Package cz.metacentrum.perun.core.entry

Class UsersManagerEntry

java.lang.Object

cz.metacentrum.perun.core.entry.UsersManagerEntry

All Implemented Interfaces:

UsersManager

public class UsersManagerEntry
extends Object
implements UsersManager

UsersManager entry logic

Author:

Slavek Licehammer glory@ics.muni.cz, Sona Mastrakova

Field Summary

Fields inherited from interface cz.metacentrum.perun.core.api.UsersManager

USERS_QUERY

Constructor Summary

Constructors

Constructor	Description
UsersManagerEntry()
UsersManagerEntry(PerunBl perunBl)

Method Summary

Modifier and Type	Method	Description
void	addSpecificUserOwner(PerunSession sess, User user, User specificUser)	Add specificUser owner (the user) If not exists, create new ownership.
UserExtSource	addUserExtSource(PerunSession sess, User user, UserExtSource userExtSource)	Adds user's external sources.
RichUserExtSource	addUserExtSourceWithAttributes(PerunSession sess, User user, UserExtSource userExtSource, List<Attribute> uesAttributes)	Adds userExternalSource to the user along with the ues attributes.
void	anonymizeUser(PerunSession sess, User user, boolean force)	Anonymizes user - according to configuration, each of user's attributes is either anonymized, kept untouched or deleted.
void	blockLogins(PerunSession sess, List<String> logins, String namespace)	Block logins for given namespace or block logins globally (if no namespace is selected)
void	changeEmail(PerunSession sess, User user, String newEmail)	Change user's email to email from user ext source.
void	changeEmailCustom(PerunSession sess, User user, String newEmail, String url, String lang, String path, String idp)	Change user's email to custom email.
void	changeName(PerunSession sess, User user, String newUserName)	Change user's name to user's name from user ext source.
void	changeNameCustom(PerunSession sess, User user, String titleBefore, String firstName, String middleName, String lastName, String titleAfter)	Change user's name to custom name.
void	changeNonAuthzPassword(PerunSession sess, UUID token, String password, String lang)	Changes user password in defined login-namespace based on token parameter.
void	changeOrganization(PerunSession sess, User user, String newOrganizationName)	Change organization from which user came to organization from user ext source.
void	changeOrganizationCustom(PerunSession sess, User user, String newOrganizationName)	Change organization from which user came to custom organization.
void	changePassword(PerunSession sess, User user, String loginNamespace, String oldPassword, String newPassword, boolean checkOldPassword)	Changes user password in defined login-namespace.
void	changePassword(PerunSession sess, String login, String loginNamespace, String oldPassword, String newPassword, boolean checkOldPassword)	Changes user password in defined login-namespace.
String	changePasswordRandom(PerunSession sess, User user, String loginNamespace)	Generates new random password for given user and returns String representing HTML where is the new password.
void	checkPasswordResetRequestIsValid(PerunSession sess, UUID token)	Checks if the password reset request is valid.
void	checkPasswordStrength(PerunSession sess, String password, String namespace, String login)	Check password strength for the given namespace.
void	createAlternativePassword(PerunSession sess, User user, String description, String loginNamespace, String password)	Creates alternative password in external system.
User	createServiceUser(PerunSession sess, Candidate candidate, List<User> owners)	From given candidate, creates a service user and assign given owners to him.
User	createUser(PerunSession sess, User user)	Deprecated.
void	deleteAlternativePassword(PerunSession sess, User user, String loginNamespace, String passwordId)	Deletes alternative password in external system.
void	deletePassword(PerunSession sess, User user, String loginNamespace)	Deletes password in external system.
void	deletePassword(PerunSession sess, String userLogin, String loginNamespace)	Deletes password in external system.
void	deleteUser(PerunSession sess, User user)	Deletes user.
void	deleteUser(PerunSession sess, User user, boolean forceDelete)	Deletes user.
List<RichUser>	findRichUsers(PerunSession sess, String searchString)	Returns list of RichUsers with attributes who matches the searchString, searching name, id, uuid, email, logins.
List<RichUser>	findRichUsersWithAttributes(PerunSession sess, String searchString, List<String> attrNames)	Returns list of RichUsers with attributes who matches the searchString, searching name, id, uuid, email, logins.
List<RichUser>	findRichUsersWithAttributesByExactMatch(PerunSession sess, String searchString, List<String> attrNames)	Returns list of RichUsers with attributes who matches the searchString, searching name, id, uuid, email, logins.
List<RichUser>	findRichUsersWithoutSpecificVoWithAttributes(PerunSession sess, Vo vo, String searchString, List<String> attrsName)	Return list of RichUsers who matches the searchString, searching name, email and logins and are not member in specific VO and contain selected attributes.
List<User>	findUsers(PerunSession sess, String searchString)	Returns list of users who matches the searchString, searching name, id, uuid, email, logins.
List<User>	findUsersByExactName(PerunSession sess, String searchString)	Returns list of users who exactly matches the searchString
List<User>	findUsersByName(PerunSession sess, String searchString)	Returns list of users who matches the searchString
List<User>	findUsersByName(PerunSession sess, String titleBefore, String firstName, String middleName, String lastName, String titleAfter)	Returns list of users who matches the fields.
Map<String,String>	generateAccount(PerunSession sess, String namespace, Map<String,String> parameters)	Generate user account in a backend system associated with login-namespace in Perun.
List<BlockedLogin>	getAllBlockedLoginsInNamespaces(PerunSession sess)	Returns all blocked logins in namespaces (if namespace is null, then this login is blocked globally)
List<Resource>	getAllowedResources(PerunSession sess, Facility facility, User user)	Get all resources from the facility which have the user access on.
List<Resource>	getAllowedResources(PerunSession sess, User user)	Get all resources which have the user access on.
List<RichUser>	getAllRichUsers(PerunSession sess, boolean includedSpecificUsers)	Get All richUsers with or without specificUsers.
List<RichUser>	getAllRichUsersWithAttributes(PerunSession sess, boolean includedSpecificUsers)	Get All richUsers with or without specificUsers.
List<RichUser>	getAllRichUsersWithAttributes(PerunSession sess, boolean includedSpecificUsers, List<String> attrsNames)	Get All richUsers with or without specificUsers.
List<RichResource>	getAssignedRichResources(PerunSession sess, User user)	Get all rich resources which have the user assigned.
List<Resource>	getAssociatedResources(PerunSession sess, Facility facility, User user)	Return all resources of specified facility with which user is associated through all his members.
Paginated<BlockedLogin>	getBlockedLoginsPage(PerunSession sess, BlockedLoginsPageQuery query)	Get page of blocked logins.
List<Group>	getGroupsWhereUserIsActive(PerunSession sess, Facility facility, User user)	Return all groups where user is active (has VALID status in VO and Group together) for specified user and facility
List<Group>	getGroupsWhereUserIsActive(PerunSession sess, Resource resource, User user)	Return all groups where user is active (has VALID status in VO and Group together) for specified user and resource
List<Group>	getGroupsWhereUserIsAdmin(PerunSession sess, User user)	Returns list of Groups in Perun, where the User is a direct Administrator or he is VALID a member of any group which is Administrator of some of these Groups.
List<Group>	getGroupsWhereUserIsAdmin(PerunSession sess, Vo vo, User user)	Returns list of Groups in selected Vo, where the User is a direct Administrator or he is a VALID member of any group which is Administrator of some of these Groups.
List<String>	getPendingPreferredEmailChanges(PerunSession sess, User user)	Return list of email addresses of user, which are awaiting validation and are inside time window for validation.
PerunBl	getPerunBl()
Integer	getRelatedUserIdByBlockedLoginInNamespace(PerunSession sess, String login, String namespace)	Get user id of the user who was related to the given login in the past
List<RichGroup>	getRichGroupsWhereUserIsActive(PerunSession sess, Facility facility, User user, List<String> attrNames)	Return all groups where user is active (has VALID status in VO and Group together) for specified user and resource
List<RichGroup>	getRichGroupsWhereUserIsActive(PerunSession sess, Resource resource, User user, List<String> attrNames)	Return all RichGroups where user is active (has VALID status in VO and Group together) for specified user and resource with specified group attributes by their names (URNs).
RichUser	getRichUser(PerunSession sess, User user)	Get User to RichUser without attributes.
List<RichUserExtSource>	getRichUserExtSources(PerunSession sess, User user)	Gets list of all user's external sources with attributes.
List<RichUserExtSource>	getRichUserExtSources(PerunSession sess, User user, List<String> attrsNames)	Gets list of all user's external sources with attributes.
List<RichUser>	getRichUsersByIds(PerunSession sess, List<Integer> ids)	Returns rich users without attributes by their ids.
List<RichUser>	getRichUsersWithAttributesByIds(PerunSession sess, List<Integer> ids)	Returns rich users with attributes by their ids.
List<RichUser>	getRichUsersWithoutVoAssigned(PerunSession sess)	Returns all RichUsers with attributes who are not member of any VO.
List<RichUser>	getRichUsersWithoutVoWithAttributes(PerunSession sess, List<String> attrsName)	Returns list of RichUsers which are not members of any VO and with selected attributes
RichUser	getRichUserWithAttributes(PerunSession sess, User user)	Get User to RichUser with attributes.
List<User>	getSpecificUsers(PerunSession sess)	Return all specific Users (only specific users)
List<User>	getSpecificUsersByUser(PerunSession sess, User user)	Return all specificUsers who are owned by the user
List<RichUser>	getSponsors(PerunSession sess, Member member, List<String> attrNames)	Deprecated.
List<Sponsor>	getSponsorsForMember(PerunSession sess, Member member, List<String> attrNames)	Gets list of users that sponsor the member, with attributes.
List<User>	getUnanonymizedUsersBySpecificUser(PerunSession sess, User specificUser)	Return all users who owns the specific one and are not anonymized
Map<Facility,List<Resource>>	getUserAssignments(PerunSession sess, User user)	Returns all assignments of the user, assignments being Facilities and Resources they are assigned to.
User	getUserByExtSourceNameAndExtLogin(PerunSession sess, String extSourceName, String extLogin)	Get user by extSourceName and extSourceLogin
User	getUserById(PerunSession sess, int id)	Returns user by his/her id.
User	getUserByMember(PerunSession sess, Member member)	Returns user by VO member.
User	getUserByUserExtSource(PerunSession sess, UserExtSource userExtSource)	Returns user by his login in external source and external source.
User	getUserByUserExtSources(PerunSession sess, List<UserExtSource> userExtSources)	Returns user based on one of the userExtSource.
UserExtSource	getUserExtSourceByExtLogin(PerunSession sess, ExtSource source, String extLogin)	Gets user's external source by the user's external login and external source.
UserExtSource	getUserExtSourceById(PerunSession sess, int id)	Get the user ext source by its id.
UserExtSource	getUserExtSourceByUniqueAttributeValue(PerunSession sess, int attrId, String uniqueValue)	Return userExtSource for specific attribute definition (specified by id) and unique value.
UserExtSource	getUserExtSourceByUniqueAttributeValue(PerunSession sess, String attrName, String uniqueValue)	Return userExtSource for specific attribute definition (specified by name) and unique value.
List<UserExtSource>	getUserExtSources(PerunSession sess, User user)	Gets list of all user's external sources of the user.
List<UserExtSource>	getUserExtSourcesByIds(PerunSession sess, List<Integer> ids)	Get the user ext sources by their ids.
Map<String,List<PerunBean>>	getUserRelations(PerunSession sess, User user)	Gets map with 2 items which are a list of all vos and a list of all groups where given user is member filtered by principal's privileges.
List<User>	getUsers(PerunSession sess)	Returns all users (included specific users).
List<User>	getUsersByAttribute(PerunSession sess, Attribute attribute)	Returns all users who have set the attribute with the value.
List<User>	getUsersByAttribute(PerunSession sess, String attributeName, String attributeValue)	Returns all users who have set the attribute with the value.
List<User>	getUsersByAttributeValue(PerunSession sess, String attributeName, String attributeValue)	Returns all users who have the attribute with the value. attributeValue is not converted to the attribute type, it is always type of String.
List<User>	getUsersByIds(PerunSession sess, List<Integer> ids)	Returns existing users by their ids.
List<User>	getUsersBySpecificUser(PerunSession sess, User specificUser)	Return all users who owns the specific one
int	getUsersCount(PerunSession sess)	Get count of all users.
UsersManagerBl	getUsersManagerBl()	Gets the usersManagerBl for this instance.
UsersManagerImplApi	getUsersManagerImpl()
Paginated<RichUser>	getUsersPage(PerunSession sess, UsersPageQuery query, List<String> attrNames)	Get page of users with the given attributes.
List<User>	getUsersWithoutSpecificVo(PerunSession sess, Vo vo, String searchString)	Return list of users who matches the searchString, searching name, email and logins and are not member in specific VO.
List<User>	getUsersWithoutVoAssigned(PerunSession sess)	Returns all users who are not member of any VO.
List<Vo>	getVosWhereUserIsAdmin(PerunSession sess, User user)	Returns list of VOs, where the user is an Administrator.
List<Vo>	getVosWhereUserIsMember(PerunSession sess, User user)	Returns list of VOs, where the user is a member.
boolean	isLoginAvailable(PerunSession sess, String loginNamespace, String login)	Checks if the login is available in the namespace.
boolean	isLoginBlocked(PerunSession sess, String login, boolean ignoreCase)	Return true if login is blocked (globally - for all namespaces per instance OR for some namespace), false if not.
boolean	isLoginBlockedForNamespace(PerunSession sess, String login, String namespace, boolean ignoreCase)	Return true if login is blocked for given namespace, false if not.
boolean	isLoginBlockedGlobally(PerunSession sess, String login)	Return true if login is blocked globally (for all namespaces per instance - represented by namespace = null), false if not.
boolean	isUserPerunAdmin(PerunSession sess, User user)	Deprecated.
boolean	loginExist(PerunSession sess, User user, String loginNamespace)	Check, if login exists in given login-namespace.
void	moveUserExtSource(PerunSession sess, User sourceUser, User targetUser, UserExtSource userExtSource)	Take UserExtSource from sourceUser and move it to the targetUser.
void	removeSpecificUserOwner(PerunSession sess, User user, User specificUser)	Remove specificUser owner (the user) Only disable ownership of user and specificUser
void	removeUserExtSource(PerunSession sess, User user, UserExtSource userExtSource)	Removes user's external source.
void	removeUserExtSource(PerunSession sess, User user, UserExtSource userExtSource, boolean forceDelete)	Removes user's external source.
void	removeUserExtSources(PerunSession sess, User user, List<UserExtSource> userExtSources, boolean forceDelete)	Removes user's external sources.
void	requestPreferredEmailChange(PerunSession sess, String url, User user, String email, String lang, String path, String idp)	Request change of user's preferred email address.
void	reservePassword(PerunSession sess, User user, String loginNamespace, String password)	Reserves the password in external system.
void	reservePassword(PerunSession sess, String userLogin, String loginNamespace, String password)	Reserves the password in external system.
void	reserveRandomPassword(PerunSession sess, User user, String loginNamespace)	Reserves random password in external system.
void	setLogin(PerunSession sess, User user, String loginNamespace, String login)	Allow users to manually add login in supported namespace if same login is not reserved.
void	setPerunBl(PerunBl perunBl)	Sets the perunBl for this instance.
User	setSpecificUser(PerunSession sess, User specificUser, SpecificUserType specificUserType, User owner)	Set specific user type for specific user and set ownership of this user for the owner.
void	setUsersManagerBl(UsersManagerBl usersManagerBl)	Sets the usersManagerBl for this instance.
void	unblockLogins(PerunSession sess, List<String> logins, String namespace)	Unblock logins for given namespace or unblock logins globally (if no namespace is selected)
void	unblockLoginsById(PerunSession sess, List<Integer> loginIds)	Unblock logins by id globally, or in the namespace they were initially blocked.
User	unsetSpecificUser(PerunSession sess, User specificUser, SpecificUserType specificUserType)	Remove all ownerships of this specific user and unset this specific user type from this specific user.
User	updateNameTitles(PerunSession sess, User user)	Updates titles before/after name of user.
User	updateUser(PerunSession sess, User user)	Updates users data in DB.
UserExtSource	updateUserExtSource(PerunSession sess, UserExtSource userExtSource)	Updates user's userExtSource in DB.
void	updateUserExtSourceLastAccess(PerunSession sess, UserExtSource userExtSource)	Updates user's userExtSource last access time in DB.
void	validatePassword(PerunSession sess, User user, String loginNamespace)	Validates the password in external system and sets user extSources and extSource related attributes.
void	validatePassword(PerunSession sess, String userLogin, String loginNamespace)	Validates the password in external system and sets user extSources and extSource related attributes.
String	validatePreferredEmailChange(PerunSession sess, User user, UUID token)	Validate change of user's preferred email address.
void	validateSSHKey(PerunSession sess, String sshKey)	Validate ssh public key, throws exception if validation fails

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

UsersManagerEntry

public UsersManagerEntry(PerunBl perunBl)

UsersManagerEntry

public UsersManagerEntry()

Method Details

addSpecificUserOwner

public void addSpecificUserOwner(PerunSession sess,
 User user,
 User specificUser)
                          throws UserNotExistsException,
PrivilegeException,
SpecificUserExpectedException,
NotSpecificUserExpectedException,
RelationExistsException

Description copied from interface: UsersManager

Add specificUser owner (the user) If not exists, create new ownership. If exists, only enable ownership for user and specificUser

Specified by:

addSpecificUserOwner in interface UsersManager

Parameters:

sess -

user - the user

specificUser - the specificUser

Throws:

UserNotExistsException

PrivilegeException

SpecificUserExpectedException - when the specificUser is not really specific user (is it normal user)

NotSpecificUserExpectedException - when the user is specific User

RelationExistsException - If there is such user (the user) who try to add

addUserExtSource

public UserExtSource addUserExtSource(PerunSession sess,
 User user,
 UserExtSource userExtSource)
                               throws UserNotExistsException,
PrivilegeException,
UserExtSourceExistsException

Description copied from interface: UsersManager

Adds user's external sources.

Specified by:

addUserExtSource in interface UsersManager

Parameters:

sess -

user -

userExtSource -

Returns:

user external auth object with newly generated ID

Throws:

UserNotExistsException

PrivilegeException

UserExtSourceExistsException

addUserExtSourceWithAttributes

public RichUserExtSource addUserExtSourceWithAttributes(PerunSession sess,
 User user,
 UserExtSource userExtSource,
 List<Attribute> uesAttributes)
                                                 throws UserNotExistsException,
UserExtSourceExistsException,
PrivilegeException,
WrongAttributeAssignmentException,
WrongReferenceAttributeValueException,
UserExtSourceNotExistsException,
AttributeNotExistsException,
WrongAttributeValueException

Description copied from interface: UsersManager

Adds userExternalSource to the user along with the ues attributes.

Specified by:

addUserExtSourceWithAttributes in interface UsersManager

Parameters:

sess -

user - user to assign the userExtSource to

userExtSource - the UserExtSource to be created

uesAttributes - the Attributes to be set to the userExtSource

Returns:

the newly created ues along with its attributes as RichUserExtSource

Throws:

UserNotExistsException

UserExtSourceExistsException

PrivilegeException

WrongAttributeAssignmentException

WrongReferenceAttributeValueException

UserExtSourceNotExistsException

AttributeNotExistsException

WrongAttributeValueException

anonymizeUser

public void anonymizeUser(PerunSession sess,
 User user,
 boolean force)
                   throws UserNotExistsException,
PrivilegeException,
RelationExistsException,
AnonymizationNotSupportedException

Description copied from interface: UsersManager

Anonymizes user - according to configuration, each of user's attributes is either anonymized, kept untouched or deleted. Also deletes other user's related data, e.g. authorships of users publications, mail change and password reset requests, bans... If force is true then also removes associated members.

Specified by:

anonymizeUser in interface UsersManager

Parameters:

sess -

user -

force -

Throws:

UserNotExistsException - if the user doesn't exist

PrivilegeException - if the method isn't called by perun admin

RelationExistsException - if the user has some members assigned

AnonymizationNotSupportedException - if an attribute should be anonymized but its module doesn't specify the anonymization process or if the anonymization is not supported at this instance

blockLogins

public void blockLogins(PerunSession sess,
 List<String> logins,
 String namespace)
                 throws PrivilegeException,
LoginIsAlreadyBlockedException,
LoginExistsException

Description copied from interface: UsersManager

Block logins for given namespace or block logins globally (if no namespace is selected)

Specified by:

blockLogins in interface UsersManager

Parameters:

sess -

logins - list of logins to be blocked

namespace - namespace where the logins should be blocked (null means block the logins globally)

Throws:

LoginIsAlreadyBlockedException

LoginExistsException

PrivilegeException

changeNonAuthzPassword

public void changeNonAuthzPassword(PerunSession sess,
 UUID token,
 String password,
 String lang)
                            throws UserNotExistsException,
LoginNotExistsException,
PasswordChangeFailedException,
PasswordOperationTimeoutException,
PasswordStrengthFailedException,
InvalidLoginException,
PasswordStrengthException,
PasswordResetLinkExpiredException,
PasswordResetLinkNotValidException

Description copied from interface: UsersManager

Changes user password in defined login-namespace based on token parameter.

Specified by:

changeNonAuthzPassword in interface UsersManager

Parameters:

sess -

token - token for the password reset request

password - new password

lang - language to get notification in

Throws:

UserNotExistsException - When the user who requested the password reset doesn't exist

LoginNotExistsException - When user doesn't have login in specified namespace

PasswordChangeFailedException - When password change failed

PasswordOperationTimeoutException - When password change timed out

InvalidLoginException - When login of user has invalid syntax (is not allowed)

PasswordStrengthException - When password doesn't match expected strength by namespace configuration

PasswordResetLinkExpiredException - When the password reset request expired

PasswordResetLinkNotValidException - When the password reset request was already used or has never existed

PasswordStrengthFailedException

changePassword

public void changePassword(PerunSession sess,
 User user,
 String loginNamespace,
 String oldPassword,
 String newPassword,
 boolean checkOldPassword)
                    throws PrivilegeException,
UserNotExistsException,
LoginNotExistsException,
PasswordDoesntMatchException,
PasswordChangeFailedException,
PasswordOperationTimeoutException,
PasswordStrengthFailedException,
InvalidLoginException,
PasswordStrengthException

Description copied from interface: UsersManager

Changes user password in defined login-namespace. If checkOldPassword is true, then ask authentication system if old password is correct.

Specified by:

changePassword in interface UsersManager

Parameters:

sess - Perun session

user - User requesting password change

loginNamespace - Login-namespace to change password in

oldPassword - Old password

newPassword - New password

checkOldPassword - If true, validates old password

Throws:

PrivilegeException

UserNotExistsException - When the user doesn't exist

LoginNotExistsException - When user doesn't have login in specified namespace

PasswordDoesntMatchException - When old password does not match

PasswordChangeFailedException

PasswordOperationTimeoutException

PasswordStrengthFailedException

InvalidLoginException

PasswordStrengthException

changePassword

public void changePassword(PerunSession sess,
 String login,
 String loginNamespace,
 String oldPassword,
 String newPassword,
 boolean checkOldPassword)
                    throws PrivilegeException,
LoginNotExistsException,
PasswordDoesntMatchException,
PasswordChangeFailedException,
PasswordOperationTimeoutException,
PasswordStrengthFailedException,
InvalidLoginException,
PasswordStrengthException

Description copied from interface: UsersManager

Changes user password in defined login-namespace. If checkOldPassword is true, then ask authentication system if old password is correct.

Specified by:

changePassword in interface UsersManager

Parameters:

sess - Perun session

login - String representation of the userLogin

loginNamespace - Login-namespace to change password in

oldPassword - Old password

newPassword - New password

checkOldPassword - If true, validates old password

Throws:

PrivilegeException

LoginNotExistsException - When user doesn't have login in specified namespace

PasswordDoesntMatchException - When old password does not match

PasswordChangeFailedException

PasswordOperationTimeoutException

PasswordStrengthFailedException

InvalidLoginException

PasswordStrengthException

changePasswordRandom

public String changePasswordRandom(PerunSession sess,
 User user,
 String loginNamespace)
                            throws PrivilegeException,
PasswordOperationTimeoutException,
LoginNotExistsException,
PasswordChangeFailedException,
InvalidLoginException,
PasswordStrengthException

Description copied from interface: UsersManager

Generates new random password for given user and returns String representing HTML where is the new password.

The HTML template is taken from entityless attribute randomPwdResetTemplate and the loginNamespace is used as a key.

Specified by:

changePasswordRandom in interface UsersManager

Parameters:

sess - session

user - user

loginNamespace - login namespace

Returns:

String representing HTML with data about new generated password

Throws:

PrivilegeException

PasswordOperationTimeoutException

LoginNotExistsException

PasswordChangeFailedException

InvalidLoginException

PasswordStrengthException

checkPasswordResetRequestIsValid

public void checkPasswordResetRequestIsValid(PerunSession sess,
 UUID token)
                                      throws PasswordResetLinkExpiredException,
PasswordResetLinkNotValidException

Description copied from interface: UsersManager

Checks if the password reset request is valid. The request is valid, if it was created, never used and hasn't expired yet.

Specified by:

checkPasswordResetRequestIsValid in interface UsersManager

Parameters:

sess -

token - token for the request to check

Throws:

PasswordResetLinkExpiredException - when the reset link expired

PasswordResetLinkNotValidException - when the reset link was already used or has never existed

checkPasswordStrength

public void checkPasswordStrength(PerunSession sess,
 String password,
 String namespace,
 String login)
                           throws PasswordStrengthException

Description copied from interface: UsersManager

Check password strength for the given namespace. If the password is too weak, the PasswordStrengthException is thrown

Specified by:

checkPasswordStrength in interface UsersManager

Parameters:

password - password, that will be checked

namespace - namespace, that will be used to check the strength of the password

login - login, which may be required for correct password strength check

Throws:

PasswordStrengthException - When password doesn't match expected strength by namespace configuration

createAlternativePassword

public void createAlternativePassword(PerunSession sess,
 User user,
 String description,
 String loginNamespace,
 String password)
                               throws PasswordCreationFailedException,
PrivilegeException,
UserNotExistsException,
LoginNotExistsException,
PasswordStrengthException

Description copied from interface: UsersManager

Creates alternative password in external system.

Specified by:

createAlternativePassword in interface UsersManager

Parameters:

sess -

user -

description - - description of a password (e.g. 'mobile phone', 'tablet', ...)

loginNamespace -

password - string representation of password

Throws:

PasswordCreationFailedException

PrivilegeException

UserNotExistsException

LoginNotExistsException

PasswordStrengthException

createServiceUser

public User createServiceUser(PerunSession sess,
 Candidate candidate,
 List<User> owners)
                       throws PrivilegeException,
WrongAttributeAssignmentException,
UserExtSourceExistsException,
WrongReferenceAttributeValueException,
WrongAttributeValueException,
AttributeNotExistsException,
UserNotExistsException

Description copied from interface: UsersManager

From given candidate, creates a service user and assign given owners to him. This method also checks if some of given userExtSources do exist. If so, this method throws a UserExtSourceExistsException. This method can also set only user-def and user-opt attributes for the given candidate.

Specified by:

createServiceUser in interface UsersManager

Parameters:

sess - session

candidate - candidate

owners - owners to be set for the new user

Returns:

created service user

Throws:

PrivilegeException - insufficient permissions

WrongAttributeAssignmentException - if some of the given attributes have unsupported namespace

UserExtSourceExistsException - if some of the given UES already exist

WrongReferenceAttributeValueException - if some of the given attribute value cannot be set because of some other attribute constraint

WrongAttributeValueException - if some of the given attribute value is invalid

AttributeNotExistsException - if some of the given attributes dont exist

UserNotExistsException - if some of the given owners does not exist

createUser

@Deprecated
public User createUser(PerunSession sess,
 User user)
                throws PrivilegeException

Deprecated.

Description copied from interface: UsersManager

Inserts user into DB.

Specified by:

createUser in interface UsersManager

Parameters:

sess -

user -

Throws:

PrivilegeException

deleteAlternativePassword

public void deleteAlternativePassword(PerunSession sess,
 User user,
 String loginNamespace,
 String passwordId)
                               throws UserNotExistsException,
PasswordDeletionFailedException,
PrivilegeException,
LoginNotExistsException

Description copied from interface: UsersManager

Deletes alternative password in external system.

Specified by:

deleteAlternativePassword in interface UsersManager

Parameters:

sess -

user -

loginNamespace -

passwordId - passwords ID

Throws:

UserNotExistsException

PasswordDeletionFailedException

PrivilegeException

LoginNotExistsException

deletePassword

public void deletePassword(PerunSession sess,
 String userLogin,
 String loginNamespace)
                    throws PrivilegeException,
PasswordDeletionFailedException,
LoginNotExistsException,
PasswordOperationTimeoutException,
InvalidLoginException

Description copied from interface: UsersManager

Deletes password in external system. User must not exist.

Specified by:

deletePassword in interface UsersManager

Parameters:

sess - Perun session

userLogin - String representation of the userLogin

loginNamespace - Login-namespace to remove password in

Throws:

PrivilegeException

PasswordDeletionFailedException

LoginNotExistsException - When user doesn't have login in specified namespace

PasswordOperationTimeoutException - When password change timed out

InvalidLoginException - When login of user has invalid syntax (is not allowed)

deletePassword

public void deletePassword(PerunSession sess,
 User user,
 String loginNamespace)
                    throws PrivilegeException,
UserNotExistsException,
LoginNotExistsException,
InvalidLoginException,
PasswordOperationTimeoutException,
PasswordDeletionFailedException

Description copied from interface: UsersManager

Deletes password in external system. User must exist. User's login for specified namespace must exist in Perun.

Specified by:

deletePassword in interface UsersManager

Parameters:

sess - Perun session

user - User whose password is being removed

loginNamespace - Login-namespace to remove password in

Throws:

PrivilegeException

UserNotExistsException - When the user doesn't exist

LoginNotExistsException - When user doesn't have login in specified namespace

InvalidLoginException - When login of user has invalid syntax (is not allowed)

PasswordOperationTimeoutException - When password change timed out

PasswordDeletionFailedException

deleteUser

public void deleteUser(PerunSession sess,
 User user)
                throws UserNotExistsException,
PrivilegeException,
RelationExistsException,
MemberAlreadyRemovedException,
UserAlreadyRemovedException,
SpecificUserAlreadyRemovedException,
DeletionNotSupportedException

Description copied from interface: UsersManager

Deletes user.

Specified by:

deleteUser in interface UsersManager

Parameters:

sess -

user -

Throws:

UserNotExistsException

PrivilegeException

RelationExistsException - if user has some members assigned

MemberAlreadyRemovedException - if there is at least 1 member deleted but not affected by deleting from DB

UserAlreadyRemovedException - if there are no rows affected by deleting user in DB

SpecificUserAlreadyRemovedException - if there are no rows affected by deleting specific user in DB

DeletionNotSupportedException - if the deletion of users is not supported

deleteUser

public void deleteUser(PerunSession sess,
 User user,
 boolean forceDelete)
                throws UserNotExistsException,
PrivilegeException,
RelationExistsException,
MemberAlreadyRemovedException,
UserAlreadyRemovedException,
SpecificUserAlreadyRemovedException,
DeletionNotSupportedException

Description copied from interface: UsersManager

Deletes user. If forceDelete is true, then removes also associeted members.

Specified by:

deleteUser in interface UsersManager

Parameters:

sess -

user -

forceDelete - if true, deletes also all members if they are assigned to the user

Throws:

UserNotExistsException

PrivilegeException

RelationExistsException - if forceDelete is false and the user has some members assigned

MemberAlreadyRemovedException - if there is at least 1 member deleted but not affected by deleting from DB

UserAlreadyRemovedException - if there are no rows affected by deleting user in DB

SpecificUserAlreadyRemovedException - if there are no rows affected by deleting specific user in DBn

DeletionNotSupportedException - if the deletion of users is not supported

findRichUsers

public List<RichUser> findRichUsers(PerunSession sess,
 String searchString)
                             throws UserNotExistsException,
PrivilegeException

Description copied from interface: UsersManager

Returns list of RichUsers with attributes who matches the searchString, searching name, id, uuid, email, logins.

Specified by:

findRichUsers in interface UsersManager

Parameters:

sess -

searchString -

Returns:

list of RichUsers

Throws:

UserNotExistsException

PrivilegeException

findRichUsersWithAttributes

public List<RichUser> findRichUsersWithAttributes(PerunSession sess,
 String searchString,
 List<String> attrNames)
                                           throws UserNotExistsException,
PrivilegeException

Description copied from interface: UsersManager

Returns list of RichUsers with attributes who matches the searchString, searching name, id, uuid, email, logins.

Specified by:

findRichUsersWithAttributes in interface UsersManager

Parameters:

sess -

searchString -

attrNames -

Returns:

list of RichUsers with selected attributes

Throws:

UserNotExistsException

PrivilegeException

findRichUsersWithAttributesByExactMatch

public List<RichUser> findRichUsersWithAttributesByExactMatch(PerunSession sess,
 String searchString,
 List<String> attrNames)
                                                       throws UserNotExistsException,
PrivilegeException

Description copied from interface: UsersManager

Returns list of RichUsers with attributes who matches the searchString, searching name, id, uuid, email, logins. Name part is searched for exact match.

Specified by:

findRichUsersWithAttributesByExactMatch in interface UsersManager

Parameters:

sess -

searchString -

attrNames -

Returns:

list of RichUsers with selected attributes

Throws:

UserNotExistsException

PrivilegeException

findRichUsersWithoutSpecificVoWithAttributes

public List<RichUser> findRichUsersWithoutSpecificVoWithAttributes(PerunSession sess,
 Vo vo,
 String searchString,
 List<String> attrsName)
                                                            throws UserNotExistsException,
PrivilegeException

Description copied from interface: UsersManager

Return list of RichUsers who matches the searchString, searching name, email and logins and are not member in specific VO and contain selected attributes.

Specified by:

findRichUsersWithoutSpecificVoWithAttributes in interface UsersManager

Parameters:

sess -

vo -

searchString -

attrsName -

Returns:

list of RichUsers

Throws:

UserNotExistsException

PrivilegeException

findUsers

public List<User> findUsers(PerunSession sess,
 String searchString)
                     throws PrivilegeException

Description copied from interface: UsersManager

Returns list of users who matches the searchString, searching name, id, uuid, email, logins.

Specified by:

findUsers in interface UsersManager

Parameters:

sess -

searchString -

Returns:

list of users

Throws:

PrivilegeException

findUsersByExactName

public List<User> findUsersByExactName(PerunSession sess,
 String searchString)
                                throws PrivilegeException

Description copied from interface: UsersManager

Returns list of users who exactly matches the searchString

Specified by:

findUsersByExactName in interface UsersManager

Parameters:

sess -

searchString -

Returns:

list of users

Throws:

PrivilegeException

findUsersByName

public List<User> findUsersByName(PerunSession sess,
 String searchString)
                           throws PrivilegeException

Description copied from interface: UsersManager

Returns list of users who matches the searchString

Specified by:

findUsersByName in interface UsersManager

Parameters:

sess -

searchString -

Returns:

list of users

Throws:

PrivilegeException

findUsersByName

public List<User> findUsersByName(PerunSession sess,
 String titleBefore,
 String firstName,
 String middleName,
 String lastName,
 String titleAfter)
                           throws PrivilegeException

Description copied from interface: UsersManager

Returns list of users who matches the fields.

Specified by:

findUsersByName in interface UsersManager

Parameters:

sess -

titleBefore -

firstName -

middleName -

lastName -

titleAfter -

Returns:

list of users

Throws:

PrivilegeException

generateAccount

public Map<String,String> generateAccount(PerunSession sess,
 String namespace,
 Map<String,String> parameters)
                                   throws PrivilegeException,
PasswordStrengthException

Description copied from interface: UsersManager

Generate user account in a backend system associated with login-namespace in Perun.

This method consumes optional parameters map. Requirements are implementation-dependant for each login-namespace.

Returns map with 1: key=login-namespace attribute urn, value=generated login 2: rest of opt response attributes...

Specified by:

generateAccount in interface UsersManager

Parameters:

sess -

namespace - Namespace to generate account in

parameters - Optional parameters

Returns:

Map of data from backed response

Throws:

PrivilegeException

PasswordStrengthException

getAllBlockedLoginsInNamespaces

public List<BlockedLogin> getAllBlockedLoginsInNamespaces(PerunSession sess)
                                                   throws PrivilegeException

Description copied from interface: UsersManager

Returns all blocked logins in namespaces (if namespace is null, then this login is blocked globally)

Specified by:

getAllBlockedLoginsInNamespaces in interface UsersManager

Parameters:

sess -

Returns:

list of all blocked logins in namespaces

Throws:

PrivilegeException

getAllRichUsers

public List<RichUser> getAllRichUsers(PerunSession sess,
 boolean includedSpecificUsers)
                               throws PrivilegeException

Description copied from interface: UsersManager

Get All richUsers with or without specificUsers. If includedSpecificUsers is true, you got all Users included specificUsers If includedSpecificUsers is false, you get all Users without specificUsers

!!! This method get all RichUsers without Attributes !!!

Specified by:

getAllRichUsers in interface UsersManager

Parameters:

sess -

includedSpecificUsers - true or false if you want or dont want get specificUsers too

Returns:

list of RichUsers

Throws:

PrivilegeException

getAllRichUsersWithAttributes

public List<RichUser> getAllRichUsersWithAttributes(PerunSession sess,
 boolean includedSpecificUsers)
                                             throws PrivilegeException,
UserNotExistsException

Description copied from interface: UsersManager

Get All richUsers with or without specificUsers. If includedSpecificUsers is true, you got all Users included specificUsers If includedSpecificUsers is false, you get all Users without specificUsers

This method get all RichUsers included Attributes.

Specified by:

getAllRichUsersWithAttributes in interface UsersManager

Parameters:

sess -

includedSpecificUsers - true or false if you want or dont want get specificUsers too

Returns:

list of RichUsers

Throws:

PrivilegeException

UserNotExistsException

getAllRichUsersWithAttributes

public List<RichUser> getAllRichUsersWithAttributes(PerunSession sess,
 boolean includedSpecificUsers,
 List<String> attrsNames)
                                             throws PrivilegeException,
UserNotExistsException

Description copied from interface: UsersManager

Get All richUsers with or without specificUsers. If includedSpecificUsers is true, you got all Users included specificUsers If includedSpecificUsers is false, you get all Users without specificUsers

This method get all RichUsers included selected Attributes.

Specified by:

getAllRichUsersWithAttributes in interface UsersManager

Parameters:

sess -

includedSpecificUsers - true or false if you want or dont want get specificUsers too

attrsNames -

Returns:

list of RichUsers

Throws:

PrivilegeException

UserNotExistsException

getAllowedResources

public List<Resource> getAllowedResources(PerunSession sess,
 Facility facility,
 User user)
                                   throws FacilityNotExistsException,
UserNotExistsException,
PrivilegeException

Description copied from interface: UsersManager

Get all resources from the facility which have the user access on.

Specified by:

getAllowedResources in interface UsersManager

Parameters:

sess -

facility -

user -

Returns:

list of resources which have the user acess on

Throws:

FacilityNotExistsException

UserNotExistsException

PrivilegeException

getAllowedResources

public List<Resource> getAllowedResources(PerunSession sess,
 User user)
                                   throws UserNotExistsException,
PrivilegeException

Description copied from interface: UsersManager

Get all resources which have the user access on.

Specified by:

getAllowedResources in interface UsersManager

Parameters:

sess -

user -

Returns:

list of resources which have the user acess on

Throws:

UserNotExistsException

PrivilegeException

getUserAssignments

public Map<Facility,List<Resource>> getUserAssignments(PerunSession sess,
 User user)
                                                throws UserNotExistsException,
PrivilegeException

Description copied from interface: UsersManager

Returns all assignments of the user, assignments being Facilities and Resources they are assigned to.

Specified by:

getUserAssignments in interface UsersManager

Parameters:

sess - session

user - user

Returns:

the assignments

Throws:

UserNotExistsException - user does not exist

PrivilegeException - insufficient rights

getAssignedRichResources

public List<RichResource> getAssignedRichResources(PerunSession sess,
 User user)
                                            throws UserNotExistsException,
PrivilegeException

Description copied from interface: UsersManager

Get all rich resources which have the user assigned.

Specified by:

getAssignedRichResources in interface UsersManager

Parameters:

sess -

user -

Returns:

list of rich resources which have the user assigned

Throws:

UserNotExistsException

PrivilegeException

getAssociatedResources

public List<Resource> getAssociatedResources(PerunSession sess,
 Facility facility,
 User user)
                                      throws UserNotExistsException,
FacilityNotExistsException,
PrivilegeException

Description copied from interface: UsersManager

Return all resources of specified facility with which user is associated through all his members. Does not require ACTIVE group-resource assignment.

Specified by:

getAssociatedResources in interface UsersManager

Parameters:

sess -

facility -

user -

Returns:

All resources with which user is associated

Throws:

UserNotExistsException

FacilityNotExistsException

PrivilegeException

getBlockedLoginsPage

public Paginated<BlockedLogin> getBlockedLoginsPage(PerunSession sess,
 BlockedLoginsPageQuery query)
                                             throws PrivilegeException

Description copied from interface: UsersManager

Get page of blocked logins.

Specified by:

getBlockedLoginsPage in interface UsersManager

Parameters:

sess - session

query - query with page information

Returns:

page of requested blocked logins

Throws:

PrivilegeException

getGroupsWhereUserIsActive

public List<Group> getGroupsWhereUserIsActive(PerunSession sess,
 Resource resource,
 User user)
                                       throws PrivilegeException

Description copied from interface: UsersManager

Return all groups where user is active (has VALID status in VO and Group together) for specified user and resource

Specified by:

getGroupsWhereUserIsActive in interface UsersManager

Parameters:

sess - PerunSession

resource - Only groups assigned to this resource might be returned

user - Only groups where this user is VALID member might be returned

Returns:

List of groups where user is active (is a VALID vo and group member) on specified resource

Throws:

PrivilegeException

getGroupsWhereUserIsActive

public List<Group> getGroupsWhereUserIsActive(PerunSession sess,
 Facility facility,
 User user)
                                       throws PrivilegeException

Description copied from interface: UsersManager

Return all groups where user is active (has VALID status in VO and Group together) for specified user and facility

Specified by:

getGroupsWhereUserIsActive in interface UsersManager

Parameters:

sess - PerunSession

facility - Only groups assigned to this facility (all its resources) might be returned

user - Only groups where this user is VALID member might be returned

Returns:

List of groups where user is active (is a VALID vo and group member) on specified facility

Throws:

PrivilegeException

getGroupsWhereUserIsAdmin

public List<Group> getGroupsWhereUserIsAdmin(PerunSession sess,
 User user)
                                      throws UserNotExistsException,
PrivilegeException

Description copied from interface: UsersManager

Returns list of Groups in Perun, where the User is a direct Administrator or he is VALID a member of any group which is Administrator of some of these Groups.

Specified by:

getGroupsWhereUserIsAdmin in interface UsersManager

Parameters:

sess -

user -

Returns:

list of Groups, where user or some of his groups is an Administrator

Throws:

UserNotExistsException

PrivilegeException

getGroupsWhereUserIsAdmin

public List<Group> getGroupsWhereUserIsAdmin(PerunSession sess,
 Vo vo,
 User user)
                                      throws PrivilegeException,
UserNotExistsException,
VoNotExistsException

Description copied from interface: UsersManager

Returns list of Groups in selected Vo, where the User is a direct Administrator or he is a VALID member of any group which is Administrator of some of these Groups.

Specified by:

getGroupsWhereUserIsAdmin in interface UsersManager

Parameters:

sess -

vo - selected Vo under which we are looking for groups

user - manager of groups we are looking for

Returns:

list of Groups, where user or some of his groups (in the Vo) is an Administrator

Throws:

PrivilegeException - user has no privileges to call this method

UserNotExistsException - the user not exists in Perun

VoNotExistsException - the vo not exists in Perun

getPendingPreferredEmailChanges

public List<String> getPendingPreferredEmailChanges(PerunSession sess,
 User user)
                                             throws PrivilegeException,
UserNotExistsException,
WrongAttributeAssignmentException,
AttributeNotExistsException

Description copied from interface: UsersManager

Return list of email addresses of user, which are awaiting validation and are inside time window for validation.

If there is no preferred email change request pending or requests are outside time window for validation, returns empty list.

Specified by:

getPendingPreferredEmailChanges in interface UsersManager

Parameters:

sess - PerunSession

user - User to check pending request for

Returns:

List user's email addresses pending validation

Throws:

PrivilegeException

UserNotExistsException

WrongAttributeAssignmentException

AttributeNotExistsException

getPerunBl

public PerunBl getPerunBl()

getRelatedUserIdByBlockedLoginInNamespace

public Integer getRelatedUserIdByBlockedLoginInNamespace(PerunSession sess,
 String login,
 String namespace)
                                                  throws LoginIsNotBlockedException

Description copied from interface: UsersManager

Get user id of the user who was related to the given login in the past

Specified by:

getRelatedUserIdByBlockedLoginInNamespace in interface UsersManager

Parameters:

sess - session

login - blocked login

namespace - namespace where the login is blocked

Returns:

user id or null if there is no related user id

Throws:

LoginIsNotBlockedException

getRichGroupsWhereUserIsActive

public List<RichGroup> getRichGroupsWhereUserIsActive(PerunSession sess,
 Resource resource,
 User user,
 List<String> attrNames)
                                               throws PrivilegeException

Description copied from interface: UsersManager

Return all RichGroups where user is active (has VALID status in VO and Group together) for specified user and resource with specified group attributes by their names (URNs).

Specified by:

getRichGroupsWhereUserIsActive in interface UsersManager

Parameters:

sess - PerunSession

resource - Only groups assigned to this resource might be returned

user - Only groups where this user is VALID member might be returned

attrNames - Names (URNs) of group attributes to get with each returned group

Returns:

List of groups where user is active (is a VALID vo and group member) on specified resource

Throws:

PrivilegeException

getRichGroupsWhereUserIsActive

public List<RichGroup> getRichGroupsWhereUserIsActive(PerunSession sess,
 Facility facility,
 User user,
 List<String> attrNames)
                                               throws PrivilegeException

Description copied from interface: UsersManager

Return all groups where user is active (has VALID status in VO and Group together) for specified user and resource

Specified by:

getRichGroupsWhereUserIsActive in interface UsersManager

Parameters:

sess - PerunSession

facility - Only groups assigned to this facility (all its resources) might be returned

user - Only groups where this user is VALID member might be returned

attrNames - Names (URNs) of group attributes to get with each returned group

Returns:

List of groups where user is active (is a VALID vo and group member) on specified facility

Throws:

PrivilegeException

getRichUser

public RichUser getRichUser(PerunSession sess,
 User user)
                     throws PrivilegeException,
UserNotExistsException

Description copied from interface: UsersManager

Get User to RichUser without attributes.

Specified by:

getRichUser in interface UsersManager

Parameters:

sess -

user -

Returns:

RichUser

Throws:

PrivilegeException

UserNotExistsException

getRichUserExtSources

public List<RichUserExtSource> getRichUserExtSources(PerunSession sess,
 User user)
                                              throws UserNotExistsException,
PrivilegeException

Description copied from interface: UsersManager

Gets list of all user's external sources with attributes.

Specified by:

getRichUserExtSources in interface UsersManager

Parameters:

sess - session

user - user for which should be returned rich ext sources

Returns:

list of user's external sources with attributes

Throws:

UserNotExistsException - if given user doesn't exist

PrivilegeException - insufficient permissions

getRichUserExtSources

public List<RichUserExtSource> getRichUserExtSources(PerunSession sess,
 User user,
 List<String> attrsNames)
                                              throws UserNotExistsException,
PrivilegeException

Description copied from interface: UsersManager

Gets list of all user's external sources with attributes. If any of the attribute names is incorrect then the value is silently skipped. If the attrsNames is null, then this method returns all ues attributes.

Specified by:

getRichUserExtSources in interface UsersManager

Parameters:

sess - session

user - user for which should be returned rich ext sources

attrsNames - list of attribute names that should be found

Returns:

list of user's external sources with attributes

Throws:

UserNotExistsException - if given user doesn't exist

PrivilegeException - insufficient permissions

getRichUserWithAttributes

public RichUser getRichUserWithAttributes(PerunSession sess,
 User user)
                                   throws PrivilegeException,
UserNotExistsException

Description copied from interface: UsersManager

Get User to RichUser with attributes.

Specified by:

getRichUserWithAttributes in interface UsersManager

Parameters:

sess -

user -

Returns:

RichUser

Throws:

PrivilegeException

UserNotExistsException

getRichUsersByIds

public List<RichUser> getRichUsersByIds(PerunSession sess,
 List<Integer> ids)
                                 throws PrivilegeException

Description copied from interface: UsersManager

Returns rich users without attributes by their ids.

Specified by:

getRichUsersByIds in interface UsersManager

Parameters:

sess -

ids -

Returns:

list of rich users with specified ids

Throws:

PrivilegeException

getRichUsersWithAttributesByIds

public List<RichUser> getRichUsersWithAttributesByIds(PerunSession sess,
 List<Integer> ids)
                                               throws PrivilegeException,
UserNotExistsException

Description copied from interface: UsersManager

Returns rich users with attributes by their ids.

Specified by:

getRichUsersWithAttributesByIds in interface UsersManager

Parameters:

sess -

ids -

Returns:

list of rich users with specified ids

Throws:

PrivilegeException

UserNotExistsException

getRichUsersWithoutVoAssigned

public List<RichUser> getRichUsersWithoutVoAssigned(PerunSession sess)
                                             throws UserNotExistsException,
PrivilegeException

Description copied from interface: UsersManager

Returns all RichUsers with attributes who are not member of any VO.

Specified by:

getRichUsersWithoutVoAssigned in interface UsersManager

Parameters:

sess -

Returns:

list of richUsers who are not member of any VO

Throws:

UserNotExistsException

PrivilegeException

getRichUsersWithoutVoWithAttributes

public List<RichUser> getRichUsersWithoutVoWithAttributes(PerunSession sess,
 List<String> attrsName)
                                                   throws UserNotExistsException,
PrivilegeException

Description copied from interface: UsersManager

Returns list of RichUsers which are not members of any VO and with selected attributes

Specified by:

getRichUsersWithoutVoWithAttributes in interface UsersManager

Parameters:

sess -

attrsName -

Returns:

list of RichUsers with selected attributes

Throws:

UserNotExistsException

PrivilegeException

getSpecificUsers

public List<User> getSpecificUsers(PerunSession sess)
                            throws PrivilegeException

Description copied from interface: UsersManager

Return all specific Users (only specific users)

Specified by:

getSpecificUsers in interface UsersManager

Parameters:

sess -

Returns:

list of all specific users in perun

Throws:

PrivilegeException

getSpecificUsersByUser

public List<User> getSpecificUsersByUser(PerunSession sess,
 User user)
                                  throws UserNotExistsException,
PrivilegeException,
NotSpecificUserExpectedException

Description copied from interface: UsersManager

Return all specificUsers who are owned by the user

Specified by:

getSpecificUsersByUser in interface UsersManager

Parameters:

sess -

user - the user

Returns:

list of specific users who are owned by the user

Throws:

UserNotExistsException

PrivilegeException

NotSpecificUserExpectedException - when the user is service User

getSponsors

@Deprecated
public List<RichUser> getSponsors(PerunSession sess,
 Member member,
 List<String> attrNames)
                           throws PrivilegeException,
UserNotExistsException

Deprecated.

Description copied from interface: UsersManager

Gets list of users that sponsor the member, with attributes.

Specified by:

getSponsors in interface UsersManager

Parameters:

sess - Perun session

member - member which is sponsored

attrNames - list of attributes. if null or empty, returns all attributes

Returns:

list of users which sponsor the member

Throws:

PrivilegeException

UserNotExistsException

getSponsorsForMember

public List<Sponsor> getSponsorsForMember(PerunSession sess,
 Member member,
 List<String> attrNames)
                                   throws PrivilegeException

Description copied from interface: UsersManager

Gets list of users that sponsor the member, with attributes.

Specified by:

getSponsorsForMember in interface UsersManager

Parameters:

sess - Perun session

member - member which is sponsored

attrNames - list of attributes. if null or empty, returns all attributes

Returns:

list of users which sponsor the member

Throws:

PrivilegeException - insufficient permissions

getUserByExtSourceNameAndExtLogin

public User getUserByExtSourceNameAndExtLogin(PerunSession sess,
 String extSourceName,
 String extLogin)
                                       throws ExtSourceNotExistsException,
UserExtSourceNotExistsException,
UserNotExistsException,
PrivilegeException

Description copied from interface: UsersManager

Get user by extSourceName and extSourceLogin

Specified by:

getUserByExtSourceNameAndExtLogin in interface UsersManager

Parameters:

sess -

extSourceName -

extLogin -

Returns:

user

Throws:

ExtSourceNotExistsException

UserExtSourceNotExistsException

UserNotExistsException

PrivilegeException

getUserById

public User getUserById(PerunSession sess,
 int id)
                 throws UserNotExistsException,
PrivilegeException

Description copied from interface: UsersManager

Returns user by his/her id.

Specified by:

getUserById in interface UsersManager

Parameters:

sess -

id -

Returns:

user

Throws:

UserNotExistsException

PrivilegeException

getUserByMember

public User getUserByMember(PerunSession sess,
 Member member)
                     throws MemberNotExistsException,
PrivilegeException

Description copied from interface: UsersManager

Returns user by VO member.

Specified by:

getUserByMember in interface UsersManager

Parameters:

sess -

member -

Returns:

user

Throws:

MemberNotExistsException

PrivilegeException

getUserByUserExtSource

public User getUserByUserExtSource(PerunSession sess,
 UserExtSource userExtSource)
                            throws UserNotExistsException,
UserExtSourceNotExistsException,
PrivilegeException

Description copied from interface: UsersManager

Returns user by his login in external source and external source.

Specified by:

getUserByUserExtSource in interface UsersManager

Parameters:

sess -

userExtSource -

Returns:

selected user or throws UserNotExistsException in case the user doesn't exists

Throws:

UserNotExistsException

UserExtSourceNotExistsException

PrivilegeException

getUserByUserExtSources

public User getUserByUserExtSources(PerunSession sess,
 List<UserExtSource> userExtSources)
                             throws UserNotExistsException,
PrivilegeException

Description copied from interface: UsersManager

Returns user based on one of the userExtSource.

Specified by:

getUserByUserExtSources in interface UsersManager

Parameters:

sess -

userExtSources -

Returns:

user

Throws:

UserNotExistsException

PrivilegeException

getUserExtSourceByExtLogin

public UserExtSource getUserExtSourceByExtLogin(PerunSession sess,
 ExtSource source,
 String extLogin)
                                         throws PrivilegeException,
ExtSourceNotExistsException,
UserExtSourceNotExistsException

Description copied from interface: UsersManager

Gets user's external source by the user's external login and external source.

Specified by:

getUserExtSourceByExtLogin in interface UsersManager

Parameters:

sess -

source -

extLogin -

Returns:

user external source object

Throws:

PrivilegeException

ExtSourceNotExistsException

UserExtSourceNotExistsException

getUserExtSourceById

public UserExtSource getUserExtSourceById(PerunSession sess,
 int id)
                                   throws UserExtSourceNotExistsException,
PrivilegeException

Description copied from interface: UsersManager

Get the user ext source by its id.

Specified by:

getUserExtSourceById in interface UsersManager

Parameters:

sess -

id -

Returns:

user external source for the id

Throws:

UserExtSourceNotExistsException

PrivilegeException

getUserExtSourceByUniqueAttributeValue

public UserExtSource getUserExtSourceByUniqueAttributeValue(PerunSession sess,
 int attrId,
 String uniqueValue)
                                                     throws AttributeNotExistsException,
UserExtSourceNotExistsException,
PrivilegeException

Description copied from interface: UsersManager

Return userExtSource for specific attribute definition (specified by id) and unique value. If not found, throw and exception.

It looks for exactly one value of the specific attribute type: - Integer -> exactly match - String -> exactly match - Map -> exactly match of "key=value" - ArrayList -> exactly match of one of the value

Specified by:

getUserExtSourceByUniqueAttributeValue in interface UsersManager

Parameters:

sess - Perun session

attrId - attribute id used for founding attribute definition which has to exists, be unique and in userExtSource namespace

uniqueValue - value used for searching

Returns:

userExtSource found by attribute id and it's unique value

Throws:

AttributeNotExistsException - if attribute can't be found by it's id

UserExtSourceNotExistsException - if userExtSource can't be found

PrivilegeException - if the principal does not have sufficient rights to call this method

getUserExtSourceByUniqueAttributeValue

public UserExtSource getUserExtSourceByUniqueAttributeValue(PerunSession sess,
 String attrName,
 String uniqueValue)
                                                     throws AttributeNotExistsException,
UserExtSourceNotExistsException,
PrivilegeException

Description copied from interface: UsersManager

Return userExtSource for specific attribute definition (specified by name) and unique value. If not found, throw and exception.

It looks for exactly one value of the specific attribute type: - Integer -> exactly match - String -> exactly match - Map -> exactly match of "key=value" - ArrayList -> exactly match of one of the value

Specified by:

getUserExtSourceByUniqueAttributeValue in interface UsersManager

Parameters:

sess - Perun session

attrName - attribute name used for founding attribute definition which has to exists, be unique and in userExtSource namespace

uniqueValue - value used for searching

Returns:

userExtSource found by attribute name and it's unique value

Throws:

AttributeNotExistsException - if attribute can't be found by it's name

UserExtSourceNotExistsException - if userExtSource can't be found

PrivilegeException - if the principal does not have sufficient rights to call this method

getUserExtSources

public List<UserExtSource> getUserExtSources(PerunSession sess,
 User user)
                                      throws UserNotExistsException,
PrivilegeException

Description copied from interface: UsersManager

Gets list of all user's external sources of the user.

Specified by:

getUserExtSources in interface UsersManager

Parameters:

sess -

user -

Returns:

list of user's external sources

Throws:

UserNotExistsException

PrivilegeException

getUserExtSourcesByIds

public List<UserExtSource> getUserExtSourcesByIds(PerunSession sess,
 List<Integer> ids)
                                           throws PrivilegeException

Description copied from interface: UsersManager

Get the user ext sources by their ids.

Specified by:

getUserExtSourcesByIds in interface UsersManager

Parameters:

sess -

ids -

Returns:

list of user external sources with specified ids

Throws:

PrivilegeException

getUsers

public List<User> getUsers(PerunSession sess)
                    throws PrivilegeException

Description copied from interface: UsersManager

Returns all users (included specific users).

Specified by:

getUsers in interface UsersManager

Parameters:

sess -

Returns:

list of all users

Throws:

PrivilegeException

getUsersByAttribute

public List<User> getUsersByAttribute(PerunSession sess,
 Attribute attribute)
                               throws PrivilegeException

Description copied from interface: UsersManager

Returns all users who have set the attribute with the value. Searching only def and opt attributes.

Specified by:

getUsersByAttribute in interface UsersManager

Parameters:

sess -

attribute -

Returns:

list of users

Throws:

PrivilegeException

getUsersByAttribute

public List<User> getUsersByAttribute(PerunSession sess,
 String attributeName,
 String attributeValue)
                               throws PrivilegeException,
AttributeNotExistsException

Description copied from interface: UsersManager

Returns all users who have set the attribute with the value. Searching by attributeName. Searching only def and opt attributes. Can find only attributes with String Value by this way! (not Integer, Map or List)

Specified by:

getUsersByAttribute in interface UsersManager

Parameters:

sess -

attributeName -

attributeValue -

Returns:

list of users

Throws:

PrivilegeException

AttributeNotExistsException

getUsersByAttributeValue

public List<User> getUsersByAttributeValue(PerunSession sess,
 String attributeName,
 String attributeValue)
                                    throws PrivilegeException,
AttributeNotExistsException

Description copied from interface: UsersManager

Returns all users who have the attribute with the value. attributeValue is not converted to the attribute type, it is always type of String.

Specified by:

getUsersByAttributeValue in interface UsersManager

Parameters:

sess -

attributeName -

attributeValue -

Returns:

list of users

Throws:

PrivilegeException

AttributeNotExistsException

getUsersByIds

public List<User> getUsersByIds(PerunSession sess,
 List<Integer> ids)
                         throws PrivilegeException

Description copied from interface: UsersManager

Returns existing users by their ids.

Specified by:

getUsersByIds in interface UsersManager

Parameters:

sess -

ids -

Returns:

list of users with specified ids

Throws:

PrivilegeException

getUsersBySpecificUser

public List<User> getUsersBySpecificUser(PerunSession sess,
 User specificUser)
                                  throws UserNotExistsException,
PrivilegeException,
SpecificUserExpectedException

Description copied from interface: UsersManager

Return all users who owns the specific one

Specified by:

getUsersBySpecificUser in interface UsersManager

Parameters:

sess -

specificUser - the specific user

Returns:

list of user who owns the specificUser

Throws:

UserNotExistsException

PrivilegeException

SpecificUserExpectedException - when the serviceUser is not really service user (is it normal user)

getUnanonymizedUsersBySpecificUser

public List<User> getUnanonymizedUsersBySpecificUser(PerunSession sess,
 User specificUser)
                                              throws UserNotExistsException,
PrivilegeException,
SpecificUserExpectedException

Description copied from interface: UsersManager

Return all users who owns the specific one and are not anonymized

Specified by:

getUnanonymizedUsersBySpecificUser in interface UsersManager

Parameters:

sess -

specificUser - the specific user

Returns:

list of user who owns the specificUser

Throws:

UserNotExistsException

PrivilegeException

SpecificUserExpectedException - when the serviceUser is not really service user (is it normal user)

getUsersCount

public int getUsersCount(PerunSession sess)

Description copied from interface: UsersManager

Get count of all users.

Specified by:

getUsersCount in interface UsersManager

Parameters:

sess - PerunSession

Returns:

count of all users

getUsersManagerBl

public UsersManagerBl getUsersManagerBl()

Gets the usersManagerBl for this instance.

Returns:

The usersManagerBl.

getUsersManagerImpl

public UsersManagerImplApi getUsersManagerImpl()

getUsersPage

public Paginated<RichUser> getUsersPage(PerunSession sess,
 UsersPageQuery query,
 List<String> attrNames)
                                 throws PrivilegeException,
ResourceNotExistsException,
VoNotExistsException,
FacilityNotExistsException,
ServiceNotExistsException

Description copied from interface: UsersManager

Get page of users with the given attributes.

Specified by:

getUsersPage in interface UsersManager

Parameters:

sess - session

query - query with page information

attrNames - list of attribute names

Returns:

page of requested rich users

Throws:

ResourceNotExistsException - if resource with id from query does not exist

VoNotExistsException - if vo with id from query does not exist

FacilityNotExistsException - if facility with id from query does not exist

ServiceNotExistsException - if service with id from query does not exist

PrivilegeException

getUsersWithoutSpecificVo

public List<User> getUsersWithoutSpecificVo(PerunSession sess,
 Vo vo,
 String searchString)
                                     throws VoNotExistsException,
PrivilegeException

Description copied from interface: UsersManager

Return list of users who matches the searchString, searching name, email and logins and are not member in specific VO.

Specified by:

getUsersWithoutSpecificVo in interface UsersManager

Parameters:

sess -

vo -

searchString -

Returns:

Throws:

VoNotExistsException

PrivilegeException

getUsersWithoutVoAssigned

public List<User> getUsersWithoutVoAssigned(PerunSession sess)
                                     throws PrivilegeException

Description copied from interface: UsersManager

Returns all users who are not member of any VO.

Specified by:

getUsersWithoutVoAssigned in interface UsersManager

Parameters:

sess -

Returns:

list of users who are not member of any VO

Throws:

PrivilegeException

getVosWhereUserIsAdmin

public List<Vo> getVosWhereUserIsAdmin(PerunSession sess,
 User user)
                                throws UserNotExistsException,
PrivilegeException

Description copied from interface: UsersManager

Returns list of VOs, where the user is an Administrator. Including VOs, where the user is a VALID member of authorized group.

Specified by:

getVosWhereUserIsAdmin in interface UsersManager

Parameters:

sess -

user -

Returns:

list of VOs, where the user is an Administrator.

Throws:

UserNotExistsException

PrivilegeException

getVosWhereUserIsMember

public List<Vo> getVosWhereUserIsMember(PerunSession sess,
 User user)
                                 throws UserNotExistsException,
PrivilegeException

Description copied from interface: UsersManager

Returns list of VOs, where the user is a member.

Specified by:

getVosWhereUserIsMember in interface UsersManager

Parameters:

sess -

user -

Returns:

list of VOs, where the user is a member.

Throws:

UserNotExistsException

PrivilegeException

isLoginAvailable

public boolean isLoginAvailable(PerunSession sess,
 String loginNamespace,
 String login)
                         throws InvalidLoginException

Description copied from interface: UsersManager

Checks if the login is available in the namespace. Returns FALSE is is already occupied, throws exception if value is not allowed.

Specified by:

isLoginAvailable in interface UsersManager

Parameters:

sess -

loginNamespace - in which the login will be checked (provide only the name of the namespace, not the whole attribute name)

login - to be checked

Returns:

true if login is available, false otherwise

Throws:

InvalidLoginException - When login to check has invalid syntax.

isLoginBlocked

public boolean isLoginBlocked(PerunSession sess,
 String login,
 boolean ignoreCase)
                       throws PrivilegeException

Description copied from interface: UsersManager

Return true if login is blocked (globally - for all namespaces per instance OR for some namespace), false if not. Globally banned logins are ALWAYS case-insensitive (ignoreCase value is not taken into account for them).

Specified by:

isLoginBlocked in interface UsersManager

Parameters:

sess - session

login - login to check

ignoreCase - ignore case

Returns:

true if login is blocked

Throws:

PrivilegeException

isLoginBlockedForNamespace

public boolean isLoginBlockedForNamespace(PerunSession sess,
 String login,
 String namespace,
 boolean ignoreCase)
                                   throws PrivilegeException

Description copied from interface: UsersManager

Return true if login is blocked for given namespace, false if not. When the namespace is null, then the method behaves like isLoginBlockedGlobally(), so it checks if the login is blocked globally. Globally banned logins are ALWAYS case-insensitive.

Specified by:

isLoginBlockedForNamespace in interface UsersManager

Parameters:

sess - session

login - login to check

namespace - namespace for login

ignoreCase - ignore case

Returns:

true if login is blocked for given namespace (or globally for null namespace)

Throws:

PrivilegeException

isLoginBlockedGlobally

public boolean isLoginBlockedGlobally(PerunSession sess,
 String login)
                               throws PrivilegeException

Description copied from interface: UsersManager

Return true if login is blocked globally (for all namespaces per instance - represented by namespace = null), false if not. Globally banned logins are ALWAYS case-insensitive.

Specified by:

isLoginBlockedGlobally in interface UsersManager

Parameters:

sess - session

login - login to check

Returns:

true if login is blocked globally

Throws:

PrivilegeException

isUserPerunAdmin

@Deprecated
public boolean isUserPerunAdmin(PerunSession sess,
 User user)
                         throws PrivilegeException,
UserNotExistsException

Deprecated.

Description copied from interface: UsersManager

Returns true if the user is PERUNADMIN.

Specified by:

isUserPerunAdmin in interface UsersManager

Parameters:

sess -

user -

Returns:

true if the user is PERUNADMIN, false otherwise.

Throws:

PrivilegeException

UserNotExistsException

loginExist

public boolean loginExist(PerunSession sess,
 User user,
 String loginNamespace)
                   throws PrivilegeException,
UserNotExistsException

Description copied from interface: UsersManager

Check, if login exists in given login-namespace. Not implemented for all namespaces.

Specified by:

loginExist in interface UsersManager

Parameters:

sess - Perun session

user - User to check existence of login for

loginNamespace - Login-namespace to check it for

Returns:

True if login exists, false otherwise

Throws:

PrivilegeException

UserNotExistsException - When the user doesn't exist

moveUserExtSource

public void moveUserExtSource(PerunSession sess,
 User sourceUser,
 User targetUser,
 UserExtSource userExtSource)
                       throws UserExtSourceNotExistsException,
UserNotExistsException,
PrivilegeException

Description copied from interface: UsersManager

Take UserExtSource from sourceUser and move it to the targetUser.

It removes old UserExtSource with all it's attributes from sourceUser and creates and assigns the new one with the same settings to target user.

Specified by:

moveUserExtSource in interface UsersManager

Parameters:

sess -

sourceUser - user with UserExtSource to move

targetUser - user for who will be UserExtSource moved

userExtSource - the UserExtSource which will be moved from sourceUser to targetUser

Throws:

UserExtSourceNotExistsException - UserExtSourceNotExists or is not assigned to sourceUser

UserNotExistsException - one of the users not exists

PrivilegeException

removeSpecificUserOwner

public void removeSpecificUserOwner(PerunSession sess,
 User user,
 User specificUser)
                             throws UserNotExistsException,
PrivilegeException,
SpecificUserExpectedException,
NotSpecificUserExpectedException,
RelationNotExistsException,
SpecificUserOwnerAlreadyRemovedException

Description copied from interface: UsersManager

Remove specificUser owner (the user) Only disable ownership of user and specificUser

Specified by:

removeSpecificUserOwner in interface UsersManager

Parameters:

sess -

user - the user

specificUser - the specificUser

Throws:

UserNotExistsException

PrivilegeException

SpecificUserExpectedException - when the specific user is not really specific user (is it normal user)

NotSpecificUserExpectedException - when the user is specific User

RelationNotExistsException - if there is no such user (the user) to remove

SpecificUserOwnerAlreadyRemovedException - if there are 0 rows affected by removing from DB

removeUserExtSource

public void removeUserExtSource(PerunSession sess,
 User user,
 UserExtSource userExtSource)
                         throws UserNotExistsException,
UserExtSourceNotExistsException,
PrivilegeException,
UserExtSourceAlreadyRemovedException

Description copied from interface: UsersManager

Removes user's external source.

Specified by:

removeUserExtSource in interface UsersManager

Parameters:

sess -

user -

userExtSource -

Throws:

UserNotExistsException

UserExtSourceNotExistsException

PrivilegeException

UserExtSourceAlreadyRemovedException - if there are 0 rows affected by deleting from DB

removeUserExtSource

public void removeUserExtSource(PerunSession sess,
 User user,
 UserExtSource userExtSource,
 boolean forceDelete)
                         throws UserNotExistsException,
UserExtSourceNotExistsException,
PrivilegeException,
UserExtSourceAlreadyRemovedException

Description copied from interface: UsersManager

Removes user's external source.

Specified by:

removeUserExtSource in interface UsersManager

Parameters:

sess -

user -

userExtSource -

forceDelete - if true, persistent ExtSource is deleted too

Throws:

UserNotExistsException

UserExtSourceNotExistsException

PrivilegeException

UserExtSourceAlreadyRemovedException - if there are 0 rows affected by deleting from DB

removeUserExtSources

public void removeUserExtSources(PerunSession sess,
 User user,
 List<UserExtSource> userExtSources,
 boolean forceDelete)
                          throws UserNotExistsException,
UserExtSourceNotExistsException,
PrivilegeException,
UserExtSourceAlreadyRemovedException

Description copied from interface: UsersManager

Removes user's external sources.

Specified by:

removeUserExtSources in interface UsersManager

Parameters:

sess -

user -

userExtSources -

forceDelete - if true, persistent ExtSource is deleted too

Throws:

UserNotExistsException

UserExtSourceNotExistsException

PrivilegeException

UserExtSourceAlreadyRemovedException - if there are 0 rows affected by deleting from DB

requestPreferredEmailChange

public void requestPreferredEmailChange(PerunSession sess,
 String url,
 User user,
 String email,
 String lang,
 String path,
 String idp)
                                 throws PrivilegeException,
UserNotExistsException

Description copied from interface: UsersManager

Request change of user's preferred email address. Change in attribute value is not done, until email address is verified by link in email notice. (urn:perun:user:attribute-def:def:preferredMail)

Specified by:

requestPreferredEmailChange in interface UsersManager

Parameters:

sess - PerunSession

url - base URL of running perun instance passed from RPC.

user - User to request preferred email change for

email - new email address

lang - Language to get confirmation mail in (optional)

path - path that is appended to the url of the verification link (optional)

idp - authentication method appended to query parameters of verification link (optional)

Throws:

PrivilegeException

UserNotExistsException

reservePassword

public void reservePassword(PerunSession sess,
 String userLogin,
 String loginNamespace,
 String password)
                     throws PrivilegeException,
PasswordCreationFailedException,
PasswordOperationTimeoutException,
PasswordStrengthFailedException,
InvalidLoginException,
PasswordStrengthException

Description copied from interface: UsersManager

Reserves the password in external system. User must not exist.

Specified by:

reservePassword in interface UsersManager

Parameters:

sess - Perun session

userLogin - String representation of the userLogin

loginNamespace - Login-namespace to reserve password in

password - Password to be reserved

Throws:

PasswordCreationFailedException

InvalidLoginException - When login of user has invalid syntax (is not allowed)

PrivilegeException

PasswordOperationTimeoutException

PasswordStrengthFailedException

PasswordStrengthException

reservePassword

public void reservePassword(PerunSession sess,
 User user,
 String loginNamespace,
 String password)
                     throws PrivilegeException,
PasswordCreationFailedException,
UserNotExistsException,
LoginNotExistsException,
PasswordOperationTimeoutException,
PasswordStrengthFailedException,
InvalidLoginException,
PasswordStrengthException

Description copied from interface: UsersManager

Reserves the password in external system. User must exist. User's login for specified namespace must exist in Perun.

Specified by:

reservePassword in interface UsersManager

Parameters:

sess - Perun session

user - User to reserve password for

loginNamespace - Login-namespace to reserve password in

password - Password to be reserved

Throws:

PrivilegeException

PasswordCreationFailedException

UserNotExistsException - When the user doesn't exist

LoginNotExistsException - When user doesn't have login in specified namespace

PasswordOperationTimeoutException

PasswordStrengthFailedException

InvalidLoginException

PasswordStrengthException

reserveRandomPassword

public void reserveRandomPassword(PerunSession sess,
 User user,
 String loginNamespace)
                           throws PasswordCreationFailedException,
PrivilegeException,
UserNotExistsException,
LoginNotExistsException,
PasswordOperationTimeoutException,
PasswordStrengthFailedException,
InvalidLoginException

Description copied from interface: UsersManager

Reserves random password in external system. User must exist. User's login for specified namespace must exist in Perun.

Specified by:

reserveRandomPassword in interface UsersManager

Parameters:

sess - Perun session

user - User to reserve password for

loginNamespace - Login-namespace to reserve password in

Throws:

PasswordCreationFailedException

UserNotExistsException - When the user doesn't exist

LoginNotExistsException - When user doesn't have login in specified namespace

PrivilegeException

PasswordOperationTimeoutException

PasswordStrengthFailedException

InvalidLoginException

setLogin

public void setLogin(PerunSession sess,
 User user,
 String loginNamespace,
 String login)
              throws PrivilegeException,
UserNotExistsException,
LoginExistsException,
InvalidLoginException

Description copied from interface: UsersManager

Allow users to manually add login in supported namespace if same login is not reserved. Can be set only to own service or guest users => specific users.

Specified by:

setLogin in interface UsersManager

Parameters:

sess -

user -

loginNamespace -

login -

Throws:

PrivilegeException

UserNotExistsException

LoginExistsException

InvalidLoginException

setPerunBl

public void setPerunBl(PerunBl perunBl)

Sets the perunBl for this instance.

Parameters:

perunBl - The perunBl.

setSpecificUser

public User setSpecificUser(PerunSession sess,
 User specificUser,
 SpecificUserType specificUserType,
 User owner)
                     throws RelationExistsException,
UserNotExistsException,
PrivilegeException

Description copied from interface: UsersManager

Set specific user type for specific user and set ownership of this user for the owner.

Specified by:

setSpecificUser in interface UsersManager

Parameters:

sess - perun session

specificUser - specific user

specificUserType - specific type of user

owner - user, who will be owner of the specific user

Returns:

specific user with specific user type set

Throws:

RelationExistsException

UserNotExistsException

PrivilegeException

setUsersManagerBl

public void setUsersManagerBl(UsersManagerBl usersManagerBl)

Sets the usersManagerBl for this instance.

Parameters:

usersManagerBl - The usersManagerBl.

unblockLogins

public void unblockLogins(PerunSession sess,
 List<String> logins,
 String namespace)
                   throws PrivilegeException,
LoginIsNotBlockedException

Description copied from interface: UsersManager

Unblock logins for given namespace or unblock logins globally (if no namespace is selected)

Specified by:

unblockLogins in interface UsersManager

Parameters:

sess -

logins - list of logins to be unblocked

namespace - namespace where the logins should be unblocked (null means unblock the logins globally)

Throws:

LoginIsNotBlockedException

PrivilegeException

unblockLoginsById

public void unblockLoginsById(PerunSession sess,
 List<Integer> loginIds)
                       throws PrivilegeException,
LoginIsNotBlockedException

Description copied from interface: UsersManager

Unblock logins by id globally, or in the namespace they were initially blocked.

Specified by:

unblockLoginsById in interface UsersManager

Parameters:

sess - session

loginIds - list of login ids

Throws:

PrivilegeException - insufficient permissions

LoginIsNotBlockedException - when login is not blocked

unsetSpecificUser

public User unsetSpecificUser(PerunSession sess,
 User specificUser,
 SpecificUserType specificUserType)
                       throws UserNotExistsException,
PrivilegeException,
ServiceOnlyRoleAssignedException

Description copied from interface: UsersManager

Remove all ownerships of this specific user and unset this specific user type from this specific user.

Specified by:

unsetSpecificUser in interface UsersManager

Parameters:

sess - perun session

specificUser - specific user

specificUserType - specific type of user

Returns:

user who is no more specific

Throws:

UserNotExistsException

PrivilegeException

ServiceOnlyRoleAssignedException - when trying to unset service flag from a user with service only role

updateNameTitles

public User updateNameTitles(PerunSession sess,
 User user)
                      throws UserNotExistsException,
PrivilegeException

Description copied from interface: UsersManager

Updates titles before/after name of user.

New titles must be set inside User object. Setting any title to null will remove title from name. Other user's properties are ignored.

Specified by:

updateNameTitles in interface UsersManager

Parameters:

sess -

user -

Returns:

updated user with new titles before/after name

Throws:

UserNotExistsException

PrivilegeException

updateUser

public User updateUser(PerunSession sess,
 User user)
                throws UserNotExistsException,
PrivilegeException

Description copied from interface: UsersManager

Updates users data in DB.

Specified by:

updateUser in interface UsersManager

Parameters:

sess -

user -

Returns:

updated user

Throws:

UserNotExistsException

PrivilegeException

updateUserExtSource

public UserExtSource updateUserExtSource(PerunSession sess,
 UserExtSource userExtSource)
                                  throws UserExtSourceNotExistsException,
UserExtSourceExistsException,
PrivilegeException

Description copied from interface: UsersManager

Updates user's userExtSource in DB. Login and LoA can be updated this way.

Specified by:

updateUserExtSource in interface UsersManager

Parameters:

sess -

userExtSource -

Returns:

updated userExtSource

Throws:

UserExtSourceNotExistsException - When UES by its ID doesn't exists

UserExtSourceExistsException - When UES with same login/extSource already exists.

PrivilegeException

updateUserExtSourceLastAccess

public void updateUserExtSourceLastAccess(PerunSession sess,
 UserExtSource userExtSource)
                                   throws PrivilegeException,
UserExtSourceNotExistsException

Description copied from interface: UsersManager

Updates user's userExtSource last access time in DB. We can get information which userExtSource has been used as a last one.

Specified by:

updateUserExtSourceLastAccess in interface UsersManager

Parameters:

sess -

userExtSource -

Throws:

PrivilegeException

UserExtSourceNotExistsException

validatePassword

public void validatePassword(PerunSession sess,
 String userLogin,
 String loginNamespace)
                      throws PrivilegeException,
PasswordCreationFailedException,
InvalidLoginException

Description copied from interface: UsersManager

Validates the password in external system and sets user extSources and extSource related attributes. User must not exist.

Specified by:

validatePassword in interface UsersManager

Parameters:

sess - Perun session

userLogin - String representation of the userLogin

loginNamespace - Login-namespace to validate password in

Throws:

PasswordCreationFailedException

InvalidLoginException - When login of user has invalid syntax (is not allowed)

PrivilegeException

validatePassword

public void validatePassword(PerunSession sess,
 User user,
 String loginNamespace)
                      throws PrivilegeException,
PasswordCreationFailedException,
UserNotExistsException,
LoginNotExistsException,
InvalidLoginException

Description copied from interface: UsersManager

Validates the password in external system and sets user extSources and extSource related attributes. User must exist. User's login for specified namespace must exist in Perun.

Specified by:

validatePassword in interface UsersManager

Parameters:

sess - Perun session

user - User whose password should being validated

loginNamespace - Login-namespace to validate password in

Throws:

PrivilegeException

PasswordCreationFailedException

UserNotExistsException - When the user doesn't exist

LoginNotExistsException - When user doesn't have login in specified namespace

InvalidLoginException

validatePreferredEmailChange

public String validatePreferredEmailChange(PerunSession sess,
 User user,
 UUID token)
                                    throws PrivilegeException,
UserNotExistsException,
WrongAttributeAssignmentException,
AttributeNotExistsException,
WrongReferenceAttributeValueException,
WrongAttributeValueException

Description copied from interface: UsersManager

Validate change of user's preferred email address. New email address is set as value of urn:perun:user:attribute-def:def:preferredMail attribute.

Specified by:

validatePreferredEmailChange in interface UsersManager

Parameters:

sess - PerunSession

user - User to validate email address for

token - token for the email change request to validate

Returns:

String return new preferred email

Throws:

PrivilegeException

UserNotExistsException

WrongAttributeAssignmentException

AttributeNotExistsException

WrongReferenceAttributeValueException

WrongAttributeValueException

validateSSHKey

public void validateSSHKey(PerunSession sess,
 String sshKey)
                    throws SSHKeyNotValidException

Description copied from interface: UsersManager

Validate ssh public key, throws exception if validation fails

Specified by:

validateSSHKey in interface UsersManager

Parameters:

sess - sess

sshKey - ssh public key to verify

Throws:

SSHKeyNotValidException - when validation fails

getUserRelations

public Map<String,List<PerunBean>> getUserRelations(PerunSession sess,
 User user)
                                             throws UserNotExistsException

Description copied from interface: UsersManager

Gets map with 2 items which are a list of all vos and a list of all groups where given user is member filtered by principal's privileges.

Specified by:

getUserRelations in interface UsersManager

Parameters:

sess - perun session

user - user

Returns:

Result map with lists of vos and groups where given user is member

Throws:

UserNotExistsException - If user does not exist.

changeOrganization

public void changeOrganization(PerunSession sess,
 User user,
 String newOrganizationName)
                        throws UserNotExistsException,
PrivilegeException,
UserExtSourceNotExistsException,
PersonalDataChangeNotEnabledException

Description copied from interface: UsersManager

Change organization from which user came to organization from user ext source.

Specified by:

changeOrganization in interface UsersManager

Parameters:

sess - session

user - user

newOrganizationName - new organization name

Throws:

UserNotExistsException - If user does not exist.

PrivilegeException - if privileges are not given.

UserExtSourceNotExistsException - If user ext source with given organization name and required loa does not exist.

PersonalDataChangeNotEnabledException - If change of organization to organization from ues is not enabled.

changeOrganizationCustom

public void changeOrganizationCustom(PerunSession sess,
 User user,
 String newOrganizationName)
                              throws UserNotExistsException,
PrivilegeException,
PersonalDataChangeNotEnabledException

Description copied from interface: UsersManager

Change organization from which user came to custom organization. If check from admin is required, then UserOrganizationChangeRequested audit log will be created. Otherwise, it will be set immediately.

Specified by:

changeOrganizationCustom in interface UsersManager

Parameters:

sess - session

user - user

newOrganizationName - new organization name

Throws:

UserNotExistsException - If user does not exist.

PrivilegeException - if privileges are not given.

PersonalDataChangeNotEnabledException - If change of organization to custom organization is not enabled.

changeName

public void changeName(PerunSession sess,
 User user,
 String newUserName)
                throws UserNotExistsException,
PrivilegeException,
UserExtSourceNotExistsException,
PersonalDataChangeNotEnabledException

Description copied from interface: UsersManager

Change user's name to user's name from user ext source.

Specified by:

changeName in interface UsersManager

Parameters:

sess - session

user - user

newUserName - new user's name

Throws:

UserNotExistsException - If user does not exist.

PrivilegeException - if privileges are not given.

UserExtSourceNotExistsException - If user ext source with given user's name and required loa does not exist.

PersonalDataChangeNotEnabledException - If change of user's name to user's name from ues is not enabled.

changeNameCustom

public void changeNameCustom(PerunSession sess,
 User user,
 String titleBefore,
 String firstName,
 String middleName,
 String lastName,
 String titleAfter)
                      throws UserNotExistsException,
PrivilegeException,
PersonalDataChangeNotEnabledException

Description copied from interface: UsersManager

Change user's name to custom name. If check from admin is required, then UserNameChangeRequest audit log will be created. Otherwise, it will be set immediately.

Specified by:

changeNameCustom in interface UsersManager

Parameters:

sess - session

user - user

titleBefore - new title before

firstName - new first name

middleName - new middle name

lastName - new last name

titleAfter - new title after

Throws:

UserNotExistsException - If user does not exist.

PrivilegeException - if privileges are not given.

PersonalDataChangeNotEnabledException - If change of user's name to custom name is not enabled.

changeEmail

public void changeEmail(PerunSession sess,
 User user,
 String newEmail)
                 throws UserNotExistsException,
PrivilegeException,
UserExtSourceNotExistsException,
PersonalDataChangeNotEnabledException

Description copied from interface: UsersManager

Change user's email to email from user ext source.

Specified by:

changeEmail in interface UsersManager

Parameters:

sess - session

user - user

newEmail - new email

Throws:

UserNotExistsException - If user does not exist.

PrivilegeException - if privileges are not given.

UserExtSourceNotExistsException - If user ext source with given email and required loa does not exist.

PersonalDataChangeNotEnabledException - If change of user's email to email from ues is not enabled.

changeEmailCustom

public void changeEmailCustom(PerunSession sess,
 User user,
 String newEmail,
 String url,
 String lang,
 String path,
 String idp)
                       throws UserNotExistsException,
PrivilegeException,
PersonalDataChangeNotEnabledException

Description copied from interface: UsersManager

Change user's email to custom email. If verification is required, then verification email will be sent. Otherwise, it will be set immediately.

Specified by:

changeEmailCustom in interface UsersManager

Parameters:

sess - session

user - user

newEmail - new email

url - base URL of running perun instance passed from RPC.

lang - Language to get confirmation mail in (optional)

path - path that is appended to the url of the verification link (optional)

idp - authentication method appended to query parameters of verification link (optional)

Throws:

UserNotExistsException - If user does not exist.

PrivilegeException - if privileges are not given.

PersonalDataChangeNotEnabledException - If change of user's email to custom email is not enabled.