/*
 *  Licensed to the Apache Software Foundation (ASF) under one
 *  or more contributor license agreements.  See the NOTICE file
 *  distributed with this work for additional information
 *  regarding copyright ownership.  The ASF licenses this file
 *  to you under the Apache License, Version 2.0 (the
 *  "License"); you may not use this file except in compliance
 *  with the License.  You may obtain a copy of the License at
 *
 *        http://www.apache.org/licenses/LICENSE-2.0
 *
 *  Unless required by applicable law or agreed to in writing,
 *  software distributed under the License is distributed on an
 *  "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 *  KIND, either express or implied.  See the License for the
 *  specific language governing permissions and limitations
 *  under the License.
 */

package org.apache.isis.core.security.authorization.standard;

import java.lang.reflect.InvocationTargetException;
import java.util.List;

import org.apache.isis.commons.internal.base._Casts;
import org.apache.isis.commons.internal.context._Context;
import org.apache.isis.core.commons.components.InstallerAbstract;
import org.apache.isis.core.security.authorization.manager.AuthorizationManager;
import org.apache.isis.core.security.authorization.manager.AuthorizationManagerInstaller;

public abstract class AuthorizationManagerStandardInstallerAbstract
extends InstallerAbstract
implements AuthorizationManagerInstaller {

    public AuthorizationManagerStandardInstallerAbstract(final String name) {
        super(name);
    }

    @Override
    public AuthorizationManager createAuthorizationManager() {
        
        try {
            return createAuthorizationManagerReflective();
            
        } catch (ClassNotFoundException | IllegalAccessException | IllegalArgumentException
                | InvocationTargetException
                | NoSuchMethodException | SecurityException | InstantiationException e) {
            
            throw new RuntimeException("unable to create AuthorizationManager reflective", e);
            
        }
    }
    
    private AuthorizationManager createAuthorizationManagerReflective() 
            throws ClassNotFoundException, IllegalAccessException, IllegalArgumentException, 
            InvocationTargetException, 
            NoSuchMethodException, SecurityException, InstantiationException {
        
        final String authorizationManagerStandardClsName = 
                "org.apache.isis.core.runtime.authorization.standard.AuthorizationManagerStandard";
        
        final Class<? extends AuthorizationManager> cls = _Casts.uncheckedCast(
                _Context.loadClassAndInitialize(authorizationManagerStandardClsName));
        
        final AuthorizationManager authorizationManager = cls.newInstance();
        final Authorizor authorizor = createAuthorizor();
        
        cls.getDeclaredMethod("setAuthorizor", new Class[] {Authorizor.class})
        .invoke(authorizationManager, new Object[] {authorizor});
        
        return authorizationManager;
    }
    
//TODO[2040] first attempt to decouple modules 'security' and 'metamodel' left us with having
    // to replace this direct code with a reflective one
//    @Override
//    public AuthorizationManager createAuthorizationManager() {
//        final AuthorizationManagerStandard authorizationManager = new AuthorizationManagerStandard();
//        final Authorizor authorizor = createAuthorizor();
//        authorizationManager.setAuthorizor(authorizor);
//        
//        return authorizationManager;
//    }

    /**
     * Hook method
     */
    protected abstract Authorizor createAuthorizor();

    @Override
    public List<Class<?>> getTypes() {
        return listOf(AuthorizationManager.class);
    }

}

@@ -935,16 +935,49 @@
 eption;%0A
+import java.lang.reflect.Method;%0A
 import j
@@ -991,16 +991,16 @@
 l.List;%0A
-
 %0Aimport 
@@ -1778,202 +1778,8 @@
 ch (
-ClassNotFoundException %7C IllegalAccessException %7C IllegalArgumentException%0A                %7C InvocationTargetException%0A                %7C NoSuchMethodException %7C SecurityException %7C Instantiation
 Exce
@@ -1927,24 +1927,126 @@
 %0A    %7D%0A    %0A
+    //TODO%5B2040%5D maybe, there's a way to this more straight forward, without resorting to reflection %0A
     private 
@@ -2824,16 +2824,32 @@
 %0A       
+ Method setter =
  cls.get
@@ -2911,25 +2911,77 @@
 .class%7D)
-%0A        
+;%0A        %0A        setter.setAccessible(true);%0A        setter
 .invoke(
@@ -3026,24 +3026,61 @@
 thorizor%7D);%0A
+        setter.setAccessible(false);%0A
         %0A   
@@ -3124,16 +3124,20 @@
  %7D%0A    %0A
+    
 //TODO%5B2

fix reflective setter permission