]> git.mxchange.org Git - pizzaservice-war.git/blobdiff - src/java/org/mxchange/pizzaapplication/beans/user/PizzaAdminUserWebRequestBean.java
Please cherry-pick:
[pizzaservice-war.git] / src / java / org / mxchange / pizzaapplication / beans / user / PizzaAdminUserWebRequestBean.java
index 1b436a2edd21e461678a7f8afafc3d10162d8117..c6ec6c484ddf31ab7230785fcd86dc52c59854b7 100644 (file)
@@ -1,5 +1,5 @@
 /*
- * Copyright (C) 2016 Roland Haeder
+ * Copyright (C) 2016, 2017 Roland Häder
  *
  * This program is free software: you can redistribute it and/or modify
  * it under the terms of the GNU Affero General Public License as
  */
 package org.mxchange.pizzaapplication.beans.user;
 
-import org.mxchange.pizzaapplication.beans.BasePizzaController;
 import java.text.MessageFormat;
+import java.util.Locale;
 import java.util.Objects;
 import javax.annotation.PostConstruct;
 import javax.enterprise.context.RequestScoped;
 import javax.enterprise.event.Event;
 import javax.enterprise.event.Observes;
 import javax.enterprise.inject.Any;
+import javax.faces.FacesException;
+import javax.faces.context.FacesContext;
 import javax.faces.view.facelets.FaceletException;
 import javax.inject.Inject;
 import javax.inject.Named;
@@ -31,30 +33,46 @@ import javax.naming.Context;
 import javax.naming.InitialContext;
 import javax.naming.NamingException;
 import org.mxchange.jcontacts.contact.Contact;
-import org.mxchange.jcontacts.contact.ContactSessionBeanRemote;
-import org.mxchange.jusercore.container.login.UserLoginContainer;
-import org.mxchange.jusercore.events.registration.UserRegisteredEvent;
+import org.mxchange.jcoreee.utils.FacesUtils;
 import org.mxchange.jusercore.events.user.add.AdminAddedUserEvent;
-import org.mxchange.jusercore.events.user.add.AdminUserAddedEvent;
+import org.mxchange.jusercore.events.user.add.ObservableAdminAddedUserEvent;
+import org.mxchange.jusercore.events.user.created.ObservableCreatedUserEvent;
+import org.mxchange.jusercore.events.user.delete.AdminDeletedUserEvent;
+import org.mxchange.jusercore.events.user.delete.ObservableAdminDeletedUserEvent;
+import org.mxchange.jusercore.events.user.linked.AdminLinkedUserEvent;
+import org.mxchange.jusercore.events.user.linked.ObservableAdminLinkedUserEvent;
+import org.mxchange.jusercore.events.user.locked.AdminLockedUserEvent;
+import org.mxchange.jusercore.events.user.locked.ObservableAdminLockedUserEvent;
+import org.mxchange.jusercore.events.user.unlocked.AdminUnlockedUserEvent;
+import org.mxchange.jusercore.events.user.unlocked.ObservableAdminUnlockedUserEvent;
 import org.mxchange.jusercore.events.user.update.AdminUpdatedUserDataEvent;
-import org.mxchange.jusercore.events.user.update.AdminUserDataUpdatedEvent;
+import org.mxchange.jusercore.events.user.update.ObservableAdminUpdatedUserDataEvent;
 import org.mxchange.jusercore.exceptions.EmailAddressAlreadyRegisteredException;
 import org.mxchange.jusercore.exceptions.UserNameAlreadyRegisteredException;
-import org.mxchange.jusercore.exceptions.UserPasswordRepeatMismatchException;
+import org.mxchange.jusercore.exceptions.UserNotFoundException;
+import org.mxchange.jusercore.exceptions.UserStatusConfirmedException;
+import org.mxchange.jusercore.exceptions.UserStatusLockedException;
+import org.mxchange.jusercore.exceptions.UserStatusUnconfirmedException;
+import org.mxchange.jusercore.model.user.AdminUserSessionBeanRemote;
 import org.mxchange.jusercore.model.user.LoginUser;
 import org.mxchange.jusercore.model.user.User;
 import org.mxchange.jusercore.model.user.UserSessionBeanRemote;
-import org.mxchange.jusercore.model.user.UserUtils;
 import org.mxchange.jusercore.model.user.profilemodes.ProfileMode;
 import org.mxchange.jusercore.model.user.status.UserAccountStatus;
+import org.mxchange.juserlogincore.container.login.UserLoginContainer;
+import org.mxchange.juserlogincore.events.registration.ObservableUserRegisteredEvent;
+import org.mxchange.juserlogincore.exceptions.UserPasswordRepeatMismatchException;
+import org.mxchange.juserlogincore.login.UserLoginUtils;
+import org.mxchange.pizzaapplication.beans.BasePizzaController;
+import org.mxchange.pizzaapplication.beans.contact.PizzaAdminContactWebRequestController;
 import org.mxchange.pizzaapplication.beans.contact.PizzaContactWebSessionController;
-import org.mxchange.pizzaapplication.beans.helper.PizzaAdminWebRequestController;
-import org.mxchange.pizzaapplication.beans.login.PizzaUserLoginWebSessionController;
+import org.mxchange.pizzaapplication.beans.helper.PizzaWebRequestHelperController;
+import org.mxchange.pizzaapplication.beans.localization.PizzaLocalizationSessionController;
 
 /**
  * Administrative user bean (controller)
  * <p>
- * @author Roland Haeder<roland@mxchange.org>
+ * @author Roland Häder<roland@mxchange.org>
  */
 @Named ("adminUserController")
 @RequestScoped
@@ -70,18 +88,29 @@ public class PizzaAdminUserWebRequestBean extends BasePizzaController implements
         */
        @Inject
        @Any
-       private Event<AdminAddedUserEvent> addedUserEvent;
+       private Event<ObservableAdminAddedUserEvent> addedUserEvent;
 
        /**
-        * Admin helper instance
+        * Regular contact controller
         */
        @Inject
-       private PizzaAdminWebRequestController adminHelper;
+       private PizzaAdminContactWebRequestController adminContactController;
+
+       /**
+        * Administrative user EJB
+        */
+       private AdminUserSessionBeanRemote adminUserBean;
 
        /**
-        * Remote user bean
+        * Bean helper
         */
-       private final ContactSessionBeanRemote contactBean;
+       @Inject
+       private PizzaWebRequestHelperController beanHelper;
+
+       /**
+        * Contact instance
+        */
+       private Contact contact;
 
        /**
         * Regular contact controller
@@ -89,17 +118,35 @@ public class PizzaAdminUserWebRequestBean extends BasePizzaController implements
        @Inject
        private PizzaContactWebSessionController contactController;
 
+       /**
+        * Event being fired when administrator has deleted user
+        */
+       @Inject
+       @Any
+       private Event<ObservableAdminDeletedUserEvent> deleteUserEvent;
+
+       /**
+        * Localization controller
+        */
+       @Inject
+       private PizzaLocalizationSessionController localizationController;
+
        /**
         * An event fired when the administrator has updated a new user
         */
        @Inject
        @Any
-       private Event<AdminUpdatedUserDataEvent> updatedUserDataEvent;
+       private Event<ObservableAdminUpdatedUserDataEvent> updatedUserDataEvent;
 
        /**
-        * Remote user bean
+        * User instance
         */
-       private final UserSessionBeanRemote userBean;
+       private User user;
+
+       /**
+        * General user EJB
+        */
+       private UserSessionBeanRemote userBean;
 
        /**
         * Regular user controller
@@ -108,10 +155,34 @@ public class PizzaAdminUserWebRequestBean extends BasePizzaController implements
        private PizzaUserWebSessionController userController;
 
        /**
-        * Login bean (controller)
+        * Delete reason
+        */
+       private String userDeleteReason;
+
+       /**
+        * An event fired when the administrator has linked a user with existing
+        * contact data.
         */
        @Inject
-       private PizzaUserLoginWebSessionController userLoginController;
+       @Any
+       private Event<ObservableAdminLinkedUserEvent> userLinkedEvent;
+
+       /**
+        * User lock reason
+        */
+       private String userLockReason;
+
+       /**
+        * Event being fired when an administrator has locked a user
+        */
+       @Inject
+       @Any
+       private Event<ObservableAdminLockedUserEvent> userLockedEvent;
+
+       /**
+        * Flag whether user must change password after login
+        */
+       private Boolean userMustChangePassword;
 
        /**
         * User name
@@ -119,40 +190,38 @@ public class PizzaAdminUserWebRequestBean extends BasePizzaController implements
        private String userName;
 
        /**
-        * User password (unencrypted from web form)
+        * User password (clear-text from web form)
         */
        private String userPassword;
 
        /**
-        * User password repeated (unencrypted from web form)
+        * User password repeated (clear-text from web form)
         */
        private String userPasswordRepeat;
 
+       /**
+        * Event being fired when administrator unlocks an account
+        */
+       @Inject
+       @Any
+       private Event<ObservableAdminUnlockedUserEvent> userUnlockedEvent;
+
        /**
         * Default constructor
         */
        public PizzaAdminUserWebRequestBean () {
-               // Try it
-               try {
-                       // Get initial context
-                       Context context = new InitialContext();
-
-                       // Try to lookup
-                       this.userBean = (UserSessionBeanRemote) context.lookup("java:global/pizzaservice-ejb/user!org.mxchange.jusercore.model.user.UserSessionBeanRemote"); //NOI18N
-
-                       // Try to lookup
-                       this.contactBean = (ContactSessionBeanRemote) context.lookup("java:global/pizzaservice-ejb/contact!org.mxchange.jcontacts.contact.ContactSessionBeanRemote"); //NOI18N
-               } catch (final NamingException e) {
-                       // Throw again
-                       throw new FaceletException(e);
-               }
+               // Call super constructor
+               super();
        }
 
-       @Override
+       /**
+        * Adds user instance to database by preparing a complete user instance and
+        * sending it to the EJB. The data set in the controller is being verified,
+        * e.g. if the user name or email address is not used yet.
+        * <p>
+        * @return Redirect outcome
+        */
        public String addUser () {
-               // Create new user instance
-               User user = new LoginUser();
-
                // As the form cannot validate the data (required="true"), check it here
                if (this.getUserName() == null) {
                        // Throw NPE
@@ -160,78 +229,65 @@ public class PizzaAdminUserWebRequestBean extends BasePizzaController implements
                } else if (this.getUserName().isEmpty()) {
                        // Is empty
                        throw new IllegalArgumentException("userName is null"); //NOI18N
-               } else if (this.adminHelper.getContact() == null) {
+               } else if (this.getContact() == null) {
                        // No contact instance set, so test required fields: gender, first name and family name
-                       if (this.contactController.getGender() == null) {
-                               // Throw NPE again
-                               throw new NullPointerException("contactController.gender is null"); //NOI18N
-                       } else if (this.contactController.getFirstName() == null) {
-                               // ... and again
-                               throw new NullPointerException("contactController.firstName is null"); //NOI18N //NOI18N
-                       } else if (this.contactController.getFirstName().isEmpty()) {
-                               // ... and again
-                               throw new IllegalArgumentException("contactController.firstName is empty");
-                       } else if (this.contactController.getFamilyName() == null) {
-                               // ... and again
-                               throw new NullPointerException("contactController.familyName is null"); //NOI18N
-                       } else if (this.contactController.getFamilyName().isEmpty()) {
-                               // ... and again
-                               throw new IllegalArgumentException("contactController.familyName is empty"); //NOI18N //NOI18N
-                       } else if (this.contactController.getEmailAddress() == null) {
-                               // ... and again
-                               throw new NullPointerException("contactController.emailAddress is null");
-                       } else if (this.contactController.getEmailAddress().isEmpty()) {
-                               // ... and again
-                               throw new IllegalArgumentException("contactController.emailAddress is empty"); //NOI18N //NOI18N
-                       } else if (this.contactController.getEmailAddressRepeat() == null) {
-                               // ... and again
-                               throw new NullPointerException("contactController.emailAddressRepeat is null");
-                       } else if (this.contactController.getEmailAddressRepeat().isEmpty()) {
-                               // ... and again
-                               throw new IllegalArgumentException("contactController.emailAddressRepeat is empty"); //NOI18N //NOI18N
-                       } else if (!Objects.equals(this.contactController.getEmailAddress(), this.contactController.getEmailAddressRepeat())) {
-                               // Is not same email address
-                               throw new IllegalArgumentException("Both entered email addresses don't match.");
-                       }
+                       this.adminContactController.validateContactData();
                }
 
+               // Create new user instance
+               User newUser = new LoginUser();
+
                // Set user name, CONFIRMED and INVISIBLE
-               user.setUserName(this.getUserName());
-               user.setUserAccountStatus(UserAccountStatus.CONFIRMED);
-               user.setUserProfileMode(ProfileMode.INVISIBLE);
+               newUser.setUserName(this.getUserName());
+               newUser.setUserMustChangePassword(this.getUserMustChangePassword());
+               newUser.setUserAccountStatus(UserAccountStatus.CONFIRMED);
+               newUser.setUserProfileMode(ProfileMode.INVISIBLE);
+
+               // Get locale from view-root
+               Locale locale = FacesContext.getCurrentInstance().getViewRoot().getLocale();
+
+               // Copy user locale
+               newUser.setUserLocale(locale);
 
                // Init instance
-               Contact contact;
+               Contact userContact;
 
                // Is a contact instance in helper set?
-               if (this.adminHelper.getContact() instanceof Contact) {
+               if (this.getContact() instanceof Contact) {
                        // Then use it for contact linking
-                       contact = this.adminHelper.getContact();
+                       userContact = this.getContact();
                } else {
                        // Create contact instance
-                       contact = this.contactController.createContactInstance();
+                       userContact = this.contactController.createContactInstance();
                }
 
                // Set contact in user
-               user.setUserContact(contact);
+               newUser.setUserContact(userContact);
 
                // Init variable for password
                String password = null;
 
                // Is the user name or email address used already?
                // @TODO Add password length check
-               if (this.userController.isUserNameRegistered(user)) {
+               if (this.userController.isUserNameRegistered(newUser)) {
                        // User name is already used
-                       throw new FaceletException(new UserNameAlreadyRegisteredException(user));
-               } else if ((this.adminHelper.getContact() == null) && (this.contactController.isEmailAddressRegistered(user.getUserContact()))) {
+                       throw new FaceletException(new UserNameAlreadyRegisteredException(newUser));
+               } else if ((this.getContact() == null) && (this.contactController.isEmailAddressRegistered(newUser.getUserContact()))) {
                        // Email address is already used
-                       throw new FaceletException(new EmailAddressAlreadyRegisteredException(user));
+                       this.showFacesMessage("admin_add_user:emailAddress", "ERROR_EMAIL_ADDRESS_ALREADY_USED"); //NOI18N
+
+                       // Always clear password
+                       this.setUserPassword(null);
+                       this.setUserPasswordRepeat(null);
+
+                       // Skip it
+                       return ""; //NOI18N
                } else if ((this.getUserPassword() == null && (this.getUserPasswordRepeat() == null)) || ((this.getUserPassword().isEmpty()) && (this.getUserPasswordRepeat().isEmpty()))) {
                        // Empty password entered, then generate one
-                       password = UserUtils.createRandomPassword(PizzaUserWebSessionController.MINIMUM_PASSWORD_LENGTH);
+                       password = UserLoginUtils.createRandomPassword(PizzaUserWebSessionController.MINIMUM_PASSWORD_LENGTH);
                } else if (!this.isSamePasswordEntered()) {
                        // Both passwords don't match
-                       throw new FaceletException(new UserPasswordRepeatMismatchException(user));
+                       throw new FaceletException(new UserPasswordRepeatMismatchException(newUser));
                } else {
                        // Both match, so get it from this bean
                        password = this.getUserPassword();
@@ -242,22 +298,22 @@ public class PizzaAdminUserWebRequestBean extends BasePizzaController implements
                assert (password.length() >= PizzaUserWebSessionController.MINIMUM_PASSWORD_LENGTH) : "Password is not long enough."; //NOI18N
 
                // Encrypt password and set it
-               user.setUserEncryptedPassword(UserUtils.encryptPassword(password));
-
-               // Init updated user instance
-               User updatedUser = null;
+               newUser.setUserEncryptedPassword(UserLoginUtils.encryptPassword(password));
 
                try {
                        // Now, that all is set, call EJB
-                       if (this.adminHelper.getContact() instanceof Contact) {
+                       if (this.getContact() instanceof Contact) {
                                // Link contact with this user
-                               updatedUser = this.userBean.linkUser(user);
+                               User updatedUser = this.adminUserBean.linkUser(newUser);
 
-                               // Remove contact instance
-                               this.adminHelper.setContact(null);
+                               // Fire event
+                               this.userLinkedEvent.fire(new AdminLinkedUserEvent(updatedUser));
                        } else {
                                // Add new contact
-                               updatedUser = this.userBean.addUser(user);
+                               User updatedUser = this.adminUserBean.addUser(newUser);
+
+                               // Fire event
+                               this.addedUserEvent.fire(new AdminAddedUserEvent(updatedUser));
                        }
                } catch (final UserNameAlreadyRegisteredException | EmailAddressAlreadyRegisteredException ex) {
                        // Throw again
@@ -265,10 +321,7 @@ public class PizzaAdminUserWebRequestBean extends BasePizzaController implements
                }
 
                // Clear helper
-               this.adminHelper.setContact(null);
-
-               // Fire event
-               this.addedUserEvent.fire(new AdminUserAddedEvent(updatedUser));
+               this.setContact(null);
 
                // Clear this bean
                this.clear();
@@ -277,11 +330,39 @@ public class PizzaAdminUserWebRequestBean extends BasePizzaController implements
                return "admin_list_user"; //NOI18N
        }
 
-       @Override
-       public void afterRegistrationEvent (final @Observes UserRegisteredEvent event) {
-               // Trace message
-               //* NOISY-DEBUG: */ System.out.println(MessageFormat.format("AdminUserWebBean:afterRegistration: event={0} - CALLED!", event)); //NOI18N
+       /**
+        * Event observer for when a bean helper has successfully created a user
+        * instance, means the user exists. If the user does not exist, this event
+        * should not fire but instead a proper exception must be thrown.
+        * <p>
+        * @param event User created event
+        */
+       public void afterCreatedUserEvent (@Observes final ObservableCreatedUserEvent event) {
+               // Is the instance valid?
+               if (null == event) {
+                       // Throw NPE
+                       throw new NullPointerException("event is null"); //NOI18N
+               } else if (event.getCreatedUser() == null) {
+                       // Throw NPE again
+                       throw new NullPointerException("event.createdUser is null"); //NOI18N
+               } else if (event.getCreatedUser().getUserId() == null) {
+                       // Throw NPE again
+                       throw new NullPointerException("event.createdUser.userId is null"); //NOI18N
+               } else if (event.getCreatedUser().getUserId() < 1) {
+                       // Throw NPE again
+                       throw new NullPointerException(MessageFormat.format("event.createdUser.userId={0} is not valid", event.getCreatedUser().getUserId())); //NOI18N
+               }
+
+               // Set whole user
+               this.setUser(event.getCreatedUser());
+       }
 
+       /**
+        * Event observer for new user registrations
+        * <p>
+        * @param event User registration event
+        */
+       public void afterUserRegistrationEvent (@Observes final ObservableUserRegisteredEvent event) {
                // event should not be null
                if (null == event) {
                        // Throw NPE
@@ -300,34 +381,63 @@ public class PizzaAdminUserWebRequestBean extends BasePizzaController implements
                // Get user instance
                User registeredUser = event.getRegisteredUser();
 
-               // Debug message
-               //* NOISY-DEBUG: */ System.out.println(MessageFormat.format("UserWebBean:afterRegistration: registeredUser={0}", registeredUser)); //NOI18N
-
+               // @TODO Nothing to do with the user here?
                // Clear all data
                this.clear();
+       }
+
+       /**
+        * Deletes given user account
+        * <p>
+        * @return Redirect outcome
+        */
+       public String deleteUserData () {
+               // Is the user instance valid and CONFIRMED?
+               if (this.getUser() == null) {
+                       // Throw NPE
+                       throw new NullPointerException("user is null"); //NOI18N
+               } else if (this.getUser().getUserId() == null) {
+                       // Throw again
+                       throw new NullPointerException("user.userId is null"); //NOI18N
+               } else if (this.getUser().getUserId() < 1) {
+                       // Invalid id number
+                       throw new IllegalArgumentException(MessageFormat.format("user.userId={0} is not valid", this.getUser().getUserId())); //NOI18N
+               }
+
+               try {
+                       // All fine, delete it
+                       this.adminUserBean.deleteUser(this.getUser(), this.getUserDeleteReason());
+               } catch (final UserNotFoundException ex) {
+                       // Should not happen, so throw again
+                       throw new FaceletException(ex);
+               }
+
+               // Fire event
+               this.deleteUserEvent.fire(new AdminDeletedUserEvent(this.getUser(), this.getUserDeleteReason()));
 
-               // Trace message
-               //* NOISY-DEBUG: */ System.out.println("AdminUserWebBean:afterRegistration: EXIT!"); //NOI18N
+               // Redirect
+               return "admin_list_user"; //NOI18N
        }
 
-       @Override
+       /**
+        * Edits currently loaded user's data in database.
+        * <p>
+        * @return Redirect outcome
+        */
        public String editUserData () {
-               // Get user instance
-               User user = this.adminHelper.getUser();
-
                // Null password means not setting it
                String encryptedPassword = null;
 
                // Check if user instance is in helper and valid
-               if (null == user) {
+               if (this.getUser() == null) {
                        // Throw NPE
-                       throw new NullPointerException("adminHelper.user is null"); //NOI18N
-               } else if (user.getUserId() == null) {
+                       throw new NullPointerException("beanHelper.user is null"); //NOI18N
+               } else if (this.getUser().getUserId() == null) {
                        // Throw NPE again
-                       throw new NullPointerException("adminHelper.user.userId is null"); //NOI18N //NOI18N
-               } else if (user.getUserId() < 1) {
+                       throw new NullPointerException("beanHelper.user.userId is null"); //NOI18N
+               } else if (this.getUser().getUserId() < 1) {
                        // Invalid id
-                       throw new IllegalStateException(MessageFormat.format("adminHelper.user.userId={0} is invalid", user.getUserId())); //NOI18N //NOI18N
+                       throw new IllegalStateException(MessageFormat.format("beanHelper.user.userId={0} is invalid", this.getUser().getUserId())); //NOI18N
                } else if (this.getUserName() == null) {
                        // Not all required fields are set
                        throw new NullPointerException("this.userName is null"); //NOI18N
@@ -335,80 +445,321 @@ public class PizzaAdminUserWebRequestBean extends BasePizzaController implements
                        // Not all required fields are set
                        throw new IllegalArgumentException("this.userName is empty"); //NOI18N
                } else if (((!this.getUserPassword().isEmpty()) || (!this.getUserPasswordRepeat().isEmpty())) && (!this.isSamePasswordEntered())) {
-                       // Not same password entered
+                       // Clear password fields
                        this.setUserPassword(null);
                        this.setUserPasswordRepeat(null);
 
-                       // Throw exception
-                       throw new FaceletException("Not same password entered"); //NOI18N
-               } else if (this.userBean.ifUserNameExists(this.getUserName())) {
+                       // Not same password entered
+                       this.showFacesMessage("form_edit_user:userPassword", "ADMIN_USER_PASSWORD_REPEAT_DIFFERENT"); //NOI18N
+                       return ""; //NOI18N
+               } else if ((!Objects.equals(this.getUser().getUserName(), this.getUserName())) && (this.userBean.ifUserNameExists(this.getUserName()))) {
+                       // Clear all fields
+                       this.clear();
+
                        // User name already exists
-                       throw new FaceletException(new UserNameAlreadyRegisteredException(this.getUserName()));
+                       this.showFacesMessage("form_edit_user:userName", "ADMIN_USER_NAME_ALREADY_EXISTS"); //NOI18N
+                       return ""; //NOI18N
                } else if (this.isSamePasswordEntered()) {
                        // Same password entered, create container
-                       if (UserUtils.ifPasswordMatches(new UserLoginContainer(user, this.getUserPassword()))) {
+                       if ((Objects.equals(this.getUser().getUserMustChangePassword(), this.getUserMustChangePassword())) && (UserLoginUtils.ifPasswordMatches(new UserLoginContainer(this.getUser(), this.getUserPassword())))) {
+                               // Clear password fields
+                               this.setUserPassword(null);
+                               this.setUserPasswordRepeat(null);
+
                                // Same password entered
-                               throw new FaceletException("Same password as stored entered."); //NOI18N
+                               this.showFacesMessage("form_edit_user:userPassword", "ADMIN_USER_ENTERED_SAME_AS_OLD_PASSWORD"); //NOI18N
+                               return ""; //NOI18N
                        }
 
                        // Encrypt password
-                       encryptedPassword = UserUtils.encryptPassword(this.getUserPassword());
+                       encryptedPassword = UserLoginUtils.encryptPassword(this.getUserPassword());
                }
 
-               // Set user name
-               user.setUserName(this.getUserName());
+               // Set user name and flag
+               this.getUser().setUserName(this.getUserName());
+               this.getUser().setUserMustChangePassword(this.getUserMustChangePassword());
 
                // Is a password set?
                if (encryptedPassword != null) {
                        // Set it as well
-                       user.setUserEncryptedPassword(encryptedPassword);
+                       this.getUser().setUserEncryptedPassword(encryptedPassword);
                }
 
                // Call EJB for updating user data
-               User updatedUser = this.userBean.updateUserData(user);
+               User updatedUser = this.userBean.updateUserData(this.getUser());
 
                // Fire event
-               this.updatedUserDataEvent.fire(new AdminUserDataUpdatedEvent(updatedUser));
+               this.updatedUserDataEvent.fire(new AdminUpdatedUserDataEvent(updatedUser));
 
                // Return to user list (for now)
                return "admin_list_user"; //NOI18N
        }
 
-       @Override
+       /**
+        * Getter for contact instance
+        * <p>
+        * @return Contact instance
+        */
+       public Contact getContact () {
+               return this.contact;
+       }
+
+       /**
+        * Setter for contact instance
+        * <p>
+        * @param contact Contact instance
+        */
+       public void setContact (final Contact contact) {
+               this.contact = contact;
+       }
+
+       /**
+        * Getter for user instance
+        * <p>
+        * @return User instance
+        */
+       public User getUser () {
+               return this.user;
+       }
+
+       /**
+        * Setter for user instance
+        * <p>
+        * @param user User instance
+        */
+       public void setUser (final User user) {
+               this.user = user;
+       }
+
+       /**
+        * Getter for user delete reason
+        * <p>
+        * @return User delete reason
+        */
+       public String getUserDeleteReason () {
+               return this.userDeleteReason;
+       }
+
+       /**
+        * Setter for user delete reason
+        * <p>
+        * @param userDeleteReason User delete reason
+        */
+       public void setUserDeleteReason (final String userDeleteReason) {
+               this.userDeleteReason = userDeleteReason;
+       }
+
+       /**
+        * Getter for user lock reason
+        * <p>
+        * @return User lock reason
+        */
+       public String getUserLockReason () {
+               return this.userLockReason;
+       }
+
+       /**
+        * Setter for user lock reason
+        * <p>
+        * @param userLockReason User lock reason
+        */
+       public void setUserLockReason (final String userLockReason) {
+               this.userLockReason = userLockReason;
+       }
+
+       /**
+        * Getter for flag if user needs to change password
+        * <p>
+        * @return Flag if user needs to change password
+        */
+       public Boolean getUserMustChangePassword () {
+               return this.userMustChangePassword;
+       }
+
+       /**
+        * Setter for flag if user needs to change password
+        * <p>
+        * @param userMustChangePassword Flag if user needs to change password
+        */
+       public void setUserMustChangePassword (final Boolean userMustChangePassword) {
+               this.userMustChangePassword = userMustChangePassword;
+       }
+
+       /**
+        * Getter for user name
+        * <p>
+        * @return User name
+        */
        public String getUserName () {
                return this.userName;
        }
 
-       @Override
+       /**
+        * Setter for user name
+        * <p>
+        * @param userName User name
+        */
        public void setUserName (final String userName) {
                this.userName = userName;
        }
 
-       @Override
+       /**
+        * Getter for clear-text user password
+        * <p>
+        * @return Clear-text user password
+        */
        public String getUserPassword () {
                return this.userPassword;
        }
 
-       @Override
+       /**
+        * Setter for clear-text user password
+        * <p>
+        * @param userPassword Clear-text user password
+        */
        public void setUserPassword (final String userPassword) {
                this.userPassword = userPassword;
        }
 
-       @Override
+       /**
+        * Getter for clear-text user password repeated
+        * <p>
+        * @return Clear-text user password repeated
+        */
        public String getUserPasswordRepeat () {
                return this.userPasswordRepeat;
        }
 
-       @Override
+       /**
+        * Setter for clear-text user password repeated
+        * <p>
+        * @param userPasswordRepeat Clear-text user password repeated
+        */
        public void setUserPasswordRepeat (final String userPasswordRepeat) {
                this.userPasswordRepeat = userPasswordRepeat;
        }
 
        /**
-        * Post-initialization of this class
+        * Post-construction method
         */
        @PostConstruct
        public void init () {
+               // Try it
+               try {
+                       // Get initial context
+                       Context context = new InitialContext();
+
+                       // Try to lookup
+                       this.userBean = (UserSessionBeanRemote) context.lookup("java:global/pizzaservice-ejb/user!org.mxchange.jusercore.model.user.UserSessionBeanRemote"); //NOI18N
+                       this.adminUserBean = (AdminUserSessionBeanRemote) context.lookup("java:global/pizzaservice-ejb/adminUser!org.mxchange.jusercore.model.user.AdminUserSessionBeanRemote"); //NOI18N
+               } catch (final NamingException e) {
+                       // Throw again
+                       throw new FaceletException(e);
+               }
+       }
+
+       /**
+        * Locks selected user's account. This method makes sure that a lock reason
+        * is provided that th user later can read on login attempts.
+        * <p>
+        * @return Redirect outcome
+        */
+       public String lockUserAccount () {
+               // Is the user instance valid and CONFIRMED?
+               if (this.getUser() == null) {
+                       // Throw NPE
+                       throw new NullPointerException("this.user is null"); //NOI18N
+               } else if (this.getUser().getUserId() == null) {
+                       // Throw again
+                       throw new NullPointerException("this.user.userId is null"); //NOI18N
+               } else if (this.getUser().getUserId() < 1) {
+                       // Invalid id number
+                       throw new IllegalArgumentException(MessageFormat.format("this.user.userId={0} is not valid", this.getUser().getUserId())); //NOI18N
+               } else if (this.getUser().getUserAccountStatus() == UserAccountStatus.LOCKED) {
+                       // User account is locked
+                       throw new FacesException(new UserStatusLockedException(this.getUser()));
+               } else if (this.getUser().getUserAccountStatus() == UserAccountStatus.UNCONFIRMED) {
+                       // User account is locked
+                       throw new FaceletException(new UserStatusUnconfirmedException(this.getUser()));
+               } else if (this.getUserLockReason() == null) {
+                       // Throw NPE again
+                       throw new NullPointerException("this.userLockReason is null"); //NOI18N
+               } else if (this.getUserLockReason().isEmpty()) {
+                       // Empty lock reason
+                       throw new IllegalArgumentException("this.userLockReason is empty"); //NOI18N
+               }
+
+               // Init updated user instance
+               User updatedUser;
+
+               try {
+                       // Get base URL
+                       String baseUrl = FacesUtils.generateBaseUrl();
+
+                       // Call EJB to lock account
+                       updatedUser = this.adminUserBean.lockUserAccount(this.getUser(), this.getUserLockReason(), baseUrl);
+               } catch (final UserStatusLockedException | UserStatusUnconfirmedException | UserNotFoundException ex) {
+                       // Throw again
+                       throw new FaceletException(ex);
+               }
+
+               // Fire event
+               this.userLockedEvent.fire(new AdminLockedUserEvent(updatedUser));
+
+               // Clear bean
+               this.clear();
+
+               // Should go fine at this point, redirect to user profile
+               return "admin_show_user"; //NOI18N
+       }
+
+       /**
+        * Unlocks selected user's account. This method makes sure that the account
+        * is locked.
+        * <p>
+        * @return Redirect outcome
+        */
+       public String unlockUserAccount () {
+               // Is the user instance valid and CONFIRMED?
+               if (this.getUser() == null) {
+                       // Throw NPE
+                       throw new NullPointerException("this.user is null"); //NOI18N
+               } else if (this.getUser().getUserId() == null) {
+                       // Throw again
+                       throw new NullPointerException("this.user.userId is null"); //NOI18N
+               } else if (this.getUser().getUserId() < 1) {
+                       // Invalid id number
+                       throw new IllegalArgumentException(MessageFormat.format("this.user.userId={0} is not valid", this.getUser().getUserId())); //NOI18N
+               } else if (this.getUser().getUserAccountStatus() == UserAccountStatus.CONFIRMED) {
+                       // User account is locked
+                       throw new FacesException(new UserStatusConfirmedException(this.getUser()));
+               } else if (this.getUser().getUserAccountStatus() == UserAccountStatus.UNCONFIRMED) {
+                       // User account is locked
+                       throw new FaceletException(new UserStatusUnconfirmedException(this.getUser()));
+               }
+
+               // Init updated user instance
+               User updatedUser;
+
+               try {
+                       // Get base URL
+                       String baseUrl = FacesUtils.generateBaseUrl();
+
+                       // Call EJB to unlock account
+                       updatedUser = this.adminUserBean.unlockUserAccount(this.getUser(), baseUrl);
+               } catch (final UserStatusConfirmedException | UserStatusUnconfirmedException | UserNotFoundException ex) {
+                       // Throw again
+                       throw new FaceletException(ex);
+               }
+
+               // Fire event
+               this.userUnlockedEvent.fire(new AdminUnlockedUserEvent(updatedUser));
+
+               // Clear bean
+               this.clear();
+
+               // Should go fine at this point, redirect to user profile
+               return "admin_show_user"; //NOI18N
        }
 
        /**
@@ -416,10 +767,10 @@ public class PizzaAdminUserWebRequestBean extends BasePizzaController implements
         */
        private void clear () {
                // Clear all data
-               // - other data
+               this.setContact(null);
+               this.setUserLockReason(null);
+               this.setUserMustChangePassword(null);
                this.setUserName(null);
-               this.setUserPassword(null);
-               this.setUserPasswordRepeat(null);
        }
 
        /**