/*
 * JBoss, Home of Professional Open Source.
 * Copyright 2012, Red Hat, Inc., and individual contributors
 * as indicated by the @author tags. See the copyright.txt file in the
 * distribution for a full listing of individual contributors.
 *
 * This is free software; you can redistribute it and/or modify it
 * under the terms of the GNU Lesser General Public License as
 * published by the Free Software Foundation; either version 2.1 of
 * the License, or (at your option) any later version.
 *
 * This software is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
 * License along with this software; if not, write to the Free
 * Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
 * 02110-1301 USA, or see the FSF site: http://www.fsf.org.
 */

package org.jboss.as.controller.operations.global;

import static org.jboss.as.controller.ControllerMessages.MESSAGES;
import static org.jboss.as.controller.operations.global.GlobalOperationHandlers.NAME;
import static org.jboss.as.controller.operations.global.GlobalOperationHandlers.VALUE;

import org.jboss.as.controller.OperationContext;
import org.jboss.as.controller.OperationDefinition;
import org.jboss.as.controller.OperationFailedException;
import org.jboss.as.controller.OperationStepHandler;
import org.jboss.as.controller.PathAddress;
import org.jboss.as.controller.SimpleOperationDefinitionBuilder;
import org.jboss.as.controller.descriptions.ModelDescriptionConstants;
import org.jboss.as.controller.descriptions.common.ControllerResolver;
import org.jboss.as.controller.operations.validation.ParametersValidator;
import org.jboss.as.controller.operations.validation.StringLengthValidator;
import org.jboss.as.controller.registry.AttributeAccess;
import org.jboss.dmr.ModelNode;
import org.wildfly.security.manager.WildFlySecurityManager;

/**
 * {@link org.jboss.as.controller.OperationStepHandler} writing a single attribute. The required request parameter "name" represents the attribute name.
 *
 * @author <a href="kabir.khan@jboss.com">Kabir Khan</a>
 */
public class WriteAttributeHandler implements OperationStepHandler {

    public static final OperationDefinition DEFINITION = new SimpleOperationDefinitionBuilder(ModelDescriptionConstants.WRITE_ATTRIBUTE_OPERATION, ControllerResolver.getResolver("global"))
            .setParameters(NAME, VALUE)
            .setRuntimeOnly()
            .build();

    public static final OperationStepHandler INSTANCE = new WriteAttributeHandler();

    private ParametersValidator nameValidator = new ParametersValidator();

    WriteAttributeHandler() {
        nameValidator.registerValidator(GlobalOperationHandlers.NAME.getName(), new StringLengthValidator(1));
    }

    @Override
    public void execute(OperationContext context, ModelNode operation) throws OperationFailedException {
        nameValidator.validate(operation);
        final String attributeName = operation.require(GlobalOperationHandlers.NAME.getName()).asString();
        final AttributeAccess attributeAccess = context.getResourceRegistration().getAttributeAccess(PathAddress.EMPTY_ADDRESS, attributeName);
        if (attributeAccess == null) {
            throw new OperationFailedException(new ModelNode().set(MESSAGES.unknownAttribute(attributeName)));
        } else if (attributeAccess.getAccessType() != AttributeAccess.AccessType.READ_WRITE) {
            throw new OperationFailedException(new ModelNode().set(MESSAGES.attributeNotWritable(attributeName)));
        } else {
            OperationStepHandler handler = attributeAccess.getWriteHandler();
            ClassLoader oldTccl = WildFlySecurityManager.setCurrentContextClassLoaderPrivileged(handler.getClass());
            try {
                handler.execute(context, operation);
            } finally {
                WildFlySecurityManager.setCurrentContextClassLoaderPrivileged(oldTccl);
            }
        }
    }
}

@@ -1136,16 +1136,183 @@
 SSAGES;%0A
+import static org.jboss.as.controller.descriptions.ModelDescriptionConstants.OP;%0Aimport static org.jboss.as.controller.descriptions.ModelDescriptionConstants.OP_ADDR;%0A
 import s
@@ -1389,16 +1389,16 @@
 s.NAME;%0A
-
 import s
@@ -1477,16 +1477,67 @@
 VALUE;%0A%0A
+import org.jboss.as.controller.ControllerMessages;%0A
 import o
@@ -1779,24 +1779,24 @@
 athAddress;%0A
-
 import org.j
@@ -1844,24 +1844,83 @@
 ionBuilder;%0A
+import org.jboss.as.controller.access.AuthorizationResult;%0A
 import org.j
@@ -4022,16 +4022,910 @@
  else %7B%0A
+%0A            // Authorize%0A            ModelNode currentValue;%0A            if (attributeAccess.getStorageType() == AttributeAccess.Storage.CONFIGURATION) %7B%0A                ModelNode model = context.readResourceForUpdate(PathAddress.EMPTY_ADDRESS).getModel();%0A                currentValue = model.has(attributeName) ? model.get(attributeName) : new ModelNode();%0A            %7D else %7B%0A                currentValue = new ModelNode();%0A            %7D%0A            AuthorizationResult authorizationResult = context.authorize(operation, attributeName, currentValue);%0A            if (authorizationResult.getDecision() == AuthorizationResult.Decision.DENY) %7B%0A                throw ControllerMessages.MESSAGES.unauthorized(operation.require(OP).asString(),%0A                        PathAddress.pathAddress(operation.get(OP_ADDR)),%0A                        authorizationResult.getExplanation());%0A            %7D%0A%0A
         

write-attribute enforcement