diff options
Diffstat (limited to 'base/server/cms/src/com/netscape/cms/servlet/profile/ProfileService.java')
| -rw-r--r-- | base/server/cms/src/com/netscape/cms/servlet/profile/ProfileService.java | 1033 |
1 files changed, 0 insertions, 1033 deletions
diff --git a/base/server/cms/src/com/netscape/cms/servlet/profile/ProfileService.java b/base/server/cms/src/com/netscape/cms/servlet/profile/ProfileService.java deleted file mode 100644 index eb9dc83df..000000000 --- a/base/server/cms/src/com/netscape/cms/servlet/profile/ProfileService.java +++ /dev/null @@ -1,1033 +0,0 @@ -//--- BEGIN COPYRIGHT BLOCK --- -//This program is free software; you can redistribute it and/or modify -//it under the terms of the GNU General Public License as published by -//the Free Software Foundation; version 2 of the License. -// -//This program is distributed in the hope that it will be useful, -//but WITHOUT ANY WARRANTY; without even the implied warranty of -//MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the -//GNU General Public License for more details. -// -//You should have received a copy of the GNU General Public License along -//with this program; if not, write to the Free Software Foundation, Inc., -//51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. -// -//(C) 2011 Red Hat, Inc. -//All rights reserved. -//--- END COPYRIGHT BLOCK --- - -package com.netscape.cms.servlet.profile; - -import java.io.File; -import java.io.IOException; -import java.net.URI; -import java.security.Principal; -import java.util.ArrayList; -import java.util.Enumeration; -import java.util.LinkedHashMap; -import java.util.List; -import java.util.Locale; -import java.util.Map; -import java.util.Vector; - -import javax.servlet.http.HttpServletRequest; -import javax.ws.rs.PathParam; -import javax.ws.rs.core.Context; -import javax.ws.rs.core.HttpHeaders; -import javax.ws.rs.core.Request; -import javax.ws.rs.core.Response; -import javax.ws.rs.core.UriBuilder; -import javax.ws.rs.core.UriInfo; - -import org.apache.commons.lang.StringUtils; -import org.jboss.resteasy.plugins.providers.atom.Link; - -import com.netscape.certsrv.apps.CMS; -import com.netscape.certsrv.base.BadRequestException; -import com.netscape.certsrv.base.EBaseException; -import com.netscape.certsrv.base.IConfigStore; -import com.netscape.certsrv.base.PKIException; -import com.netscape.certsrv.base.UnauthorizedException; -import com.netscape.certsrv.common.NameValuePairs; -import com.netscape.certsrv.common.OpDef; -import com.netscape.certsrv.common.ScopeDef; -import com.netscape.certsrv.logging.ILogger; -import com.netscape.certsrv.profile.EProfileException; -import com.netscape.certsrv.profile.IProfile; -import com.netscape.certsrv.profile.IProfileEx; -import com.netscape.certsrv.profile.IProfileInput; -import com.netscape.certsrv.profile.IProfileOutput; -import com.netscape.certsrv.profile.IProfilePolicy; -import com.netscape.certsrv.profile.IProfileSubsystem; -import com.netscape.certsrv.profile.PolicyConstraint; -import com.netscape.certsrv.profile.PolicyConstraintValue; -import com.netscape.certsrv.profile.PolicyDefault; -import com.netscape.certsrv.profile.ProfileData; -import com.netscape.certsrv.profile.ProfileDataInfo; -import com.netscape.certsrv.profile.ProfileDataInfos; -import com.netscape.certsrv.profile.ProfileInput; -import com.netscape.certsrv.profile.ProfileNotFoundException; -import com.netscape.certsrv.profile.ProfileOutput; -import com.netscape.certsrv.profile.ProfileParameter; -import com.netscape.certsrv.profile.ProfilePolicy; -import com.netscape.certsrv.profile.ProfileResource; -import com.netscape.certsrv.property.EPropertyException; -import com.netscape.certsrv.registry.IPluginInfo; -import com.netscape.certsrv.registry.IPluginRegistry; -import com.netscape.cms.realm.PKIPrincipal; -import com.netscape.cms.servlet.base.PKIService; - -/** - * @author alee - * - */ -public class ProfileService extends PKIService implements ProfileResource { - - @Context - private UriInfo uriInfo; - - @Context - private HttpHeaders headers; - - @Context - private Request request; - - @Context - private HttpServletRequest servletRequest; - - public final static int DEFAULT_SIZE = 20; - - private IProfileSubsystem ps = (IProfileSubsystem) CMS.getSubsystem(IProfileSubsystem.ID); - private IPluginRegistry registry = (IPluginRegistry) CMS.getSubsystem(CMS.SUBSYSTEM_REGISTRY); - private IConfigStore cs = CMS.getConfigStore().getSubStore("profile"); - - private final static String LOGGING_SIGNED_AUDIT_CERT_PROFILE_APPROVAL = - "LOGGING_SIGNED_AUDIT_CERT_PROFILE_APPROVAL_4"; - private final static String LOGGING_SIGNED_AUDIT_CONFIG_CERT_PROFILE = - "LOGGING_SIGNED_AUDIT_CONFIG_CERT_PROFILE_3"; - - @Override - public Response listProfiles(Integer start, Integer size) { - - start = start == null ? 0 : start; - size = size == null ? DEFAULT_SIZE : size; - - ProfileDataInfos infos = new ProfileDataInfos(); - boolean visibleOnly = true; - - if (ps == null) { - CMS.debug("listProfiles: ps is null"); - throw new PKIException("Error listing profiles. Profile Service not available"); - } - - PKIPrincipal principal = (PKIPrincipal) servletRequest.getUserPrincipal(); - if ((principal != null) && - (principal.hasRole("Certificate Manager Agents") || - principal.hasRole("Certificate Manager Administrators"))) { - visibleOnly = false; - } - - Enumeration<String> e = ps.getProfileIds(); - if (e == null) return createOKResponse(infos); - - // store non-null results in a list - List<ProfileDataInfo> results = new ArrayList<ProfileDataInfo>(); - while (e.hasMoreElements()) { - try { - String id = e.nextElement(); - ProfileDataInfo info = createProfileDataInfo(id, visibleOnly, uriInfo, getLocale(headers)); - if (info == null) continue; - results.add(info); - } catch (EBaseException ex) { - continue; - } - } - - int total = results.size(); - infos.setTotal(total); - - // return entries in the requested page - for (int i = start; i < start + size && i < total; i++) { - infos.addEntry(results.get(i)); - } - - if (start > 0) { - URI uri = uriInfo.getRequestUriBuilder().replaceQueryParam("start", Math.max(start-size, 0)).build(); - infos.addLink(new Link("prev", uri)); - } - - if (start + size < total) { - URI uri = uriInfo.getRequestUriBuilder().replaceQueryParam("start", start+size).build(); - infos.addLink(new Link("next", uri)); - } - - return createOKResponse(infos); - } - - @Override - public Response retrieveProfile(String profileId) throws ProfileNotFoundException { - ProfileData data = null; - boolean visibleOnly = true; - - if (profileId == null) { - CMS.debug("retrieveProfile: profileID is null"); - throw new BadRequestException("Unable to retrieve profile: invalid profile ID"); - } - - if (ps == null) { - CMS.debug("retrieveProfile: ps is null"); - throw new PKIException("Error retrieving profile. Profile Service not available"); - } - - PKIPrincipal principal = (PKIPrincipal) servletRequest.getUserPrincipal(); - if ((principal != null) && - (principal.hasRole("Certificate Manager Agents") || - principal.hasRole("Certificate Manager Administrators"))) { - visibleOnly = false; - } - - Enumeration<String> profileIds = ps.getProfileIds(); - - IProfile profile = null; - if (profileIds != null) { - while (profileIds.hasMoreElements()) { - String id = profileIds.nextElement(); - - if (id.equals(profileId)) { - - try { - profile = ps.getProfile(profileId); - } catch (EProfileException e) { - e.printStackTrace(); - throw new ProfileNotFoundException(profileId); - } - break; - } - } - } - - if (profile == null) { - throw new ProfileNotFoundException(profileId); - } - - if (visibleOnly && !profile.isVisible()) { - throw new ProfileNotFoundException(profileId); - } - - try { - data = createProfileData(profileId); - } catch (EBaseException e) { - e.printStackTrace(); - throw new ProfileNotFoundException(profileId); - } - - UriBuilder profileBuilder = uriInfo.getBaseUriBuilder(); - URI uri = profileBuilder.path(ProfileResource.class).path("{id}"). - build(profileId); - data.setLink(new Link("self", uri)); - - return createOKResponse(data); - } - - public ProfileData createProfileData(String profileId) throws EBaseException { - - IProfile profile; - - try { - profile = ps.getProfile(profileId); - } catch (EProfileException e) { - e.printStackTrace(); - throw new ProfileNotFoundException(profileId); - } - - ProfileData data = new ProfileData(); - - data.setAuthenticatorId(profile.getAuthenticatorId()); - data.setAuthzAcl(profile.getAuthzAcl()); - data.setClassId(cs.getString(profileId + ".class_id")); - data.setDescription(profile.getDescription(getLocale(headers))); - data.setEnabled(ps.isProfileEnable(profileId)); - data.setEnabledBy(ps.getProfileEnableBy(profileId)); - data.setId(profileId); - data.setName(profile.getName(getLocale(headers))); - data.setRenewal(Boolean.getBoolean(profile.isRenewal())); - data.setVisible(profile.isVisible()); - data.setXMLOutput(Boolean.getBoolean(profile.isXmlOutput())); - - Enumeration<String> inputIds = profile.getProfileInputIds(); - if (inputIds != null) { - while (inputIds.hasMoreElements()) { - ProfileInput input = createProfileInput(profile, inputIds.nextElement(), getLocale(headers)); - if (input == null) - continue; - data.addProfileInput(input); - } - } - - // profile outputs - Enumeration<String> outputIds = profile.getProfileOutputIds(); - if (outputIds != null) { - while (outputIds.hasMoreElements()) { - ProfileOutput output = createProfileOutput(profile, outputIds.nextElement(), getLocale(headers)); - if (output == null) - continue; - data.addProfileOutput(output); - } - } - - // profile policies - Enumeration<String> policySetIds = profile.getProfilePolicySetIds(); - if (policySetIds != null) { - while (policySetIds.hasMoreElements()) { - Vector<ProfilePolicy> pset = new Vector<ProfilePolicy>(); - String policySetId = policySetIds.nextElement(); - Enumeration<String> policyIds = profile.getProfilePolicyIds(policySetId); - while (policyIds.hasMoreElements()) { - String policyId = policyIds.nextElement(); - pset.add(createProfilePolicy(profile, policySetId, policyId)); - } - - if (!pset.isEmpty()) { - data.addProfilePolicySet(policySetId, pset); - } - } - } - - UriBuilder profileBuilder = uriInfo.getBaseUriBuilder(); - URI uri = profileBuilder.path(ProfileResource.class).path("{id}"). - build(profileId); - data.setLink(new Link("self", uri)); - - return data; - } - - public ProfilePolicy createProfilePolicy(IProfile profile, String setId, String policyId) throws EBaseException { - IProfilePolicy policy = profile.getProfilePolicy(setId, policyId); - IConfigStore policyStore = profile.getConfigStore().getSubStore( - "policyset." + setId + "." + policy.getId()); - - ProfilePolicy p = new ProfilePolicy(); - String constraintClassId = policyStore.getString("constraint.class_id"); - p.setConstraint(PolicyConstraintFactory.create(getLocale(headers), policy.getConstraint(), constraintClassId)); - String defaultClassId = policyStore.getString("default.class_id"); - p.setDef(PolicyDefaultFactory.create(getLocale(headers), policy.getDefault(), defaultClassId)); - p.setId(policy.getId()); - return p; - } - - public static ProfileInput createProfileInput(IProfile profile, String inputId, Locale locale) throws EBaseException { - IProfileInput profileInput = profile.getProfileInput(inputId); - if (profileInput == null) - return null; - - IConfigStore inputStore = profile.getConfigStore().getSubStore("input"); - String classId = inputStore.getString(inputId + ".class_id"); - - return new ProfileInput(profileInput, inputId, classId, locale); - } - - public static ProfileOutput createProfileOutput(IProfile profile, String outputId, Locale locale) throws EBaseException { - IProfileOutput profileOutput = profile.getProfileOutput(outputId); - if (profileOutput == null) - return null; - - IConfigStore outputStore = profile.getConfigStore().getSubStore("output"); - String classId = outputStore.getString(outputId + ".class_id"); - - return new ProfileOutput(profileOutput, outputId, classId, locale); - } - - public static ProfileDataInfo createProfileDataInfo(String profileId, boolean visibleOnly, UriInfo uriInfo, - Locale locale) throws EBaseException { - - IProfileSubsystem ps = (IProfileSubsystem) CMS.getSubsystem(IProfileSubsystem.ID); - if (profileId == null) { - throw new EBaseException("Error creating ProfileDataInfo."); - } - ProfileDataInfo ret = null; - - IProfile profile = null; - - profile = ps.getProfile(profileId); - if (profile == null) { - return null; - } - - if (visibleOnly && !profile.isVisible()) { - return null; - } - - ret = new ProfileDataInfo(); - - ret.setProfileId(profileId); - ret.setProfileName(profile.getName(locale)); - ret.setProfileDescription(profile.getDescription(locale)); - - UriBuilder profileBuilder = uriInfo.getBaseUriBuilder(); - URI uri = profileBuilder.path(ProfileResource.class).path("{id}"). - build(profileId); - - ret.setProfileURL(uri.toString()); - - return ret; - } - - @Override - public Response modifyProfileState(String profileId, String action) { - if (profileId == null) { - CMS.debug("modifyProfileState: invalid request. profileId is null"); - throw new BadRequestException("Unable to modify profile state: Invalid Profile Id"); - } - - if (ps == null) { - CMS.debug("modifyProfileState: ps is null"); - throw new PKIException("Error modifying profile state. Profile Service not available"); - } - - try { - IProfile profile = ps.getProfile(profileId); - if (profile == null) { - CMS.debug("Trying to modify profile: " + profileId + ". Profile not found."); - throw new ProfileNotFoundException(profileId); - } - } catch (EProfileException e1) { - e1.printStackTrace(); - throw new PKIException("Error modifying profile state: unable to get profile"); - } - - Principal principal = servletRequest.getUserPrincipal(); - - switch (action) { - case "enable": - if (ps.isProfileEnable(profileId)) { - throw new BadRequestException("Profile already enabled"); - } - try { - ps.enableProfile(profileId, principal.getName()); - auditProfileChangeState(profileId, "approve", ILogger.SUCCESS); - } catch (EProfileException e) { - CMS.debug("modifyProfileState: error enabling profile. " + e); - e.printStackTrace(); - auditProfileChangeState(profileId, "approve", ILogger.FAILURE); - throw new PKIException("Error enabling profile"); - } - break; - case "disable": - if (!ps.isProfileEnable(profileId)) { - throw new BadRequestException("Profile already disabled"); - } - String userid = principal.getName(); - try { - if (ps.checkOwner()) { - if (ps.getProfileEnableBy(profileId).equals(userid)) { - ps.disableProfile(profileId); - auditProfileChangeState(profileId, "disapprove", ILogger.SUCCESS); - } else { - auditProfileChangeState(profileId, "disapprove", ILogger.FAILURE); - throw new UnauthorizedException( - "Profile can only be disabled by the agent that enabled it"); - } - } else { - ps.disableProfile(profileId); - auditProfileChangeState(profileId, "disapprove", ILogger.SUCCESS); - } - } catch (EProfileException e) { - CMS.debug("modifyProfileState: Error disabling profile: " + e); - e.printStackTrace(); - auditProfileChangeState(profileId, "disapprove", ILogger.FAILURE); - throw new PKIException("Error disabling profile"); - } - break; - default: - auditProfileChangeState(profileId, "invalid", ILogger.FAILURE); - throw new BadRequestException("Invalid operation"); - } - - return createNoContentResponse(); - } - - @Override - public Response createProfile(ProfileData data) { - if (data == null) { - CMS.debug("createProfile: profile data is null"); - throw new BadRequestException("Unable to create profile: Invalid profile data."); - } - - if (ps == null) { - CMS.debug("createProfile: ps is null"); - throw new PKIException("Error creating profile. Profile Service not available"); - } - - IProfile profile = null; - String profileId = data.getId(); - Map<String, String> auditParams = new LinkedHashMap<String, String>(); - try { - profile = ps.getProfile(profileId); - if (profile != null) { - throw new BadRequestException("Profile already exists"); - } - - auditParams.put("class_id", data.getClassId()); - auditParams.put("name", data.getName()); - auditParams.put("description", data.getDescription()); - auditParams.put("visible", Boolean.toString(data.isVisible())); - - String config = CMS.getConfigStore().getString("instanceRoot") + "/ca/profiles/ca/" + - profileId + ".cfg"; - File configFile = new File(config); - configFile.createNewFile(); - IPluginInfo info = registry.getPluginInfo("profile", data.getClassId()); - - profile = ps.createProfile(profileId, data.getClassId(), info.getClassName(), config); - profile.setName(getLocale(headers), data.getName()); - profile.setDescription(getLocale(headers), data.getDescription()); - profile.setVisible(data.isVisible()); - profile.getConfigStore().commit(false); - ps.createProfileConfig(profileId, data.getClassId(), config); - - if (profile instanceof IProfileEx) { - // populates profile specific plugins such as - // policies, inputs and outputs with defaults - ((IProfileEx) profile).populate(); - } - - auditProfileChange( - ScopeDef.SC_PROFILE_RULES, - OpDef.OP_ADD, - profileId, - ILogger.SUCCESS, - auditParams); - - changeProfileData(data, profile); - - ProfileData profileData = createProfileData(profileId); - - return createCreatedResponse(profileData, profileData.getLink().getHref()); - - } catch (EBaseException | IOException e) { - CMS.debug("createProfile: error in creating profile: " + e); - e.printStackTrace(); - - auditProfileChange( - ScopeDef.SC_PROFILE_RULES, - OpDef.OP_ADD, - profileId, - ILogger.FAILURE, - auditParams); - - throw new PKIException("Error in creating profile"); - } - } - - @Override - public Response modifyProfile(String profileId, ProfileData data) { - if (profileId == null) { - CMS.debug("modifyProfile: invalid request. profileId is null"); - throw new BadRequestException("Unable to modify profile: Invalid Profile Id"); - } - - if (data == null) { - CMS.debug("modifyProfile: invalid request. data is null"); - throw new BadRequestException("Unable to modify profile: Invalid profile data"); - } - - if (ps == null) { - CMS.debug("modifyProfile: ps is null"); - throw new PKIException("Error modifying profile. Profile Service not available"); - } - - IProfile profile = null; - try { - profile = ps.getProfile(profileId); - if (profile == null) { - throw new ProfileNotFoundException(profileId); - } - - changeProfileData(data, profile); - - ProfileData profileData = createProfileData(profileId); - - return createOKResponse(profileData); - - } catch (EBaseException e) { - CMS.debug("modifyProfile: error obtaining profile `" + profileId + "`: " + e); - e.printStackTrace(); - throw new PKIException("Error modifying profile. Cannot obtain profile."); - } - } - - private void changeProfileData(ProfileData data, IProfile profile) { - String profileId = data.getId(); - if (profile == null) { - CMS.debug("changeProfileData - profile is null"); - throw new PKIException("Error changing profile data. Profile not available."); - } - if (ps.isProfileEnable(profileId)) { - throw new BadRequestException("Cannot change profile data. Profile must be disabled"); - } - - Map<String, String> auditParams = new LinkedHashMap<String, String>(); - - if (differs(profile.getAuthenticatorId(), data.getAuthenticatorId())) { - profile.setAuthenticatorId(data.getAuthenticatorId()); - auditParams.put("authenticatorId", data.getAuthenticatorId()); - } - - if (differs(profile.getAuthzAcl(), data.getAuthzAcl())) { - profile.setAuthzAcl(data.getAuthzAcl()); - auditParams.put("authzAcl", data.getAuthzAcl()); - } - - if (differs(profile.getDescription(getLocale(headers)), data.getDescription())) { - profile.setDescription(getLocale(headers), data.getDescription()); - auditParams.put("description", data.getDescription()); - } - - if (differs(profile.getId(), data.getId())) { - profile.setId(data.getId()); - auditParams.put("id", data.getId()); - } - - if (differs(profile.getName(getLocale(headers)), data.getName())) { - profile.setName(getLocale(headers), data.getName()); - auditParams.put("name", data.getName()); - } - - // TODO renewal is a string in Profile, should be changed - if (differs(profile.isRenewal(), Boolean.toString(data.isRenewal()))) { - profile.setRenewal(data.isRenewal()); - auditParams.put("renewal", Boolean.toString(data.isRenewal())); - } - - if (!profile.isVisible() == data.isVisible()) { - profile.setVisible(data.isVisible()); - auditParams.put("visible", Boolean.toString(data.isVisible())); - } - - // TODO xmloutput is a string in Profile, should be changed - if (differs(profile.isXmlOutput(), Boolean.toString(data.isXMLOutput()))) { - profile.setXMLOutput(data.isXMLOutput()); - auditParams.put("xmloutput", Boolean.toString(data.isXMLOutput())); - } - - if (!auditParams.isEmpty()) { - auditProfileChange( - ScopeDef.SC_PROFILE_RULES, - OpDef.OP_MODIFY, - profileId, - ILogger.SUCCESS, - auditParams); - } - - try { - populateProfileInputs(data, profile); - populateProfileOutputs(data, profile); - populateProfilePolicies(data, profile); - profile.getConfigStore().commit(false); - } catch (EBaseException e) { - CMS.debug("changeProfileData: Error changing profile inputs/outputs/policies: " + e); - e.printStackTrace(); - throw new PKIException("Error changing profile data"); - } - } - - private boolean differs(String v1, String v2) { - if (v1 != null) { - if (!v1.equals(v2)) { - return true; - } - } else { - if (v2 != null) { - return true; - } - } - return false; - } - - private void populateProfilePolicies(ProfileData data, IProfile profile) throws EBaseException { - // get list of changes for auditing - List<String> auditAdd = new ArrayList<String>(); - List<String> auditModify = new ArrayList<String>(); - - Enumeration<String> existingSetIds = profile.getProfilePolicySetIds(); - Map<String, ProfilePolicy> existingPolicies = new LinkedHashMap<String, ProfilePolicy>(); - while (existingSetIds.hasMoreElements()) { - String setId = existingSetIds.nextElement(); - Enumeration<String> policyIds = profile.getProfilePolicyIds(setId); - while (policyIds.hasMoreElements()) { - String policyId = policyIds.nextElement(); - existingPolicies.put( - setId + ":" + policyId, - createProfilePolicy(profile, setId, policyId)); - } - } - - for (Map.Entry<String, List<ProfilePolicy>> policySet : data.getPolicySets().entrySet()) { - String setId = policySet.getKey(); - for (ProfilePolicy policy : policySet.getValue()) { - String id = setId + ":" + policy.getId(); - if (!existingPolicies.containsKey(id)) { - auditAdd.add(id); - } else { - if (!policy.equals(existingPolicies.get(id))) { - auditModify.add(id); - } - } - existingPolicies.remove(id); - } - } - - List<String> auditDelete = new ArrayList<String>(existingPolicies.keySet()); - - //perform actions - try { - profile.deleteAllProfilePolicies(); - for (Map.Entry<String, List<ProfilePolicy>> policySet : data.getPolicySets().entrySet()) { - String setId = policySet.getKey(); - for (ProfilePolicy policy : policySet.getValue()) { - PolicyDefault def = policy.getDef(); - PolicyConstraint con = policy.getConstraint(); - - // create policy using defaults for PolicyDefault and PolicyConstraint - IProfilePolicy p = profile.createProfilePolicy(setId, policy.getId(), - def.getClassId(), con.getClassId()); - - // change specific elements to match incoming data for PolicyDefault - IConfigStore pstore = profile.getConfigStore().getSubStore( - "policyset." + setId + "." + policy.getId()); - if (!def.getName().isEmpty()) { - pstore.putString("default.name", def.getName()); - } - /*if (!def.getText().isEmpty()) { - pstore.putString("default.description", def.getText()); - }*/ - for (ProfileParameter param : def.getParams()) { - if (!param.getValue().isEmpty()) { - p.getDefault().setConfig(param.getName(), param.getValue()); - } - } - - // change specific elements to match incoming data for PolicyConstraint - if (!con.getName().isEmpty()) { - pstore.putString("constraint.name", con.getName()); - } - /*if (!con.getText().isEmpty()) { - pstore.putString("constraint.description", con.getText()); - }*/ - for (PolicyConstraintValue pcv : con.getConstraints()) { - if (!pcv.getValue().isEmpty()) { - p.getConstraint().setConfig(pcv.getName(), pcv.getValue()); - } - } - } - } - - if (!auditDelete.isEmpty()) { - Map<String, String> auditParams = new LinkedHashMap<String, String>(); - auditParams.put("inputs", StringUtils.join(auditDelete, ",")); - auditProfileChange( - ScopeDef.SC_PROFILE_POLICIES, - OpDef.OP_DELETE, - profile.getId(), - ILogger.SUCCESS, - auditParams); - } - - if (!auditAdd.isEmpty()) { - Map<String, String> auditParams = new LinkedHashMap<String, String>(); - auditParams.put("inputs", StringUtils.join(auditAdd, ",")); - auditProfileChange( - ScopeDef.SC_PROFILE_POLICIES, - OpDef.OP_ADD, - profile.getId(), - ILogger.SUCCESS, - auditParams); - } - - if (!auditModify.isEmpty()) { - Map<String, String> auditParams = new LinkedHashMap<String, String>(); - auditParams.put("inputs", StringUtils.join(auditModify, ",")); - auditProfileChange( - ScopeDef.SC_PROFILE_POLICIES, - OpDef.OP_MODIFY, - profile.getId(), - ILogger.SUCCESS, - auditParams); - } - } catch (EProfileException | EPropertyException e) { - Map<String, String> auditParams = new LinkedHashMap<String, String>(); - auditParams.put("added", StringUtils.join(auditAdd, ",")); - auditParams.put("deleted", StringUtils.join(auditDelete, ",")); - auditParams.put("modified", StringUtils.join(auditModify, ",")); - auditProfileChange( - ScopeDef.SC_PROFILE_POLICIES, - OpDef.OP_MODIFY, - profile.getId(), - ILogger.FAILURE, - auditParams); - throw e; - } - } - - private void populateProfileOutputs(ProfileData data, IProfile profile) throws EBaseException { - // get list of changes for auditing - List<String> auditAdd = new ArrayList<String>(); - List<String> auditModify = new ArrayList<String>(); - - Enumeration<String> existingIds = profile.getProfileOutputIds(); - Map<String, ProfileOutput> existingOutputs = new LinkedHashMap<String, ProfileOutput>(); - while (existingIds.hasMoreElements()) { - String id = existingIds.nextElement(); - ProfileOutput output = createProfileOutput(profile, id, getLocale(headers)); - if (output == null) - continue; - existingOutputs.put(id, output); - } - - List<ProfileOutput> outputs = data.getOutputs(); - for (ProfileOutput output : outputs) { - String id = output.getId(); - if (!existingOutputs.containsKey(id)) { - auditAdd.add(id); - } else { - if (!output.equals(existingOutputs.get(id))) { - auditModify.add(id); - } - existingOutputs.remove(id); - } - } - List<String> auditDelete = new ArrayList<String>(existingOutputs.keySet()); - - // perform operations - - try { - profile.deleteAllProfileOutputs(); - for (ProfileOutput output : outputs) { - String id = output.getId(); - String classId = output.getClassId(); - - NameValuePairs nvp = new NameValuePairs(); - // TODO - add a field for params in ProfileOuput - // No current examples - profile.createProfileOutput(id, classId, nvp); - } - - if (!auditDelete.isEmpty()) { - Map<String, String> auditParams = new LinkedHashMap<String, String>(); - auditParams.put("outputs", StringUtils.join(auditDelete, ",")); - auditProfileChange( - ScopeDef.SC_PROFILE_OUTPUT, - OpDef.OP_DELETE, - profile.getId(), - ILogger.SUCCESS, - auditParams); - } - - if (!auditAdd.isEmpty()) { - Map<String, String> auditParams = new LinkedHashMap<String, String>(); - auditParams.put("outputs", StringUtils.join(auditAdd, ",")); - auditProfileChange( - ScopeDef.SC_PROFILE_OUTPUT, - OpDef.OP_ADD, - profile.getId(), - ILogger.SUCCESS, - auditParams); - } - - if (!auditModify.isEmpty()) { - Map<String, String> auditParams = new LinkedHashMap<String, String>(); - auditParams.put("outputs", StringUtils.join(auditModify, ",")); - auditProfileChange( - ScopeDef.SC_PROFILE_OUTPUT, - OpDef.OP_MODIFY, - profile.getId(), - ILogger.SUCCESS, - auditParams); - } - } catch (EProfileException e) { - Map<String, String> auditParams = new LinkedHashMap<String, String>(); - - auditParams.put("added", StringUtils.join(auditAdd, ",")); - auditParams.put("deleted", StringUtils.join(auditDelete, ",")); - auditParams.put("modified", StringUtils.join(auditModify, ",")); - auditProfileChange( - ScopeDef.SC_PROFILE_OUTPUT, - OpDef.OP_MODIFY, - profile.getId(), - ILogger.FAILURE, - auditParams); - throw e; - } - } - - private void populateProfileInputs(ProfileData data, IProfile profile) throws EBaseException { - // get list of changes for auditing - List<String> auditAdd = new ArrayList<String>(); - List<String> auditModify = new ArrayList<String>(); - Enumeration<String> existingIds = profile.getProfileInputIds(); - Map<String, ProfileInput> existingInputs = new LinkedHashMap<String, ProfileInput>(); - - while (existingIds.hasMoreElements()) { - String id = existingIds.nextElement(); - ProfileInput input = createProfileInput(profile, id, getLocale(headers)); - if (input == null) - continue; - existingInputs.put(id, input); - } - - List<ProfileInput> inputs = data.getInputs(); - for (ProfileInput input : inputs) { - String id = input.getId(); - if (!existingInputs.containsKey(id)) { - auditAdd.add(id); - } else { - if (!input.equals(existingInputs.get(id))) { - auditModify.add(id); - } - existingInputs.remove(id); - } - } - List<String> auditDelete = new ArrayList<String>(existingInputs.keySet()); - - try { - // perform the operations - profile.deleteAllProfileInputs(); - - for (ProfileInput input : inputs) { - String id = input.getId(); - String classId = input.getClassId(); - - NameValuePairs nvp = new NameValuePairs(); - // TODO - add a field for params in ProfileInput. - // an example of this is DomainController.cfg - profile.createProfileInput(id, classId, nvp); - } - - if (!auditDelete.isEmpty()) { - Map<String, String> auditParams = new LinkedHashMap<String, String>(); - auditParams.put("inputs", StringUtils.join(auditDelete, ",")); - auditProfileChange( - ScopeDef.SC_PROFILE_INPUT, - OpDef.OP_DELETE, - profile.getId(), - ILogger.SUCCESS, - auditParams); - } - - if (!auditAdd.isEmpty()) { - Map<String, String> auditParams = new LinkedHashMap<String, String>(); - auditParams.put("inputs", StringUtils.join(auditAdd, ",")); - auditProfileChange( - ScopeDef.SC_PROFILE_INPUT, - OpDef.OP_ADD, - profile.getId(), - ILogger.SUCCESS, - auditParams); - } - - if (!auditModify.isEmpty()) { - Map<String, String> auditParams = new LinkedHashMap<String, String>(); - auditParams.put("inputs", StringUtils.join(auditModify, ",")); - auditProfileChange( - ScopeDef.SC_PROFILE_INPUT, - OpDef.OP_MODIFY, - profile.getId(), - ILogger.SUCCESS, - auditParams); - } - } catch (EProfileException e) { - Map<String, String> auditParams = new LinkedHashMap<String, String>(); - - auditParams.put("added", StringUtils.join(auditAdd, ",")); - auditParams.put("deleted", StringUtils.join(auditDelete, ",")); - auditParams.put("modified", StringUtils.join(auditModify, ",")); - auditProfileChange( - ScopeDef.SC_PROFILE_INPUT, - OpDef.OP_MODIFY, - profile.getId(), - ILogger.FAILURE, - auditParams); - throw e; - } - } - - @Override - public Response deleteProfile(@PathParam("id") String profileId) { - if (profileId == null) { - CMS.debug("deleteProfile: invalid request. profileId is null"); - throw new BadRequestException("Unable to delete profile: Invalid Profile Id"); - } - - if (ps == null) { - CMS.debug("deleteProfile: ps is null"); - throw new PKIException("Error deleting profile. Profile Service not available"); - } - - try { - IProfile profile = ps.getProfile(profileId); - if (profile == null) { - CMS.debug("Trying to delete profile: " + profileId + ". Profile already deleted."); - throw new ProfileNotFoundException(profileId); - } - - if (ps.isProfileEnable(profileId)) { - CMS.debug("Delete profile not permitted. Profile must be disabled first."); - auditProfileChange( - ScopeDef.SC_PROFILE_RULES, - OpDef.OP_DELETE, - profileId, - ILogger.FAILURE, - null); - - throw new BadRequestException("Cannot delete profile `" + profileId + - "`. Profile must be disabled first."); - } - - String configFile = CMS.getConfigStore().getString("profile." + profileId + ".config"); - - ps.deleteProfile(profileId, configFile); - - auditProfileChange( - ScopeDef.SC_PROFILE_RULES, - OpDef.OP_DELETE, - profileId, - ILogger.FAILURE, - null); - - return createNoContentResponse(); - - } catch (EBaseException e) { - CMS.debug("deleteProfile: error in deleting profile `" + profileId + "`: " + e); - e.printStackTrace(); - - auditProfileChange( - ScopeDef.SC_PROFILE_RULES, - OpDef.OP_DELETE, - profileId, - ILogger.FAILURE, - null); - - throw new PKIException("Error deleting profile."); - } - } - - public void auditProfileChangeState(String profileId, String op, String status) { - String msg = CMS.getLogMessage( - LOGGING_SIGNED_AUDIT_CERT_PROFILE_APPROVAL, - auditor.getSubjectID(), - status, - profileId, - op); - auditor.log(msg); - } - - public void auditProfileChange(String scope, String type, String id, String status, Map<String, String> params) { - String msg = CMS.getLogMessage( - LOGGING_SIGNED_AUDIT_CONFIG_CERT_PROFILE, - auditor.getSubjectID(), - status, - auditor.getParamString(scope, type, id, params)); - auditor.log(msg); - } - -} |