# encoding: UTF-8
#
# Copyright (c) 2010-2017 GoodData Corporation. All rights reserved.
# This source code is licensed under the BSD-style license found in the
# LICENSE file in the root directory of this source tree.

require 'gooddata'

describe "User filters implementation", :constraint => 'slow' do
  before(:all) do
    @spec = JSON.parse(File.read("./spec/data/blueprints/test_project_model_spec.json"), :symbolize_names => true)
    @client = ConnectionHelper.create_default_connection
    blueprint = GoodData::Model::ProjectBlueprint.new(@spec)
    @project = @client.create_project_from_blueprint(blueprint, :token => ConnectionHelper::GD_PROJECT_TOKEN, environment: ProjectHelper::ENVIRONMENT)
    @domain = @client.domain(ConnectionHelper::DEFAULT_DOMAIN)

    @label = GoodData::Attribute.find_first_by_title('Dev', client: @client, project: @project).label_by_name('email')

    commits_data = [
      %w(lines_changed committed_on dev_id repo_id),
      [1, "01/01/2014", 1, 1],
      [3, "01/02/2014", 2, 2],
      [5, "05/02/2014", 3, 1],
      [6, "05/02/2014", 1, 2]
    ]
    @project.upload(commits_data, blueprint, 'dataset.commits')

    devs_data = [
      %w(dev_id email),
      [1, "tomas@gooddata.com"],
      [2, "petr@gooddata.com"],
      [3, "jirka@gooddata.com"]
    ]
    @project.upload(devs_data, blueprint, 'dataset.devs')

    repos_data = [
      %w(repo_id repo_name),
      [1, "goodot"],
      [2, "bam"],
      [3, "infra"]
    ]
    @project.upload(repos_data, blueprint, 'dataset.repos')
  end

  after(:all) do
    @project.delete if @project
  end

  after(:each) do
    @project.data_permissions.pmap(&:delete)
  end

  it "should create a mandatory user filter" do
    filters = [[ConnectionHelper::DEFAULT_USERNAME, @label.uri, 'tomas@gooddata.com', 'jirka@gooddata.com']]

    metric = @project.create_metric("SELECT SUM(#\"Lines Changed\")", :title => 'x')
    # [jirka@gooddata.com | petr@gooddata.com | tomas@gooddata.com]
    # [5.0                | 3.0               | 1.0               ]

    expect(metric.execute).to eq(15)
    @project.add_data_permissions(filters)
    expect(metric.execute).to eq(12)
    r = @project.compute_report(left: [metric], top: [@label.attribute])
    expect(r.include_column?(['tomas@gooddata.com', 7])).to be_truthy
    expect(r.include_column?(['jirka@gooddata.com', 5])).to be_truthy
    expect(r.include_column?(['petr@gooddata.com', 3])).to be_falsy

    # should not re-create the same MUF for the same user
    result = @project.add_data_permissions(filters, dry_run: true)
    expect(result[:created].count).to eq 0
    expect(result[:deleted].count).to eq 0
  end

  it "should return errors when asked to set a user not in project. Some filters are set up though." do
    filters = [
      ['nonexistent_user@gooddata.com', @label.uri, "tomas@gooddata.com"],
      [ConnectionHelper::DEFAULT_USERNAME, @label.uri, "tomas@gooddata.com"]
    ]
    expect { @project.add_data_permissions(filters) }.to raise_exception(/Creating MUFs resulted in errors/)
    expect(@project.data_permissions.count).to eq 2
  end

  it "should pass and set users that are in the projects" do
    filters = [
      [ConnectionHelper::DEFAULT_USERNAME, @label.uri, "tomas@gooddata.com"]
    ]
    @project.add_data_permissions(filters)
    expect(@project.data_permissions.count).to eq 1
  end

  it "should pass and set only users that are in the projects if asked" do
    filters = [
      ['nonexistent_user@gooddata.com', @label.uri, 'tomas@gooddata.com'],
      [ConnectionHelper::DEFAULT_USERNAME, @label.uri, 'tomas@gooddata.com']
    ]
    # note that filters will be set up even for nonexistent users but they will not be assigned
    expect { @project.add_data_permissions(filters, users_must_exist: false) }.to raise_exception(/Creating MUFs resulted in errors/)
    expect(@project.data_permissions.select(&:related_uri).count).to eq 1
    expect(@project.data_permissions.select(&:related_uri).first.pretty_expression).to eq "[Dev] IN ([tomas@gooddata.com])"
  end

  it "should fail when asked to set a value not in the project" do
    filters = [
      [ConnectionHelper::DEFAULT_USERNAME, @label.uri, '%^&*( nonexistent value', 'tomas@gooddata.com']
    ]
    expect do
      @project.add_data_permissions(filters)
    end.to raise_error
    begin
      @project.add_data_permissions(filters)
    rescue GoodData::FilterMaqlizationError => e
      expect(e.errors.count).to eq 1
    end
    expect(@project.data_permissions.count).to eq 0
  end

  it 'should fail but return all values if specified' do
    domain = @client.domain(ConnectionHelper::DEFAULT_DOMAIN)
    u = domain.users.find { |user| user.login != ConnectionHelper::DEFAULT_USERNAME }
    filters = [
      [ConnectionHelper::DEFAULT_USERNAME, @label.uri, '%^&*( nonexistent value', 'tomas@gooddata.com'],
      [u.login, @label.uri, '%^&*( other nonexistent value', 'jirka@gooddata.com']
    ]
    expect do
      @project.add_data_permissions(filters, fail_early: false)
    end.to raise_error
    begin
      @project.add_data_permissions(filters, fail_early: false)
    rescue GoodData::FilterMaqlizationError => e
      expect(e.errors.count).to eq 2
    end
    expect(@project.data_permissions.count).to eq 0
  end

  it 'should drop the filter when none of filter values is found' do
    filters = [[ConnectionHelper::DEFAULT_USERNAME, @label.uri, '%^&*( nonexistent value']]
    @project.add_data_permissions(filters, ignore_missing_values: true)
    expect(@project.data_permissions.count).to eq 0
  end

  it "should add a filter with nonexistent values when asked" do
    filters = [[ConnectionHelper::DEFAULT_USERNAME, @label.uri, '%^&*( nonexistent value', 'jirka@gooddata.com']]
    @project.add_data_permissions(filters, ignore_missing_values: true)

    expect(@project.data_permissions.pmap(&:pretty_expression)).to eq ["[Dev] IN ([jirka@gooddata.com])"]
    expect(@project.data_permissions.count).to eq 1
  end

  it "should be able to add mandatory filter to a user not in the project if domain is provided" do
    domain = @client.domain(ConnectionHelper::DEFAULT_DOMAIN)
    u = domain.users.find { |user| user.login != ConnectionHelper::DEFAULT_USERNAME }

    filters = [[u.login, @label.uri, "tomas@gooddata.com"]]
    @project.add_data_permissions(filters)
    filters = @project.data_permissions
    expect(filters.first.related.login).to eq u.login
    expect(filters.select(&:related_uri).count).to eq 1
    expect(filters.first.pretty_expression).to eq "[Dev] IN ([tomas@gooddata.com])"
  end

  it "should be able to print data permissions in a human readable form" do
    filters = [[ConnectionHelper::DEFAULT_USERNAME, @label.uri, "tomas@gooddata.com"]]
    @project.add_data_permissions(filters)
    perms = @project.data_permissions
    pretty = perms.pmap { |f| [f.related.login, f.pretty_expression] }
    expect(perms.first.related).to eq @client.user
    expect(pretty).to eq [[ConnectionHelper::DEFAULT_USERNAME, "[Dev] IN ([tomas@gooddata.com])"]]
  end

  it 'works with filters from .get_filters' do
    filters = GoodData::UserFilterBuilder.get_filters(
      File.expand_path('../../data/user_filters.csv', __FILE__),
      :type => :filter,
      :labels => [{ :label => @label, :column => 'filter' }]
    )
    @project.add_data_permissions(filters)
    permissions = @project.data_permissions
    pretty = permissions.first.pretty_expression
    expect(pretty).to eq('[Dev] IN ([tomas@gooddata.com])')
  end

  it "sets up mandatory users based on the state given as an end state by default." do
    # first let's prepare some user filters
    user_with_already_set_up_filter = @project.get_user(ConnectionHelper::DEFAULT_USERNAME)

    filters = [
      [user_with_already_set_up_filter.login, @label.uri, "tomas@gooddata.com"]
    ]
    @project.add_data_permissions(filters)
    expect(@project.data_permissions.map { |f| [f.related.login, f.pretty_expression] })
      .to eq [[ConnectionHelper::DEFAULT_USERNAME, "[Dev] IN ([tomas@gooddata.com])"]]

    # Now let's add user filter to a different user. If we do not explicitely state that
    # user_with_already_set_up_filter should keep his filter it will be removed
    another_user = @domain.users.find { |u| u.login != ConnectionHelper::DEFAULT_USERNAME }
    @project.add_user(another_user, 'Admin', domain: @domain)
    new_filters = [
      [another_user.login, @label.uri, "tomas@gooddata.com"]
    ]
    @project.add_data_permissions(new_filters, users_brick_input: [{ 'login' => ConnectionHelper::DEFAULT_USERNAME }])
    expect(@project.data_permissions.map { |f| [f.related.login, f.pretty_expression] })
      .to eq [[another_user.login, "[Dev] IN ([tomas@gooddata.com])"]]
  end

  it "should set up false if all values are nonexistent" do
    metric = GoodData::Fact.find_first_by_title('Lines Changed', client: @client, project: @project).create_metric

    filters = [[ConnectionHelper::DEFAULT_USERNAME, @label.uri, "NONEXISTENT1", "NONEXISTENT2", "NONEXISTENT3"]]
    @project.add_data_permissions(filters, ignore_missing_values: true)
    expect(metric.execute).to eq 15
    @project.add_data_permissions(filters, ignore_missing_values: true, restrict_if_missing_all_values: true)
    expect(metric.execute).to eq nil
  end

  it "you can switch the updates. Whatever is not mentioned will not be touched" do
    # first let's prepare some user filters
    user_with_already_set_up_filter = @project.get_user(ConnectionHelper::DEFAULT_USERNAME)

    filters = [
      [user_with_already_set_up_filter.login, @label.uri, "tomas@gooddata.com"]
    ]
    @project.add_data_permissions(filters)
    expect(@project.data_permissions.map { |f| [f.related.login, f.pretty_expression] })
      .to eq [[ConnectionHelper::DEFAULT_USERNAME, "[Dev] IN ([tomas@gooddata.com])"]]

    # Now let's add user filter to a different user. If we do not explicitely state that
    # user_with_already_set_up_filter should keep his filter it will be removed
    another_user = @domain.users.find { |u| u.login != ConnectionHelper::DEFAULT_USERNAME }
    @project.add_user(another_user, 'Admin', domain: @domain)
    new_filters = [
      [another_user.login, @label.uri, "tomas@gooddata.com"]
    ]
    @project.add_data_permissions(new_filters, do_not_touch_filters_that_are_not_mentioned: true)
    expect(@project.data_permissions.map { |f| [f.related.login, f.pretty_expression] })
      .to include([ConnectionHelper::DEFAULT_USERNAME, "[Dev] IN ([tomas@gooddata.com])"], [another_user.login, "[Dev] IN ([tomas@gooddata.com])"])
  end

  it "should be able to update the filter value", broken: true do
    pending 'FIXME: We cannot swap filters yet'

    filters = [[ConnectionHelper::DEFAULT_USERNAME, @label.uri, "tomas@gooddata.com", "jirka@gooddata.com"]]
    @project.add_data_permissions(filters)
    perm = @project.data_permissions.first
    filters = [[ConnectionHelper::DEFAULT_USERNAME, @label.uri, "tomas@gooddata.com"]]
    @project.add_data_permissions(filters)
    expect(perm.reload!.pretty_expression).to eq '[Dev] IN ([tomas@gooddata.com, jirka@gooddata.com])'
  end

  it 'should not create any superfluous filters if things go well' do
    filters = [[ConnectionHelper::DEFAULT_USERNAME, @label.uri, "tomas@gooddata.com"]]
    @project.add_data_permissions(filters)

    filters = [[ConnectionHelper::DEFAULT_USERNAME, @label.uri, "tomas@gooddata.com"]]
    results = @project.add_data_permissions(filters)
    expect(results[:results].all? { |r| r[:status] == :successful }).to be_truthy
    expect(results[:results].select { |r| r[:type] == :create }.count).to eq 0
    expect(@project.data_permissions.count).to eq 1
  end

  it "should create a mandatory user filter with double filters" do
    repo_label = @project.labels('some_attr_label_id')
    metric = @project.create_metric("SELECT SUM(#\"Lines Changed\")")

    # we want to compute stuff on different user than we are setting it on
    u = @domain.users.find { |user| user.login != ConnectionHelper::DEFAULT_USERNAME }
    password = 'si@gFG593fo'
    u.json['accountSetting']['password'] = password
    @domain.update_user(u)
    @project.add_user(u, 'admin')

    computation_client = GoodData.connect(u.login, password, verify_ssl: false)
    computation_project = computation_client.projects(@project.pid)

    # verify we are set up
    r = computation_project.compute_report(left: [metric, 'some_attr_label_id'], top: [@label])
    expect(r.column(4)).to eq ["tomas@gooddata.com", 6, 1]

    # lets restrict tomas to goodot only
    filters = [[u.login, @label.uri, 'tomas@gooddata.com'],
               [u.login, repo_label.uri, 'goodot']]
    @project.add_data_permissions(filters, users_brick_input: [{ 'login' => u.login }])
    expect(@project.data_permissions.pmap { |f| [f.related.login, f.pretty_expression] }).to eq [
      [u.login, "[Dev] IN ([tomas@gooddata.com])"],
      [u.login, "[Repository Name] IN ([goodot])"]
    ]

    r = computation_project.compute_report(left: [metric, 'some_attr_label_id'], top: [@label])
    expect(r.column(2)).to eq ["tomas@gooddata.com", 1]

    # Now lets change repo to bam
    filters = [[u.login, @label.uri, 'tomas@gooddata.com'],
               [u.login, repo_label.uri, 'bam']]
    @project.add_data_permissions(filters, users_brick_input: [{ 'login' => u.login }])

    expect(@project.data_permissions.pmap { |f| [f.related.login, f.pretty_expression] }).to eq [
      [u.login, "[Dev] IN ([tomas@gooddata.com])"],
      [u.login, "[Repository Name] IN ([bam])"]
    ]

    r = computation_project.compute_report(left: [metric, 'some_attr_label_id'], top: [@label])
    expect(r.column(2)).to eq ["tomas@gooddata.com", 6]

    # let's remove the repo restriction
    filters = [[u.login, @label.uri, 'tomas@gooddata.com']]
    @project.add_data_permissions(filters, users_brick_input: [{ 'login' => u.login }])

    r = computation_project.compute_report(left: [metric, 'some_attr_label_id'], top: [@label])
    expect(r.column(2)).to eq ["tomas@gooddata.com", 6, 1]
  end
end