package org.paneris.user.model;
   
   import java.sql.Connection;
   import java.sql.ResultSet;
   import java.sql.Statement;
   import java.util.Enumeration;
   
   import javax.servlet.http.HttpServletRequest;
   import javax.servlet.http.HttpSession;
  
  import org.paneris.jal.model.DBConnectionManager;
  import org.paneris.jal.model.DDField;
  import org.paneris.jal.model.DDRecord;
  import org.paneris.jal.model.RecordSet;
  import org.paneris.jal.model.SystemProperties;
  import org.paneris.messageboard.model.Message;
  import org.paneris.util.StringUtils;
  import org.webmacro.servlet.WebContext;
  
  
  /**
   * A User.
   *
   */
  public class User extends DDRecord {
  
    private static final long serialVersionUID = 1L;
      private boolean loggedOn = false;
      private Boolean administrator = null;
  
  
  /**
   * Constructor
   */
      public User(String db, ResultSet rs) throws Exception {
          super(db,"users",rs);
      }
  
  /**
   * Constructor
   */
      public User(String db) throws Exception {
          super(db,"users");
      }
  
  /**
   * Constructor
   */
      public User(String db, Integer record) throws Exception {
          super(db,"users",record);
      }
  
      public static synchronized User getInstance(WebContext context) 
          throws Exception {
        String db = context.getForm("db");
        if (db == null) db = (String)context.get("db");
        return getInstance(context,db);
      }
  
      public static synchronized User getInstance(WebContext context, String db) 
          throws Exception {
        HttpSession session = context.getSession();
        User user = (User) session.getAttribute(db+"user");
        if (user == null) {
          // return an empty user - will have loggedOn flag = false
          user = new User(db);
        }
        return user;
      }
  
  
      public User refresh(WebContext context) throws Exception {
        String db = context.getForm("db");
        if (db == null) db = (String)context.get("db");
        User user = new User(database,new Integer(getFieldValue("id")));
        user.setLoggedOn(true);
        HttpSession s = context.getSession();
        System.err.println("in refresh putting " + user + " into " + db +"user");
        s.setAttribute(db+"user",user);
        System.err.println("in refresh get back " + s.getAttribute(db+"user"));
        // force the next page to check for a new style
        s.removeAttribute(db+"stylepath");
        return user;
      }
  
      public static String getLoginPage(WebContext context, String message) 
          throws Exception {
        String db = context.getForm("db");
        if (db == null) db = (String)context.get("db");
        return getLoginPage(context, db, message, null);
      }
  
      public static String getLoginPage(WebContext context, String db, String message) throws Exception {
          return getLoginPage(context, db, message, null);
      }
  
      public static String getLoginPage(WebContext context, String db, 
                                        String message, String wmtemplate)
          throws Exception {
       String adminSqlString = "SELECT users.id FROM users, usersgroups, usergroups " +
                               "WHERE usersgroups.username = users.id " +
                               "AND usersgroups.groupname = usergroups.id " + 
                               "AND usergroups.groupname = 'Administrators'";
         context.put("admins",RecordSet.getInstance(context, db, "users", 
                                                    adminSqlString, new Integer(0)));
         context.put("user",new User(db));
         context.put("db",db);
         context.put("message",message);
         String loginTemplate = wmtemplate;
         if (loginTemplate == null) {
             try {
                 SystemProperties sp = new SystemProperties(db);
                 loginTemplate = sp.getProperty("logintemplate");
             } catch (Exception e) {
                 loginTemplate = "user/view/UserLogin.wm";
             }
         }
         return loginTemplate;
     }
 
 
 /**
  * Check if we are logged in for the table and record we are trying to edit,
  * this is done by looking at the record for fields that lookup directly
  * to a this users user record.
  */
     public static String checkLoggedInForParentRecord(DDRecord record, 
                                                       WebContext context, 
                                                       String message) 
         throws Exception {
       String db = context.getForm("db");
       if (db == null) db = (String)context.get("db");
 // are we logged on?
       boolean loggedin = false;
       for (Enumeration en = record.elements() ; en.hasMoreElements() ;) {
             DDField field = (DDField) en.nextElement();
             if (field.getMetaData().getType().equals("lookup")) {
                 if (field.getMetaData().getRelationshipTable().equals("users")) {
                     if (checkLoggedInForRecord(field.getLookup(), context, message) == null) {
                         loggedin = true;
                     }
                 }
             }
       }
       if (!loggedin) {
         // need to log in
             setReturnURL(context);
             return getLoginPage(context,db,message);
       } else {
             return null;
       }
     }
 
 
 /**
  * Check if we are logged in by the table and record we are trying to edit.
  */
     public static String checkLoggedInForRecord(DDRecord record, 
                                                 WebContext context, 
                                                 String message)
         throws Exception {
       String db = context.getForm("db");
       if (db == null) db = (String)context.get("db");
      // are we editing the user table, 
      // if so, check we are the user that we are editing
         if (record.getMetaData().getTableName().equals("users")) {
      // anybody is allowed to insert a new user record
           if (record.getFieldValue("id").equals("0")) {
             return null;
           }
      // so go and get the user
           HttpSession session = context.getSession();
           User user = (User) session.getAttribute(db+"user");
           if (user != null) {
             if (record.getFieldValue("id").equals(user.getFieldValue("id"))) {
             // he he, it's us
               return null;
             }
           }
         }
         // need to log in
         setReturnURL(context);
         return getLoginPage(context,db,message);
     }
 
 /**
  * check if we are logged in,
  */
   public static String checkLoggedIn(String resourceType, String resource, 
                                        WebContext context, String message) 
      throws Exception {
     String db = context.getForm("db");
     if (db == null) db = (String)context.get("db");
     return checkLoggedIn(resourceType, resource, db, context, message, false);
   }
 
   public static String checkLoggedIn(String resourceType, String resource, 
                                      String db, WebContext context, 
                                      String message) 
       throws Exception {
     return checkLoggedIn(resourceType, resource, db, context, message, false);
   }
 
   public static String checkLoggedIn(String resourceType, String resource, 
                                      WebContext context, String message, 
                                      boolean force) 
       throws Exception {
     String db = context.getForm("db");
     if (db == null) db = (String)context.get("db");
     return checkLoggedIn(resourceType, resource, db, context, message, force);
   }
 
   public static String checkLoggedIn(String resourceType, String resource, 
                                      String db, WebContext context, 
                                      String message, boolean force) 
       throws Exception {
     return checkLoggedIn(resourceType, resource, db, context, message, force, null);
   }
 
     /**
      * Checks whether a user has access rights for a particular resource.
      * <P>
      * @return the template to use for a login page, if the user needs to
      *         log on; null if the user is logged on, or there are no entries
      *         for the resource in the database (or anything goes wrong, such
      *         as not giving a valid db name!)
      */
 
     public static String checkLoggedIn(String resourceType, String resource, 
                                        String db, WebContext context, 
                                        String message, boolean force, 
                                        String wmtemplate) 
         throws Exception {
     User t = (User) context.getSession().getAttribute("panerisuser");
     System.err.println("User1: user = " + t);
 //    check system.properties
       String ac = "false";
       String sqlString = "";
       String sqlString2 = "";
       try {
         SystemProperties sp = new SystemProperties(db);
         ac = sp.getProperty("accesscontrol");
       } catch (Exception e) {
         ; // ignore error
       }
       if (!ac.equals("true")) {
         return null;
       }
       DBConnectionManager connMgr = DBConnectionManager.getInstance();
       Connection conn = null;
       try {
       // check to see if we need to logon for this resource
         conn = connMgr.getConnection("User",db);
         Statement s = conn.createStatement();
         sqlString = "SELECT userpermissions.groupname FROM userpermissions, userresources, userresourcetypes \n";
         sqlString += "WHERE userpermissions.resource = userresources.id \n";
         sqlString += "  AND userresources.resource = '" + resource + "' \n";
         sqlString += "  AND userresources.type = userresourcetypes.id \n";
         sqlString += "  AND userresourcetypes.type = '" + resourceType + "'";
 
         ResultSet rs = s.executeQuery(sqlString);
         if (!force) {
           if (!rs.next()) {
             connMgr.freeConnection(db, conn);
             return null;
           }
         }
       } catch (Exception e) {
         throw new Exception("Can't find user group: " + e.toString() + " sqlString: " + sqlString);
       } finally {
         connMgr.freeConnection(db, conn);
       }
 
       try {
         // here we know we need to log in
         // so go and get the user
             HttpSession session = context.getSession();
             conn = connMgr.getConnection("User",db);
             User user = (User) session.getAttribute(db+"user");
             if (user != null) {
                 Statement s = conn.createStatement();
                 Integer id = new Integer(user.getFieldValue("id"));
                 // see if we can find our user
                 if (connMgr.getDatabaseEngineType(db) == DBConnectionManager.MYSQL) {
                    sqlString2  = "SELECT usersgroups.id FROM usersgroups, userpermissions, userresources, userresourcetypes \n";
                    sqlString2 += "WHERE usersgroups.username = " + id + "\n";
                    sqlString2 += "  AND userpermissions.resource = userresources.id \n";
                    sqlString2 += "  AND userresources.resource = '" + resource + "' \n";
                    sqlString2 += "  AND userresources.type = userresourcetypes.id \n";
                    sqlString2 += "  AND userresourcetypes.type = '" + resourceType + "'\n";
                    sqlString2 += "  AND usersgroups.groupname = userpermissions.groupname";
                 } else {
                   sqlString2 = "SELECT id FROM usersgroups WHERE ";
                   sqlString2 += "username = " + id + " AND groupname IN (" + sqlString + ")";
                 }
 
                 ResultSet rs = s.executeQuery(sqlString2);
                 if (rs.next()) {
                     // got him
                     connMgr.freeConnection(db, conn);
                     System.err.println("Found user: " + id);
                     return null;
                 } else   System.err.println("In User could not find user: " + id);
             } else   System.err.println("In User " +db+"user is null");
             // need to log in
             setReturnURL(context);
             connMgr.freeConnection(db, conn);
             return getLoginPage(context,db,message,wmtemplate);
       } catch (Exception e) {
         throw new Exception("Can't find user: " + e.toString() + " sqlString2: " + sqlString2);
       } finally {
         connMgr.freeConnection(db, conn);
       }
     }
 
     public static void setReturnURL(WebContext context) {
         HttpSession session = context.getSession();
         HttpServletRequest request = context.getRequest();
         String url = request.getRequestURI() + "?" + request.getQueryString();
         session.setAttribute("LoginUserReturnURL",url);
         context.put("LoginUserReturnURL", url);
     }
 
     public void setLoggedOn(boolean value) {
         loggedOn = value;
     }
 
     public boolean isLoggedOn() {
         return loggedOn;
     }
 
     public boolean isAdministrator() {
       if (administrator == null) {
         administrator = new Boolean(false);
         try {
           RecordSet groups = getChildren("usersgroups", "username");
           for (Enumeration en = groups.getRows().elements() ; en.hasMoreElements() ;) {
             DDRecord usergroup = (DDRecord) en.nextElement();
             DDRecord group = new DDRecord(database,"usergroups",
                                           new Integer(usergroup.getFieldValue("groupname")));
             if (group.getFieldValue("groupname").trim().equals("Administrators")) {
                         administrator = new Boolean(true);
             }
           }
         } catch (Exception e) {
           throw new RuntimeException(e.toString());
         }
       }
       return administrator.booleanValue();
     }
 
     public Integer getId() {
       return (Integer) ((DDField)get("id")).getValue();
     }
 
     public boolean checkPassword(String c) throws Exception {
         if (c==null) c="";
         String check = c.trim();
         DDField passwordField = (DDField) get("password");
         if (passwordField == null)
             throw new Exception ("No password field found in user table");
         String password = ((String) passwordField.getValue());
         password = (password != null) ? password.trim() : "";
         // blank password is never valid!
         if (!check.equals("") && password.equals(check)) {
             return true;
         } else {
             return false;
         }
     }
     
     /**
      * generates a unique login id and a random password for this user
      * also set the username to the password if it is blank
      */
     public void generateDetails() {
         // set the username value
         if (getFieldValue("username").equals("")) setFieldValue("username",getFieldValue("email"));
         // set the loginid value
         if (getFieldValue("loginid").equals("")) setFieldValue("loginid",getFieldValue("email"));
         // set the password
         if (getFieldValue("password").equals("")) setFieldValue("password", StringUtils.getRandomString(6));
     }
     
     //  not used at present except for zedzed
     public void generateId() throws Exception {
         String username = getFieldValue("username").toLowerCase();
         String loginid = username;
         int space = username.indexOf(' ');
         if (space > 0) {
             loginid = username.substring(0,space);
             space ++;
             if (space < username.length()) {
                 loginid += username.charAt(space);
             }
         }
         // check to see if we already have this login id
         Connection conn = connMgr.getConnection("User",database);
         Statement s = conn.createStatement();
         ResultSet rs = s.executeQuery("SELECT id FROM users WHERE loginid = '" + loginid + "'");
         boolean found = false;
         int count = 0;
         if (rs.next()) {
             found = true;
         }
         String testId = new String(loginid);
         while (found) {
             count++;
             testId = new String(loginid);
             String testIdString = "" + count;
             for (int i=0; i < (2 - testIdString.length()); i++) {
                 testId += "0";
             }
             testId += count;
             rs = s.executeQuery("SELECT id FROM users WHERE loginid = '" + testId + "'");
             if (!rs.next()) {
                 found = false;
             }
         }
         loginid = testId.trim();
         setFieldValue("loginid", testId);
         connMgr.freeConnection(database, conn);
     }
     
     public static User getSystemUser(String db) {
         User user = null; 
         String sysuser = "";
         try {
             SystemProperties sp = new SystemProperties(db);
             sysuser = sp.getProperty("systemuser");
         } catch (Exception e) {
           ; // ignore error
         }
         if (!sysuser.equals("")) {
             try {
                  user = new User(db, new Integer(sysuser));
             } catch (Exception e) {
              ; // ignore error
             }
         }
         return user;
     }        
 
     /**
      * Announce this user to a messageboard.
      */
     public void announce(int boardid, String mess) throws Exception {
         Message m = new Message(database);
         String message = "A new user has registered on the system, here are their details:\n\n";
         message += getField("id").getMetaData().getDisplayName() + ": " + getFieldValue("id") + "\n";
         message += getField("username").getMetaData().getDisplayName() + ": " + getFieldValue("username") + "\n";
         message += getField("email").getMetaData().getDisplayName() + ": " + getFieldValue("email") + "\n";
         message += "\n" + mess;
         m.setFieldValue("message", message);
         m.setFieldValue("parent", "0");
         m.setFieldValue("subject", "New User");
         m.setFieldValue("board", new Integer(boardid));
         m.setFieldValue("author", new Integer(getFieldValue("id")));
         m.write();
         m.distribute();
     }
 
 
 
 }