private void FillApiUser(UserIdentity user, BLModel.UserPermission newPermission)
{
newPermission.Api = new BLModel.Api();
newPermission.Api.ApiKey = user.ApiKey;
newPermission.Api.Destinations = user.Destinations;
newPermission.Api.IsActive = true;
newPermission.Api.Brands = user.Brands;
var isAdmin = user.Claims.Any(e => e.Value.ToLower() == "admin");
newPermission.Api.BrandPermitAll = isAdmin;
newPermission.Api.DestinationPermitAll = isAdmin;
var claims = new List <string>();
if (user.Claims.Any(e => e.Value.ToLower() == "get"))
{
claims.Add("get");
}
if (user.Claims.Any(e => e.Value.ToLower() == "post"))
{
claims.Add("post");
}
if (user.Claims.Any(e => e.Value.ToLower() == "delete"))
{
claims.Add("delete");
}
newPermission.Api.Claims = claims;
}
private void FillDeliveryQueue(UserIdentity user, BLModel.UserPermission newPermission, List <Queue> queues)
{
if (newPermission.Portal.IsAdmin)
{
foreach (var queue in queues)
{
newPermission.Portal.DeliveryQueuePermissions[queue.Name] = new BLModel.Permission(true);
}
}
else
{
foreach (var claim in user.Claims)
{
var claimCode = claim.Value.ToLower().Trim();
if (claimCode == "get" || claimCode == "post" || claimCode == "delete" || claimCode == "admin")
{
continue;
}
var customQueue = queues.FirstOrDefault(e => e.FriendlyName.ToLower() == claimCode);
if (customQueue != null)
{
newPermission.Portal.DeliveryQueuePermissions[customQueue.Name] = new BLModel.Permission(false);
newPermission.Portal.DeliveryQueuePermissions[customQueue.Name].CanRead = true;
}
}
}
}
public UserPermission Post([FromBody] UserPermission viewModel)
{
if (string.IsNullOrEmpty(viewModel.Id))
{
viewModel.Api.ApiKey = Guid.NewGuid().ToString();
viewModel.CreatedDateTime = DateTime.UtcNow;
viewModel.CreatedBy = HttpContext.User.Identity.Name;
if (viewModel.Portal.IsActive)
{
viewModel.ActiveDateTime = DateTime.UtcNow;
}
}
else
{
viewModel.ModifiedDateTime = DateTime.UtcNow;
viewModel.ModifiedBy = HttpContext.User.Identity.Name;
}
if (viewModel.Portal.ModulePermissions.ContainsKey("DeliveryQueues"))
{
Permission permissionValues = viewModel.Portal.ModulePermissions["DeliveryQueues"];
if (!permissionValues.CanRead) //if delivery queue read is false then remove all queue permission while saving
{
foreach (var key in viewModel.Portal.DeliveryQueuePermissions.Keys.ToList())
{
viewModel.Portal.DeliveryQueuePermissions[key] = new Permission(false);
}
}
}
BLModel.UserPermission model = _service.Save(viewModel.ToBusinessModel <UserPermission, BLModel.UserPermission>());
return(model.ToViewModel <BLModel.UserPermission, UserPermission>());
}
private void FillPortalUser(UserIdentity user, AzureAdUser adUser, BLModel.UserPermission newPermission, List <BLModel.PortalModule> modules)
{
newPermission.UserType = UserType.Portal;
newPermission.FirstName = adUser.givenName;
newPermission.LastName = adUser.surname;
newPermission.Notes = user.Description;
newPermission.UserName = user.EmailAddress;
if (!string.IsNullOrEmpty(adUser.mobilePhone))
{
newPermission.PhoneNumber = adUser.mobilePhone;
}
else if (adUser.businessPhones.Any())
{
newPermission.PhoneNumber = adUser.businessPhones.First();
}
newPermission.Portal = new BLModel.Portal();
newPermission.Portal.IsActive = true;
newPermission.Portal.IsAdmin = user.Claims.Any(e => e.Value.ToLower() == "admin");
//Non Admin
if (newPermission.Portal.IsAdmin == false)
{
foreach (var module in modules)
{
if (module.ModuleType == "User")
{
newPermission.Portal.ModulePermissions[module.ModuleName] = module.ModulePermission;
}
else
{
newPermission.Portal.ModulePermissions[module.ModuleName] = new BLModel.Permission(false);
}
}
}
else
{
foreach (var module in modules)
{
newPermission.Portal.ModulePermissions[module.ModuleName] = new BLModel.Permission(true);
}
}
}
public List <string> Migrate()
{
List <string> response = new List <string>();
var users = _oldUser.GetUsers();
var modules = _userSvc.GetAllPortalModules();
var queues = _queueService.GetByStatus(true);
foreach (var user in users)
{
try
{
var existingUser = _userSvc.GetByUserName(string.IsNullOrEmpty(user.EmailAddress) ? user.UserName.Replace(" ", "") : user.EmailAddress);
if (existingUser != null)
{
response.Add(string.Format("{0} user already added.", user.UserName));
continue;
}
BLModel.UserPermission newPermission = new BLModel.UserPermission();
//If email address exists then it is Portal user otherwise "System/API" user
if (!string.IsNullOrEmpty(user.EmailAddress) && user.EmailAddress.Contains("@"))
{
var adUser = _adQuery.GetUserByEmailId(user.EmailAddress);
if (adUser == null)
{
response.Add(string.Format("{0} unable to find user form Azure AD email address {1}.", user.UserName, user.EmailAddress));
continue;
}
FillPortalUser(user, adUser, newPermission, modules);
FillDeliveryQueue(user, newPermission, queues);
FillApiUser(user, newPermission);
}
else //System or API user
{
newPermission.Portal = new BLModel.Portal();
newPermission.Portal.IsAdmin = false;
newPermission.Portal.IsActive = false;
newPermission.UserType = UserType.Api;
newPermission.UserName = user.UserName.Replace(" ", "");
newPermission.Notes = user.Description;
FillApiUser(user, newPermission);
}
newPermission.ActiveDateTime = user.CreatedDateTime;
newPermission.CreatedBy = user.CreatedBy;
newPermission.ModifiedBy = user.ModifiedBy;
newPermission.CreatedDateTime = user.CreatedDateTime;
newPermission.ModifiedDateTime = user.ModifiedDateTime;
_userSvc.Save(newPermission);
response.Add(string.Format("{0} user successfully migrated.", user.UserName));
}
catch (Exception exp)
{
response.Add(string.Format("{0} unexpected error occurred. {1}.", user.UserName, exp.Message + exp.StackTrace));
}
}
return(response);
}
public BLModel.UserPermission Save(BLModel.UserPermission userPermission)
{
var model = _command.Save(userPermission.ToDataModel <BLModel.UserPermission, DLModel.UserPermission>());
return(model.ToBusinessModel <DLModel.UserPermission, BLModel.UserPermission>());
}