Mercurial > lada > lada-server
view src/main/java/de/intevation/lada/rest/SNetzBetreiberService.java @ 206:ae56f0a326dc
Added authorization to 'netzbetreiber' service.
author | Raimund Renkert <rrenkert@intevation.de> |
---|---|
date | Tue, 02 Jul 2013 13:10:45 +0200 |
parents | 42e0085692df |
children | a305412206a3 |
line wrap: on
line source
package de.intevation.lada.rest; import java.util.ArrayList; import java.util.logging.Logger; import javax.faces.bean.RequestScoped; import javax.inject.Inject; import javax.inject.Named; import javax.ws.rs.GET; import javax.ws.rs.Path; import javax.ws.rs.PathParam; import javax.ws.rs.Produces; import javax.ws.rs.core.Context; import javax.ws.rs.core.HttpHeaders; import de.intevation.lada.authentication.Authentication; import de.intevation.lada.authentication.AuthenticationException; import de.intevation.lada.authentication.AuthenticationResponse; import de.intevation.lada.data.QueryBuilder; import de.intevation.lada.data.Repository; import de.intevation.lada.model.SNetzBetreiber; /** * This class produces a RESTful service to read the contents of SNetzbetreiber table. * * @author <a href="mailto:torsten.irlaender@intevation.de">Torsten Irländer</a> */ @Path("/netzbetreiber") @RequestScoped public class SNetzBetreiberService { /** * The Repository for SDatenbasis. */ @Inject @Named("readonlyrepository") private Repository repository; @Inject @Named("ldapauth") private Authentication authentication; /** * The logger for this class */ @Inject private Logger logger; /** * Request all SDatenbasis objects. * * @return JSON Object via Rest service */ @GET @Produces("text/json") public Response findAll(@Context HttpHeaders headers) { try { AuthenticationResponse auth = authentication.authorizedGroups(headers); QueryBuilder<SNetzBetreiber> builder = new QueryBuilder<SNetzBetreiber>( repository.getEntityManager(), SNetzBetreiber.class); builder.or("netzbetreiberId", auth.getNetzbetreiber()); return repository.filter(builder.getQuery()); } catch(AuthenticationException ae) { return new Response(false, 699, new ArrayList<SNetzBetreiber>()); } } /** * Request a single SDatenbasis via its id. * * @param id The mst_id * @return JSON Object via REST service. */ @GET @Path("/{id}") @Produces("text/json") public Response findById( @PathParam("id") String id, @Context HttpHeaders headers) { try { AuthenticationResponse auth = authentication.authorizedGroups(headers); if (auth.getNetzbetreiber().contains(id)) { return repository.findById(SNetzBetreiber.class, id); } return new Response(false, 698, new ArrayList<SNetzBetreiber>()); } catch(AuthenticationException ae) { return new Response(false, 699, new ArrayList<SNetzBetreiber>()); } } }