[Developer] #424 add user and permission management

Refs #424

src/main/java/com/cloudhandson/vpdbackoffice/web/PermissionController.java

@@ -30,6 +30,7 @@ public class PermissionController {
   public String permissions(Model model) {
     model.addAttribute("roles", permissionService.findRoles());
     model.addAttribute("objects", protectedObjectService.findEnabled());
+    model.addAttribute("permissions", permissionService.findPermissionViews());
     return "permissions";
   }
 
@@ -52,4 +53,11 @@ public class PermissionController {
     redirectAttributes.addFlashAttribute("message", "권한을 저장했습니다.");
     return "redirect:/permissions";
   }
+
+  @PostMapping("/permissions/delete")
+  public String delete(@RequestParam long permissionId, RedirectAttributes redirectAttributes) {
+    permissionService.deletePermission(permissionId);
+    redirectAttributes.addFlashAttribute("message", "권한을 삭제했습니다.");
+    return "redirect:/permissions";
+  }
 }

src/main/java/com/cloudhandson/vpdbackoffice/web/ProtectedObjectController.java

@@ -0,0 +1,48 @@
+package com.cloudhandson.vpdbackoffice.web;
+
+import com.cloudhandson.vpdbackoffice.domain.protectedobject.ProtectedObjectCreateCommand;
+import com.cloudhandson.vpdbackoffice.service.ProtectedObjectService;
+import org.springframework.stereotype.Controller;
+import org.springframework.ui.Model;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.servlet.mvc.support.RedirectAttributes;
+
+@Controller
+public class ProtectedObjectController {
+
+  private final ProtectedObjectService protectedObjectService;
+
+  public ProtectedObjectController(ProtectedObjectService protectedObjectService) {
+    this.protectedObjectService = protectedObjectService;
+  }
+
+  @GetMapping("/objects")
+  public String objects(Model model) {
+    model.addAttribute("objects", protectedObjectService.findEnabled());
+    return "objects";
+  }
+
+  @PostMapping("/objects")
+  public String create(
+      @RequestParam String owner,
+      @RequestParam String objectName,
+      @RequestParam String ordsPath,
+      @RequestParam(required = false) String columns,
+      @RequestParam(required = false) String sensitiveColumns,
+      RedirectAttributes redirectAttributes
+  ) {
+    protectedObjectService.createObject(
+        new ProtectedObjectCreateCommand(owner, objectName, ordsPath, columns, sensitiveColumns));
+    redirectAttributes.addFlashAttribute("message", "보호 객체를 추가했습니다.");
+    return "redirect:/objects";
+  }
+
+  @PostMapping("/objects/disable")
+  public String disable(@RequestParam long objectId, RedirectAttributes redirectAttributes) {
+    protectedObjectService.disableObject(objectId);
+    redirectAttributes.addFlashAttribute("message", "보호 객체를 비활성화했습니다.");
+    return "redirect:/objects";
+  }
+}

src/main/java/com/cloudhandson/vpdbackoffice/web/UserController.java

@@ -0,0 +1,77 @@
+package com.cloudhandson.vpdbackoffice.web;
+
+import com.cloudhandson.vpdbackoffice.domain.user.UserCreateCommand;
+import com.cloudhandson.vpdbackoffice.service.PermissionService;
+import com.cloudhandson.vpdbackoffice.service.UserService;
+import org.springframework.stereotype.Controller;
+import org.springframework.ui.Model;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.servlet.mvc.support.RedirectAttributes;
+
+@Controller
+public class UserController {
+
+  private final UserService userService;
+  private final PermissionService permissionService;
+
+  public UserController(UserService userService, PermissionService permissionService) {
+    this.userService = userService;
+    this.permissionService = permissionService;
+  }
+
+  @GetMapping("/users")
+  public String users(Model model) {
+    model.addAttribute("users", userService.findAll());
+    model.addAttribute("roles", permissionService.findRoles());
+    model.addAttribute("userRoles", userService.findUserRoles());
+    return "users";
+  }
+
+  @PostMapping("/users")
+  public String create(
+      @RequestParam String username,
+      @RequestParam String empNo,
+      @RequestParam String deptCode,
+      @RequestParam(defaultValue = "false") boolean canReadContents,
+      RedirectAttributes redirectAttributes
+  ) {
+    userService.createUser(new UserCreateCommand(username, empNo, deptCode, canReadContents));
+    redirectAttributes.addFlashAttribute("message", "사용자를 추가했습니다.");
+    return "redirect:/users";
+  }
+
+  @PostMapping("/users/active")
+  public String active(
+      @RequestParam long userId,
+      @RequestParam boolean active,
+      RedirectAttributes redirectAttributes
+  ) {
+    userService.setActive(userId, active);
+    redirectAttributes.addFlashAttribute("message", "사용자 상태를 변경했습니다.");
+    return "redirect:/users";
+  }
+
+  @PostMapping("/users/roles")
+  public String grantRole(
+      @RequestParam long userId,
+      @RequestParam long roleId,
+      RedirectAttributes redirectAttributes
+  ) {
+    userService.grantRole(userId, roleId);
+    redirectAttributes.addFlashAttribute("message", "역할을 부여했습니다.");
+    return "redirect:/users";
+  }
+
+  @PostMapping("/users/roles/delete")
+  public String revokeRole(
+      @RequestParam long userId,
+      @RequestParam long roleId,
+      RedirectAttributes redirectAttributes
+  ) {
+    userService.revokeRole(userId, roleId);
+    redirectAttributes.addFlashAttribute("message", "역할을 해제했습니다.");
+    return "redirect:/users";
+  }
+}