserved logins which are used in the given application.getReservedLoginsOnlyByGivenApp
(PerunSession sess, int appId) Gets reserved logins which can be deleted - they are used only in the given application.getRichUser
(PerunSession sess, User user) Get User to RichUser without attributes.getRichUserExtSources
(PerunSession sess, User user, List<String> attrsNames) Gets list of all user's external sources with attributes.getRichUsersByIds
(PerunSession sess, List<Integer> ids) Returns rich users without attributes by their ids.getRichUsersFromListOfUsers
(PerunSession sess, List<User> users) From Users makes RichUsers without attributes.getRichUsersWithAttributesByIds
(PerunSession sess, List<Integer> ids) Returns rich users with attributes by their ids.getRichUsersWithAttributesFromListOfUsers
(PerunSession sess, List<User> users) From Users makes RichUsers with attributes.Returns all RichUsers with attributes who are not member of any VO.getRichUsersWithoutVoWithAttributes
(PerunSession sess, List<String> attrsName) Return list of RichUsers which are not members of any VO and contain selected attributes.getRichUserWithAttributes
(PerunSession sess, User user) Get User to RichUser with attributes.getSpecificUsers
(PerunSession sess) Return all specific Users (only specific users)getSpecificUsersByUser
(PerunSession sess, User user) Return all specificUsers who are owned by the user and their ownership is not in status disabledgetSponsors
(PerunSession sess, Member sponsoredMember) Gets list of users that sponsor the member.getSponsorsForSponsoredMembersInVo
(PerunSession sess, int voId) Retrieves a map, that maps the ids of the sponsored members in the given VO to a list of their Sponsors with the corresponding Sponsorship objects.getUserByExtSourceInformation
(PerunSession sess, PerunPrincipal principal) Get user by principal's additional identifiers or extSourceName and extSourceLogin.getUserByExtSourceNameAndExtLogin
(PerunSession sess, String extSourceName, String extLogin) Get user by extSourceName and extSourceLogingetUserById
(PerunSession sess, int id) Returns user by his/her id.getUserByMember
(PerunSession sess, Member member) Returns user by VO member.getUserByUserExtSource
(PerunSession sess, UserExtSource userExtSource) Returns user by his login in external source and external source.getUserByUserExtSources
(PerunSession sess, List<UserExtSource> userExtSources) Get the user based on one of the userExtSource.getUserExtSourceByExtLogin
(PerunSession sess, ExtSource source, String extLogin) Gets user's external source by the user's external login and external source.getUserExtSourceById
(PerunSession sess, int id) Get the user ext source by its id.getUserExtSourceByUniqueAttributeValue
(PerunSession sess, int attrId, String uniqueValue) Return userExtSource for specific attribute definition (specified by id) and unique value.getUserExtSourceByUniqueAttributeValue
(PerunSession sess, String attrName, String uniqueValue) Return userExtSource for specific attribute definition (specified by id) and unique value.getUserExtSourceFromMultipleIdentifiers
(PerunSession sess, PerunPrincipal principal) Iteratively searches through additional identifiers trying to find userExtSource with the same identifier.getUserExtSources
(PerunSession sess, User user) Gets list of all user's external sources of the user.getUserExtSourcesByIds
(PerunSession sess, List<Integer> ids) Get user ext sources by their ids.getUsers
(PerunSession sess) Returns all users (included specific users)getUsersByAttribute
(PerunSession sess, Attribute attribute) Returns all users who have set the attribute with the value.getUsersByAttribute
(PerunSession sess, Attribute attribute, boolean ignoreCase) Returns all users who have set the attribute with the value IGNORING CASE in the comparison.getUsersByAttribute
(PerunSession sess, String attributeName, String attributeValue) Search attributes directly in the DB only if the attr is def or opt and value is type of String, otherwise load all users and search in a loop.getUsersByAttributeValue
(PerunSession sess, String attributeName, String attributeValue) Returns all users who have the attribute with the value.getUsersByExtSourceTypeAndLogin
(PerunSession perunSession, String extSourceType, String login) Get all the users who have given type of the ExtSource and login.getUsersByIds
(PerunSession sess, List<Integer> usersIds) Batch method which returns users by theirs ids.getUsersByPerunBean
(PerunSession sess, Facility facility) Returns list of users connected with a facilitygetUsersByPerunBean
(PerunSession sess, Group group) Returns list of users connected with a groupgetUsersByPerunBean
(PerunSession sess, Host host) Returns list of users connected with a hostgetUsersByPerunBean
(PerunSession sess, Member member) Returns list of users connected with a membergetUsersByPerunBean
(PerunSession sess, Resource resource) Returns list of users connected with a resourcegetUsersByPerunBean
(PerunSession sess, Vo vo) Returns list of users connected with a vogetUsersBySpecificUser
(PerunSession sess, User specificUser) Return all users who owns the specificUser and their ownership is not in status disabledint
getUsersCount
(PerunSession sess) Get count of all users.Gets the usersManagerImpl for this instance.getUsersPage
(PerunSession sess, UsersPageQuery query, List<String> attrNames) Get page of users with the given attributes.getUsersReservedLogins
(PerunSession sess, User user) Return list of all reserved logins for specific user (pair is namespace and login)getUsersWithoutSpecificVo
(PerunSession sess, Vo vo, String searchString) Return list of users who matches the searchString, searching name, email and logins and are not member in specific VO.Returns all users who are not member of any VO.getVosWhereUserIsAdmin
(PerunSession sess, User user) Returns list of VOs, where the user is an Administrator.getVosWhereUserIsMember
(PerunSession sess, User user) Returns list of VOs, where the user is a member.boolean
isLoginAvailable
(PerunSession sess, String loginNamespace, String login) Checks if the login is available in the namespace.boolean
isLoginBlocked
(PerunSession sess, String login, boolean ignoreCase) Return true if login is blocked (globally - for all namespaces per instance OR for some namespace), false if not.boolean
isLoginBlockedForNamespace
(PerunSession sess, String login, String namespace, boolean ignoreCase) Return true if login is blocked for given namespace, false if not When the namespace is null, then the method behaves like isLoginBlockedGlobally(), so it checks if the login is blocked globally.boolean
isLoginBlockedGlobally
(PerunSession sess, String login) Return true if login is blocked globally (for all namespaces per instance - represented by namespace = null), false if not Globally banned logins are ALWAYS case-insensitive.boolean
isUserAnonymized
(PerunSession sess, User user) Checks whether user has been anonymized or not.boolean
isUserPerunAdmin
(PerunSession sess, User user) Deprecated.boolean
loginExist
(PerunSession sess, User user, String loginNamespace) Checks if login exists in given login-namespace.void
moveUserExtSource
(PerunSession sess, User sourceUser, User targetUser, UserExtSource userExtSource) Take UserExtSource from sourceUser and move it to the targetUser.void
removeAllUserExtSources
(PerunSession sess, User user) Removes all user's external sources.void
removeSpecificUserOwner
(PerunSession sess, User user, User specificUser) Remove specificUser owner (the user) Only disable ownership of user and specificUservoid
removeSpecificUserOwner
(PerunSession sess, User user, User specificUser, boolean forceDelete) Remove specificUser owner (the user).void
removeUserExtSource
(PerunSession sess, User user, UserExtSource userExtSource) Removes user's external sources.void
requestPreferredEmailChange
(PerunSession sess, String url, User user, String email, String lang, String path, String idp) Request change of user's preferred email address.void
reservePassword
(PerunSession sess, User user, String loginNamespace, String password) Reserves the password in external system.void
reservePassword
(PerunSession sess, String userLogin, String loginNamespace, String password) Reserves the password in external system.void
reserveRandomPassword
(PerunSession sess, User user, String loginNamespace) Reserves random password in external system.void
setLogin
(PerunSession sess, User user, String loginNamespace, String login) Allow users to manually add login in supported namespace if same login is not reservedvoid
setPerunBl
(PerunBl perunBl) setSpecificUser
(PerunSession sess, User specificUser, SpecificUserType specificUserType, User owner) Set specific user type for specific user and set ownership of this user for the owner.boolean
specificUserOwnershipExists
(PerunSession sess, User user, User specificUser) Return true if ownership of user and specificUser already exists.void
unblockLogins
(PerunSession sess, List<String> logins, String namespace) Unblock logins for given namespace or unblock logins globally (if no namespace is selected)void
unblockLoginsById
(PerunSession sess, List<Integer> loginIds) Unblock logins by id globally, or in the namespace they were initially blocked.void
unblockLoginsForNamespace
(PerunSession sess, String namespace) Unblock all logins for given namespaceunsetSpecificUser
(PerunSession sess, User specificUser, SpecificUserType specificUserType) Remove all ownerships of this specific user and unset this specific user type from this specific user.updateNameTitles
(PerunSession sess, User user) Updates titles before/after users name.updateUser
(PerunSession sess, User user) Updates users data in DB.updateUserExtSource
(PerunSession sess, UserExtSource userExtSource) Updates user's userExtSource in DB.void
updateUserExtSourceLastAccess
(PerunSession sess, UserExtSource userExtSource) Updates user's userExtSource last access time in DB.boolean
userExtSourceExists
(PerunSession sess, UserExtSource userExtSource) void
validatePassword
(PerunSession sess, User user, String loginNamespace) Validates the password in external system and sets user extSources and extSource related attributes.void
validatePassword
(PerunSession sess, String userLogin, String loginNamespace) Validates the password in external system and sets user extSources and extSource related attributes.validatePreferredEmailChange
(PerunSession sess, User user, UUID token) Validate change of user's preferred email address.void
validateSSHKey
(PerunSession sess, String sshKey) Validate ssh public key, throws exception if validation fails
-
Constructor Details
-
UsersManagerBlImpl
Constructor.- Parameters:
usersManagerImpl
- connection pool
-
-
Method Details
-
addSpecificUserOwner
public void addSpecificUserOwner(PerunSession sess, User user, User specificUser) throws RelationExistsException Description copied from interface:UsersManagerBl
Add specificUser owner (the user) If not exists, create new ownership. If exists, only enable ownership for user and specificUser- Specified by:
addSpecificUserOwner
in interfaceUsersManagerBl
user
- the userspecificUser
- the specificUser- Throws:
RelationExistsException
- If there is such user (the user) who try to add
-
addUserExtSource
public UserExtSource addUserExtSource(PerunSession sess, User user, UserExtSource userExtSource) throws UserExtSourceExistsException Description copied from interface:UsersManagerBl
Adds user's external sources.- Specified by:
addUserExtSource
in interfaceUsersManagerBl
- Returns:
- user external auth object with newly generated ID
- Throws:
UserExtSourceExistsException
-
anonymizeUser
public void anonymizeUser(PerunSession sess, User user, boolean force) throws RelationExistsException, AnonymizationNotSupportedException Description copied from interface:UsersManagerBl
Anonymizes user - according to configuration, each of user's attributes is either anonymized, kept untouched or deleted. Also deletes other user's related data, e.g. authorships of users publications, mail change and password reset requests, bans... If force is true then also removes associated members.- Specified by:
anonymizeUser
in interfaceUsersManagerBl
- Throws:
RelationExistsException
- if the user has some members assignedAnonymizationNotSupportedException
- if an attribute should be anonymized but its module doesn't specify the anonymization process or if the anonymization is not supported at this instance
-
blockLogins
public void blockLogins(PerunSession sess, List<String> logins, String namespace, Integer relatedUserId) throws LoginIsAlreadyBlockedException, LoginExistsException Description copied from interface:UsersManagerBl
Block logins for given namespace or block logins globally (if no namespace is selected)- Specified by:
blockLogins
in interfaceUsersManagerBl
logins
- list of logins to be blockednamespace
- namespace where the logins should be blocked (null means block the logins globally)relatedUserId
- id of the user related to the login or null if the relatedUserId should not be stored- Throws:
LoginIsAlreadyBlockedException
LoginExistsException
-
changeNonAuthzPassword
public void changeNonAuthzPassword(PerunSession sess, UUID token, String password, String lang) throws LoginNotExistsException, PasswordChangeFailedException, PasswordOperationTimeoutException, PasswordStrengthFailedException, InvalidLoginException, PasswordStrengthException, PasswordResetLinkExpiredException, PasswordResetLinkNotValidException, UserNotExistsException Description copied from interface:UsersManagerBl
Changes user password in defined login-namespace based on token of the password reset request.- Specified by:
changeNonAuthzPassword
in interfaceUsersManagerBl
- Parameters:
sess
- PerunSessiontoken
- token for the password reset requestpassword
- new passwordlang
- Language to get notification in- Throws:
LoginNotExistsException
- When user doesn't have login in specified namespacePasswordChangeFailedException
- When password change failedPasswordOperationTimeoutException
- When password change timed outInvalidLoginException
- When login of user has invalid syntax (is not allowed)PasswordStrengthException
- When password doesn't match expected strength by namespace configurationPasswordResetLinkExpiredException
- When the password reset request expiredPasswordResetLinkNotValidException
- When the password reset request was already used or has never existedUserNotExistsException
- When the user who requested the password reset doesn't existPasswordStrengthFailedException
-
changePassword
public void changePassword(PerunSession sess, User user, String loginNamespace, String oldPassword, String newPassword, boolean checkOldPassword) throws LoginNotExistsException, PasswordDoesntMatchException, PasswordChangeFailedException, PasswordOperationTimeoutException, PasswordStrengthFailedException, InvalidLoginException, PasswordStrengthException Description copied from interface:UsersManagerBl
Changes user password in defined login-namespace. If checkOldPassword is true, then ask authentication system if old password is correct. user must exists.- Specified by:
changePassword
in interfaceUsersManagerBl
user
- user object which is used to get userLogin from the loginNamespace- Throws:
LoginNotExistsException
- When user doesn't have login in specified namespacePasswordDoesntMatchException
- When old password does not matchPasswordChangeFailedException
InvalidLoginException
- When login of user has invalid syntax (is not allowed)PasswordStrengthException
- When password doesn't match expected strength by namespace configurationPasswordOperationTimeoutException
PasswordStrengthFailedException
-
changePasswordRandom
public String changePasswordRandom(PerunSession session, User user, String namespace) throws PasswordOperationTimeoutException, LoginNotExistsException, PasswordChangeFailedException, InvalidLoginException, PasswordStrengthException Description copied from interface:UsersManagerBl
Generates new random password for given user and returns String representing HTML where is the new password.The HTML template is taken from entityless attribute randomPwdResetTemplate and the loginNamespace is used as a key.
- Specified by:
changePasswordRandom
in interfaceUsersManagerBl
- Parameters:
session
- sessionuser
- usernamespace
- login namespace- Returns:
- String representing HTML with data about new generated password
- Throws:
PasswordOperationTimeoutException
- password change timed outLoginNotExistsException
- When user doesn't have login in specified namespacePasswordChangeFailedException
- password change failedInvalidLoginException
- When When login of user has invalid syntax (is not allowed)PasswordStrengthException
- When password doesn't match expected strength by namespace configuration
-
checkBlockedLogins
public void checkBlockedLogins(PerunSession sess, String namespace, String userLogin, boolean ignoreCase) throws LoginIsAlreadyBlockedException Description copied from interface:UsersManagerBl
Check if login is blocked. Login can be blocked by default (used by internal components), globally or in namespace.- Specified by:
checkBlockedLogins
in interfaceUsersManagerBl
- Parameters:
sess
- sessionnamespace
- attributeuserLogin
- loginignoreCase
- ignore case (work as case-insensitive)- Throws:
LoginIsAlreadyBlockedException
- when login is blocked
-
checkPasswordResetRequestIsValid
public void checkPasswordResetRequestIsValid(PerunSession sess, UUID token) throws PasswordResetLinkExpiredException, PasswordResetLinkNotValidException Description copied from interface:UsersManagerBl
Checks if the password reset request link is valid. The request is valid, if it was created, never used and hasn't expired yet.- Specified by:
checkPasswordResetRequestIsValid
in interfaceUsersManagerBl
- Parameters:
sess
- PerunSessiontoken
- token for the request to check- Throws:
PasswordResetLinkExpiredException
- when the reset link expiredPasswordResetLinkNotValidException
- when the reset link was already used or has never existed
-
checkPasswordStrength
public void checkPasswordStrength(PerunSession sess, String password, String namespace, String login) throws PasswordStrengthException Description copied from interface:UsersManagerBl
Check password strength for the given namespace. If the password is too weak, the PasswordStrengthException is thrown- Specified by:
checkPasswordStrength
in interfaceUsersManagerBl
password
- password, that will be checkednamespace
- namespace, that will be used to check the strength of the passwordlogin
- login, which may be required for correct password strength check- Throws:
PasswordStrengthException
- When password doesn't match expected strength by namespace configuration
-
checkReservedLogins
public void checkReservedLogins(PerunSession sess, String namespace, String login, boolean ignoreCase) throws AlreadyReservedLoginException Description copied from interface:UsersManagerBl
Check if login exists in specified namespace or in any namespace (if namespace is null).- Specified by:
checkReservedLogins
in interfaceUsersManagerBl
namespace
- namespace for login, null for all namespacelogin
- login to checkignoreCase
- TRUE to perform case-insensitive check- Throws:
AlreadyReservedLoginException
- throw this exception if login already exist in table of reserved logins
-
checkUserExists
- Specified by:
checkUserExists
in interfaceUsersManagerBl
- Throws:
UserNotExistsException
-
checkUserExtSourceExists
public void checkUserExtSourceExists(PerunSession sess, UserExtSource userExtSource) throws UserExtSourceNotExistsException - Specified by:
checkUserExtSourceExists
in interfaceUsersManagerBl
- Throws:
UserExtSourceNotExistsException
-
checkUserExtSourceExistsById
public void checkUserExtSourceExistsById(PerunSession sess, int id) throws UserExtSourceNotExistsException - Specified by:
checkUserExtSourceExistsById
in interfaceUsersManagerBl
- Throws:
UserExtSourceNotExistsException
-
convertRichUsersToRichUsersWithAttributes
public List<RichUser> convertRichUsersToRichUsersWithAttributes(PerunSession sess, List<RichUser> richUsers) throws UserNotExistsException Description copied from interface:UsersManagerBl
From List of Rich Users without attribute make list of Rich Users with attributes- Specified by:
convertRichUsersToRichUsersWithAttributes
in interfaceUsersManagerBl
- Returns:
- list of Rich Users with attributes
- Throws:
UserNotExistsException
-
convertUserEmptyStringsInObjectAttributesIntoNull
Description copied from interface:UsersManagerBl
Get user and convert values of his object attributes: - firstName - lastName - middleName - titleBefore - titleAfter from emptyString (like "") to null. If these values are not empty strings, do not change them. If user is null, return null.- Specified by:
convertUserEmptyStringsInObjectAttributesIntoNull
in interfaceUsersManagerBl
- Parameters:
user
- user to converting- Returns:
- converted user
-
convertUserToRichUserWithAttributesByNames
public RichUser convertUserToRichUserWithAttributesByNames(PerunSession sess, User user, List<String> attrNames) Description copied from interface:UsersManagerBl
From User make Rich user (with attributes by names)- Specified by:
convertUserToRichUserWithAttributesByNames
in interfaceUsersManagerBl
- Parameters:
sess
- sessionuser
- user to be convertedattrNames
- list of Strings with attribute names- Returns:
- RichUser with attributes
-
convertUsersToRichUsers
Description copied from interface:UsersManagerBl
From List of Users make list of RichUsers (without attributes)- Specified by:
convertUsersToRichUsers
in interfaceUsersManagerBl
- Returns:
- list of RIch Users without attributes
-
convertUsersToRichUsersWithAttributes
public List<RichUser> convertUsersToRichUsersWithAttributes(PerunSession sess, List<RichUser> richUsers, List<AttributeDefinition> attrsDef) Description copied from interface:UsersManagerBl
Convert RichUsers without attribute to RichUsers with specific attributes. Specific by list of Attributes. If in list of Attributes is some notUser attribute, it is skipped.- Specified by:
convertUsersToRichUsersWithAttributes
in interfaceUsersManagerBl
- Returns:
- list of RichUsers with specific attributes
-
convertUsersToRichUsersWithAttributesByNames
public List<RichUser> convertUsersToRichUsersWithAttributesByNames(PerunSession sess, List<User> users, List<String> attrNames) Description copied from interface:UsersManagerBl
From List of Users make list of RichUsers (with attributes by names)- Specified by:
convertUsersToRichUsersWithAttributesByNames
in interfaceUsersManagerBl
- Returns:
- list of RIch Users without attributes
-
createAlternativePassword
public void createAlternativePassword(PerunSession sess, User user, String description, String loginNamespace, String password) throws PasswordCreationFailedException, LoginNotExistsException, PasswordStrengthException Description copied from interface:UsersManagerBl
Creates alternative password in external system.- Specified by:
createAlternativePassword
in interfaceUsersManagerBl
description
- - description of a password (e.g. 'mobile phone', 'tablet', ...)password
- string representation of password- Throws:
PasswordCreationFailedException
LoginNotExistsException
- When user doesn't have login in specified namespacePasswordStrengthException
- When password doesn't match expected strength by namespace configuration
-
createServiceUser
public User createServiceUser(PerunSession sess, Candidate candidate, List<User> owners) throws WrongAttributeAssignmentException, UserExtSourceExistsException, WrongReferenceAttributeValueException, WrongAttributeValueException, AttributeNotExistsException Description copied from interface:UsersManagerBl
From given candidate, creates a service user and assign given owners to him. This method also checks if some of given userExtSources do exist. If so, this method throws a UserExtSourceExistsException. This method can also set only user-def and user-opt attributes for the given candidate.- Specified by:
createServiceUser
in interfaceUsersManagerBl
- Parameters:
sess
- sessioncandidate
- candidateowners
- owners to be set for the new user- Returns:
- created service user
- Throws:
WrongAttributeAssignmentException
- if some of the given attributes have unsupported namespaceUserExtSourceExistsException
- if some of the given UES already existWrongReferenceAttributeValueException
- if some of the given attribute value cannot be set because of some other attribute constraintWrongAttributeValueException
- if some of the given attribute value is invalidAttributeNotExistsException
- if some of the given attributes dont exist
-
createUser
Description copied from interface:UsersManagerBl
Inserts user into DB.- Specified by:
createUser
in interfaceUsersManagerBl
-
createUser
public User createUser(PerunSession sess, Candidate candidate) throws UserExtSourceExistsException, WrongAttributeAssignmentException, WrongAttributeValueException, WrongReferenceAttributeValueException, AttributeNotExistsException Description copied from interface:UsersManagerBl
From given candidate, creates a user. This method also checks if some of given userExtSources do exist. If so, this method throws a UserExtSourceExistsException. This method can also set only user-def and user-opt attributes for the given candidate.- Specified by:
createUser
in interfaceUsersManagerBl
- Parameters:
sess
- sessioncandidate
- candidate- Returns:
- created user
- Throws:
UserExtSourceExistsException
- if some of the given UES already existWrongAttributeAssignmentException
- if some of the given attributes have unsupported namespaceWrongAttributeValueException
- if some of the given attribute value is invalidWrongReferenceAttributeValueException
- if some of the given attribute value cannot be set because of some other attribute constraintAttributeNotExistsException
- if some of the given attributes dont exist
-
deleteAlternativePassword
public void deleteAlternativePassword(PerunSession sess, User user, String loginNamespace, String passwordId) throws PasswordDeletionFailedException, LoginNotExistsException Description copied from interface:UsersManagerBl
Deletes alternative password in external system.- Specified by:
deleteAlternativePassword
in interfaceUsersManagerBl
passwordId
- passwords ID- Throws:
PasswordDeletionFailedException
LoginNotExistsException
- When user doesn't have login in specified namespace
-
deletePassword
public void deletePassword(PerunSession sess, String userLogin, String loginNamespace) throws LoginNotExistsException, PasswordDeletionFailedException, PasswordOperationTimeoutException, InvalidLoginException Description copied from interface:UsersManagerBl
Deletes password in external system. User must not exists.- Specified by:
deletePassword
in interfaceUsersManagerBl
userLogin
- string representation of the userLogin- Throws:
LoginNotExistsException
- When user doesn't have login in specified namespacePasswordDeletionFailedException
InvalidLoginException
- When login of user has invalid syntax (is not allowed)PasswordOperationTimeoutException
-
deletePassword
public void deletePassword(PerunSession sess, User user, String loginNamespace) throws LoginNotExistsException, PasswordDeletionFailedException, PasswordOperationTimeoutException, InvalidLoginException Description copied from interface:UsersManagerBl
Deletes password in external system for existing user. User's login for specified namespace must exist in Perun.- Specified by:
deletePassword
in interfaceUsersManagerBl
- Parameters:
sess
- perunSessionuser
- for which the password will be deletedloginNamespace
- from which the password will be deleted- Throws:
LoginNotExistsException
- When user doesn't have login in specified namespacePasswordDeletionFailedException
PasswordOperationTimeoutException
InvalidLoginException
- When login of user has invalid syntax (is not allowed)
-
deleteReservedLoginsForNamespace
Description copied from interface:UsersManagerBl
Deletes all reserved logins in given namespace- Specified by:
deleteReservedLoginsForNamespace
in interfaceUsersManagerBl
- Parameters:
sess
- PerunSessionnamespace
- Namespace
-
deleteReservedLoginsOnlyByGivenApp
public void deleteReservedLoginsOnlyByGivenApp(PerunSession sess, int appId) throws PasswordOperationTimeoutException, InvalidLoginException, PasswordDeletionFailedException Description copied from interface:UsersManagerBl
Deletes reserved logins which can be deleted - they are used only in the given application. Deletes them from both KDC and DB.- Specified by:
deleteReservedLoginsOnlyByGivenApp
in interfaceUsersManagerBl
- Throws:
PasswordOperationTimeoutException
InvalidLoginException
PasswordDeletionFailedException
-
deleteUser
public void deleteUser(PerunSession sess, User user) throws RelationExistsException, MemberAlreadyRemovedException, UserAlreadyRemovedException, SpecificUserAlreadyRemovedException, DeletionNotSupportedException Description copied from interface:UsersManagerBl
Deletes user.- Specified by:
deleteUser
in interfaceUsersManagerBl
- Throws:
RelationExistsException
- if user has some members assignedMemberAlreadyRemovedException
- if there is at least 1 member deleted but not affected by deleting from DBUserAlreadyRemovedException
- if there are no rows affected by deleting user in DBSpecificUserAlreadyRemovedException
- if there are no rows affected by deleting specific user in DBDeletionNotSupportedException
- if the deletion of users is not supported at this instance
-
deleteUser
public void deleteUser(PerunSession sess, User user, boolean forceDelete) throws RelationExistsException, MemberAlreadyRemovedException, UserAlreadyRemovedException, SpecificUserAlreadyRemovedException, DeletionNotSupportedException Description copied from interface:UsersManagerBl
Deletes user. If forceDelete is true, then removes also associated members.- Specified by:
deleteUser
in interfaceUsersManagerBl
forceDelete
- if true, deletes also all members if they are assigned to the user- Throws:
RelationExistsException
- if forceDelete is false and the user has some members assignedMemberAlreadyRemovedException
- if there is at least 1 member deleted but not affected by deleting from DBUserAlreadyRemovedException
- if there are no rows affected by deleting user in DBSpecificUserAlreadyRemovedException
- if there are no rows affected by deleting specific user in DBnDeletionNotSupportedException
- if the deletion of users is not supported at this instance
-
filterOnlyAllowedAttributes
Description copied from interface:UsersManagerBl
For richUser filter all his user attributes and remove all which principal has no access to.- Specified by:
filterOnlyAllowedAttributes
in interfaceUsersManagerBl
- Returns:
- richUser with only allowed attributes
-
filterOnlyAllowedAttributes
Description copied from interface:UsersManagerBl
For list of richUser filter all their user attributes and remove all which principal has no access to.- Specified by:
filterOnlyAllowedAttributes
in interfaceUsersManagerBl
- Returns:
- list of RichUsers with only allowed attributes
-
filterOnlyAllowedAttributesForRichUserExtSources
public List<RichUserExtSource> filterOnlyAllowedAttributesForRichUserExtSources(PerunSession sess, List<RichUserExtSource> richUserExtSources) Description copied from interface:UsersManagerBl
From given list ofRichUserExtSource
removes the attributes which are not allowed for the current principal. The attributes are removed from the given list and the list is also returned.- Specified by:
filterOnlyAllowedAttributesForRichUserExtSources
in interfaceUsersManagerBl
- Parameters:
sess
- sessionrichUserExtSources
- richUserExtSources to be filtered- Returns:
- list of filtered richUserExtSources
-
findRichUsers
public List<RichUser> findRichUsers(PerunSession sess, String searchString) throws UserNotExistsException Description copied from interface:UsersManagerBl
Returns list of richusers with attributes who matches the searchString, searching name, id, uuid, email, logins.- Specified by:
findRichUsers
in interfaceUsersManagerBl
- Returns:
- list of richusers
- Throws:
UserNotExistsException
-
findRichUsersByExactMatch
public List<RichUser> findRichUsersByExactMatch(PerunSession sess, String searchString) throws UserNotExistsException Description copied from interface:UsersManagerBl
Returns list of richusers with attributes who matches the searchString, searching name, id, uuid, email, logins. Name part is searched for exact match.- Specified by:
findRichUsersByExactMatch
in interfaceUsersManagerBl
- Returns:
- list of richusers
- Throws:
UserNotExistsException
-
findRichUsersWithAttributes
public List<RichUser> findRichUsersWithAttributes(PerunSession sess, String searchString, List<String> attrsName) throws UserNotExistsException Description copied from interface:UsersManagerBl
Returns list of RichUsers with selected attributes who matches the searchString, searching name, id, uuid, email, logins.- Specified by:
findRichUsersWithAttributes
in interfaceUsersManagerBl
- Returns:
- list of RichUsers
- Throws:
UserNotExistsException
-
findRichUsersWithAttributesByExactMatch
public List<RichUser> findRichUsersWithAttributesByExactMatch(PerunSession sess, String searchString, List<String> attrsName) throws UserNotExistsException Description copied from interface:UsersManagerBl
Returns list of RichUsers with selected attributes who matches the searchString, searching name, id, uuid, email, logins. Name part is searched for exact match.- Specified by:
findRichUsersWithAttributesByExactMatch
in interfaceUsersManagerBl
- Returns:
- list of RichUsers
- Throws:
UserNotExistsException
-
findRichUsersWithoutSpecificVoWithAttributes
public List<RichUser> findRichUsersWithoutSpecificVoWithAttributes(PerunSession sess, Vo vo, String searchString, List<String> attrsName) throws UserNotExistsException Description copied from interface:UsersManagerBl
Return list of RichUsers who matches the searchString, searching name, email and logins and are not member in specific VO and contain selected attributes.- Specified by:
findRichUsersWithoutSpecificVoWithAttributes
in interfaceUsersManagerBl
- Returns:
- list of RichUser
- Throws:
UserNotExistsException
-
findUsers
Description copied from interface:UsersManagerBl
Returns list of users' who matches the searchString, searching name, id, uuid, email and logins.- Specified by:
findUsers
in interfaceUsersManagerBl
- Returns:
- list of users
-
findUsersByExactMatch
-
findUsersByExactName
Description copied from interface:UsersManagerBl
Returns list of users who exactly matches the searchString- Specified by:
findUsersByExactName
in interfaceUsersManagerBl
- Returns:
- list of users
-
findUsersByName
Description copied from interface:UsersManagerBl
Returns list of users who matches the searchString- Specified by:
findUsersByName
in interfaceUsersManagerBl
- Returns:
- list of users
-
findUsersByName
public List<User> findUsersByName(PerunSession sess, String titleBefore, String firstName, String middleName, String lastName, String titleAfter) Description copied from interface:UsersManagerBl
Returns list of users who matches the fields.- Specified by:
findUsersByName
in interfaceUsersManagerBl
- Returns:
- list of users
-
findUsersWithExtSourceAttributeValueEnding
public List<User> findUsersWithExtSourceAttributeValueEnding(PerunSessionImpl sess, String attributeName, String valueEnd, List<String> excludeValueEnds) throws AttributeNotExistsException Description copied from interface:UsersManagerBl
Finds users with UserExtSource with attribute value that ends with specified string but not with specified exclude strings. This method is written to find all users with schacHomeOrganization domains ending with valueEnd, but not with exludeValueEnds.- Specified by:
findUsersWithExtSourceAttributeValueEnding
in interfaceUsersManagerBl
- Parameters:
sess
- sessionattributeName
- UserExtSource attribute namevalueEnd
- required attribute value endingexcludeValueEnds
- exclude these attribute value endings- Returns:
- list of users
- Throws:
AttributeNotExistsException
-
generateAccount
public Map<String,String> generateAccount(PerunSession sess, String loginNamespace, Map<String, String> parameters) throws PasswordStrengthExceptionDescription copied from interface:UsersManagerBl
Generate user account in a backend system associated with login-namespace in Perun.This method consumes optional parameters map. Requirements are implementation-dependant for each login-namespace.
Returns map with 1: key=login-namespace attribute urn, value=generated login 2: rest of opt response attributes...
- Specified by:
generateAccount
in interfaceUsersManagerBl
loginNamespace
- Namespace to generate account inparameters
- Optional parameters- Returns:
- Map of data from backed response
- Throws:
PasswordStrengthException
- When password doesn't match expected strength by namespace configuration
-
getActiveUserExtSources
Description copied from interface:UsersManagerBl
Get all users userExtSources with last_access not older than (now - m), where 'm' is number of months defined in CONSTANT in UsersManagerImpl.- Specified by:
getActiveUserExtSources
in interfaceUsersManagerBl
user
- user to get extSources for- Returns:
- list of active user extSources (not older than now - m)
-
getAllBlockedLoginsInNamespaces
Description copied from interface:UsersManagerBl
Returns all blocked logins in namespaces (if namespace is null, then this login is blocked globally)- Specified by:
getAllBlockedLoginsInNamespaces
in interfaceUsersManagerBl
- Returns:
- list of all blocked logins in namespaces
-
getAllRichUsers
Description copied from interface:UsersManagerBl
Get All richUsers with or without specificUsers. If includedSpecificUsers is true, you got all Users included specificUsers If includedSpecificUsers is false, you get all Users without specificUsers- Specified by:
getAllRichUsers
in interfaceUsersManagerBl
includedSpecificUsers
- true or false if you want or dont want get specificUsers too- Returns:
- list of RichUsers
-
getAllRichUsersWithAttributes
public List<RichUser> getAllRichUsersWithAttributes(PerunSession sess, boolean includedSpecificUsers) throws UserNotExistsException Description copied from interface:UsersManagerBl
Get All richUsers with or without specificUsers. If includedSpecificUsers is true, you got all Users included specificUsers If includedSpecificUsers is false, you get all Users without specificUsers This method get all RichUsers included Attributes.- Specified by:
getAllRichUsersWithAttributes
in interfaceUsersManagerBl
includedSpecificUsers
- true or false if you want or dont want get specificUsers too- Returns:
- list of RichUsers
- Throws:
UserNotExistsException
-
getAllRichUsersWithAttributes
public List<RichUser> getAllRichUsersWithAttributes(PerunSession sess, boolean includedSpecificUsers, List<String> attrsName) throws UserNotExistsException Description copied from interface:UsersManagerBl
Get User to RichUser with attributes.- Specified by:
getAllRichUsersWithAttributes
in interfaceUsersManagerBl
- Returns:
- Throws:
UserNotExistsException
-
getAllUserExtSourcesByTypeAndLogin
public List<UserExtSource> getAllUserExtSourcesByTypeAndLogin(PerunSession sess, String extType, String extLogin) Description copied from interface:UsersManagerBl
Gets list of all users external sources by specific type and extLogin.- Specified by:
getAllUserExtSourcesByTypeAndLogin
in interfaceUsersManagerBl
extType
- - type of extSource (ex. 'IDP')extLogin
- - extLogin of userExtSource- Returns:
- list of userExtSources with type and login, empty list if no such userExtSource exists
-
getAllowedResources
Description copied from interface:UsersManagerBl
Get all resources from the facility which have the user access on.- Specified by:
getAllowedResources
in interfaceUsersManagerBl
- Returns:
- list of resources which have the user access on
-
getAllowedResources
Description copied from interface:UsersManagerBl
Get all resources which have the user access on.- Specified by:
getAllowedResources
in interfaceUsersManagerBl
- Returns:
- list of resources which have the user access on
-
getAssignedResources
Description copied from interface:UsersManagerBl
Get all resources from the facility where the user is assigned.- Specified by:
getAssignedResources
in interfaceUsersManagerBl
- Returns:
- list of resources which have the user access on
-
getAssignedResources
Description copied from interface:UsersManagerBl
Get all resources where the user is assigned.- Specified by:
getAssignedResources
in interfaceUsersManagerBl
- Returns:
- list of resources which have the user access on
-
getAssignedRichResources
Description copied from interface:UsersManagerBl
Get all rich resources where the user is assigned.- Specified by:
getAssignedRichResources
in interfaceUsersManagerBl
- Returns:
- list of rich resources which have the user access on
-
getAssociatedResources
Description copied from interface:UsersManagerBl
Return all resources of specified facility with which user is associated through all his members. Does not require ACTIVE group-resource assignment.- Specified by:
getAssociatedResources
in interfaceUsersManagerBl
- Returns:
- All resources with which user is associated
-
getAssociatedResources
Description copied from interface:UsersManagerBl
Get all resources with which user can be associated (similar to assigned resources, but does not require ACTIVE group-resource assignment).- Specified by:
getAssociatedResources
in interfaceUsersManagerBl
- Returns:
- list of resources with which the user is associated
-
getBlockedLoginsPage
public Paginated<BlockedLogin> getBlockedLoginsPage(PerunSession sess, BlockedLoginsPageQuery query) Description copied from interface:UsersManagerBl
Get page of blocked logins.- Specified by:
getBlockedLoginsPage
in interfaceUsersManagerBl
- Parameters:
sess
- sessionquery
- query with page information- Returns:
- page of requested blocked logins
-
getGroupsWhereUserIsActive
Description copied from interface:UsersManagerBl
Return all groups where user is active (has VALID status in VO and Group together) for specified user and resource- Specified by:
getGroupsWhereUserIsActive
in interfaceUsersManagerBl
- Parameters:
sess
- PerunSessionresource
- Only groups assigned to this resource might be returneduser
- Only groups where this user is VALID member might be returned- Returns:
- List of groups where user is active (is a VALID vo and group member) on specified resource
-
getGroupsWhereUserIsActive
Description copied from interface:UsersManagerBl
Return all groups where user is active (has VALID status in VO and Group together) for specified user and facility- Specified by:
getGroupsWhereUserIsActive
in interfaceUsersManagerBl
- Parameters:
sess
- PerunSessionfacility
- Only groups assigned to this facility (all its resources) might be returneduser
- Only groups where this user is VALID member might be returned- Returns:
- List of groups where user is active (is a VALID vo and group member) on specified facility
-
getGroupsWhereUserIsAdmin
Description copied from interface:UsersManagerBl
Returns list of Groups in Perun, where the User is a direct Administrator or he is a VALID member of any group which is Administrator of some of these Groups.- Specified by:
getGroupsWhereUserIsAdmin
in interfaceUsersManagerBl
- Returns:
- list of Groups, where user or some of his groups is an Administrator
-
getGroupsWhereUserIsAdmin
Description copied from interface:UsersManagerBl
Returns list of Groups in selected Vo, where the User is a direct Administrator or he is a VALID member of any group which is Administrator of some of these Groups.- Specified by:
getGroupsWhereUserIsAdmin
in interfaceUsersManagerBl
vo
- selected Vo under which we are looking for groupsuser
- manager of groups we are looking for- Returns:
- list of Groups, where user or some of his groups (in the Vo) is an Administrator
-
getIdOfBlockedLogin
Description copied from interface:UsersManagerBl
Return ID of blocked login- Specified by:
getIdOfBlockedLogin
in interfaceUsersManagerBl
- Parameters:
sess
- sessionlogin
- loginnamespace
- namespace- Returns:
- id of login blocked in specified namespace
-
getPasswordManagerModule
Description copied from interface:UsersManagerBl
Returns password manager module for specified login-namespace or falls back on generic password manager module. Throws exception if no module implementation is found or it can't be instantiated.- Specified by:
getPasswordManagerModule
in interfaceUsersManagerBl
- Parameters:
session
- session with authznamespace
- specific namespace- Returns:
- Password manager module for namespace or 'generic' module.
-
getPendingPreferredEmailChanges
public List<String> getPendingPreferredEmailChanges(PerunSession sess, User user) throws WrongAttributeAssignmentException, AttributeNotExistsException Description copied from interface:UsersManagerBl
Return list of email addresses of user, which are awaiting validation and are inside time window for validation. If there is no preferred email change request pending or requests are outside time window for validation, returns empty list.- Specified by:
getPendingPreferredEmailChanges
in interfaceUsersManagerBl
- Parameters:
sess
- PerunSessionuser
- User to check pending request for- Returns:
- List
user's email addresses pending validation - Throws:
WrongAttributeAssignmentException
AttributeNotExistsException
-
getPerunBl
Gets the perunBl for this instance.- Returns:
- The perunBl.
-
getRelatedUserIdByBlockedLoginInNamespace
public Integer getRelatedUserIdByBlockedLoginInNamespace(PerunSession sess, String login, String namespace) throws LoginIsNotBlockedException Description copied from interface:UsersManagerBl
Get user id of the user who was related to the given login in the past- Specified by:
getRelatedUserIdByBlockedLoginInNamespace
in interfaceUsersManagerBl
- Parameters:
sess
- sessionlogin
- blocked loginnamespace
- namespace where the login is blocked- Returns:
- user id or null if there is no related user id
- Throws:
LoginIsNotBlockedException
-
getReservedLoginsByApp
Description copied from interface:UsersManagerBl
Gets reserved logins which are used in the given application.- Specified by:
getReservedLoginsByApp
in interfaceUsersManagerBl
- Returns:
- list of logins (Pair: left - namespace, right - login)
-
getReservedLoginsOnlyByGivenApp
Description copied from interface:UsersManagerBl
Gets reserved logins which can be deleted - they are used only in the given application.- Specified by:
getReservedLoginsOnlyByGivenApp
in interfaceUsersManagerBl
- Returns:
- list of logins (Pair: left - namespace, right - login)
-
getRichUser
Description copied from interface:UsersManagerBl
Get User to RichUser without attributes.- Specified by:
getRichUser
in interfaceUsersManagerBl
- Returns:
-
getRichUserExtSources
public List<RichUserExtSource> getRichUserExtSources(PerunSession sess, User user, List<String> attrsNames) Description copied from interface:UsersManagerBl
Gets list of all user's external sources with attributes. If any of the attribute names is incorrect then the value is silently skipped. If the attrsNames is null, then this method returns all ues attributes.- Specified by:
getRichUserExtSources
in interfaceUsersManagerBl
- Parameters:
sess
- sessionuser
- user for who should be the data returnedattrsNames
- list of attribute names that should be found, if null or empty return all- Returns:
- list of user's external sources with attributes
-
getRichUserWithAttributes
public RichUser getRichUserWithAttributes(PerunSession sess, User user) throws UserNotExistsException Description copied from interface:UsersManagerBl
Get User to RichUser with attributes.- Specified by:
getRichUserWithAttributes
in interfaceUsersManagerBl
- Returns:
- Throws:
UserNotExistsException
-
getRichUsersByIds
Description copied from interface:UsersManagerBl
Returns rich users without attributes by their ids.- Specified by:
getRichUsersByIds
in interfaceUsersManagerBl
- Returns:
- list of rich users with specified ids
-
getRichUsersFromListOfUsers
Description copied from interface:UsersManagerBl
From Users makes RichUsers without attributes.- Specified by:
getRichUsersFromListOfUsers
in interfaceUsersManagerBl
users
- users to convert- Returns:
- list of richUsers
-
getRichUsersWithAttributesByIds
public List<RichUser> getRichUsersWithAttributesByIds(PerunSession sess, List<Integer> ids) throws UserNotExistsException Description copied from interface:UsersManagerBl
Returns rich users with attributes by their ids.- Specified by:
getRichUsersWithAttributesByIds
in interfaceUsersManagerBl
- Returns:
- list of rich users with specified ids
- Throws:
UserNotExistsException
-
getRichUsersWithAttributesFromListOfUsers
public List<RichUser> getRichUsersWithAttributesFromListOfUsers(PerunSession sess, List<User> users) throws UserNotExistsException Description copied from interface:UsersManagerBl
From Users makes RichUsers with attributes.- Specified by:
getRichUsersWithAttributesFromListOfUsers
in interfaceUsersManagerBl
users
- users to convert- Returns:
- list of richUsers
- Throws:
UserNotExistsException
-
getRichUsersWithoutVoAssigned
public List<RichUser> getRichUsersWithoutVoAssigned(PerunSession sess) throws UserNotExistsException Description copied from interface:UsersManagerBl
Returns all RichUsers with attributes who are not member of any VO.- Specified by:
getRichUsersWithoutVoAssigned
in interfaceUsersManagerBl
- Returns:
- list of richUsers who are not member of any VO
- Throws:
UserNotExistsException
-
getRichUsersWithoutVoWithAttributes
public List<RichUser> getRichUsersWithoutVoWithAttributes(PerunSession sess, List<String> attrsName) throws UserNotExistsException Description copied from interface:UsersManagerBl
Return list of RichUsers which are not members of any VO and contain selected attributes.- Specified by:
getRichUsersWithoutVoWithAttributes
in interfaceUsersManagerBl
- Returns:
- list of RichUsers
- Throws:
UserNotExistsException
-
getSpecificUsers
Description copied from interface:UsersManagerBl
Return all specific Users (only specific users)- Specified by:
getSpecificUsers
in interfaceUsersManagerBl
- Returns:
- list of all specific users in perun
-
getSpecificUsersByUser
Description copied from interface:UsersManagerBl
Return all specificUsers who are owned by the user and their ownership is not in status disabled- Specified by:
getSpecificUsersByUser
in interfaceUsersManagerBl
user
- the user- Returns:
- list of specific users who are owned by the user
-
getSponsors
Description copied from interface:UsersManagerBl
Gets list of users that sponsor the member.- Specified by:
getSponsors
in interfaceUsersManagerBl
- Parameters:
sess
- perun sessionsponsoredMember
- member which is sponsored- Returns:
- list of users that sponsor the member.
-
getSponsorsForSponsoredMembersInVo
public Map<Integer,List<Pair<User, getSponsorsForSponsoredMembersInVoSponsorship>>> (PerunSession sess, int voId) Description copied from interface:UsersManagerBl
Retrieves a map, that maps the ids of the sponsored members in the given VO to a list of their Sponsors with the corresponding Sponsorship objects.- Specified by:
getSponsorsForSponsoredMembersInVo
in interfaceUsersManagerBl
- Parameters:
sess
- perun sessionvoId
- id of a vo for whose members to retrieve the sponsors- Returns:
- Map of memberIds in the Vo with Lists of Pairs of their Sponsor and Sponsorship objects
-
getUserByExtSourceInformation
public User getUserByExtSourceInformation(PerunSession sess, PerunPrincipal principal) throws UserExtSourceNotExistsException, UserNotExistsException, ExtSourceNotExistsException Description copied from interface:UsersManagerBl
Get user by principal's additional identifiers or extSourceName and extSourceLogin. Additional identifiers are used in case principal's extSource was send through proxy which has enabled multiple identifiers. extSourceName and extSourceLogin are used otherwise.- Specified by:
getUserByExtSourceInformation
in interfaceUsersManagerBl
- Returns:
- Throws:
UserExtSourceNotExistsException
UserNotExistsException
ExtSourceNotExistsException
-
getUserByExtSourceNameAndExtLogin
public User getUserByExtSourceNameAndExtLogin(PerunSession sess, String extSourceName, String extLogin) throws ExtSourceNotExistsException, UserExtSourceNotExistsException, UserNotExistsException Description copied from interface:UsersManagerBl
Get user by extSourceName and extSourceLogin- Specified by:
getUserByExtSourceNameAndExtLogin
in interfaceUsersManagerBl
- Returns:
- user
- Throws:
ExtSourceNotExistsException
UserExtSourceNotExistsException
UserNotExistsException
-
getUserById
Description copied from interface:UsersManagerBl
Returns user by his/her id.- Specified by:
getUserById
in interfaceUsersManagerBl
- Returns:
- user
- Throws:
UserNotExistsException
-
getUserByMember
Description copied from interface:UsersManagerBl
Returns user by VO member.- Specified by:
getUserByMember
in interfaceUsersManagerBl
- Returns:
- user
-
getUserByUserExtSource
public User getUserByUserExtSource(PerunSession sess, UserExtSource userExtSource) throws UserNotExistsException Description copied from interface:UsersManagerBl
Returns user by his login in external source and external source.- Specified by:
getUserByUserExtSource
in interfaceUsersManagerBl
- Returns:
- selected user or throws UserNotExistsException in case the user doesn't exists
- Throws:
UserNotExistsException
-
getUserByUserExtSources
public User getUserByUserExtSources(PerunSession sess, List<UserExtSource> userExtSources) throws UserNotExistsException Description copied from interface:UsersManagerBl
Get the user based on one of the userExtSource.- Specified by:
getUserByUserExtSources
in interfaceUsersManagerBl
- Returns:
- user
- Throws:
UserNotExistsException
-
getUserExtSourceByExtLogin
public UserExtSource getUserExtSourceByExtLogin(PerunSession sess, ExtSource source, String extLogin) throws UserExtSourceNotExistsException Description copied from interface:UsersManagerBl
Gets user's external source by the user's external login and external source.- Specified by:
getUserExtSourceByExtLogin
in interfaceUsersManagerBl
- Returns:
- user external source object
- Throws:
UserExtSourceNotExistsException
-
getUserExtSourceById
public UserExtSource getUserExtSourceById(PerunSession sess, int id) throws UserExtSourceNotExistsException Description copied from interface:UsersManagerBl
Get the user ext source by its id.- Specified by:
getUserExtSourceById
in interfaceUsersManagerBl
- Returns:
- user external source for the id
- Throws:
UserExtSourceNotExistsException
-
getUserExtSourceByUniqueAttributeValue
public UserExtSource getUserExtSourceByUniqueAttributeValue(PerunSession sess, int attrId, String uniqueValue) throws AttributeNotExistsException, UserExtSourceNotExistsException Description copied from interface:UsersManagerBl
Return userExtSource for specific attribute definition (specified by id) and unique value. If not found, throw and exception.It looks for exactly one value of the specific attribute type: - Integer -> exactly match - String -> exactly match - Map -> exactly match of "key=value" - ArrayList -> exactly match of one of the value
- Specified by:
getUserExtSourceByUniqueAttributeValue
in interfaceUsersManagerBl
attrId
- attribute id used for founding attribute definition which has to exists, be unique and in userExtSource namespaceuniqueValue
- value used for searching- Returns:
- userExtSource found by attribute id and it's unique value
- Throws:
AttributeNotExistsException
- if attribute can't be found by it's idUserExtSourceNotExistsException
- if userExtSource can't be found
-
getUserExtSourceByUniqueAttributeValue
public UserExtSource getUserExtSourceByUniqueAttributeValue(PerunSession sess, String attrName, String uniqueValue) throws AttributeNotExistsException, UserExtSourceNotExistsException Description copied from interface:UsersManagerBl
Return userExtSource for specific attribute definition (specified by id) and unique value. If not found, throw and exception.It looks for exactly one value of the specific attribute type: - Integer -> exactly match - String -> exactly match - Map -> exactly match of "key=value" - ArrayList -> exactly match of one of the value
- Specified by:
getUserExtSourceByUniqueAttributeValue
in interfaceUsersManagerBl
attrName
- attribute name used for founding attribute definition which has to exists, be unique and in userExtSource namespaceuniqueValue
- value used for searching- Returns:
- userExtSource found by attribute name and it's unique value
- Throws:
AttributeNotExistsException
- if attribute can't be found by it's nameUserExtSourceNotExistsException
- if userExtSource can't be found
-
getUserExtSourceFromMultipleIdentifiers
public UserExtSource getUserExtSourceFromMultipleIdentifiers(PerunSession sess, PerunPrincipal principal) throws UserExtSourceNotExistsException Description copied from interface:UsersManagerBl
Iteratively searches through additional identifiers trying to find userExtSource with the same identifier. Returns first found userExtSource or throw an exception when no matching userExtSource is found.- Specified by:
getUserExtSourceFromMultipleIdentifiers
in interfaceUsersManagerBl
- Parameters:
sess
- PerunSession to retrieve UserExtSourceprincipal
- PerunPrincipal which contains additionalIdentifiers- Returns:
- UserExtSource found using additionalIdentifiers
- Throws:
UserExtSourceNotExistsException
- When no matching userExtSource is found
-
getUserExtSources
Description copied from interface:UsersManagerBl
Gets list of all user's external sources of the user.- Specified by:
getUserExtSources
in interfaceUsersManagerBl
- Returns:
- list of user's external sources
-
getUserExtSourcesByIds
Description copied from interface:UsersManagerBl
Get user ext sources by their ids.- Specified by:
getUserExtSourcesByIds
in interfaceUsersManagerBl
- Returns:
- list of user external sources with specified ids
-
getUsers
Description copied from interface:UsersManagerBl
Returns all users (included specific users)- Specified by:
getUsers
in interfaceUsersManagerBl
- Returns:
- list of all users
-
getUsersByAttribute
Description copied from interface:UsersManagerBl
Returns all users who have set the attribute with the value. Searching only def and opt attributes.- Specified by:
getUsersByAttribute
in interfaceUsersManagerBl
- Returns:
- list of users
-
getUsersByAttribute
public List<User> getUsersByAttribute(PerunSession sess, String attributeName, String attributeValue) Search attributes directly in the DB only if the attr is def or opt and value is type of String, otherwise load all users and search in a loop.- Specified by:
getUsersByAttribute
in interfaceUsersManagerBl
- Returns:
- list of users
-
getUsersByAttribute
Description copied from interface:UsersManagerBl
Returns all users who have set the attribute with the value IGNORING CASE in the comparison. Searching only def and opt attributes.- Specified by:
getUsersByAttribute
in interfaceUsersManagerBl
ignoreCase
- TRUE to perform case-insensitive check- Returns:
- list of users
-
getUsersByAttributeValue
public List<User> getUsersByAttributeValue(PerunSession sess, String attributeName, String attributeValue) Description copied from interface:UsersManagerBl
Returns all users who have the attribute with the value. attributeValue is not converted to the attribute type, it is always type of String.- Specified by:
getUsersByAttributeValue
in interfaceUsersManagerBl
- Returns:
- list of users
-
getUsersByExtSourceTypeAndLogin
public List<User> getUsersByExtSourceTypeAndLogin(PerunSession perunSession, String extSourceType, String login) Description copied from interface:UsersManagerBl
Get all the users who have given type of the ExtSource and login.- Specified by:
getUsersByExtSourceTypeAndLogin
in interfaceUsersManagerBl
- Parameters:
perunSession
- perun sessionextSourceType
- type of the user extSourcelogin
- login of the user- Returns:
- all users with given parameters
-
getUsersByIds
Description copied from interface:UsersManagerBl
Batch method which returns users by theirs ids.- Specified by:
getUsersByIds
in interfaceUsersManagerBl
- Returns:
-
getUsersByPerunBean
Description copied from interface:UsersManagerBl
Returns list of users connected with a group- Specified by:
getUsersByPerunBean
in interfaceUsersManagerBl
- Returns:
- list of users connected with group
-
getUsersByPerunBean
Description copied from interface:UsersManagerBl
Returns list of users connected with a member- Specified by:
getUsersByPerunBean
in interfaceUsersManagerBl
- Returns:
- list of users connected with member
-
getUsersByPerunBean
Description copied from interface:UsersManagerBl
Returns list of users connected with a resource- Specified by:
getUsersByPerunBean
in interfaceUsersManagerBl
- Returns:
- list of users connected with resource
-
getUsersByPerunBean
Description copied from interface:UsersManagerBl
Returns list of users connected with a host- Specified by:
getUsersByPerunBean
in interfaceUsersManagerBl
- Returns:
- list of users connected with host
-
getUsersByPerunBean
Description copied from interface:UsersManagerBl
Returns list of users connected with a facility- Specified by:
getUsersByPerunBean
in interfaceUsersManagerBl
- Returns:
- list of users connected with facility
-
getUsersByPerunBean
Description copied from interface:UsersManagerBl
Returns list of users connected with a vo- Specified by:
getUsersByPerunBean
in interfaceUsersManagerBl
- Returns:
- list of users connected with vo
-
getUsersBySpecificUser
Description copied from interface:UsersManagerBl
Return all users who owns the specificUser and their ownership is not in status disabled- Specified by:
getUsersBySpecificUser
in interfaceUsersManagerBl
specificUser
- the specific User- Returns:
- list of user who owns the specificUser
-
getUsersCount
Description copied from interface:UsersManagerBl
Get count of all users.- Specified by:
getUsersCount
in interfaceUsersManagerBl
- Returns:
- count of all users
-
getUsersManagerImpl
Gets the usersManagerImpl for this instance.- Returns:
- The usersManagerImpl.
-
getUsersPage
public Paginated<RichUser> getUsersPage(PerunSession sess, UsersPageQuery query, List<String> attrNames) Description copied from interface:UsersManagerBl
Get page of users with the given attributes.- Specified by:
getUsersPage
in interfaceUsersManagerBl
- Parameters:
sess
- sessionquery
- query with page informationattrNames
- list of attribute names- Returns:
- page of requested rich users
-
getUsersReservedLogins
Description copied from interface:UsersManagerBl
Return list of all reserved logins for specific user (pair is namespace and login)- Specified by:
getUsersReservedLogins
in interfaceUsersManagerBl
user
- for which get reserved logins- Returns:
- list of pairs namespace and login
-
getUsersWithoutSpecificVo
Description copied from interface:UsersManagerBl
Return list of users who matches the searchString, searching name, email and logins and are not member in specific VO.- Specified by:
getUsersWithoutSpecificVo
in interfaceUsersManagerBl
- Returns:
- list of users
-
getUsersWithoutVoAssigned
Description copied from interface:UsersManagerBl
Returns all users who are not member of any VO.- Specified by:
getUsersWithoutVoAssigned
in interfaceUsersManagerBl
- Returns:
- list of users who are not member of any VO
-
getVosWhereUserIsAdmin
Description copied from interface:UsersManagerBl
Returns list of VOs, where the user is an Administrator. Including VOs, where the user is a VALID member of authorized group.- Specified by:
getVosWhereUserIsAdmin
in interfaceUsersManagerBl
- Returns:
- list of VOs, where the user is an Administrator.
-
getVosWhereUserIsMember
Description copied from interface:UsersManagerBl
Returns list of VOs, where the user is a member.- Specified by:
getVosWhereUserIsMember
in interfaceUsersManagerBl
- Returns:
- list of VOs, where the user is a member.
-
isLoginAvailable
public boolean isLoginAvailable(PerunSession sess, String loginNamespace, String login) throws InvalidLoginException Description copied from interface:UsersManagerBl
Checks if the login is available in the namespace. Returns FALSE is is already occupied, throws exception if value is not allowed.- Specified by:
isLoginAvailable
in interfaceUsersManagerBl
loginNamespace
- in which the login will be checked (provide only the name of the namespace, not the whole attribute name)login
- to be checked- Returns:
- true if login is available, false otherwise
- Throws:
InvalidLoginException
- When login to check has invalid syntax or is not allowed.
-
isLoginBlocked
Description copied from interface:UsersManagerBl
Return true if login is blocked (globally - for all namespaces per instance OR for some namespace), false if not. Globally banned logins are ALWAYS case-insensitive (ignoreCase value is not taken into account for them).- Specified by:
isLoginBlocked
in interfaceUsersManagerBl
login
- login to check- Returns:
- true if login is blocked
-
isLoginBlockedForNamespace
public boolean isLoginBlockedForNamespace(PerunSession sess, String login, String namespace, boolean ignoreCase) Description copied from interface:UsersManagerBl
Return true if login is blocked for given namespace, false if not When the namespace is null, then the method behaves like isLoginBlockedGlobally(), so it checks if the login is blocked globally. Globally banned logins are ALWAYS case-insensitive.- Specified by:
isLoginBlockedForNamespace
in interfaceUsersManagerBl
login
- login to checknamespace
- namespace for login- Returns:
- true if login is blocked for given namespace (or globally for null namespace)
-
isLoginBlockedGlobally
Description copied from interface:UsersManagerBl
Return true if login is blocked globally (for all namespaces per instance - represented by namespace = null), false if not Globally banned logins are ALWAYS case-insensitive.- Specified by:
isLoginBlockedGlobally
in interfaceUsersManagerBl
login
- login to check- Returns:
- true if login is blocked globally
-
isUserAnonymized
Description copied from interface:UsersManagerBl
Checks whether user has been anonymized or not.- Specified by:
isUserAnonymized
in interfaceUsersManagerBl
- Returns:
- true if user has been anonymized, false otherwise.
-
isUserPerunAdmin
Deprecated.Description copied from interface:UsersManagerBl
Returns true if the user is PERUNADMIN.- Specified by:
isUserPerunAdmin
in interfaceUsersManagerBl
- Returns:
- true if the user is PERUNADMIN, false otherwise.
-
loginExist
Description copied from interface:UsersManagerBl
Checks if login exists in given login-namespace.- Specified by:
loginExist
in interfaceUsersManagerBl
- Parameters:
sess
- perunSession- Returns:
- True if login for user exists in given namespace, false otherwise
-
moveUserExtSource
public void moveUserExtSource(PerunSession sess, User sourceUser, User targetUser, UserExtSource userExtSource) Description copied from interface:UsersManagerBl
Take UserExtSource from sourceUser and move it to the targetUser.It removes old UserExtSource with all it's attributes from sourceUser and creates and assigns the new one with the same settings to target user.
- Specified by:
moveUserExtSource
in interfaceUsersManagerBl
sourceUser
- user with UserExtSource to movetargetUser
- user for who will be UserExtSource moveduserExtSource
- the UserExtSource which will be moved from sourceUser to targetUser
-
removeAllUserExtSources
Description copied from interface:UsersManagerBl
Removes all user's external sources. It also means removing all it's attributes.- Specified by:
removeAllUserExtSources
in interfaceUsersManagerBl
- Parameters:
sess
- sessionuser
- owner of external sources
-
removeSpecificUserOwner
public void removeSpecificUserOwner(PerunSession sess, User user, User specificUser) throws RelationNotExistsException, SpecificUserOwnerAlreadyRemovedException Description copied from interface:UsersManagerBl
Remove specificUser owner (the user) Only disable ownership of user and specificUser- Specified by:
removeSpecificUserOwner
in interfaceUsersManagerBl
user
- the userspecificUser
- the specificUser- Throws:
RelationNotExistsException
- if there is no such user (the user) to removeSpecificUserOwnerAlreadyRemovedException
- if there are 0 rows affected by deleting from DB
-
removeSpecificUserOwner
public void removeSpecificUserOwner(PerunSession sess, User user, User specificUser, boolean forceDelete) throws RelationNotExistsException, SpecificUserOwnerAlreadyRemovedException Description copied from interface:UsersManagerBl
Remove specificUser owner (the user). If forceDelete false, only disable ownership of user and specificUser. If forceDelete true, delete this ownership from DB.- Specified by:
removeSpecificUserOwner
in interfaceUsersManagerBl
user
- the userspecificUser
- the specificUserforceDelete
- if true, remove from database, if false, only disable this ownership- Throws:
RelationNotExistsException
- if there is no such user (the user) to removeSpecificUserOwnerAlreadyRemovedException
- if there are 0 rows affected by deleting from DB
-
removeUserExtSource
public void removeUserExtSource(PerunSession sess, User user, UserExtSource userExtSource) throws UserExtSourceAlreadyRemovedException Description copied from interface:UsersManagerBl
Removes user's external sources. It also means removing all it's attributes.- Specified by:
removeUserExtSource
in interfaceUsersManagerBl
- Throws:
UserExtSourceAlreadyRemovedException
- if there are 0 rows affected by deleting from DB
-
requestPreferredEmailChange
public void requestPreferredEmailChange(PerunSession sess, String url, User user, String email, String lang, String path, String idp) Description copied from interface:UsersManagerBl
Request change of user's preferred email address. Change in attribute value is not done, until email address is verified by link in email notice. (urn:perun:user:attribute-def:def:preferredEmail)- Specified by:
requestPreferredEmailChange
in interfaceUsersManagerBl
- Parameters:
sess
- PerunSessionurl
- base URL of running perun instance passed from RPC.user
- User to request preferred email change foremail
- new email addresslang
- language to get confirmation mail in (optional)path
- path that is appended to the url of the verification link (optional)idp
- authentication method appended to query parameters of verification link (optional)
-
reservePassword
public void reservePassword(PerunSession sess, String userLogin, String loginNamespace, String password) throws PasswordCreationFailedException, PasswordOperationTimeoutException, PasswordStrengthFailedException, InvalidLoginException, PasswordStrengthException Description copied from interface:UsersManagerBl
Reserves the password in external system. User must not exists.- Specified by:
reservePassword
in interfaceUsersManagerBl
userLogin
- string representation of the userLogin- Throws:
PasswordCreationFailedException
InvalidLoginException
- When login of user has invalid syntax (is not allowed)PasswordStrengthException
- When password doesn't match expected strength by namespace configurationPasswordOperationTimeoutException
PasswordStrengthFailedException
-
reservePassword
public void reservePassword(PerunSession sess, User user, String loginNamespace, String password) throws PasswordCreationFailedException, LoginNotExistsException, PasswordOperationTimeoutException, PasswordStrengthFailedException, InvalidLoginException, PasswordStrengthException Description copied from interface:UsersManagerBl
Reserves the password in external system. User must exists. User's login for specified namespace must exist in Perun.- Specified by:
reservePassword
in interfaceUsersManagerBl
- Throws:
PasswordCreationFailedException
LoginNotExistsException
- When user doesn't have login in specified namespaceInvalidLoginException
- When login of user has invalid syntax (is not allowed)PasswordStrengthException
- When password doesn't match expected strength by namespace configurationPasswordOperationTimeoutException
PasswordStrengthFailedException
-
reserveRandomPassword
public void reserveRandomPassword(PerunSession sess, User user, String loginNamespace) throws PasswordCreationFailedException, LoginNotExistsException, PasswordOperationTimeoutException, PasswordStrengthFailedException, InvalidLoginException Description copied from interface:UsersManagerBl
Reserves random password in external system. User must exists. User's login for specified namespace must exist in Perun.- Specified by:
reserveRandomPassword
in interfaceUsersManagerBl
- Throws:
PasswordCreationFailedException
LoginNotExistsException
- When user doesn't have login in specified namespaceInvalidLoginException
- When login of user has invalid syntax (is not allowed)PasswordOperationTimeoutException
PasswordStrengthFailedException
-
setLogin
Description copied from interface:UsersManagerBl
Allow users to manually add login in supported namespace if same login is not reserved- Specified by:
setLogin
in interfaceUsersManagerBl
-
setPerunBl
-
setSpecificUser
public User setSpecificUser(PerunSession sess, User specificUser, SpecificUserType specificUserType, User owner) throws RelationExistsException Description copied from interface:UsersManagerBl
Set specific user type for specific user and set ownership of this user for the owner.- Specified by:
setSpecificUser
in interfaceUsersManagerBl
- Parameters:
sess
- perun sessionspecificUser
- specific userspecificUserType
- specific type of userowner
- user, who will be owner of the specific user- Returns:
- specific user with specific user type set
- Throws:
RelationExistsException
-
specificUserOwnershipExists
Description copied from interface:UsersManagerBl
Return true if ownership of user and specificUser already exists. Return false if not. Looking for enabled and also for disabled ownership.- Specified by:
specificUserOwnershipExists
in interfaceUsersManagerBl
- Returns:
-
unblockLogins
public void unblockLogins(PerunSession sess, List<String> logins, String namespace) throws LoginIsNotBlockedException Description copied from interface:UsersManagerBl
Unblock logins for given namespace or unblock logins globally (if no namespace is selected)- Specified by:
unblockLogins
in interfaceUsersManagerBl
logins
- logins list of logins to be unblockednamespace
- namespace where the logins should be unblocked (null means unblock the logins globally)- Throws:
LoginIsNotBlockedException
-
unblockLoginsById
public void unblockLoginsById(PerunSession sess, List<Integer> loginIds) throws LoginIsNotBlockedException Description copied from interface:UsersManagerBl
Unblock logins by id globally, or in the namespace they were initially blocked.- Specified by:
unblockLoginsById
in interfaceUsersManagerBl
- Parameters:
sess
- sessionloginIds
- list of login ids- Throws:
LoginIsNotBlockedException
- when login is not blocked
-
unblockLoginsForNamespace
Description copied from interface:UsersManagerBl
Unblock all logins for given namespace- Specified by:
unblockLoginsForNamespace
in interfaceUsersManagerBl
- Parameters:
sess
- PerunSessionnamespace
- Namespace or null for globally blocked
-
unsetSpecificUser
public User unsetSpecificUser(PerunSession sess, User specificUser, SpecificUserType specificUserType) Description copied from interface:UsersManagerBl
Remove all ownerships of this specific user and unset this specific user type from this specific user.- Specified by:
unsetSpecificUser
in interfaceUsersManagerBl
- Parameters:
sess
- perun sessionspecificUser
- specific userspecificUserType
- specific type of user- Returns:
- user who is no more specific
-
updateNameTitles
Description copied from interface:UsersManagerBl
Updates titles before/after users name. New titles must be set inside User object. Setting any title to null will remove title from name. Other user's properties are ignored.- Specified by:
updateNameTitles
in interfaceUsersManagerBl
- Returns:
- updated user with new titles before/after name
- Throws:
UserNotExistsException
- if user not exists when method trying to update him
-
updateUser
Description copied from interface:UsersManagerBl
Updates users data in DB.- Specified by:
updateUser
in interfaceUsersManagerBl
- Returns:
- updated user
- Throws:
UserNotExistsException
- if user not exists when method trying to update him
-
updateUserExtSource
public UserExtSource updateUserExtSource(PerunSession sess, UserExtSource userExtSource) throws UserExtSourceExistsException Description copied from interface:UsersManagerBl
Updates user's userExtSource in DB.- Specified by:
updateUserExtSource
in interfaceUsersManagerBl
- Returns:
- updated userExtSource
- Throws:
UserExtSourceExistsException
- When UES with same login/extSource already exists.
-
updateUserExtSourceLastAccess
Description copied from interface:UsersManagerBl
Updates user's userExtSource last access time in DB. We can get information which userExtSource has been used as a last one.- Specified by:
updateUserExtSourceLastAccess
in interfaceUsersManagerBl
-
userExtSourceExists
- Specified by:
userExtSourceExists
in interfaceUsersManagerBl
-
validatePassword
public void validatePassword(PerunSession sess, String userLogin, String loginNamespace) throws PasswordCreationFailedException, InvalidLoginException Description copied from interface:UsersManagerBl
Validates the password in external system and sets user extSources and extSource related attributes. User must not exists.- Specified by:
validatePassword
in interfaceUsersManagerBl
userLogin
- string representation of the userLogin- Throws:
PasswordCreationFailedException
InvalidLoginException
- When login of user has invalid syntax (is not allowed)
-
validatePassword
public void validatePassword(PerunSession sess, User user, String loginNamespace) throws PasswordCreationFailedException, LoginNotExistsException, InvalidLoginException Description copied from interface:UsersManagerBl
Validates the password in external system and sets user extSources and extSource related attributes. User must exists. User's login for specified namespace must exist in Perun.- Specified by:
validatePassword
in interfaceUsersManagerBl
- Throws:
PasswordCreationFailedException
LoginNotExistsException
- When user doesn't have login in specified namespaceInvalidLoginException
- When login of user has invalid syntax (is not allowed)
-
validatePreferredEmailChange
public String validatePreferredEmailChange(PerunSession sess, User user, UUID token) throws WrongAttributeValueException, WrongAttributeAssignmentException, AttributeNotExistsException, WrongReferenceAttributeValueException Description copied from interface:UsersManagerBl
Validate change of user's preferred email address. New email address is set as value of urn:perun:user:attribute-def:def:preferredEmail attribute.- Specified by:
validatePreferredEmailChange
in interfaceUsersManagerBl
- Parameters:
sess
- PerunSessionuser
- User to validate email address fortoken
- token for the email change request to validate- Returns:
- String return new preferred email
- Throws:
WrongAttributeValueException
- If new email address is in wrong formatWrongAttributeAssignmentException
AttributeNotExistsException
- If user:preferredEmail attribute doesn't exists.WrongReferenceAttributeValueException
-
validateSSHKey
Description copied from interface:UsersManagerBl
Validate ssh public key, throws exception if validation fails- Specified by:
validateSSHKey
in interfaceUsersManagerBl
- Parameters:
sess
- sesssshKey
- ssh public key to verify- Throws:
SSHKeyNotValidException
- when validation fails
-