org.cyclos.security.banking

Class TransactionServiceSecurity

java.lang.Object

org.cyclos.impl.AbstractServerComponent

org.cyclos.impl.AbstractNetworkedServerComponent

org.cyclos.security.BaseServiceSecurity

org.cyclos.security.banking.TransactionServiceSecurity

All Implemented Interfaces:

TransactionService, Service

@Security
public class TransactionServiceSecurity
extends BaseServiceSecurity
implements TransactionService

Security layer for TransactionService

Author:

luis

Constructor Summary

Constructors

Constructor and Description
TransactionServiceSecurity()

Method Summary

Modifier and Type	Method and Description
void	checkBaseTransactionQuery(BaseTransactionQuery query)
PaymentTransferType	checkPerform(CalculateInstallmentsDTO params)
PaymentTransferType	checkPerform(PerformInternalTransactionDTO params)
boolean	checkQuery(BaseOwnerTransactionQuery query) Makes sure that if some authorization status is set, the user has permission to view authorized (returning if true), and check and filter accessible accounts
PaymentTransferType	checkReceive(CalculateInstallmentsDTO parameters)
PaymentTransferType	checkReceive(PerformInternalTransactionDTO parameters)
protected void	checkViewPermission(Transaction transaction)
TransactionData	getData(TransactionVO vo) Returns data for a transaction
Page<MaturityTableItemData>	getMaturityTable(MaturityTableQuery query) returns the maturity table which the user can view in case of paying with a zero d-rate of an earlier account state, when MaturityPolicy.HISTORY is valid.
PerformPaymentData	getPaymentData(InternalAccountOwner from, InternalAccountOwner to) Returns data used to prepare a payment matching the given arguments
PerformPaymentToOwnerData	getPaymentToOwnerData(InternalAccountOwner from, InternalAccountOwner to) Returns simplified data used to prepare a payment matching the given arguments
PerformPaymentTypeData	getPaymentTypeData(InternalAccountOwner from, InternalAccountOwner to, TransferTypeVO transferTypeVO) Returns the data related to a payment type for a payment
ReceivePaymentData	getReceivePaymentData() Returns data used to receive a payment
ReceivePaymentFromUserData	getReceivePaymentFromUserData(UserLocatorVO locator) Returns data used to receive a payment from a specific user
PerformPaymentTypeData	getReceivePaymentTypeData(UserLocatorVO locator, TransferTypeVO transferTypeVO) Returns the data related to a payment type for receiving a payment from a specific user and payment type
TransactionSearchData	getSearchData(InternalAccountOwner owner) Returns data used to search for transactions for the given owner
boolean	isAccessible(Transaction transaction)
TransactionVO	load(java.lang.Long id) Loads a transaction details by id, returning a proper detailed implementation (for example, PaymentVO or ScheduledPaymentVO).
TransactionVO	loadByTransactionNumber(java.lang.String transactionNumber) Returns a transfer by transaction number, or throws EntityNotFoundException if not found
SerializableInputStream	print(java.lang.Long id) Generates a PDF file for a transaction details
void	requestNewOTPForReceive(PerformInternalTransactionDTO parameters, OTPSendMedium medium) Generates a new OTP (removing any previous password, if any) and sends it to the payer by the specified medium using the confirmation password type for the BuiltInChannel.POS channel for the specified payer. It has the same security controls as for PaymentService.receive(PerformPaymentDTO), that is the logged user must be allowed to receive payments from the specified payer.
protected org.cyclos.impl.access.EntityCheck<?>	resolveEntityCheck() Must be implemented in order to return the EntityCheck managed by this security component, or null if none
Page<TransactionEntryVO>	search(TransactionQuery query) Searches for transactions, according to the given query
void	setAuthorizationActions(BasePayment transaction, BasePaymentData data)

Methods inherited from class org.cyclos.security.BaseServiceSecurity

checkGuest, checkId, checkIds, checkInternalName, checkLoggedIn, checkManagesUser, checkRelatesToUser, checkVO, checkVOs, doInitialize, getEntityCheckRegistry, getUser, initialize

Methods inherited from class org.cyclos.impl.AbstractNetworkedServerComponent

canManage, checkManagesUser, checkPermission, checkRelatesToUser, checkValue, clearAlreadyValidated, getAccountHandler, getAuthHandler, getBaseEntityManagerHandler, getChannelConfiguration, getConfiguration, getConversionHandler, getCustomFieldValueHandler, getEntityManagerHandler, getGroupsHandler, getLoggedBasicUser, getLoggedUser, getProducts, getProductsHandler, getReportHandler, getTranslatedName, getTranslatedValue, getUserLocatorHandler, getValidationResult, hasPermission, hasValue, inSameNetwork, inSameNetworkOrGlobal, isAdmin, isAlreadyValidated, isBroker, isGlobalAdmin, isGlobalAdminInNetwork, isGuest, isLoggedIn, isMember, isNetworkAdmin, isOperator, isRelatedToUser, isSystem, isUserManager, isUserManagerOf, message, message, permission, permission, permissionOptionalValue, permissionOptionalValue, toDate, toDateTime, validate

Methods inherited from class org.cyclos.impl.AbstractServerComponent

delete, detach, find, flush, from, getApplicationContext, getConfigurationHandler, getDataTranslationHandler, getFormatter, getFormatter, getFormatter, getLogger, getNotificationHandler, getProfileFieldHandler, getRemoteAddress, getSessionData, getTransactionHandler, getTranslationHandler, message, message, persist, processBatch, refresh, remove, subQuery, update

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

TransactionServiceSecurity

public TransactionServiceSecurity()

Method Detail

checkBaseTransactionQuery

public void checkBaseTransactionQuery(BaseTransactionQuery query)

checkPerform

public PaymentTransferType checkPerform(CalculateInstallmentsDTO params)

checkPerform

public PaymentTransferType checkPerform(PerformInternalTransactionDTO params)

checkQuery

public boolean checkQuery(BaseOwnerTransactionQuery query)

Makes sure that if some authorization status is set, the user has permission to view authorized (returning if true), and check and filter accessible accounts

checkReceive

public PaymentTransferType checkReceive(CalculateInstallmentsDTO parameters)

checkReceive

public PaymentTransferType checkReceive(PerformInternalTransactionDTO parameters)

getData

public TransactionData getData(TransactionVO vo)
                        throws FrameworkException

Description copied from interface: TransactionService

Returns data for a transaction

Specified by:

getData in interface TransactionService

Throws:

FrameworkException

getMaturityTable

public Page<MaturityTableItemData> getMaturityTable(MaturityTableQuery query)

Description copied from interface: TransactionService

returns the maturity table which the user can view in case of paying with a zero d-rate of an earlier account state, when MaturityPolicy.HISTORY is valid.

Specified by:

getMaturityTable in interface TransactionService

getPaymentData

public PerformPaymentData getPaymentData(InternalAccountOwner from,
                                         InternalAccountOwner to)
                                  throws FrameworkException

Description copied from interface: TransactionService

Returns data used to prepare a payment matching the given arguments

Specified by:

getPaymentData in interface TransactionService

Throws:

FrameworkException

getPaymentToOwnerData

public PerformPaymentToOwnerData getPaymentToOwnerData(InternalAccountOwner from,
                                                       InternalAccountOwner to)
                                                throws FrameworkException

Description copied from interface: TransactionService

Returns simplified data used to prepare a payment matching the given arguments

Specified by:

getPaymentToOwnerData in interface TransactionService

Throws:

FrameworkException

getPaymentTypeData

public PerformPaymentTypeData getPaymentTypeData(InternalAccountOwner from,
                                                 InternalAccountOwner to,
                                                 TransferTypeVO transferTypeVO)
                                          throws FrameworkException

Description copied from interface: TransactionService

Returns the data related to a payment type for a payment

Specified by:

getPaymentTypeData in interface TransactionService

Throws:

FrameworkException

getReceivePaymentData

public ReceivePaymentData getReceivePaymentData()
                                         throws FrameworkException

Description copied from interface: TransactionService

Returns data used to receive a payment

Specified by:

getReceivePaymentData in interface TransactionService

Throws:

FrameworkException

getReceivePaymentFromUserData

public ReceivePaymentFromUserData getReceivePaymentFromUserData(UserLocatorVO locator)
                                                         throws FrameworkException

Description copied from interface: TransactionService

Returns data used to receive a payment from a specific user

Specified by:

getReceivePaymentFromUserData in interface TransactionService

Throws:

FrameworkException

getReceivePaymentTypeData

public PerformPaymentTypeData getReceivePaymentTypeData(UserLocatorVO locator,
                                                        TransferTypeVO transferTypeVO)
                                                 throws FrameworkException

Description copied from interface: TransactionService

Returns the data related to a payment type for receiving a payment from a specific user and payment type

Specified by:

getReceivePaymentTypeData in interface TransactionService

Throws:

FrameworkException

getSearchData

public TransactionSearchData getSearchData(InternalAccountOwner owner)
                                    throws FrameworkException

Description copied from interface: TransactionService

Returns data used to search for transactions for the given owner

Specified by:

getSearchData in interface TransactionService

Throws:

FrameworkException

isAccessible

public boolean isAccessible(Transaction transaction)

load

public TransactionVO load(java.lang.Long id)
                   throws FrameworkException

Description copied from interface: TransactionService

Loads a transaction details by id, returning a proper detailed implementation (for example, PaymentVO or ScheduledPaymentVO).

Specified by:

load in interface TransactionService

Throws:

FrameworkException

loadByTransactionNumber

public TransactionVO loadByTransactionNumber(java.lang.String transactionNumber)
                                      throws FrameworkException

Description copied from interface: TransactionService

Returns a transfer by transaction number, or throws EntityNotFoundException if not found

Specified by:

loadByTransactionNumber in interface TransactionService

Throws:

FrameworkException

print

public SerializableInputStream print(java.lang.Long id)
                              throws FrameworkException

Description copied from interface: TransactionService

Generates a PDF file for a transaction details

Specified by:

print in interface TransactionService

Throws:

FrameworkException

requestNewOTPForReceive

public void requestNewOTPForReceive(PerformInternalTransactionDTO parameters,
                                    OTPSendMedium medium)
                             throws FrameworkException,
                                    SmsSendingException

Description copied from interface: TransactionService

Generates a new OTP (removing any previous password, if any) and sends it to the payer by the specified medium using the confirmation password type for the BuiltInChannel.POS channel for the specified payer.
It has the same security controls as for PaymentService.receive(PerformPaymentDTO), that is the logged user must be allowed to receive payments from the specified payer.

Specified by:

requestNewOTPForReceive in interface TransactionService

Parameters:

parameters - the payment to be received.

medium - the medium used to send the OTP.

Throws:

SmsSendingException - only if medium is OTPSendMedium.BY_SMS and the OTP could not be sent to any enabled for sms phone.

FrameworkException

search

public Page<TransactionEntryVO> search(TransactionQuery query)
                                throws FrameworkException

Description copied from interface: TransactionService

Searches for transactions, according to the given query

Specified by:

search in interface TransactionService

Throws:

FrameworkException

setAuthorizationActions

public void setAuthorizationActions(BasePayment transaction,
                                    BasePaymentData data)

checkViewPermission

protected void checkViewPermission(Transaction transaction)

resolveEntityCheck

protected org.cyclos.impl.access.EntityCheck<?> resolveEntityCheck()

Description copied from class: BaseServiceSecurity

Must be implemented in order to return the EntityCheck managed by this security component, or null if none

Specified by:

resolveEntityCheck in class BaseServiceSecurity