using Bit.Core.Context; using Bit.Core.Entities; using Bit.Core.Exceptions; using Bit.Core.Models.Data; using Bit.Core.Repositories; using Bit.Core.Tools.Enums; using Bit.Core.Tools.Models.Business; using Bit.Core.Tools.Services; namespace Bit.Core.Services; public class CollectionService : ICollectionService { private readonly IEventService _eventService; private readonly IOrganizationRepository _organizationRepository; private readonly IOrganizationUserRepository _organizationUserRepository; private readonly ICollectionRepository _collectionRepository; private readonly IUserRepository _userRepository; private readonly IMailService _mailService; private readonly IReferenceEventService _referenceEventService; private readonly ICurrentContext _currentContext; public CollectionService( IEventService eventService, IOrganizationRepository organizationRepository, IOrganizationUserRepository organizationUserRepository, ICollectionRepository collectionRepository, IUserRepository userRepository, IMailService mailService, IReferenceEventService referenceEventService, ICurrentContext currentContext) { _eventService = eventService; _organizationRepository = organizationRepository; _organizationUserRepository = organizationUserRepository; _collectionRepository = collectionRepository; _userRepository = userRepository; _mailService = mailService; _referenceEventService = referenceEventService; _currentContext = currentContext; } public async Task SaveAsync(Collection collection, IEnumerable groups = null, IEnumerable users = null, Guid? assignUserId = null) { var org = await _organizationRepository.GetByIdAsync(collection.OrganizationId); if (org == null) { throw new BadRequestException("Organization not found"); } if (collection.Id == default(Guid)) { if (org.MaxCollections.HasValue) { var collectionCount = await _collectionRepository.GetCountByOrganizationIdAsync(org.Id); if (org.MaxCollections.Value <= collectionCount) { throw new BadRequestException("You have reached the maximum number of collections " + $"({org.MaxCollections.Value}) for this organization."); } } await _collectionRepository.CreateAsync(collection, org.UseGroups ? groups : null, users); // Assign a user to the newly created collection. if (assignUserId.HasValue) { var orgUser = await _organizationUserRepository.GetByOrganizationAsync(org.Id, assignUserId.Value); if (orgUser != null && orgUser.Status == Enums.OrganizationUserStatusType.Confirmed) { await _collectionRepository.UpdateUsersAsync(collection.Id, new List { new CollectionAccessSelection { Id = orgUser.Id, ReadOnly = false } }); } } await _eventService.LogCollectionEventAsync(collection, Enums.EventType.Collection_Created); await _referenceEventService.RaiseEventAsync(new ReferenceEvent(ReferenceEventType.CollectionCreated, org, _currentContext)); } else { await _collectionRepository.ReplaceAsync(collection, org.UseGroups ? groups : null, users); await _eventService.LogCollectionEventAsync(collection, Enums.EventType.Collection_Updated); } } public async Task DeleteUserAsync(Collection collection, Guid organizationUserId) { var orgUser = await _organizationUserRepository.GetByIdAsync(organizationUserId); if (orgUser == null || orgUser.OrganizationId != collection.OrganizationId) { throw new NotFoundException(); } await _collectionRepository.DeleteUserAsync(collection.Id, organizationUserId); await _eventService.LogOrganizationUserEventAsync(orgUser, Enums.EventType.OrganizationUser_Updated); } public async Task> GetOrganizationCollectionsAsync(Guid organizationId) { if ( !await _currentContext.ViewAssignedCollections(organizationId) && !await _currentContext.ViewAllCollections(organizationId) && !await _currentContext.ManageUsers(organizationId) && !await _currentContext.ManageGroups(organizationId) && !await _currentContext.AccessImportExport(organizationId) ) { throw new NotFoundException(); } IEnumerable orgCollections; if (await _currentContext.ViewAllCollections(organizationId) || await _currentContext.AccessImportExport(organizationId)) { // Admins, Owners, Providers and Custom (with collection management or import/export permissions) can access all items even if not assigned to them orgCollections = await _collectionRepository.GetManyByOrganizationIdAsync(organizationId); } else { var collections = await _collectionRepository.GetManyByUserIdAsync(_currentContext.UserId.Value); orgCollections = collections.Where(c => c.OrganizationId == organizationId); } return orgCollections; } }