/**
* Copyright 2012 Comcast Corporation
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package com.comcast.cns.controller;
import javax.servlet.AsyncContext;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import org.apache.log4j.Logger;
import com.comcast.cmb.common.model.CMBPolicy;
import com.comcast.cmb.common.model.User;
import com.comcast.cmb.common.persistence.PersistenceFactory;
import com.comcast.cmb.common.util.CMBException;
import com.comcast.cmb.common.util.CMBProperties;
import com.comcast.cns.io.CNSAttributePopulator;
import com.comcast.cns.model.CNSTopic;
import com.comcast.cns.model.CNSTopicAttributes;
import com.comcast.cns.util.CNSErrorCodes;
import com.comcast.cqs.util.CQSConstants;
import com.comcast.cqs.util.CQSErrorCodes;
import com.comcast.cqs.util.Util;
/**
* Remove permission
* @author bwolf
*
*/
public class CNSRemovePermissionAction extends CNSAction {
private static Logger logger = Logger.getLogger(CNSAddPermissionAction.class);
public CNSRemovePermissionAction() {
super("RemovePermission");
}
@Override
public boolean doAction(User user, AsyncContext asyncContext) throws Exception {
HttpServletRequest request = (HttpServletRequest)asyncContext.getRequest();
HttpServletResponse response = (HttpServletResponse)asyncContext.getResponse();
String topicArn = request.getParameter("TopicArn");
if ((topicArn == null) ) {
logger.error("event=cns_add_permission error_code=missing_parameter_topic_arn");
throw new CMBException(CNSErrorCodes.CNS_InvalidParameter,"Missing parameter TopicArn");
}
CNSTopic topic = PersistenceFactory.getTopicPersistence().getTopic(topicArn);
if (topic == null) {
logger.error("event=cns_add_permission error_code=invalid_parameter_topic_arn topic_arn=" + topicArn);
throw new CMBException(CNSErrorCodes.CNS_NotFound,"Resource not found.");
}
String label = request.getParameter(CQSConstants.LABEL);
if (!Util.isValidId(label)) {
throw new CMBException(CQSErrorCodes.InvalidBatchEntryId, "Label " + label + " is invalid. Only alphanumeric, hyphen, and underscore are allowed. It can be at most " + CMBProperties.getInstance().getCQSMaxMessageSuppliedIdLength() + " letters long.");
}
CMBPolicy policy = null;
CNSTopicAttributes attributes = CNSCache.getTopicAttributes(topicArn);
// validate policy string
if (attributes.getPolicy() != null) {
policy = new CMBPolicy(attributes.getPolicy());
if (policy.removeStatement(label)) {
attributes.setPolicy(policy.toString());
PersistenceFactory.getCNSAttributePersistence().setTopicAttributes(attributes, topicArn);
}
}
String out = CNSAttributePopulator.getRemovePermissionResponse();
writeResponse(out, response);
return true;
}
}