From ae377e6c72cf3347a7400f67d967ee3439a3eeed Mon Sep 17 00:00:00 2001
From: =?utf8?q?D=C3=A9nes=20Horv=C3=A1th?= <USER\denes.horvath>
Date: Tue, 24 Sep 2019 12:45:30 +0000
Subject: [PATCH] Change of mediacube-auth.properties for mediacube.json,
 setting of visibility of elements depending on configuration settings

git-tfs-id: [http://tfs.userrendszerhaz.hu:8080/tfs/DefaultCollection]$/MediaCube;C31543
---
 server/-configuration/mediacube.json          | 14 +++-
 .../run-mediacube-server.launch               |  4 +-
 .../pages/joblist.zul                         |  2 +-
 .../user.jobengine.osgi.server/pages/menu.zul |  4 +-
 .../pages/searchitems.zul                     |  4 +-
 .../zk/model/MediaCubeAuthentication.java     | 18 ++---
 .../jobengine/zk/util/LDAPUserHandler.java    | 68 +++++++++----------
 .../jobengine/zk/util/LocalUserHandler.java   | 56 +++++++--------
 .../user/jobengine/zk/util/SessionUtil.java   | 50 ++++++++++++--
 9 files changed, 133 insertions(+), 87 deletions(-)

diff --git a/server/-configuration/mediacube.json b/server/-configuration/mediacube.json
index 4c07e5ba..427af377 100644
--- a/server/-configuration/mediacube.json
+++ b/server/-configuration/mediacube.json
@@ -41,9 +41,17 @@
 				"email" : "vasary@elgekko.net"
 			}
 		],
-		"localAdmins": "root",
-		"localSubmitters": "lebony",
-		"localEditors": "editor"
+		"localAdmins": [
+			"root",
+			"admin"
+		],
+		"localSubmitters": [
+			"lebony",
+			"xyz"
+		],
+		"localEditors": [
+			"editor"
+		]
 	}
 }
 
diff --git a/server/-configuration/run-mediacube-server.launch b/server/-configuration/run-mediacube-server.launch
index b801173e..6cb781e0 100644
--- a/server/-configuration/run-mediacube-server.launch
+++ b/server/-configuration/run-mediacube-server.launch
@@ -18,10 +18,10 @@
 <stringAttribute key="org.eclipse.jdt.launching.JRE_CONTAINER" value="org.eclipse.jdt.launching.JRE_CONTAINER/org.eclipse.jdt.internal.debug.ui.launcher.StandardVMType/JavaSE-1.8"/>
 <stringAttribute key="org.eclipse.jdt.launching.PROGRAM_ARGUMENTS" value="-os ${target.os} -ws ${target.ws} -arch ${target.arch} -nl ${target.nl} -consoleLog -console"/>
 <stringAttribute key="org.eclipse.jdt.launching.SOURCE_PATH_PROVIDER" value="org.eclipse.pde.ui.workbenchClasspathProvider"/>
-<stringAttribute key="org.eclipse.jdt.launching.VM_ARGUMENTS" value="-Djavax.ws.rs.ext.RuntimeDelegate=org.jboss.resteasy.spi.ResteasyProviderFactory&#13;&#10;-Dorg.eclipse.epp.logging.aeri.skipReports=true &#13;&#10;-Declipse.ignoreApp=true &#13;&#10;-Dosgi.noShutdown=true&#13;&#10;-Djobengine.jobsteps.root=&quot;${workspace_loc}/user.jobengine.executors/config&quot;&#13;&#10;-Djobengine.jobtemplates.root=&quot;${workspace_loc}/user.jobengine.executors/jobtemplates&quot;&#13;&#10;-Djobengine.db.url=jdbc:db2://10.228.198.1:50000/mediaarc:retrieveMessagesFromServerOnGetMessage=true;&#13;&#10;-Djobengine.db.user=db2admin&#13;&#10;-Djobengine.db.password=password&#13;&#10;-Djobengine.loglevel=INFO&#13;&#10;-Dlog4j.configurationFile=&quot;${workspace_loc}/-configuration/log4j2.xml&quot;&#13;&#10;-Djobengine.jobsteps.alternate.root=&quot;${workspace_loc}/user.jobengine.executors/bin/&quot;&#13;&#10;-Djetty.home=&quot;${workspace_loc:}/-configuration/jetty&quot;&#13;&#10;-Djetty.etc.config.urls=etc/user-jetty.xml,etc/user-jetty-ssl.xml,etc/user-jetty-ssl-context.xml,,etc/user-jetty-http.xml,etc/user-jetty-https.xml&#13;&#10;-Dorg.eclipse.jetty.webapp.basetempdir=c:\temp\jetty&#13;&#10;-Djava.io.tmpdir=c:\temp\jetty&#13;&#10;-Djobengine.octopus.api.address=http://10.10.1.11/api/v1&#13;&#10;-Djobengine.octopus.api.user=mam&#13;&#10;-Djobengine.octopus.api.password=napocska&#13;&#10;-Djobengine.nosql.db.url=jdbc:db2://10.228.198.1:50000/mccache:retrieveMessagesFromServerOnGetMessage=true;&#13;&#10;-Djobengine.nosql.db.user=db2admin&#13;&#10;-Djobengine.nosql.db.password=password&#13;&#10;-Djobengine.nosql.db.schema=test&#13;&#10;-Djobengine.selenio.address=http://10.10.1.71:44000/TranscodeMgrWS?wsdl&#13;&#10;-Djobengine.selenio.projectfilepath=\\10.10.1.71\Data\Blueprints\MP4_H264_AAC.zenium&#13;&#10;-Djobengine.jobscheduling.config=&quot;${workspace_loc}/-configuration/scheduledjobs.json&quot;&#13;&#10;-Djobengine.maestro.config=&quot;${workspace_loc}/-configuration/maestro.json&quot;&#13;&#10;-Djobengine.nexio.db.url=jdbc:sqlserver://10.10.1.59:1433;databaseName=NXDB;&#13;&#10;-Djobengine.nexio.db.user=sa&#13;&#10;-Djobengine.nexio.db.password=resolve&#13;&#10;-Djobengine.planair.db.url=jdbc:sqlserver://10.10.1.45;databaseName=PA_Echo;&#13;&#10;-Djobengine.planair.db.user=MAM&#13;&#10;-Djobengine.planair.db.password=Echotv.hu&#13;&#10;-Dnexio.host=192.168.0.12&#13;&#10;-Djobengine.nexio.name=testnexioclips&#13;&#10;-Dnexio.useMOSGateway=false&#13;&#10;-Dnexio.disable=true&#13;&#10;-Djobengine.octopus.rundowns.name=rundowns181026&#13;&#10;-Djobengine.octopus.storyfolders.name=storyfolders181026&#13;&#10;-Djobengine.octopus.stories.name=stories181026&#13;&#10;-Dmediacube.auth.location=&quot;${workspace_loc}/-configuration/mediacube-auth.properties&quot;"/>
+<stringAttribute key="org.eclipse.jdt.launching.VM_ARGUMENTS" value="-Djavax.ws.rs.ext.RuntimeDelegate=org.jboss.resteasy.spi.ResteasyProviderFactory&#13;&#10;-Dorg.eclipse.epp.logging.aeri.skipReports=true &#13;&#10;-Declipse.ignoreApp=true &#13;&#10;-Dosgi.noShutdown=true&#13;&#10;-Djobengine.jobsteps.root=&quot;${workspace_loc}/user.jobengine.executors/config&quot;&#13;&#10;-Djobengine.jobtemplates.root=&quot;${workspace_loc}/user.jobengine.executors/jobtemplates&quot;&#13;&#10;-Djobengine.db.url=jdbc:db2://10.228.198.1:50000/mediaarc:retrieveMessagesFromServerOnGetMessage=true;&#13;&#10;-Djobengine.db.user=db2admin&#13;&#10;-Djobengine.db.password=password&#13;&#10;-Djobengine.loglevel=INFO&#13;&#10;-Dlog4j.configurationFile=&quot;${workspace_loc}/-configuration/log4j2.xml&quot;&#13;&#10;-Djobengine.jobsteps.alternate.root=&quot;${workspace_loc}/user.jobengine.executors/bin/&quot;&#13;&#10;-Djetty.home=&quot;${workspace_loc:}/-configuration/jetty&quot;&#13;&#10;-Djetty.etc.config.urls=etc/user-jetty.xml,etc/user-jetty-ssl.xml,etc/user-jetty-ssl-context.xml,,etc/user-jetty-http.xml,etc/user-jetty-https.xml&#13;&#10;-Dorg.eclipse.jetty.webapp.basetempdir=c:\temp\jetty&#13;&#10;-Djava.io.tmpdir=c:\temp\jetty&#13;&#10;-Djobengine.octopus.api.address=http://10.10.1.11/api/v1&#13;&#10;-Djobengine.octopus.api.user=mam&#13;&#10;-Djobengine.octopus.api.password=napocska&#13;&#10;-Djobengine.nosql.db.url=jdbc:db2://10.228.198.1:50000/mccache:retrieveMessagesFromServerOnGetMessage=true;&#13;&#10;-Djobengine.nosql.db.user=db2admin&#13;&#10;-Djobengine.nosql.db.password=password&#13;&#10;-Djobengine.nosql.db.schema=test&#13;&#10;-Djobengine.selenio.address=http://10.10.1.71:44000/TranscodeMgrWS?wsdl&#13;&#10;-Djobengine.selenio.projectfilepath=\\10.10.1.71\Data\Blueprints\MP4_H264_AAC.zenium&#13;&#10;-Djobengine.jobscheduling.config=&quot;${workspace_loc}/-configuration/scheduledjobs.json&quot;&#13;&#10;-Djobengine.mediacube.config=&quot;${workspace_loc}/-configuration/mediacube.json&quot;&#13;&#10;-Djobengine.maestro.config=&quot;${workspace_loc}/-configuration/maestro.json&quot;&#13;&#10;-Djobengine.nexio.db.url=jdbc:sqlserver://10.10.1.59:1433;databaseName=NXDB;&#13;&#10;-Djobengine.nexio.db.user=sa&#13;&#10;-Djobengine.nexio.db.password=resolve&#13;&#10;-Djobengine.planair.db.url=jdbc:sqlserver://10.10.1.45;databaseName=PA_Echo;&#13;&#10;-Djobengine.planair.db.user=MAM&#13;&#10;-Djobengine.planair.db.password=Echotv.hu&#13;&#10;-Dnexio.host=192.168.0.12&#13;&#10;-Djobengine.nexio.name=testnexioclips&#13;&#10;-Dnexio.useMOSGateway=false&#13;&#10;-Dnexio.disable=true&#13;&#10;-Dgui.statistics.disable=true&#13;&#10;-Dgui.help.disable=true&#13;&#10;-Dgui.editor.disable=true&#13;&#10;-Djobengine.octopus.rundowns.name=rundowns181026&#13;&#10;-Djobengine.octopus.storyfolders.name=storyfolders181026&#13;&#10;-Djobengine.octopus.stories.name=stories181026&#13;&#10;-Dmediacube.auth.location=&quot;${workspace_loc}/-configuration/mediacube-auth.properties&quot;"/>
 <stringAttribute key="pde.version" value="3.3"/>
 <booleanAttribute key="show_selected_only" value="false"/>
-<stringAttribute key="target_bundles" value="cglib@default:default,com.fasterxml.jackson.core.jackson-annotations@default:default,com.fasterxml.jackson.core.jackson-core@default:default,com.fasterxml.jackson.core.jackson-databind@default:default,com.fasterxml.jackson.datatype.jackson-datatype-joda@default:default,com.fasterxml.jackson.jaxrs.jackson-jaxrs-base@default:default,com.fasterxml.jackson.jaxrs.jackson-jaxrs-json-provider@default:default,com.fasterxml.jackson.module.jackson-module-jaxb-annotations,com.ibm.db2jcc4@default:default,com.ibm.nosql@default:default,com.microsoft.sqlserver.sqljdbc@default:default,com.sun.el.javax.el@default:default,commons-logging,humble.video.noarch@default:default,humble.video.windows@default:default,javax.annotation-api@default:default,javax.inject,javax.mail@default:default,javax.servlet-api@default:default,javax.servlet.jsp-api@default:default,javax.validation.api,javax.ws.rs-api@default:default,jcifs@default:default,joda-time@default:default,org.apache.aries.spifly.dynamic.bundle@default:default,org.apache.aries.util@default:default,org.apache.commons.beanutils@default:default,org.apache.commons.collections@default:default,org.apache.commons.digester@default:default,org.apache.commons.io@default:default,org.apache.commons.lang@default:default,org.apache.commons.logging@default:default,org.apache.commons.net@default:default,org.apache.felix.gogo.command@default:default,org.apache.felix.gogo.runtime@default:default,org.apache.felix.gogo.shell@default:default,org.apache.httpcomponents.httpclient@default:default,org.apache.httpcomponents.httpcore@default:default,org.apache.jasper.glassfish@default:default,org.apache.logging.log4j.api@1:true,org.apache.logging.log4j.core@default:default,org.apache.logging.log4j.slf4j-impl@default:default,org.apache.servicemix.bundles.quartz@default:default,org.eclipse.equinox.common@2:true,org.eclipse.equinox.console@default:default,org.eclipse.equinox.ds@1:true,org.eclipse.equinox.util@default:default,org.eclipse.jetty.client,org.eclipse.jetty.deploy@default:default,org.eclipse.jetty.http@default:default,org.eclipse.jetty.io@default:default,org.eclipse.jetty.jsp@default:default,org.eclipse.jetty.osgi.boot.jsp@default:false,org.eclipse.jetty.osgi.boot@default:true,org.eclipse.jetty.schemas@default:default,org.eclipse.jetty.security@default:default,org.eclipse.jetty.server@default:default,org.eclipse.jetty.servlet@default:default,org.eclipse.jetty.util@default:default,org.eclipse.jetty.webapp@default:default,org.eclipse.jetty.websocket.api@default:default,org.eclipse.jetty.websocket.client@default:default,org.eclipse.jetty.websocket.common@default:default,org.eclipse.jetty.websocket.server@default:default,org.eclipse.jetty.websocket.servlet@default:default,org.eclipse.jetty.xml@default:default,org.eclipse.osgi.services@default:default,org.eclipse.osgi@-1:true,org.hamcrest.core@default:default,org.jboss.resteasy.client@default:default,org.jboss.resteasy.jaxrs@default:default,org.jmock.junit4@default:default,org.jmock@default:default,org.junit@default:default,org.mybatis.mybatis@default:default,org.objectweb.asm.commons@default:default,org.objectweb.asm.tree@default:default,org.objectweb.asm@default:default,slf4j.api@default:default,slf4j.simple@default:false"/>
+<stringAttribute key="target_bundles" value="cglib@default:default,com.fasterxml.jackson.core.jackson-annotations@default:default,com.fasterxml.jackson.core.jackson-core@default:default,com.fasterxml.jackson.core.jackson-databind@default:default,com.fasterxml.jackson.datatype.jackson-datatype-joda@default:default,com.fasterxml.jackson.jaxrs.jackson-jaxrs-base@default:default,com.fasterxml.jackson.jaxrs.jackson-jaxrs-json-provider@default:default,com.ibm.db2jcc4@default:default,com.ibm.nosql@default:default,com.microsoft.sqlserver.sqljdbc@default:default,commons-logging@default:default,humble.video.noarch@default:default,humble.video.windows@default:default,javax.annotation-api@default:default,javax.mail@default:default,javax.servlet-api@default:default,javax.ws.rs-api@default:default,jcifs@default:default,joda-time@default:default,org.apache.aries.spifly.dynamic.bundle@default:default,org.apache.aries.util@default:default,org.apache.commons.beanutils@default:default,org.apache.commons.collections@default:default,org.apache.commons.digester@default:default,org.apache.commons.io@default:default,org.apache.commons.lang@default:default,org.apache.commons.logging@default:default,org.apache.commons.net@default:default,org.apache.felix.gogo.command@default:default,org.apache.felix.gogo.runtime@default:default,org.apache.felix.gogo.shell@default:default,org.apache.httpcomponents.httpclient@default:default,org.apache.httpcomponents.httpcore@default:default,org.apache.logging.log4j.api@1:true,org.apache.logging.log4j.core@default:default,org.apache.logging.log4j.slf4j-impl@default:default,org.apache.servicemix.bundles.quartz@default:default,org.eclipse.equinox.common@2:true,org.eclipse.equinox.console@default:default,org.eclipse.equinox.ds@1:true,org.eclipse.equinox.util@default:default,org.eclipse.jetty.client@default:default,org.eclipse.jetty.deploy@default:default,org.eclipse.jetty.http@default:default,org.eclipse.jetty.io@default:default,org.eclipse.jetty.osgi.boot@default:true,org.eclipse.jetty.schemas@default:default,org.eclipse.jetty.security@default:default,org.eclipse.jetty.server@default:default,org.eclipse.jetty.servlet@default:default,org.eclipse.jetty.util@default:default,org.eclipse.jetty.webapp@default:default,org.eclipse.jetty.websocket.api@default:default,org.eclipse.jetty.websocket.client@default:default,org.eclipse.jetty.websocket.common@default:default,org.eclipse.jetty.websocket.server@default:default,org.eclipse.jetty.websocket.servlet@default:default,org.eclipse.jetty.xml@default:default,org.eclipse.osgi.services@default:default,org.eclipse.osgi@-1:true,org.hamcrest.core@default:default,org.jboss.resteasy.client@default:default,org.jboss.resteasy.jaxrs@default:default,org.jmock.junit4@default:default,org.jmock@default:default,org.junit@default:default,org.mybatis.mybatis@default:default,org.objectweb.asm.commons@default:default,org.objectweb.asm.tree@default:default,org.objectweb.asm@default:default,slf4j.api@default:default,slf4j.simple@default:false"/>
 <booleanAttribute key="tracing" value="false"/>
 <booleanAttribute key="useCustomFeatures" value="false"/>
 <booleanAttribute key="useDefaultConfigArea" value="true"/>
diff --git a/server/user.jobengine.osgi.server/pages/joblist.zul b/server/user.jobengine.osgi.server/pages/joblist.zul
index a0a82f94..d2f43bef 100644
--- a/server/user.jobengine.osgi.server/pages/joblist.zul
+++ b/server/user.jobengine.osgi.server/pages/joblist.zul
@@ -23,7 +23,7 @@
 			<button label="Futtatás" onClick="@command('executeJob')" />
 			<button sclass="buttonboldfont" label="Leállítás" onClick="@command('shutdown')" autodisable="self" disabled="@load(jlm.shutdownDisabled)" />
 			<button sclass="buttonboldfont" label="Elindítás" onClick="@command('startup')" autodisable="self" disabled="@load(jlm.startupDisabled)" />
-			<button sclass="buttonboldfont" label="NEXIO szinkronizálás" onClick="@command('restartNexio')" autodisable="self" />
+			<button sclass="buttonboldfont" label="NEXIO szinkronizálás" onClick="@command('restartNexio')" visible="${not sessionScope.nexioDisable}" />
 		</div>
 
 
diff --git a/server/user.jobengine.osgi.server/pages/menu.zul b/server/user.jobengine.osgi.server/pages/menu.zul
index 0a15efd1..768e7ba0 100644
--- a/server/user.jobengine.osgi.server/pages/menu.zul
+++ b/server/user.jobengine.osgi.server/pages/menu.zul
@@ -60,14 +60,14 @@
 	 				<menuitem sclass="rozsda" label="Hiányzó anyagok" onClick="@command('navigate', action='missingmaterials')" disabled="${not sessionScope.userPrincipal.submitter or sessionScope.userPrincipal.anonymous}" />
 				</menupopup>
 			</menu>
-			<menu sclass="whitemenu" label="Statisztikák">
+			<menu sclass="whitemenu" label="Statisztikák" visible="${not sessionScope.guiStatisticsDisable}">
 				<menupopup>
 	 				<menuitem sclass="rozsda" label="Folyamat tevékenységek" onClick="@command('navigate', action='statistics')" disabled="${not sessionScope.userPrincipal.admin or sessionScope.userPrincipal.anonymous}" />
 	 				<menuitem sclass="rozsda" label="Híranyag gyártás" onClick="@command('navigate', action='newshistory')" disabled="${not sessionScope.userPrincipal.admin or sessionScope.userPrincipal.anonymous}" />
 				</menupopup>
 			</menu>
 	
-			<menu sclass="whitemenu" label="${labels.menu_help}" >
+			<menu sclass="whitemenu" label="${labels.menu_help}" visible="${not sessionScope.guiHelpDisable}">
 				<menupopup>
 					<menuitem sclass="rozsda" label="${labels.menu_content}" href="http://10.10.1.27:90/docs" target="_blank" />
 					<menuitem sclass="rozsda" label="${labels.menu_version}" href="/resource/help.html" target="_blank" />
diff --git a/server/user.jobengine.osgi.server/pages/searchitems.zul b/server/user.jobengine.osgi.server/pages/searchitems.zul
index ed34b545..f553c7d4 100644
--- a/server/user.jobengine.osgi.server/pages/searchitems.zul
+++ b/server/user.jobengine.osgi.server/pages/searchitems.zul
@@ -311,8 +311,8 @@
 										<toolbarbutton image="/img/baseline_edit_black_18dp.png" autodisable="self" onClick="@command('openMetaDataDialog')"
 											disabled="@load(not sessionScope.userPrincipal.editor or sessionScope.userPrincipal.anonymous or vm.selectedObject eq null)" label="Szerkesztés" />
 										<separator />
-										<toolbarbutton autodisable="self" c:onClick="pushTcIn('${arg.field}')" label="IN" />
-										<toolbarbutton autodisable="self" c:onClick="pushTcOut('${arg.field}')" label="OUT" />
+										<toolbarbutton autodisable="self" c:onClick="pushTcIn('${arg.field}')" label="IN" visible="${not sessionScope.guiEditorDisable}" />
+										<toolbarbutton autodisable="self" c:onClick="pushTcOut('${arg.field}')" label="OUT" visible="${not sessionScope.guiEditorDisable}" />
 									</div>
 								</div>
 							</toolbar>
diff --git a/server/user.jobengine.osgi.server/src/user/jobengine/zk/model/MediaCubeAuthentication.java b/server/user.jobengine.osgi.server/src/user/jobengine/zk/model/MediaCubeAuthentication.java
index 9802422d..0829b3cb 100644
--- a/server/user.jobengine.osgi.server/src/user/jobengine/zk/model/MediaCubeAuthentication.java
+++ b/server/user.jobengine.osgi.server/src/user/jobengine/zk/model/MediaCubeAuthentication.java
@@ -11,9 +11,9 @@ public class MediaCubeAuthentication {
 	private List<String> adSubmitterMap;
 	private List<String> adEditorMap;
 	private List<MediaCubeAccount> localAccounts;
-	private String localAdmins;
-	private String localSubmitters;
-	private String localEditors;
+	private List<String> localAdmins;
+	private List<String> localSubmitters;
+	private List<String> localEditors;
 
 	public List<String> getAdAdminMap() {
 		return adAdminMap;
@@ -43,15 +43,15 @@ public class MediaCubeAuthentication {
 		return localAccounts;
 	}
 
-	public String getLocalAdmins() {
+	public List<String> getLocalAdmins() {
 		return localAdmins;
 	}
 
-	public String getLocalEditors() {
+	public List<String> getLocalEditors() {
 		return localEditors;
 	}
 
-	public String getLocalSubmitters() {
+	public List<String> getLocalSubmitters() {
 		return localSubmitters;
 	}
 
@@ -91,15 +91,15 @@ public class MediaCubeAuthentication {
 		this.localAccounts = localAccounts;
 	}
 
-	public void setLocalAdmins(String localAdmins) {
+	public void setLocalAdmins(List<String> localAdmins) {
 		this.localAdmins = localAdmins;
 	}
 
-	public void setLocalEditors(String localEditors) {
+	public void setLocalEditors(List<String> localEditors) {
 		this.localEditors = localEditors;
 	}
 
-	public void setLocalSubmitters(String localSubmitters) {
+	public void setLocalSubmitters(List<String> localSubmitters) {
 		this.localSubmitters = localSubmitters;
 	}
 
diff --git a/server/user.jobengine.osgi.server/src/user/jobengine/zk/util/LDAPUserHandler.java b/server/user.jobengine.osgi.server/src/user/jobengine/zk/util/LDAPUserHandler.java
index 6f3c21a7..93c0b278 100644
--- a/server/user.jobengine.osgi.server/src/user/jobengine/zk/util/LDAPUserHandler.java
+++ b/server/user.jobengine.osgi.server/src/user/jobengine/zk/util/LDAPUserHandler.java
@@ -1,6 +1,5 @@
 package user.jobengine.zk.util;
 
-import java.io.FileInputStream;
 import java.lang.invoke.MethodHandles;
 import java.net.URL;
 import java.util.ArrayList;
@@ -8,7 +7,6 @@ import java.util.Arrays;
 import java.util.Hashtable;
 import java.util.LinkedHashSet;
 import java.util.List;
-import java.util.Properties;
 import java.util.Set;
 
 import javax.naming.Context;
@@ -25,6 +23,7 @@ import org.apache.logging.log4j.LogManager;
 import org.apache.logging.log4j.Logger;
 
 import user.commons.ListUtils;
+import user.jobengine.zk.model.MediaCubeAuthentication;
 
 public class LDAPUserHandler {
 	private static final String OTHER_MAILBOX = "otherMailbox";
@@ -32,8 +31,8 @@ public class LDAPUserHandler {
 	private static final String LDAP_ADDRESS = "ldap://%s:%s";
 	private static final String AD_NONSECUREPORT = "ad_nonsecureport";
 	private static final String AD_HOST = "ad_host";
-	//	private static final String TECH_ACCOUNT = "tech_account";
-	//	private static final String TECH_PASSWORD = "tech_password";
+	// private static final String TECH_ACCOUNT = "tech_account";
+	// private static final String TECH_PASSWORD = "tech_password";
 	private static final String SIMPLE_AUTH = "simple";
 	private static final String CTX_FACTORY = "com.sun.jndi.ldap.LdapCtxFactory";
 	private static final String DOMAIN_ACCOUNT = "%s@%s";
@@ -44,46 +43,47 @@ public class LDAPUserHandler {
 	private static final String AD_ADMIN_MAP = "ad_admin_map";
 	private static final String AD_SUBMITTER_MAP = "ad_submitter_map";
 	private static final String AD_EDITOR_MAP = "ad_editor_map";
+	private static MediaCubeAuthentication mediaCubeAuthentication;
 
 	public static void main(String[] args) throws Exception {
-		//		Properties cfg = new Properties();
-		//		cfg.setProperty("ad_host", "10.10.254.11");
-		//		cfg.setProperty("ad_nonsecureport", "389");
-		//		cfg.setProperty("ad_base_dn", "DC=intra,DC=echotv,DC=hu");
+		// Properties cfg = new Properties();
+		// cfg.setProperty("ad_host", "10.10.254.11");
+		// cfg.setProperty("ad_nonsecureport", "389");
+		// cfg.setProperty("ad_base_dn", "DC=intra,DC=echotv,DC=hu");
 
-		Properties cfg = new Properties();
+		// Properties cfg = new Properties();
 		URL srcLocation = MethodHandles.lookup().lookupClass().getProtectionDomain().getCodeSource().getLocation();
 		URL location = new URL(srcLocation, "../../-configuration/mediacube-auth.properties");
-		cfg.load(new FileInputStream(location.toURI().getPath().toString()));
+		// cfg.load(new FileInputStream(location.toURI().getPath().toString()));
 
-		//LDAPHandler h = new LDAPHandler("echotest", "aA123456+", cfg);
-		//LDAPHandler h = new LDAPHandler("stibor.adm", "Qwer1234", cfg);
-		LDAPUserHandler h = new LDAPUserHandler("nagy.ilona", "k0rianDER", cfg);
+		// LDAPHandler h = new LDAPHandler("echotest", "aA123456+", cfg);
+		// LDAPHandler h = new LDAPHandler("stibor.adm", "Qwer1234", cfg);
+		LDAPUserHandler h = new LDAPUserHandler("nagy.ilona", "k0rianDER", mediaCubeAuthentication);
 
 		UserPrincipal user = h.getUserPrincipal();
 		System.out.println(user);
-		//List<String> allGroups = h.getAllGroups();
+		// List<String> allGroups = h.getAllGroups();
 	}
 
-	private Properties cfg = null;
+	// private Properties cfg = null;
 	private String account;
 	private String password;
 	private String domain;
 
-	public LDAPUserHandler(String account, String password, Properties cfg) {
+	public LDAPUserHandler(String account, String password, MediaCubeAuthentication mediaCubeAuthentication) {
 		this.account = account;
 		this.password = password;
-		this.domain = cfg.getProperty(AD_BASE_DN);
+		this.domain = mediaCubeAuthentication.getAdBaseDn();
 		if (domain != null)
 			domain = domain.toLowerCase().replace("dc=", "").replace(",", ".");
-		this.cfg = cfg;
+		this.mediaCubeAuthentication = mediaCubeAuthentication;
 	}
 
-	private boolean checkMembership(Properties cfg, String property, List<String> memberOf) {
-		String groupMap = cfg.getProperty(property);
-		if (groupMap == null)
+	private boolean checkMembership(List<String> property, List<String> memberOf) {
+		// String groupMap = cfg.getProperty(property);
+		if (property == null)
 			return false;
-		List<String> remains = ListUtils.intersect(Arrays.asList(groupMap.split(",")), memberOf);
+		List<String> remains = ListUtils.intersect(Arrays.asList(property.toString().split(",")), memberOf);
 		return (remains.size() > 0);
 
 	}
@@ -97,7 +97,7 @@ public class LDAPUserHandler {
 			SearchControls searchCtls = new SearchControls();
 			searchCtls.setSearchScope(SearchControls.SUBTREE_SCOPE);
 			String searchFilter = "(&(objectClass=group))";
-			String searchBase = cfg.getProperty(AD_BASE_DN);
+			String searchBase = mediaCubeAuthentication.getAdBaseDn();
 			String returnedAtts[] = { "member" };
 			searchCtls.setReturningAttributes(returnedAtts);
 			answer = ctx.search(searchBase, searchFilter, searchCtls);
@@ -110,9 +110,9 @@ public class LDAPUserHandler {
 				result.add(groupName);
 				System.out.println(groupName);
 
-				//				List<String> parentGroups = getMemberOf(ctx, groupName);
-				//				for (String group : parentGroups)
-				//					System.out.println("\t" + group);
+				// List<String> parentGroups = getMemberOf(ctx, groupName);
+				// for (String group : parentGroups)
+				// System.out.println("\t" + group);
 
 			}
 
@@ -131,7 +131,7 @@ public class LDAPUserHandler {
 
 	private LdapContext getContext(String account, String password) throws Exception {
 		Hashtable<String, String> env = new Hashtable<>();
-		String ldapURL = String.format(LDAP_ADDRESS, cfg.getProperty(AD_HOST), cfg.getProperty(AD_NONSECUREPORT));
+		String ldapURL = String.format(LDAP_ADDRESS, mediaCubeAuthentication.getAdHost(), mediaCubeAuthentication.getAdNonSecurePort());
 		env.put(Context.PROVIDER_URL, ldapURL);
 		env.put(Context.INITIAL_CONTEXT_FACTORY, CTX_FACTORY);
 		env.put(Context.SECURITY_AUTHENTICATION, SIMPLE_AUTH);
@@ -148,7 +148,7 @@ public class LDAPUserHandler {
 			SearchControls searchCtls = new SearchControls();
 			searchCtls.setSearchScope(SearchControls.SUBTREE_SCOPE);
 			String searchFilter = String.format("(&(CN=%s))", cn);
-			String searchBase = cfg.getProperty("ad_base_dn");
+			String searchBase = mediaCubeAuthentication.getAdBaseDn();
 			answer = ctx.search(searchBase, searchFilter, searchCtls);
 			if (answer.hasMoreElements()) {
 				SearchResult sr = answer.next();
@@ -192,7 +192,7 @@ public class LDAPUserHandler {
 			SearchControls searchCtls = new SearchControls();
 			searchCtls.setSearchScope(SearchControls.SUBTREE_SCOPE);
 			String searchFilter = String.format("(&(sAMAccountName=%s))", account);
-			String searchBase = cfg.getProperty(AD_BASE_DN);
+			String searchBase = mediaCubeAuthentication.getAdBaseDn();
 			answer = ctx.search(searchBase, searchFilter, searchCtls);
 			if (answer.hasMoreElements()) {
 				result = new UserPrincipal(account);
@@ -244,21 +244,21 @@ public class LDAPUserHandler {
 				memberOf = ListUtils.distinctUnion(memberOf, parentGroups);
 			}
 		}
-		updateMembership(userPrincipal, memberOf, cfg);
+		updateMembership(userPrincipal, memberOf, mediaCubeAuthentication);
 	}
 
-	public void updateMembership(UserPrincipal userPrincipal, List<String> memberOf, Properties cfg) {
+	public void updateMembership(UserPrincipal userPrincipal, List<String> memberOf, MediaCubeAuthentication mediaCubeAuthentication) {
 		if (memberOf == null)
 			return;
 
-		if (checkMembership(cfg, AD_ADMIN_MAP, memberOf)) {
+		if (checkMembership(mediaCubeAuthentication.getAdAdminMap(), memberOf)) {
 			userPrincipal.setAdmin(true);
 			userPrincipal.setSubmitter(true);
 			userPrincipal.setEditor(true);
 		}
-		if (checkMembership(cfg, AD_SUBMITTER_MAP, memberOf))
+		if (checkMembership(mediaCubeAuthentication.getAdSubmitterMap(), memberOf))
 			userPrincipal.setSubmitter(true);
-		if (checkMembership(cfg, AD_EDITOR_MAP, memberOf))
+		if (checkMembership(mediaCubeAuthentication.getAdEditorMap(), memberOf))
 			userPrincipal.setEditor(true);
 	}
 
diff --git a/server/user.jobengine.osgi.server/src/user/jobengine/zk/util/LocalUserHandler.java b/server/user.jobengine.osgi.server/src/user/jobengine/zk/util/LocalUserHandler.java
index 84858f83..973bb43a 100644
--- a/server/user.jobengine.osgi.server/src/user/jobengine/zk/util/LocalUserHandler.java
+++ b/server/user.jobengine.osgi.server/src/user/jobengine/zk/util/LocalUserHandler.java
@@ -1,55 +1,53 @@
 package user.jobengine.zk.util;
 
-import java.util.Arrays;
 import java.util.List;
-import java.util.Properties;
 
 import org.apache.commons.lang.StringUtils;
 
+import user.jobengine.zk.model.MediaCubeAccount;
+import user.jobengine.zk.model.MediaCubeAuthentication;
+
 public class LocalUserHandler {
-	private static final String LOCAL_ACCOUNTS = "local_accounts";
-	private static final String LOCAL_ADMINS = "local_admins";
-	private static final String LOCAL_SUBMITTERS = "local_submitters";
-	private static final String LOCAL_EDITORS = "local_submitters";
+	// private static final String LOCAL_ACCOUNTS = "local_accounts";
+	// private static final String LOCAL_ADMINS = "local_admins";
+	// private static final String LOCAL_SUBMITTERS = "local_submitters";
+	// private static final String LOCAL_EDITORS = "local_submitters";
+	private MediaCubeAuthentication mediaCubeAuthentication;
 	private String account;
 	private String password;
-	private Properties cfg;
+	// private Properties cfg;
 
-	public LocalUserHandler(String account, String password, Properties cfg) {
+	public LocalUserHandler(String account, String password, MediaCubeAuthentication mediaCubeAuthentication) {
 		this.account = account;
 		this.password = password;
-		this.cfg = cfg;
+		this.mediaCubeAuthentication = mediaCubeAuthentication;
 	}
 
-	private boolean authenticateLocal(String account, String password, String users) {
+	private boolean authenticateLocal(String account, String password, MediaCubeAccount user) {
 		if (StringUtils.isBlank(account) || account.length() < 3)
 			return false;
 		if (StringUtils.isBlank(password) || password.length() < 3)
 			return false;
-		if (StringUtils.isBlank(users) || users.length() < 7)
-			return false;
 
-		return users.contains(String.format("%s:%s", account, password));
+		return (account.equals(user.getUser()) && password.equals(user.getPassword()));
 	}
 
 	public UserPrincipal getUserPrincipal() {
-		String users = cfg.getProperty(LOCAL_ACCOUNTS);
+		// String users = cfg.getProperty(LOCAL_ACCOUNTS);
 		UserPrincipal result = null;
-		String[] userList = users.split(",");
-		for (String user : userList) {
-			if (authenticateLocal(account, password, user))
+		List<MediaCubeAccount> userList = mediaCubeAuthentication.getLocalAccounts();
+		for (MediaCubeAccount user : userList) {
+			if (authenticateLocal(account, password, user)) {
 				result = new UserPrincipal(account);
-			else
-				continue;
-			String[] userInfo = user.split(":");
-			if (userInfo.length > 2)
-				result.setEmail(userInfo[2]);
+				result.setEmail(user.getEmail());
+				break;
+			}
 		}
 
 		if (result != null) {
-			boolean isAdmin = isMemberOf(account, cfg.getProperty(LOCAL_ADMINS));
-			boolean isSubmitter = isMemberOf(account, cfg.getProperty(LOCAL_SUBMITTERS));
-			boolean isEditor = isMemberOf(account, cfg.getProperty(LOCAL_EDITORS));
+			boolean isAdmin = isMemberOf(account, mediaCubeAuthentication.getLocalAdmins());
+			boolean isSubmitter = isMemberOf(account, mediaCubeAuthentication.getLocalSubmitters());
+			boolean isEditor = isMemberOf(account, mediaCubeAuthentication.getLocalEditors());
 			result.setAdmin(isAdmin);
 			if (isAdmin || isSubmitter)
 				result.setSubmitter(true);
@@ -59,9 +57,11 @@ public class LocalUserHandler {
 		return result;
 	}
 
-	private boolean isMemberOf(String account, String groupMembers) {
-		List<String> groupMemberList = Arrays.asList(groupMembers.split(","));
-		return groupMemberList.contains(account);
+	private boolean isMemberOf(String account, List<String> groupMembers) {
+		if (groupMembers == null || groupMembers.isEmpty())
+			return false;
+
+		return groupMembers.contains(account);
 	}
 
 }
diff --git a/server/user.jobengine.osgi.server/src/user/jobengine/zk/util/SessionUtil.java b/server/user.jobengine.osgi.server/src/user/jobengine/zk/util/SessionUtil.java
index f1e58d64..1e8ae056 100644
--- a/server/user.jobengine.osgi.server/src/user/jobengine/zk/util/SessionUtil.java
+++ b/server/user.jobengine.osgi.server/src/user/jobengine/zk/util/SessionUtil.java
@@ -46,13 +46,20 @@ public class SessionUtil {
 	public static final String JOBLISTENER = "joblistener";
 	public static final String MENUMODEL = "menuModel";
 	public static final String HISTORY = "history";
+	public static final String NEXIO_DISABLE = "nexio.disable";
+	public static final String GUI_STAT_DISABLE = "gui.statistics.disable";
+	public static final String GUI_HELP_DISABLE = "gui.help.disable";
+	public static final String GUI_EDITOR_DISABLE = "gui.editor.disable";
+	private static MediaCubeConfig mediaCubeConfig = new MediaCubeConfig();
 
 	public static boolean authenticate(String account, String password) {
 		Properties cfg = getConfiguration();
-		LocalUserHandler localUserHandler = new LocalUserHandler(account, password, cfg);
+		// MediaCubeConfig mediaCubeConfig = getMediaCubeConfig();
+		LocalUserHandler localUserHandler = new LocalUserHandler(account, password, mediaCubeConfig.getAuthentication());
 		UserPrincipal userPrincipal = localUserHandler.getUserPrincipal();
+		// Object nexioStatus = System.getProperty(NEXIO);
 		if (userPrincipal == null) {
-			LDAPUserHandler ldapUserHandler = new LDAPUserHandler(account, password, cfg);
+			LDAPUserHandler ldapUserHandler = new LDAPUserHandler(account, password, mediaCubeConfig.getAuthentication());
 			userPrincipal = ldapUserHandler.getUserPrincipal();
 		}
 
@@ -60,6 +67,30 @@ public class SessionUtil {
 			return false;
 
 		setAttribute(USERPRINCIPAL, userPrincipal);
+		try {
+			setAttribute("nexioDisable", Boolean.parseBoolean(System.getProperty(NEXIO_DISABLE)));
+		} catch (Exception e) {
+			logger.catching(e);
+		}
+
+		try {
+			setAttribute("guiStatisticsDisable", Boolean.parseBoolean(System.getProperty(GUI_STAT_DISABLE)));
+		} catch (Exception e) {
+			logger.catching(e);
+		}
+
+		try {
+			setAttribute("guiHelpDisable", Boolean.parseBoolean(System.getProperty(GUI_HELP_DISABLE)));
+		} catch (Exception e) {
+			logger.catching(e);
+		}
+
+		try {
+			setAttribute("guiEditorDisable", Boolean.parseBoolean(System.getProperty(GUI_EDITOR_DISABLE)));
+		} catch (Exception e) {
+			logger.catching(e);
+		}
+
 		return true;
 	}
 
@@ -79,7 +110,8 @@ public class SessionUtil {
 	}
 
 	static public Object getAttribute(String name) {
-		// HttpSession session = (HttpSession) (Executions.getCurrent()).getDesktop().getSession().getNativeSession();
+		// HttpSession session = (HttpSession)
+		// (Executions.getCurrent()).getDesktop().getSession().getNativeSession();
 		Session zkSession = Sessions.getCurrent();
 		if (zkSession == null)
 			return null;
@@ -91,7 +123,8 @@ public class SessionUtil {
 
 	private static Properties getConfiguration() {
 
-		MediaCubeConfig mediaCubeConfig = getMediaCubeConfig();
+		mediaCubeConfig = getMediaCubeConfig();
+		// setMediaCubeAuthentication(mediaCubeConfig.getAuthentication());
 		Properties cfg = new Properties();
 		try (InputStream is = new FileInputStream(System.getProperty(AUTH_LOCATION))) {
 			cfg.load(is);
@@ -238,6 +271,11 @@ public class SessionUtil {
 	public static void logout() {
 		setAttribute(USERPRINCIPAL, null);
 		setAttribute(HISTORY, null);
+		setAttribute(NEXIO_DISABLE, null);
+		setAttribute(GUI_STAT_DISABLE, null);
+		setAttribute(GUI_HELP_DISABLE, null);
+		setAttribute(GUI_EDITOR_DISABLE, null);
+
 		setAttribute(IndexModel.class.getCanonicalName(), null);
 		cleanup();
 	}
@@ -320,7 +358,8 @@ public class SessionUtil {
 	}
 
 	static public void setAttribute(String name, Object obj) {
-		// HttpSession session = (HttpSession) (Executions.getCurrent()).getDesktop().getSession().getNativeSession();
+		// HttpSession session = (HttpSession)
+		// (Executions.getCurrent()).getDesktop().getSession().getNativeSession();
 		Session zkSession = Sessions.getCurrent();
 		if (zkSession == null)
 			return;
@@ -330,5 +369,4 @@ public class SessionUtil {
 		if (session != null)
 			session.setAttribute(name, obj);
 	}
-
 }
\ No newline at end of file
-- 
2.54.0