* Licensed to the Apache Software Foundation (ASF) under one

* or more contributor license agreements.  See the NOTICE file

* distributed with this work for additional information

* regarding copyright ownership.  The ASF licenses this file

* to you under the Apache License, Version 2.0 (the

* "License"); you may not use this file except in compliance

* with the License.  You may obtain a copy of the License at

*

*   http://www.apache.org/licenses/LICENSE-2.0

*

* Unless required by applicable law or agreed to in writing,

* software distributed under the License is distributed on an

* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY

* KIND, either express or implied.  See the License for the

* specific language governing permissions and limitations

* under the License.

*/

    public static UserTO getSampleTO(final String email) {

        UserTO userTO = new UserTO();

        userTO.setPassword("password123");

        userTO.setUsername(email);

        AttributeTO fullnameTO = new AttributeTO();

        fullnameTO.setSchema("fullname");

        fullnameTO.addValue(email);

        userTO.addAttribute(fullnameTO);

        AttributeTO firstnameTO = new AttributeTO();

        firstnameTO.setSchema("firstname");

        firstnameTO.addValue(email);

        userTO.addAttribute(firstnameTO);

        AttributeTO surnameTO = new AttributeTO();

        surnameTO.setSchema("surname");

        surnameTO.addValue("Surname");

        userTO.addAttribute(surnameTO);

        AttributeTO typeTO = new AttributeTO();

        typeTO.setSchema("type");

        typeTO.addValue("a type");

        userTO.addAttribute(typeTO);

        AttributeTO userIdTO = new AttributeTO();

        userIdTO.setSchema("userId");

        userIdTO.addValue(email);

        userTO.addAttribute(userIdTO);

        AttributeTO emailTO = new AttributeTO();

        emailTO.setSchema("email");

        emailTO.addValue(email);

        userTO.addAttribute(emailTO);

        AttributeTO loginDateTO = new AttributeTO();

        loginDateTO.setSchema("loginDate");

        DateFormat sdf = new SimpleDateFormat("yyyy-MM-dd");

        loginDateTO.addValue(sdf.format(new Date()));

        userTO.addAttribute(loginDateTO);

        // add a derived attribute

        AttributeTO cnTO = new AttributeTO();

        cnTO.setSchema("cn");

        userTO.addDerivedAttribute(cnTO);

        // add a virtual attribute

        AttributeTO virtualdata = new AttributeTO();

        virtualdata.setSchema("virtualdata");

        virtualdata.addValue("virtualvalue");

        userTO.addVirtualAttribute(virtualdata);

        return userTO;

    }

    @Test

    public void selfRead() {

        PreemptiveAuthHttpRequestFactory requestFactory = ((PreemptiveAuthHttpRequestFactory) restTemplate.

                getRequestFactory());

        ((DefaultHttpClient) requestFactory.getHttpClient()).getCredentialsProvider().setCredentials(

                requestFactory.getAuthScope(), new UsernamePasswordCredentials("user1", "password"));

        try {

            restTemplate.getForObject(BASE_URL + "user/read/{userId}.json", UserTO.class, 1);

            fail();

        } catch (HttpClientErrorException e) {

            assertEquals(HttpStatus.FORBIDDEN, e.getStatusCode());

        }

        UserTO userTO = restTemplate.getForObject(BASE_URL + "user/read/self", UserTO.class);

        assertEquals("user1", userTO.getUsername());

    }

    @Test

    public void createUserWithNoPropagation() {

        // get task list

        List<PropagationTaskTO> tasks = Arrays.asList(restTemplate.getForObject(BASE_URL + "task/propagation/list",

                PropagationTaskTO[].class));

        assertNotNull(tasks);

        assertFalse(tasks.isEmpty());

        // get max task id

        long maxId = Long.MIN_VALUE;

        for (PropagationTaskTO task : tasks) {

            if (task.getId() > maxId) {

                maxId = task.getId();

            }

        }

        // create a new user

        UserTO userTO = new UserTO();

        userTO.setUsername("xxx@xxx.xxx");

        AttributeTO attributeTO = new AttributeTO();

        attributeTO.setSchema("firstname");

        attributeTO.addValue("xxx");

        userTO.addAttribute(attributeTO);

        attributeTO = new AttributeTO();

        attributeTO.setSchema("surname");

        attributeTO.addValue("xxx");

        userTO.addAttribute(attributeTO);

        attributeTO = new AttributeTO();

        attributeTO.setSchema("userId");

        attributeTO.addValue("xxx@xxx.xxx");

        userTO.addAttribute(attributeTO);

        attributeTO = new AttributeTO();

        attributeTO.setSchema("fullname");

        attributeTO.addValue("xxx");

        userTO.addAttribute(attributeTO);

        userTO.setPassword("password123");

        userTO.addResource("ws-target-resource-nopropagation");

        restTemplate.postForObject(BASE_URL + "user/create", userTO, UserTO.class);

        // get the new task list

        tasks = Arrays.asList(restTemplate.getForObject(BASE_URL + "task/propagation/list", PropagationTaskTO[].class));

        assertNotNull(tasks);

        assertFalse(tasks.isEmpty());

        // get max task id

        long newMaxId = Long.MIN_VALUE;

        for (PropagationTaskTO task : tasks) {

            if (task.getId() > newMaxId) {

                newMaxId = task.getId();

            }

        }

        assertTrue(newMaxId > maxId);

        // get last task

        PropagationTaskTO taskTO = restTemplate.getForObject(BASE_URL + "task/read/{taskId}", PropagationTaskTO.class,

                newMaxId);

        assertNotNull(taskTO);

        assertTrue(taskTO.getExecutions().isEmpty());

    }

    @Test

    /*

     * This test has been introduced to verify and solve the following issue:

     * http://code.google.com/p/syncope/issues/detail?id=172. Creations of a new user without having a global password

     * policy stored into the local repository used to fail with a null pointer exception. This bug has been fixed

     * introducing a simple control.

     */

    public void issue172() {

        PolicyTO policyTO = restTemplate.getForObject(BASE_URL + "policy/read/{id}", PasswordPolicyTO.class, 2L);

        assertNotNull(policyTO);

        restTemplate.getForObject(BASE_URL + "policy/delete/{id}", PasswordPolicyTO.class, 2L);

        UserTO userTO = new UserTO();

        userTO.setUsername("issue172@syncope.apache.org");

        userTO.setPassword("password");

        AttributeTO attributeTO = new AttributeTO();

        attributeTO.setSchema("firstname");

        attributeTO.addValue("issue172");

        userTO.addAttribute(attributeTO);

        attributeTO = new AttributeTO();

        attributeTO.setSchema("surname");

        attributeTO.addValue("issue172");

        userTO.addAttribute(attributeTO);

        attributeTO = new AttributeTO();

        attributeTO.setSchema("userId");

        attributeTO.addValue("issue172@syncope.apache.org");

        userTO.addAttribute(attributeTO);

        attributeTO = new AttributeTO();

        attributeTO.setSchema("fullname");

        attributeTO.addValue("issue172");

        userTO.addAttribute(attributeTO);

        restTemplate.postForObject(BASE_URL + "user/create", userTO, UserTO.class);

        policyTO = restTemplate.postForObject(BASE_URL + "policy/password/create", policyTO, PasswordPolicyTO.class);

        assertNotNull(policyTO);

    }

    @Test

    public void issue186() {

        // 1. create an user with strict mandatory attributes only

        UserTO userTO = new UserTO();

        userTO.setUsername("issue186@syncope.apache.org");

        userTO.setPassword("password");

        AttributeTO attributeTO = new AttributeTO();

        attributeTO.setSchema("userId");

        attributeTO.addValue("issue186@syncope.apache.org");

        userTO.addAttribute(attributeTO);

        attributeTO = new AttributeTO();

        attributeTO.setSchema("fullname");

        attributeTO.addValue("issue186");

        userTO.addAttribute(attributeTO);

        attributeTO = new AttributeTO();

        attributeTO.setSchema("surname");

        attributeTO.addValue("issue186");

        userTO.addAttribute(attributeTO);

        userTO = restTemplate.postForObject(BASE_URL + "user/create", userTO, UserTO.class);

        assertNotNull(userTO);

        assertTrue(userTO.getResources().isEmpty());

        // 2. update assigning a resource forcing mandatory constraints: must

        // fail with RequiredValuesMissing

        UserMod userMod = new UserMod();

        userMod.setId(userTO.getId());

        userMod.setPassword("newPassword");

        userMod.addResourceToBeAdded("ws-target-resource-2");

        SyncopeClientException sce = null;

        try {

            userTO = restTemplate.postForObject(BASE_URL + "user/update", userMod, UserTO.class);

        } catch (SyncopeClientCompositeErrorException scce) {

            sce = scce.getException(SyncopeClientExceptionType.RequiredValuesMissing);

        }

        assertNotNull(sce);

        // 3. update assigning a resource NOT forcing mandatory constraints

        // AND primary: must fail with PropagationException

        userMod = new UserMod();

        userMod.setId(userTO.getId());

        userMod.setPassword("newPassword");

        userMod.addResourceToBeAdded("ws-target-resource-1");

        sce = null;

        try {

            userTO = restTemplate.postForObject(BASE_URL + "user/update", userMod, UserTO.class);

        } catch (SyncopeClientCompositeErrorException scce) {

            sce = scce.getException(SyncopeClientExceptionType.Propagation);

        }

        assertNotNull(sce);

        // 4. update assigning a resource NOT forcing mandatory constraints

        // BUT not primary: must succeed

        userMod = new UserMod();

        userMod.setId(userTO.getId());

        userMod.setPassword("newPassword");

        userMod.addResourceToBeAdded("resource-db");

        sce = null;

        try {

            userTO = restTemplate.postForObject(BASE_URL + "user/update", userMod, UserTO.class);

        } catch (SyncopeClientCompositeErrorException scce) {

            sce = scce.getException(SyncopeClientExceptionType.Propagation);

        }

        assertNull(sce);

    }

    @Test

    public void testMandatoryContraintsUserCreation() {

        UserTO userTO = getSampleTO("issue183@apache.org");

        userTO.addResource("ws-target-resource-2");

        userTO.setPassword("newPassword");

        AttributeTO type = null;

        for (AttributeTO attr : userTO.getAttributes()) {

            if ("type".equals(attr.getSchema())) {

                type = attr;

            }

        }

        assertNotNull(type);

        userTO.removeAttribute(type);

        SyncopeClientException sce = null;

        try {

            userTO = restTemplate.postForObject(BASE_URL + "user/create", userTO, UserTO.class);

        } catch (SyncopeClientCompositeErrorException scce) {

            sce = scce.getException(SyncopeClientExceptionType.RequiredValuesMissing);

        }

        assertNotNull(sce);

        userTO.addAttribute(type);

        userTO = restTemplate.postForObject(BASE_URL + "user/create", userTO, UserTO.class);

        assertNotNull(userTO);

    }

    @Test

    public void issue147() {

        // 1. create an user without role nor resources

        UserTO userTO = getSampleTO("issue147@tirasa.net");

        userTO = restTemplate.postForObject(BASE_URL + "user/create", userTO, UserTO.class);

        assertNotNull(userTO);

        assertTrue(userTO.getResources().isEmpty());

        // 2. try to update by adding a resource, but no password: must fail

        UserMod userMod = new UserMod();

        userMod.setId(userTO.getId());

        userMod.addResourceToBeAdded("ws-target-resource-2");

        SyncopeClientException sce = null;

        try {

            userTO = restTemplate.postForObject(BASE_URL + "user/update", userMod, UserTO.class);

        } catch (SyncopeClientCompositeErrorException scce) {

            sce = scce.getException(SyncopeClientExceptionType.RequiredValuesMissing);

        }

        assertNotNull(sce);

        // 3. provide password: now update must work

        userMod.setPassword("newPassword");

        userTO = restTemplate.postForObject(BASE_URL + "user/update", userMod, UserTO.class);

        assertNotNull(userTO);

        assertEquals(1, userTO.getResources().size());

    }

    @Test

    public void createUserWithDbPropagation() {

        UserTO userTO = new UserTO();

        userTO.setPassword("password");

        userTO.setUsername("yyy@yyy.yyy");

        AttributeTO attributeTO = new AttributeTO();

        attributeTO.setSchema("firstname");

        attributeTO.addValue("yyy");

        userTO.addAttribute(attributeTO);

        attributeTO = new AttributeTO();

        attributeTO.setSchema("surname");

        attributeTO.addValue("yyy");

        userTO.addAttribute(attributeTO);

        attributeTO = new AttributeTO();

        attributeTO.setSchema("userId");

        attributeTO.addValue("yyy@yyy.yyy");

        userTO.addAttribute(attributeTO);

        attributeTO = new AttributeTO();

        attributeTO.setSchema("fullname");

        attributeTO.addValue("yyy");

        userTO.addAttribute(attributeTO);

        userTO.addResource("resource-testdb");

        userTO = restTemplate.postForObject(BASE_URL + "user/create", userTO, UserTO.class);

        assertNotNull(userTO);

        assertEquals(1, userTO.getPropagationTOs().size());

        assertTrue(userTO.getPropagationTOs().get(0).getStatus().isSuccessful());

    }

    @Test(expected = SyncopeClientCompositeErrorException.class)

    public void createWithInvalidPassword() {

        UserTO userTO = getSampleTO("invalidpasswd@syncope.apache.org");

        userTO.setPassword("pass");

        restTemplate.postForObject(BASE_URL + "user/create", userTO, UserTO.class);

    }

    @Test(expected = SyncopeClientCompositeErrorException.class)

    public void createWithInvalidUsername() {

        UserTO userTO = getSampleTO("invalidusername@syncope.apache.org");

        userTO.setUsername("us");

        MembershipTO membershipTO = new MembershipTO();

        membershipTO.setRoleId(7L);

        userTO.addMembership(membershipTO);

        restTemplate.postForObject(BASE_URL + "user/create", userTO, UserTO.class);

    }

    @Test(expected = SyncopeClientCompositeErrorException.class)

    public void createWithInvalidPasswordByRes() {

        UserTO userTO = getSampleTO("invalidPwdByRes@passwd.com");

        // configured to be minLength=16

        userTO.setPassword("password1");

        userTO.setResources(Collections.singleton("ws-target-resource-nopropagation"));

        restTemplate.postForObject(BASE_URL + "user/create", userTO, UserTO.class);

    }

    @Test(expected = SyncopeClientCompositeErrorException.class)

    public void createWithInvalidPasswordByRole() {

        UserTO userTO = getSampleTO("invalidPwdByRole@passwd.com");

        // configured to be minLength=16

        userTO.setPassword("password1");

        final MembershipTO membership = new MembershipTO();

        membership.setRoleId(8L);

        userTO.addMembership(membership);

        restTemplate.postForObject(BASE_URL + "user/create", userTO, UserTO.class);

    }

    @Test(expected = SyncopeClientCompositeErrorException.class)

    public void createWithException() {

        AttributeTO attributeTO = new AttributeTO();

        attributeTO.setSchema("userId");

        attributeTO.addValue("userId@nowhere.org");

        UserTO newUserTO = new UserTO();

        newUserTO.addAttribute(attributeTO);

        restTemplate.postForObject(BASE_URL + "user/create", newUserTO, UserTO.class);

    }

    @Test

    public void create() {

        // get task list

        List<PropagationTaskTO> tasks =

                Arrays.asList(restTemplate.getForObject(BASE_URL + "task/propagation/list", PropagationTaskTO[].class));

        assertNotNull(tasks);

        assertFalse(tasks.isEmpty());

        // get max task id

        long maxId = Long.MIN_VALUE;

        for (PropagationTaskTO task : tasks) {

            if (task.getId() > maxId) {

                maxId = task.getId();

            }

        }

        PropagationTaskTO taskTO =

                restTemplate.getForObject(BASE_URL + "task/read/{taskId}", PropagationTaskTO.class, maxId);

        assertNotNull(taskTO);

        int maxTaskExecutions = taskTO.getExecutions().size();

        UserTO userTO = getSampleTO("a.b@c.com");

        // add a membership

        MembershipTO membershipTO = new MembershipTO();

        membershipTO.setRoleId(8L);

        userTO.addMembership(membershipTO);

        // add an attribute with no values: must be ignored

        AttributeTO nullValueAttrTO = new AttributeTO();

        nullValueAttrTO.setSchema("subscriptionDate");

        nullValueAttrTO.setValues(null);

        membershipTO.addAttribute(nullValueAttrTO);

        // add an attribute with a non-existing schema: must be ignored

        AttributeTO attrWithInvalidSchemaTO = new AttributeTO();

        attrWithInvalidSchemaTO.setSchema("invalid schema");

        attrWithInvalidSchemaTO.addValue("a value");

        userTO.addAttribute(attrWithInvalidSchemaTO);

        // add an attribute with null value: must be ignored

        nullValueAttrTO = new AttributeTO();

        nullValueAttrTO.setSchema("activationDate");

        nullValueAttrTO.addValue(null);

        userTO.addAttribute(nullValueAttrTO);

        // 1. create user

        UserTO newUserTO = restTemplate.postForObject(BASE_URL + "user/create", userTO, UserTO.class);

        assertNotNull(newUserTO);

        assertFalse(newUserTO.getAttributes().contains(attrWithInvalidSchemaTO));

        // check for changePwdDate

        assertNotNull(newUserTO.getCreationDate());

        // 2. check for virtual attribute value

        newUserTO = restTemplate.getForObject(BASE_URL + "user/read/{userId}.json", UserTO.class, newUserTO.getId());

        assertNotNull(newUserTO);

        assertNotNull(newUserTO.getVirtualAttributeMap());

        assertNotNull(newUserTO.getVirtualAttributeMap().get("virtualdata").getValues());

        assertFalse(newUserTO.getVirtualAttributeMap().get("virtualdata").getValues().isEmpty());

        assertEquals("virtualvalue", newUserTO.getVirtualAttributeMap().get("virtualdata").getValues().get(0));

        // get the new task list

        tasks = Arrays.asList(restTemplate.getForObject(BASE_URL + "task/propagation/list", PropagationTaskTO[].class));

        assertNotNull(tasks);

        assertFalse(tasks.isEmpty());

        // get max task id

        long newMaxId = Long.MIN_VALUE;

        for (PropagationTaskTO task : tasks) {

            if (task.getId() > newMaxId) {

                newMaxId = task.getId();

            }

        }

        // default configuration for ws-target-resource2:

        //             only failed executions have to be registered

        // --> no more tasks/executions should be added

        assertEquals(newMaxId, maxId);

        // get last task

        taskTO = restTemplate.getForObject(BASE_URL + "task/read/{taskId}", PropagationTaskTO.class, newMaxId);

        assertNotNull(taskTO);

        assertEquals(maxTaskExecutions, taskTO.getExecutions().size());

        // 3. verify password

        Boolean verify = restTemplate.

                getForObject(BASE_URL + "user/verifyPassword/{username}.json?password=password123",

                Boolean.class, newUserTO.getUsername());

        assertTrue(verify);

        verify = restTemplate.getForObject(BASE_URL + "user/verifyPassword/{username}.json?password=passwordXX",

                Boolean.class, newUserTO.getUsername());

        assertFalse(verify);

        // 4. try (and fail) to create another user with same (unique) values

        userTO = getSampleTO("pippo@c.com");

        for (AttributeTO attr : userTO.getAttributes()) {

            if ("userId".equals(attr.getSchema())) {

                attr.getValues().clear();

                attr.addValue("a.b@c.com");

            }

        }

        SyncopeClientException sce = null;

        try {

            restTemplate.postForObject(BASE_URL + "user/create", userTO, UserTO.class);

        } catch (SyncopeClientCompositeErrorException e) {

            sce = e.getException(SyncopeClientExceptionType.DataIntegrityViolation);

        }

        assertNotNull(sce);

    }

    @Test

    public void createWithRequiredValueMissing() {

        UserTO userTO = getSampleTO("a.b@c.it");

        AttributeTO type = null;

        for (AttributeTO attr : userTO.getAttributes()) {

            if ("type".equals(attr.getSchema())) {

                type = attr;

            }

        }

        assertNotNull(type);

        userTO.removeAttribute(type);

        MembershipTO membershipTO = new MembershipTO();

        membershipTO.setRoleId(8L);

        userTO.addMembership(membershipTO);

        SyncopeClientCompositeErrorException ex = null;

        try {

            // 1. create user without type (mandatory by UserSchema)

            restTemplate.postForObject(BASE_URL + "user/create", userTO, UserTO.class);

        } catch (SyncopeClientCompositeErrorException e) {

            ex = e;

        }

        assertNotNull(ex);

        assertNotNull(ex.getException(SyncopeClientExceptionType.RequiredValuesMissing));

        AttributeTO fType = new AttributeTO();

        fType.setSchema("type");

        fType.addValue("F");

        userTO.addAttribute(fType);

        AttributeTO surname = null;

        for (AttributeTO attributeTO : userTO.getAttributes()) {

            if ("surname".equals(attributeTO.getSchema())) {

                surname = attributeTO;

            }

        }

        userTO.removeAttribute(surname);

        // 2. create user without surname (mandatory when type == 'F')

        ex = null;

        try {

            restTemplate.postForObject(BASE_URL + "user/create", userTO, UserTO.class);

        } catch (SyncopeClientCompositeErrorException e) {

            ex = e;

        }

        assertNotNull(ex);

        assertNotNull(ex.getException(SyncopeClientExceptionType.RequiredValuesMissing));

    }

    @Test

    public void createWithReject() {

        Assume.assumeTrue(SpringContextInitializer.isActivitiConfigured());

        UserTO userTO = getSampleTO("createWithReject@syncope.apache.org");

        userTO.addResource("resource-testdb");

        // User with role 9 are defined in workflow as subject to approval

        MembershipTO membershipTO = new MembershipTO();

        membershipTO.setRoleId(9L);

        userTO.addMembership(membershipTO);

        // 1. create user with role 9

        userTO = restTemplate.postForObject(BASE_URL + "user/create", userTO, UserTO.class);

        assertNotNull(userTO);

        assertEquals(1, userTO.getMemberships().size());

        assertEquals(9, userTO.getMemberships().get(0).getRoleId());

        assertEquals("createApproval", userTO.getStatus());

        // 2. request if there is any pending task for user just created

        WorkflowFormTO form = restTemplate.getForObject(BASE_URL + "user/workflow/form/{userId}", WorkflowFormTO.class,

                userTO.getId());

        assertNotNull(form);

        assertNotNull(form.getUserId());

        assertEquals(userTO.getId(), form.getUserId());

        assertNotNull(form.getTaskId());

        assertNull(form.getOwner());

        // 3. claim task from user1, not in role 7 (designated for approval in workflow definition): fail

        PreemptiveAuthHttpRequestFactory requestFactory = ((PreemptiveAuthHttpRequestFactory) restTemplate.

                getRequestFactory());

        ((DefaultHttpClient) requestFactory.getHttpClient()).getCredentialsProvider().setCredentials(

                requestFactory.getAuthScope(), new UsernamePasswordCredentials("user1", "password"));

        SyncopeClientException sce = null;

        try {

            restTemplate.getForObject(BASE_URL + "user/workflow/form/claim/{taskId}", WorkflowFormTO.class, form.

                    getTaskId());

        } catch (SyncopeClientCompositeErrorException scce) {

            sce = scce.getException(SyncopeClientExceptionType.Workflow);

        }

        assertNotNull(sce);

        // 4. claim task from user4, in to role 7

        ((DefaultHttpClient) requestFactory.getHttpClient()).getCredentialsProvider().setCredentials(

                requestFactory.getAuthScope(), new UsernamePasswordCredentials("user4", "password"));

        form = restTemplate.getForObject(BASE_URL + "user/workflow/form/claim/{taskId}", WorkflowFormTO.class, form.

                getTaskId());

        assertNotNull(form);

        assertNotNull(form.getTaskId());

        assertNotNull(form.getOwner());

        // 5. reject user

        Map<String, WorkflowFormPropertyTO> props = form.getPropertyMap();

        props.get("approve").setValue(Boolean.FALSE.toString());

        props.get("rejectReason").setValue("I don't like him.");

        form.setProperties(props.values());

        userTO = restTemplate.postForObject(BASE_URL + "user/workflow/form/submit", form, UserTO.class);

        assertNotNull(userTO);

        assertEquals("rejected", userTO.getStatus());

        // 6. check that rejected user was not propagated to external resource (SYNCOPE-364)

        JdbcTemplate jdbcTemplate = new JdbcTemplate(testDataSource);

        Exception exception = null;

        try {

            jdbcTemplate.queryForObject("SELECT id FROM test WHERE id=?",

                    new String[] {userTO.getUsername()}, Integer.class);

        } catch (EmptyResultDataAccessException e) {

            exception = e;

        }

        assertNotNull(exception);

        // reset admin credentials for restTemplate

        super.resetRestTemplate();

    }

    @Test

    public void createWithApproval() {

        Assume.assumeTrue(SpringContextInitializer.isActivitiConfigured());

        JdbcTemplate jdbcTemplate = new JdbcTemplate(testDataSource);

        UserTO userTO = getSampleTO("createWithApproval@syncope.apache.org");

        userTO.addResource("resource-testdb");

        // User with role 9 are defined in workflow as subject to approval

        MembershipTO membershipTO = new MembershipTO();

        membershipTO.setRoleId(9L);

        userTO.addMembership(membershipTO);

        // 1. create user with role 9 (and verify that no propagation occurred)

        userTO = restTemplate.postForObject(BASE_URL + "user/create", userTO, UserTO.class);

        assertNotNull(userTO);

        assertEquals(1, userTO.getMemberships().size());

        assertEquals(9, userTO.getMemberships().get(0).getRoleId());

        assertEquals("createApproval", userTO.getStatus());

        assertEquals(Collections.singleton("resource-testdb"), userTO.getResources());

        assertTrue(userTO.getPropagationTOs().isEmpty());

        Exception exception = null;

        try {

            jdbcTemplate.queryForInt("SELECT id FROM test WHERE id=?", userTO.getUsername());

        } catch (EmptyResultDataAccessException e) {

            exception = e;

        }

        assertNotNull(exception);

        // 2. request if there is any pending form for user just created

        List<WorkflowFormTO> forms = Arrays.asList(restTemplate.getForObject(

                BASE_URL + "user/workflow/form/list", WorkflowFormTO[].class));

        assertNotNull(forms);

        assertEquals(1, forms.size());

        WorkflowFormTO form = restTemplate.getForObject(BASE_URL + "user/workflow/form/{userId}", WorkflowFormTO.class,

                userTO.getId());

        assertNotNull(form);

        assertNotNull(form.getTaskId());

        assertNull(form.getOwner());

        // 4. claim task (from admin)

        form = restTemplate.getForObject(BASE_URL + "user/workflow/form/claim/{taskId}", WorkflowFormTO.class, form.

                getTaskId());

        assertNotNull(form);

        assertNotNull(form.getTaskId());

        assertNotNull(form.getOwner());

        // 5. approve user (and verify that propagation occurred)

        Map<String, WorkflowFormPropertyTO> props = form.getPropertyMap();

        props.get("approve").setValue(Boolean.TRUE.toString());

        form.setProperties(props.values());

        userTO = restTemplate.postForObject(BASE_URL + "user/workflow/form/submit", form, UserTO.class);

        assertNotNull(userTO);

        assertEquals("active", userTO.getStatus());

        assertEquals(Collections.singleton("resource-testdb"), userTO.getResources());

        exception = null;

        try {

            final String username = jdbcTemplate.queryForObject("SELECT id FROM test WHERE id=?", String.class, userTO.

                    getUsername());

            assertEquals(userTO.getUsername(), username);

        } catch (EmptyResultDataAccessException e) {

            exception = e;

        }

        assertNull(exception);

        // 6. update user

        UserMod userMod = new UserMod();

        userMod.setId(userTO.getId());

        userMod.setPassword("anotherPassword123");

        userTO = restTemplate.postForObject(BASE_URL + "user/update", userMod, UserTO.class);

        assertNotNull(userTO);

    }

    @Test

    public void delete() {