DocSpace-buildtools/common/ASC.Core.Common/Data/DbUserService.cs

752 lines
27 KiB
C#

// (c) Copyright Ascensio System SIA 2010-2022
//
// This program is a free software product.
// You can redistribute it and/or modify it under the terms
// of the GNU Affero General Public License (AGPL) version 3 as published by the Free Software
// Foundation. In accordance with Section 7(a) of the GNU AGPL its Section 15 shall be amended
// to the effect that Ascensio System SIA expressly excludes the warranty of non-infringement of
// any third-party rights.
//
// This program is distributed WITHOUT ANY WARRANTY, without even the implied warranty
// of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. For details, see
// the GNU AGPL at: http://www.gnu.org/licenses/agpl-3.0.html
//
// You can contact Ascensio System SIA at Lubanas st. 125a-25, Riga, Latvia, EU, LV-1021.
//
// The interactive user interfaces in modified source and object code versions of the Program must
// display Appropriate Legal Notices, as required under Section 5 of the GNU AGPL version 3.
//
// Pursuant to Section 7(b) of the License you must retain the original Product logo when
// distributing the program. Pursuant to Section 7(e) we decline to grant you any rights under
// trademark law for use of our trademarks.
//
// All the Product's GUI elements, including illustrations and icon sets, as well as technical writing
// content are licensed under the terms of the Creative Commons Attribution-ShareAlike 4.0
// International. See the License terms at http://creativecommons.org/licenses/by-sa/4.0/legalcode
namespace ASC.Core.Data;
[Scope]
public class EFUserService : IUserService
{
private readonly IDbContextFactory<UserDbContext> _dbContextFactory;
private readonly MachinePseudoKeys _machinePseudoKeys;
private readonly IMapper _mapper;
public EFUserService(
IDbContextFactory<UserDbContext> dbContextFactory,
MachinePseudoKeys machinePseudoKeys,
IMapper mapper)
{
_dbContextFactory = dbContextFactory;
_machinePseudoKeys = machinePseudoKeys;
_mapper = mapper;
}
public Group GetGroup(int tenant, Guid id)
{
using var userDbContext = _dbContextFactory.CreateDbContext();
return GetGroupQuery(userDbContext, tenant)
.Where(r => r.Id == id)
.ProjectTo<Group>(_mapper.ConfigurationProvider)
.FirstOrDefault();
}
public IEnumerable<Group> GetGroups(int tenant)
{
using var userDbContext = _dbContextFactory.CreateDbContext();
return GetGroupQuery(userDbContext, tenant)
.ProjectTo<Group>(_mapper.ConfigurationProvider)
.ToList();
}
public UserInfo GetUser(int tenant, Guid id)
{
using var userDbContext = _dbContextFactory.CreateDbContext();
return GetUserQuery(userDbContext, tenant)
.Where(r => r.Id == id)
.ProjectTo<UserInfo>(_mapper.ConfigurationProvider)
.FirstOrDefault();
}
public UserInfo GetUser(int tenant, string email)
{
using var userDbContext = _dbContextFactory.CreateDbContext();
return GetUserQuery(userDbContext, tenant)
.ProjectTo<UserInfo>(_mapper.ConfigurationProvider)
.FirstOrDefault(r => r.Email == email && !r.Removed);
}
public UserInfo GetUserByUserName(int tenant, string userName)
{
using var userDbContext = _dbContextFactory.CreateDbContext();
return GetUserQuery(userDbContext, tenant)
.ProjectTo<UserInfo>(_mapper.ConfigurationProvider)
.FirstOrDefault(r => r.UserName == userName && !r.Removed);
}
public UserInfo GetUserByPasswordHash(int tenant, string login, string passwordHash)
{
ArgumentNullOrEmptyException.ThrowIfNullOrEmpty(login);
using var userDbContext = _dbContextFactory.CreateDbContext();
if (Guid.TryParse(login, out var userId))
{
var pwdHash = GetPasswordHash(userId, passwordHash);
var q = GetUserQuery(userDbContext, tenant)
.Where(r => !r.Removed)
.Where(r => r.Id == userId)
.Join(userDbContext.UserSecurity, r => r.Id, r => r.UserId, (user, security) => new DbUserSecurity
{
User = user,
UserSecurity = security
})
.Where(r => r.UserSecurity.PwdHash == pwdHash)
;
if (tenant != Tenant.DefaultTenant)
{
q = q.Where(r => r.UserSecurity.Tenant == tenant);
}
return q.Select(r => r.User)
.ProjectTo<UserInfo>(_mapper.ConfigurationProvider)
.FirstOrDefault();
}
else
{
var q = GetUserQuery(userDbContext, tenant)
.Where(r => !r.Removed)
.Where(r => r.Email == login);
var users = q.ProjectTo<UserInfo>(_mapper.ConfigurationProvider).ToList();
foreach (var user in users)
{
var pwdHash = GetPasswordHash(user.Id, passwordHash);
var any = userDbContext.UserSecurity
.Any(r => r.UserId == user.Id && (r.PwdHash == pwdHash));
if (any)
{
return user;
}
}
return null;
}
}
public IEnumerable<UserInfo> GetUsersAllTenants(IEnumerable<Guid> userIds)
{
using var userDbContext = _dbContextFactory.CreateDbContext();
var q = userDbContext.Users
.Where(r => userIds.Contains(r.Id))
.Where(r => !r.Removed);
return q.ProjectTo<UserInfo>(_mapper.ConfigurationProvider).ToList();
}
public UserGroupRef GetUserGroupRef(int tenant, Guid groupId, UserGroupRefType refType)
{
using var userDbContext = _dbContextFactory.CreateDbContext();
IQueryable<UserGroup> q = userDbContext.UserGroups;
if (tenant != Tenant.DefaultTenant)
{
q = q.Where(r => r.Tenant == tenant);
}
return q.Where(r => r.UserGroupId == groupId && r.RefType == refType && !r.Removed)
.ProjectTo<UserGroupRef>(_mapper.ConfigurationProvider).SingleOrDefault();
}
public IDictionary<string, UserGroupRef> GetUserGroupRefs(int tenant)
{
using var userDbContext = _dbContextFactory.CreateDbContext();
IQueryable<UserGroup> q = userDbContext.UserGroups;
if (tenant != Tenant.DefaultTenant)
{
q = q.Where(r => r.Tenant == tenant);
}
return q.ProjectTo<UserGroupRef>(_mapper.ConfigurationProvider)
.AsEnumerable().ToDictionary(r => r.CreateKey(), r => r);
}
public DateTime GetUserPasswordStamp(int tenant, Guid id)
{
using var userDbContext = _dbContextFactory.CreateDbContext();
var stamp = userDbContext.UserSecurity
.Where(r => r.Tenant == tenant)
.Where(r => r.UserId == id)
.Select(r => r.LastModified)
.FirstOrDefault();
return stamp ?? DateTime.MinValue;
}
public byte[] GetUserPhoto(int tenant, Guid id)
{
using var userDbContext = _dbContextFactory.CreateDbContext();
var photo = userDbContext.Photos
.Where(r => r.Tenant == tenant)
.Where(r => r.UserId == id)
.Select(r => r.Photo)
.FirstOrDefault();
return photo ?? Array.Empty<byte>();
}
public IEnumerable<UserInfo> GetUsers(int tenant)
{
using var userDbContext = _dbContextFactory.CreateDbContext();
return GetUserQuery(userDbContext, tenant)
.ProjectTo<UserInfo>(_mapper.ConfigurationProvider)
.ToList();
}
public IQueryable<UserInfo> GetUsers(int tenant, bool isDocSpaceAdmin, EmployeeStatus? employeeStatus, List<List<Guid>> includeGroups, List<Guid> excludeGroups, EmployeeActivationStatus? activationStatus, string text, string sortBy, bool sortOrderAsc, long limit, long offset, out int total, out int count)
{
var userDbContext = _dbContextFactory.CreateDbContext();
var totalQuery = GetUserQuery(userDbContext, tenant);
totalQuery = GetUserQueryForFilter(userDbContext, totalQuery, isDocSpaceAdmin, employeeStatus, includeGroups, excludeGroups, activationStatus, text);
total = totalQuery.Count();
var q = GetUserQuery(userDbContext, tenant);
q = GetUserQueryForFilter(userDbContext, q, isDocSpaceAdmin, employeeStatus, includeGroups, excludeGroups, activationStatus, text);
var orderedQuery = q.OrderBy(r => r.ActivationStatus == EmployeeActivationStatus.Pending);
q = orderedQuery;
if (!string.IsNullOrEmpty(sortBy))
{
if (sortBy == "type")
{
var q1 = from user in q
join userGroup in userDbContext.UserGroups.Where(g => !g.Removed && (g.UserGroupId == Users.Constants.GroupAdmin.ID || g.UserGroupId == Users.Constants.GroupUser.ID
|| g.UserGroupId == Users.Constants.GroupCollaborator.ID))
on user.Id equals userGroup.Userid into joinedGroup
from @group in joinedGroup.DefaultIfEmpty()
select new { user, @group };
if (sortOrderAsc)
{
q = q1.OrderBy(r => r.user.ActivationStatus == EmployeeActivationStatus.Pending)
.ThenBy(r => r.group == null ? 2 :
r.group.UserGroupId == Users.Constants.GroupAdmin.ID ? 1 :
r.group.UserGroupId == Users.Constants.GroupCollaborator.ID ? 3 : 4)
.Select(r => r.user);
}
else
{
q = q1.OrderBy(r => r.user.ActivationStatus == EmployeeActivationStatus.Pending)
.ThenByDescending(u => u.group == null ? 2 :
u.group.UserGroupId == Users.Constants.GroupAdmin.ID ? 1 :
u.group.UserGroupId == Users.Constants.GroupCollaborator.ID ? 3 : 4)
.Select(r => r.user);
}
}
else
{
q = orderedQuery.ThenBy(sortBy, sortOrderAsc);
}
}
if (offset != 0)
{
q = q.Skip((int)offset);
}
if (limit != 0)
{
q = q.Take((int)limit);
}
count = q.Count();
return q.ProjectTo<UserInfo>(_mapper.ConfigurationProvider);
}
public IQueryable<UserInfo> GetUsers(int tenant, out int total)
{
var userDbContext = _dbContextFactory.CreateDbContext();
total = userDbContext.Users.Count(r => r.Tenant == tenant);
return GetUserQuery(userDbContext, tenant)
.ProjectTo<UserInfo>(_mapper.ConfigurationProvider);
}
public IEnumerable<int> GetTenantsWithFeeds(DateTime from)
{
var userDbContext = _dbContextFactory.CreateDbContext();
var tenants = userDbContext.Users.Where(u => u.LastModified > from).Select(u => u.Tenant).Distinct().ToList();
return tenants;
}
public void RemoveGroup(int tenant, Guid id)
{
RemoveGroup(tenant, id, false);
}
public void RemoveGroup(int tenant, Guid id, bool immediate)
{
using var userDbContext = _dbContextFactory.CreateDbContext();
var ids = CollectGroupChilds(userDbContext, tenant, id);
var stringIds = ids.Select(r => r.ToString()).ToList();
var strategy = userDbContext.Database.CreateExecutionStrategy();
strategy.Execute(async () =>
{
using var userDbContext = await _dbContextFactory.CreateDbContextAsync();
using var tr = await userDbContext.Database.BeginTransactionAsync();
await userDbContext.Acl.Where(r => r.Tenant == tenant && ids.Any(i => i == r.Subject)).ExecuteDeleteAsync();
await userDbContext.Subscriptions.Where(r => r.Tenant == tenant && stringIds.Any(i => i == r.Recipient)).ExecuteDeleteAsync();
await userDbContext.SubscriptionMethods.Where(r => r.Tenant == tenant && stringIds.Any(i => i == r.Recipient)).ExecuteDeleteAsync();
var userGroups = userDbContext.UserGroups.Where(r => r.Tenant == tenant && ids.Any(i => i == r.UserGroupId));
var groups = userDbContext.Groups.Where(r => r.Tenant == tenant && ids.Any(i => i == r.Id));
if (immediate)
{
await userGroups.ExecuteDeleteAsync();
await groups.ExecuteDeleteAsync();
}
else
{
await userGroups.ExecuteUpdateAsync(ug => ug
.SetProperty(p => p.Removed, true)
.SetProperty(p => p.LastModified, DateTime.UtcNow));
await groups.ExecuteUpdateAsync(g => g
.SetProperty(p => p.Removed, true)
.SetProperty(p => p.LastModified, DateTime.UtcNow));
}
await tr.CommitAsync();
});
}
public void RemoveUser(int tenant, Guid id)
{
RemoveUser(tenant, id, false);
}
public void RemoveUser(int tenant, Guid id, bool immediate)
{
using var userDbContext = _dbContextFactory.CreateDbContext();
var strategy = userDbContext.Database.CreateExecutionStrategy();
strategy.Execute(async () =>
{
using var userDbContext = await _dbContextFactory.CreateDbContextAsync();
using var tr = await userDbContext.Database.BeginTransactionAsync();
await userDbContext.Acl.Where(r => r.Tenant == tenant && r.Subject == id).ExecuteDeleteAsync();
await userDbContext.Subscriptions.Where(r => r.Tenant == tenant && r.Recipient == id.ToString()).ExecuteDeleteAsync();
await userDbContext.SubscriptionMethods.Where(r => r.Tenant == tenant && r.Recipient == id.ToString()).ExecuteDeleteAsync();
await userDbContext.Photos.Where(r => r.Tenant == tenant && r.UserId == id).ExecuteDeleteAsync();
var userGroups = userDbContext.UserGroups.Where(r => r.Tenant == tenant && r.Userid == id);
var users = userDbContext.Users.Where(r => r.Tenant == tenant && r.Id == id);
var userSecurity = userDbContext.UserSecurity.Where(r => r.Tenant == tenant && r.UserId == id);
if (immediate)
{
await userGroups.ExecuteDeleteAsync();
await users.ExecuteDeleteAsync();
await userSecurity.ExecuteDeleteAsync();
}
else
{
await userGroups.ExecuteUpdateAsync(ug => ug
.SetProperty(p => p.Removed, true)
.SetProperty(p => p.LastModified, DateTime.UtcNow));
await users.ExecuteUpdateAsync(ug => ug
.SetProperty(p => p.Removed, true)
.SetProperty(p => p.LastModified, DateTime.UtcNow)
.SetProperty(p => p.TerminatedDate, DateTime.UtcNow)
.SetProperty(p => p.Status, EmployeeStatus.Terminated)
);
}
await tr.CommitAsync();
});
}
public void RemoveUserGroupRef(int tenant, Guid userId, Guid groupId, UserGroupRefType refType)
{
RemoveUserGroupRef(tenant, userId, groupId, refType, false);
}
public void RemoveUserGroupRef(int tenant, Guid userId, Guid groupId, UserGroupRefType refType, bool immediate)
{
using var userDbContext = _dbContextFactory.CreateDbContext();
var strategy = userDbContext.Database.CreateExecutionStrategy();
strategy.Execute(async () =>
{
using var userDbContext = await _dbContextFactory.CreateDbContextAsync();
using var tr = await userDbContext.Database.BeginTransactionAsync();
var userGroups = userDbContext.UserGroups.Where(r => r.Tenant == tenant && r.Userid == userId && r.UserGroupId == groupId && r.RefType == refType);
if (immediate)
{
await userGroups.ExecuteDeleteAsync();
}
else
{
await userGroups.ExecuteUpdateAsync(ug => ug
.SetProperty(p => p.Removed, true)
.SetProperty(p => p.LastModified, DateTime.UtcNow));
}
var user = userDbContext.Users.First(r => r.Tenant == tenant && r.Id == userId);
user.LastModified = DateTime.UtcNow;
await userDbContext.SaveChangesAsync();
await tr.CommitAsync();
});
}
public Group SaveGroup(int tenant, Group group)
{
ArgumentNullException.ThrowIfNull(group);
if (group.Id == default)
{
group.Id = Guid.NewGuid();
}
group.LastModified = DateTime.UtcNow;
group.Tenant = tenant;
var dbGroup = _mapper.Map<Group, DbGroup>(group);
using var userDbContext = _dbContextFactory.CreateDbContext();
userDbContext.AddOrUpdate(userDbContext.Groups, dbGroup);
userDbContext.SaveChanges();
return group;
}
public UserInfo SaveUser(int tenant, UserInfo user)
{
ArgumentNullException.ThrowIfNull(user);
if (string.IsNullOrEmpty(user.UserName))
{
throw new ArgumentOutOfRangeException("Empty username.");
}
if (user.Id == default)
{
user.Id = Guid.NewGuid();
}
if (user.CreateDate == default)
{
user.CreateDate = DateTime.UtcNow;
}
user.LastModified = DateTime.UtcNow;
user.Tenant = tenant;
user.UserName = user.UserName.Trim();
user.Email = user.Email.Trim();
using var userDbContext = _dbContextFactory.CreateDbContext();
var strategy = userDbContext.Database.CreateExecutionStrategy();
strategy.Execute(async () =>
{
using var userDbContext = await _dbContextFactory.CreateDbContextAsync();
using var tx = await userDbContext.Database.BeginTransactionAsync();
var any = GetUserQuery(userDbContext, tenant)
.Any(r => r.UserName == user.UserName && r.Id != user.Id && !r.Removed);
if (any)
{
throw new ArgumentOutOfRangeException("Duplicate username.");
}
any = GetUserQuery(userDbContext, tenant)
.Any(r => r.Email == user.Email && r.Id != user.Id && !r.Removed);
if (any)
{
throw new ArgumentOutOfRangeException("Duplicate email.");
}
await userDbContext.AddOrUpdateAsync(r => userDbContext.Users, _mapper.Map<UserInfo, User>(user));
await userDbContext.SaveChangesAsync();
await tx.CommitAsync();
});
return user;
}
public UserGroupRef SaveUserGroupRef(int tenant, UserGroupRef userGroupRef)
{
ArgumentNullException.ThrowIfNull(userGroupRef);
userGroupRef.LastModified = DateTime.UtcNow;
userGroupRef.Tenant = tenant;
using var userDbContext = _dbContextFactory.CreateDbContext();
var strategy = userDbContext.Database.CreateExecutionStrategy();
strategy.Execute(async () =>
{
using var tr = await userDbContext.Database.BeginTransactionAsync();
var user = await GetUserQuery(userDbContext, tenant).FirstOrDefaultAsync(a => a.Tenant == tenant && a.Id == userGroupRef.UserId);
if (user != null)
{
user.LastModified = userGroupRef.LastModified;
await userDbContext.AddOrUpdateAsync(r => userDbContext.UserGroups, _mapper.Map<UserGroupRef, UserGroup>(userGroupRef));
}
await userDbContext.SaveChangesAsync();
await tr.CommitAsync();
});
return userGroupRef;
}
public void SetUserPasswordHash(int tenant, Guid id, string passwordHash)
{
var h1 = GetPasswordHash(id, passwordHash);
var us = new UserSecurity
{
Tenant = tenant,
UserId = id,
PwdHash = h1,
LastModified = DateTime.UtcNow
};
using var userDbContext = _dbContextFactory.CreateDbContext();
userDbContext.AddOrUpdate(userDbContext.UserSecurity, us);
userDbContext.SaveChanges();
}
public void SetUserPhoto(int tenant, Guid id, byte[] photo)
{
using var userDbContext = _dbContextFactory.CreateDbContext();
var strategy = userDbContext.Database.CreateExecutionStrategy();
strategy.Execute(async () =>
{
using var userDbContext = await _dbContextFactory.CreateDbContextAsync();
using var tr = await userDbContext.Database.BeginTransactionAsync();
var userPhoto = await userDbContext.Photos.FirstOrDefaultAsync(r => r.UserId == id && r.Tenant == tenant);
if (photo != null && photo.Length != 0)
{
if (userPhoto == null)
{
userPhoto = new UserPhoto
{
Tenant = tenant,
UserId = id,
Photo = photo
};
}
else
{
userPhoto.Photo = photo;
}
await userDbContext.AddOrUpdateAsync(r => userDbContext.Photos, userPhoto);
}
else if (userPhoto != null)
{
userDbContext.Photos.Remove(userPhoto);
}
await userDbContext.SaveChangesAsync();
await tr.CommitAsync();
});
}
private IQueryable<User> GetUserQuery(UserDbContext userDbContext, int tenant)
{
var q = userDbContext.Users.AsQueryable();
var where = false;
if (tenant != Tenant.DefaultTenant)
{
q = q.Where(r => r.Tenant == tenant);
where = true;
}
if (!where)
{
q = q.Where(r => 1 == 0);
}
return q;
}
private IQueryable<DbGroup> GetGroupQuery(UserDbContext userDbContext, int tenant)
{
var q = userDbContext.Groups.Where(r => true);
if (tenant != Tenant.DefaultTenant)
{
q = q.Where(r => r.Tenant == tenant);
}
return q;
}
private IQueryable<User> GetUserQueryForFilter(
UserDbContext userDbContext,
IQueryable<User> q,
bool isDocSpaceAdmin,
EmployeeStatus? employeeStatus,
List<List<Guid>> includeGroups,
List<Guid> excludeGroups,
EmployeeActivationStatus? activationStatus,
string text)
{
q = q.Where(r => !r.Removed);
if (includeGroups != null && includeGroups.Count > 0)
{
foreach (var ig in includeGroups)
{
q = q.Where(r => userDbContext.UserGroups.Any(a => !a.Removed && a.Tenant == r.Tenant && a.Userid == r.Id && ig.Any(r => r == a.UserGroupId)));
}
}
if (excludeGroups != null && excludeGroups.Count > 0)
{
foreach (var eg in excludeGroups)
{
q = q.Where(r => !userDbContext.UserGroups.Any(a => !a.Removed && a.Tenant == r.Tenant && a.Userid == r.Id && a.UserGroupId == eg));
}
}
if (!isDocSpaceAdmin && employeeStatus == null)
{
q = q.Where(r => r.Status != EmployeeStatus.Terminated);
}
if (employeeStatus != null)
{
switch (employeeStatus)
{
case EmployeeStatus.LeaveOfAbsence:
case EmployeeStatus.Terminated:
if (isDocSpaceAdmin)
{
q = q.Where(u => u.Status == EmployeeStatus.Terminated);
}
else
{
q = q.Where(u => false);
}
break;
case EmployeeStatus.All:
if (!isDocSpaceAdmin)
{
q = q.Where(r => r.Status != EmployeeStatus.Terminated);
}
break;
case EmployeeStatus.Default:
case EmployeeStatus.Active:
q = q.Where(u => u.Status == EmployeeStatus.Active);
break;
}
}
if (activationStatus != null)
{
q = q.Where(r => r.ActivationStatus == activationStatus.Value);
}
if (!string.IsNullOrEmpty(text))
{
q = q.Where(
u => u.FirstName.Contains(text) ||
u.LastName.Contains(text) ||
u.Title.Contains(text) ||
u.Location.Contains(text) ||
u.Email.Contains(text));
}
return q;
}
private List<Guid> CollectGroupChilds(UserDbContext userDbContext, int tenant, Guid id)
{
var result = new List<Guid>();
var childs = userDbContext.Groups
.Where(r => r.Tenant == tenant)
.Where(r => r.ParentId == id)
.Select(r => r.Id);
foreach (var child in childs)
{
result.Add(child);
result.AddRange(CollectGroupChilds(userDbContext, tenant, child));
}
result.Add(id);
return result.Distinct().ToList();
}
public UserInfo GetUser(int tenant, Guid id, Expression<Func<User, UserInfo>> exp)
{
using var userDbContext = _dbContextFactory.CreateDbContext();
var q = GetUserQuery(userDbContext, tenant).Where(r => r.Id == id);
if (exp != null)
{
return q.Select(exp).FirstOrDefault();
}
else
{
return q.ProjectTo<UserInfo>(_mapper.ConfigurationProvider).FirstOrDefault();
}
}
public IEnumerable<string> GetDavUserEmails(int tenant)
{
using var userDbContext = _dbContextFactory.CreateDbContext();
return (from usersDav in userDbContext.UsersDav
join users in userDbContext.Users on new { tenant = usersDav.TenantId, userId = usersDav.UserId } equals new { tenant = users.Tenant, userId = users.Id }
where usersDav.TenantId == tenant
select users.Email)
.Distinct()
.ToList();
}
protected string GetPasswordHash(Guid userId, string password)
{
return Hasher.Base64Hash(password + userId + Encoding.UTF8.GetString(_machinePseudoKeys.GetMachineConstant()), HashAlg.SHA512);
}
}
public class DbUserSecurity
{
public User User { get; set; }
public UserSecurity UserSecurity { get; set; }
}