org.cyclos.security.marketplace

Class OrderServiceSecurity

java.lang.Object

org.cyclos.impl.AbstractServerComponent

org.cyclos.impl.AbstractNetworkedServerComponent

org.cyclos.security.BaseServiceSecurity

org.cyclos.security.CRUDServiceSecurity<OrderDTO,Order,OrderData,OrderDataParams>

org.cyclos.security.marketplace.OrderServiceSecurity

All Implemented Interfaces:

CRUDService<OrderDTO,OrderData,OrderDataParams>, CRUDWithConfirmationPasswordService<OrderDTO,OrderData,OrderDataParams>, OrderService, Service

@Security
public class OrderServiceSecurity
extends CRUDServiceSecurity<OrderDTO,Order,OrderData,OrderDataParams>
implements OrderService

Security for OrderService

Field Summary

Fields inherited from class org.cyclos.security.CRUDServiceSecurity

entityClass

Constructor Summary

Constructors

Constructor and Description
OrderServiceSecurity()

Method Summary

Modifier and Type	Method and Description
OrderStatus	accept(AcceptOrderParams params) Accepts the given order, which should be in either OrderStatus.PENDING_BUYER or OrderStatus.PENDING_SELLER status, and needs the delivery price to be already set.
void	addToCart(java.lang.Long adId, java.math.BigDecimal quantity) Adds the given product to the logged user's shopping cart, returning the updated shopping cart.
void	checkCartStock(UserLocatorVO sellerVO, CurrencyVO currencyVO) Checks that all items on the given cart are still on stock
protected void	checkCreateNew(OrderDataParams params) Checks whether creating new entities with the given context parameters is allowed, throwing PermissionDeniedException if not
java.lang.Long	checkout(ShoppingCartCheckoutParams params) Checks out the logged user's shopping cart with the given seller and currency, checking the confirmation password (if any), and reserving the amount when the delivery price is previously known (otherwise, the buyer still needs to confirm before the payment is done)
int	countCartItems() Returns the total number of items in the logged user's shopping cart
protected void	customizeData(OrderData data) Can be overridden in order to process the returned data object for the given entity
boolean	doHasManageAccess(Order order) Should be implemented in order to return whether the caller is allowed to manage the given entity, for the given operation
boolean	doHasViewAccess(Order order) Should be implemented in order to return whether the caller is allowed to view the given entity.
OrderData	getCheckoutData(UserLocatorVO sellerVO, CurrencyVO currencyVO) Returns data for checkout the cart items of the given seller and currency
protected OrderServiceLocal	getImplementation() Should be implemented in order to return the actual implementation of the service
ShoppingCartDTO	getMyCart() Returns the current logged user's shopping cart, it's read-write because updates the messages.
UserSalesData	getUserSalesData(UserLocatorVO locator) Returns data for viewing an user sales
boolean	isAccessible(SessionData sessionData, Order entity) Must be implemented in order to determine whether the given entity is accessible for the given session data.
void	modifyQuantityOnCart(java.lang.Long adId, java.math.BigDecimal quantity) Updates the quantity for the given product on the logged user's shopping cart
void	reject(RejectOrderParams params) Rejects the given order
void	removeCart(UserLocatorVO sellerVO, CurrencyVO currencyVO) Removes the logged user's shopping cart for the given seller and currency
void	removeCartItem(java.lang.Long adId) Removes the given product from the logged user's shopping cart
Page<OrderVO>	search(OrderQuery query) Searches for orders based on OrderQuery
void	setDeliveryMethod(SetDeliveryMethodParams deliveryInfo) Updates the delivery method information of an order when it is on the OrderStatus.PENDING_SELLER status and there is no delivery information yet.
java.lang.Long	submitToBuyer(OrderDTO order) Submits the given order for buyer approval

Methods inherited from class org.cyclos.security.CRUDServiceSecurity

canPerformOperation, canViewHistoryLog, checkManageAccess, checkOperation, checkViewAccess, find, getConfirmationPasswordInputForRemove, getData, getDataForNew, getEntityClass, hasManageAccess, hasViewAccess, load, onBeforeSave, remove, removeAll, removeAllWithConfirmationPassword, removeWithConfirmationPassword, resolveEntityCheck, save, saveWithConfirmationPassword

Methods inherited from class org.cyclos.security.BaseServiceSecurity

checkGuest, checkId, checkIds, checkInternalName, checkLoggedIn, checkManagesUser, checkRelatesToUser, checkVO, checkVOs, doInitialize, getEntityCheckRegistry, getUser, initialize

Methods inherited from class org.cyclos.impl.AbstractNetworkedServerComponent

canManage, checkManagesUser, checkPermission, checkRelatesToUser, checkValue, clearAlreadyValidated, getAccountHandler, getAuthHandler, getBaseEntityManagerHandler, getChannelConfiguration, getConfiguration, getConversionHandler, getCustomFieldValueHandler, getEntityManagerHandler, getGroupsHandler, getLoggedBasicUser, getLoggedUser, getProducts, getProductsHandler, getReportHandler, getTranslatedName, getTranslatedValue, getUserLocatorHandler, getValidationResult, hasPermission, hasValue, inSameNetwork, inSameNetworkOrGlobal, isAdmin, isAlreadyValidated, isBroker, isGlobalAdmin, isGlobalAdminInNetwork, isGuest, isLoggedIn, isMember, isNetworkAdmin, isOperator, isRelatedToUser, isSystem, isUserManager, isUserManagerOf, message, message, permission, permission, permissionOptionalValue, permissionOptionalValue, toDate, toDateTime, validate

Methods inherited from class org.cyclos.impl.AbstractServerComponent

delete, detach, find, flush, from, getApplicationContext, getConfigurationHandler, getDataTranslationHandler, getFormatter, getFormatter, getFormatter, getLogger, getNotificationHandler, getProfileFieldHandler, getRemoteAddress, getSessionData, getTransactionHandler, getTranslationHandler, message, message, persist, processBatch, refresh, remove, subQuery, update

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.cyclos.services.CRUDService

getData, getDataForNew, load, remove, removeAll, save

Constructor Detail

OrderServiceSecurity

public OrderServiceSecurity()

Method Detail

accept

public OrderStatus accept(AcceptOrderParams params)
                   throws FrameworkException,
                          TransferException,
                          PasswordException

Description copied from interface: OrderService

Accepts the given order, which should be in either OrderStatus.PENDING_BUYER or OrderStatus.PENDING_SELLER status, and needs the delivery price to be already set. When the buyer hasn't yet chosen a payment type, it is required now. Also, when no amount was reserved, the confirmation password will be checked before performing the actual payment.

Specified by:

accept in interface OrderService

Throws:

PasswordException - The given confirmation password is invalid

IllegalActionException - The given order is not in either OrderStatus.PENDING_BUYER or OrderStatus.PENDING_SELLER status

TransferException - When there was a problem while reserving the amount, like there is no available balance

FrameworkException

addToCart

public void addToCart(java.lang.Long adId,
                      java.math.BigDecimal quantity)
               throws FrameworkException,
                      OutOfStockException

Description copied from interface: OrderService

Adds the given product to the logged user's shopping cart, returning the updated shopping cart. When the given quantity is null, the minimum allowed quantity on the shopping cart for the given product is assumed

Specified by:

addToCart in interface OrderService

Throws:

OutOfStockException - When the given quantity is greater than the available stock

FrameworkException

checkCartStock

public void checkCartStock(UserLocatorVO sellerVO,
                           CurrencyVO currencyVO)
                    throws FrameworkException,
                           OutOfStockException

Description copied from interface: OrderService

Checks that all items on the given cart are still on stock

Specified by:

checkCartStock in interface OrderService

Throws:

FrameworkException

OutOfStockException

checkout

public java.lang.Long checkout(ShoppingCartCheckoutParams params)
                        throws FrameworkException,
                               EntityNotFoundException,
                               OutOfStockException,
                               TransferException,
                               PasswordException

Description copied from interface: OrderService

Checks out the logged user's shopping cart with the given seller and currency, checking the confirmation password (if any), and reserving the amount when the delivery price is previously known (otherwise, the buyer still needs to confirm before the payment is done)

Specified by:

checkout in interface OrderService

Throws:

EntityNotFoundException - When there is no current shopping cart order with the given seller and currency

PasswordException - The given confirmation password is invalid

OutOfStockException - When at least one of the expected items exceeds the available stock

TransferException - When there was a problem while reserving the amount, like there is no available balance

FrameworkException

countCartItems

public int countCartItems()
                   throws FrameworkException

Description copied from interface: OrderService

Returns the total number of items in the logged user's shopping cart

Specified by:

countCartItems in interface OrderService

Throws:

FrameworkException

doHasManageAccess

public boolean doHasManageAccess(Order order)

Description copied from class: CRUDServiceSecurity

Should be implemented in order to return whether the caller is allowed to manage the given entity, for the given operation

Specified by:

doHasManageAccess in class CRUDServiceSecurity<OrderDTO,Order,OrderData,OrderDataParams>

doHasViewAccess

public boolean doHasViewAccess(Order order)

Description copied from class: CRUDServiceSecurity

Should be implemented in order to return whether the caller is allowed to view the given entity.

Specified by:

doHasViewAccess in class CRUDServiceSecurity<OrderDTO,Order,OrderData,OrderDataParams>

getCheckoutData

public OrderData getCheckoutData(UserLocatorVO sellerVO,
                                 CurrencyVO currencyVO)

Description copied from interface: OrderService

Returns data for checkout the cart items of the given seller and currency

Specified by:

getCheckoutData in interface OrderService

getMyCart

public ShoppingCartDTO getMyCart()

Description copied from interface: OrderService

Returns the current logged user's shopping cart, it's read-write because updates the messages.

Specified by:

getMyCart in interface OrderService

getUserSalesData

public UserSalesData getUserSalesData(UserLocatorVO locator)
                               throws FrameworkException

Description copied from interface: OrderService

Returns data for viewing an user sales

Specified by:

getUserSalesData in interface OrderService

Throws:

FrameworkException

isAccessible

public boolean isAccessible(SessionData sessionData,
                            Order entity)

Description copied from class: CRUDServiceSecurity

Must be implemented in order to determine whether the given entity is accessible for the given session data. This method shouldn't check the same condition as CRUDServiceSecurity.hasViewAccess(BaseEntity). If the only condition for an entity is CRUDServiceSecurity.hasViewAccess(BaseEntity), this method should return false.

Specified by:

isAccessible in class CRUDServiceSecurity<OrderDTO,Order,OrderData,OrderDataParams>

modifyQuantityOnCart

public void modifyQuantityOnCart(java.lang.Long adId,
                                 java.math.BigDecimal quantity)
                          throws FrameworkException,
                                 IllegalActionException,
                                 OutOfStockException

Description copied from interface: OrderService

Updates the quantity for the given product on the logged user's shopping cart

Specified by:

modifyQuantityOnCart in interface OrderService

Throws:

IllegalActionException - When the given ad is not in the logged user's shopping cart

OutOfStockException - When the new quantity is greater than the available stock

FrameworkException

reject

public void reject(RejectOrderParams params)
            throws FrameworkException

Description copied from interface: OrderService

Rejects the given order

Specified by:

reject in interface OrderService

Throws:

IllegalActionException - When the given order is not in either OrderStatus.PENDING_BUYER or OrderStatus.PENDING_SELLER statuses.

FrameworkException

removeCart

public void removeCart(UserLocatorVO sellerVO,
                       CurrencyVO currencyVO)

Description copied from interface: OrderService

Removes the logged user's shopping cart for the given seller and currency

Specified by:

removeCart in interface OrderService

removeCartItem

public void removeCartItem(java.lang.Long adId)
                    throws FrameworkException

Description copied from interface: OrderService

Removes the given product from the logged user's shopping cart

Specified by:

removeCartItem in interface OrderService

Throws:

IllegalActionException - When the given ad is not in the logged user's shopping cart

FrameworkException

search

public Page<OrderVO> search(OrderQuery query)

Description copied from interface: OrderService

Searches for orders based on OrderQuery

Specified by:

search in interface OrderService

setDeliveryMethod

public void setDeliveryMethod(SetDeliveryMethodParams deliveryInfo)
                       throws FrameworkException

Description copied from interface: OrderService

Updates the delivery method information of an order when it is on the OrderStatus.PENDING_SELLER status and there is no delivery information yet. Afterwards, the new status will be OrderStatus.PENDING_BUYER for final approval.

Specified by:

setDeliveryMethod in interface OrderService

Throws:

IllegalActionException - When the referenced order is not on the OrderStatus.PENDING_SELLER status or already has delivery information

FrameworkException

submitToBuyer

public java.lang.Long submitToBuyer(OrderDTO order)
                             throws FrameworkException,
                                    OutOfStockException

Description copied from interface: OrderService

Submits the given order for buyer approval

Specified by:

submitToBuyer in interface OrderService

Throws:

OutOfStockException - When any of the order products have ran out of stock right before processing

FrameworkException

checkCreateNew

protected void checkCreateNew(OrderDataParams params)

Description copied from class: CRUDServiceSecurity

Checks whether creating new entities with the given context parameters is allowed, throwing PermissionDeniedException if not

Specified by:

checkCreateNew in class CRUDServiceSecurity<OrderDTO,Order,OrderData,OrderDataParams>

customizeData

protected void customizeData(OrderData data)

Description copied from class: CRUDServiceSecurity

Can be overridden in order to process the returned data object for the given entity

Overrides:

customizeData in class CRUDServiceSecurity<OrderDTO,Order,OrderData,OrderDataParams>

getImplementation

protected OrderServiceLocal getImplementation()

Description copied from class: CRUDServiceSecurity

Should be implemented in order to return the actual implementation of the service

Specified by:

getImplementation in class CRUDServiceSecurity<OrderDTO,Order,OrderData,OrderDataParams>