Revize a86d66a4

Added Super Admin user

re #9790

backend/src/main/java/cz/zcu/kiv/backendapi/user/UserServiceImpl.java

@@ -25 +25 @@
 @RequiredArgsConstructor
 @Slf4j
 public class UserServiceImpl implements IUserService, UserDetailsService {
+    /**
+     * Super ADMIN name
+     */
+    private static final String SUPER_ADMIN_NAME = "[e-mail]";
+
     /**
      * Message for exception when user is not found by username
      */
@@ -76 +81 @@
             log.error(String.format(USER_NOT_FOUND, username));
             throw new UsernameNotFoundException(String.format(USER_NOT_FOUND, username));
         });
+        if (userEntity.isAdmin()) {
+            log.error("Permissions for user with ADMIN rights can not be changed");
+            throw new ApiRequestException("Permissions for user with ADMIN rights can not be changed", HttpStatus.BAD_REQUEST);
+        }
         userEntity.setPermissions(getPermissionsFromDto(permissionDto));
         userRepository.save(userEntity);
     }
 
     @Override
     public void resetPassword(String username, String newPassword) {
+        if (username.equals(SUPER_ADMIN_NAME)) {
+            log.error("Password for SUPER ADMIN can not be changed");
+            throw new ApiRequestException("Password for SUPER ADMIN can not be changed", HttpStatus.BAD_REQUEST);
+        }
         UserEntity userEntity = userRepository.findByEmail(username).orElseThrow(() -> {
             log.error(String.format(USER_NOT_FOUND, username));
             throw new UsernameNotFoundException(String.format(USER_NOT_FOUND, username));
@@ -106 +119 @@
 
     @Override
     public List<UserDto> getAllUsers() {
-        return userRepository.findAll().stream().map(this::convertEntityToDto).collect(Collectors.toList());
+        return userRepository.findAll().stream().filter(u -> !u.getEmail().equals(SUPER_ADMIN_NAME)).map(this::convertEntityToDto).collect(Collectors.toList());
     }
 
     @Override
     public void changePassword(String oldPassword, String newPassword) {
         UserEntity loggedUser = getUserByName((String) SecurityContextHolder.getContext().getAuthentication().getPrincipal());
+        if (loggedUser.getEmail().equals(SUPER_ADMIN_NAME)) {
+            throw new ApiRequestException("Can not change password for SUPER ADMIN", HttpStatus.BAD_REQUEST);
+        }
         if (!bCryptPasswordEncoder.matches(oldPassword, loggedUser.getPassword())) {
             throw new ApiRequestException("Old password does not match", HttpStatus.BAD_REQUEST);
         }