source: trunk/grails-app/domain/dbnp/authentication/SecUser.groovy @ 2081

package dbnp.authentication

class SecUser implements Serializable {
        String username         // for shibboleth this is request header: persistent-id
        String password         // for shibboleth this is springSecurityService.encodePassword("myDummyPassword", shibPersistentId)
        String displayName              // shibboleth request header: displayName
        String organization             // shibboleth request header: schacHomeOrganization
        String uid                              // shibboleth request header: uid
        String voName                   // shibboleth request header: coin-vo-name
        String userStatus               // shibboleth request header: coin-user-status
        String email
        Date dateCreated
        boolean shibbolethUser = false
        boolean enabled
        boolean accountExpired
        boolean accountLocked
        boolean passwordExpired
        boolean userConfirmed   // True if the user has confirmed his subscription using the link in the email
        boolean adminConfirmed  // True if the administrator has confirmed this subscription using the link in the email

        static constraints = {
                username blank: false, unique: true
                password blank: true
                email blank: false
                displayName nullable: true
                organization nullable: true
                uid nullable: true
                voName nullable: true
                userStatus nullable: true
        }

        static mapping = {
                password column: '`password`'
                enabled formula: 'USER_CONFIRMED AND ADMIN_CONFIRMED'
        }

        Set<SecRole> getAuthorities() {
                SecUserSecRole.findAllBySecUser(this).collect { it.secRole } as Set
        }

        public boolean equals(Object y) {
                if (!(y instanceof SecUser)) {
                        return false;
                }

                if (y == null) return false;

                return this.id == y.id
        }

        public boolean hasAdminRights() {
                return getAuthorities().contains(SecRole.findByAuthority('ROLE_ADMIN'));
        }
        
        /**
         * Delete all remote logins for this user as well.
         */
        def beforeDelete = {
                executeUpdate( "DELETE FROM SessionAuthenticatedUser sau WHERE sau.secUser = :secUser", [ "secUser": this ] );
        }
}