[KNOWAGE-9621] prevent users from executing documents with an expired license

Author: eng-dedalus

knowage-core/src/main/java/it/eng/knowage/security/ProductProfiler.java

@@ -84,6 +84,22 @@ public static boolean canExecuteDocument(BIObject biObj) {
 		}
 	}
 
+	public static boolean canExecuteDocumentByLicenseExpiredOrAbsent(BIObject biObj) {
+		if (isCommunity) {
+			return true;
+		} else {
+			boolean toReturn = false;
+			try {
+				Method canExecuteDocumentByLicenseExpiredOrAbsentMethod = productProfilerEE.getMethod("canExecuteDocumentByLicenseExpiredOrAbsent", BIObject.class);
+				toReturn = (boolean) canExecuteDocumentByLicenseExpiredOrAbsentMethod.invoke(productProfilerEE, biObj);
+			} catch (Exception e) {
+				logger.error("Error while filtering engines by product: ", e);
+			}
+			return toReturn;
+		}
+
+	}
+
 	public static boolean canCreateDataset(String type, UserProfile profile) {
 		if (isCommunity) {
 			return true;

knowage-core/src/main/java/it/eng/spagobi/api/v3/DocumentExecutionResource.java

@@ -90,14 +90,20 @@ public JSONObject getDocumentTemplates(@PathParam("id") Integer id) throws JSONE
 			LOGGER.error(message);
 			throw new SpagoBIRuntimeException(message);
 		}
-		String userId = (String) userProfile.getUserAttribute("user_id");
-		byte[] temp = null;
-		JSONObject jsonTemplate = null;
+
+		byte[] temp;
+		JSONObject jsonTemplate;
 
 		try {
 			IBIObjectDAO documentDao = DAOFactory.getBIObjectDAO();
 			BIObject document = documentDao.loadBIObjectById(id);
 
+			if (!ProductProfiler.canExecuteDocumentByLicenseExpiredOrAbsent(document)) {
+				String message = "This document cannot be executed within the current product";
+				LOGGER.error(message);
+				throw new SpagoBIRuntimeException(message);
+			}
+
 			if (!ObjectsAccessVerifier.canExec(document, userProfile)) {
 				String message = "User cannot exec the document";
 				LOGGER.error(message);