Mercurial > lada > lada-server
changeset 235:01148d036b9b
Added new module to authorize operations on objects.
author | Raimund Renkert <rrenkert@intevation.de> |
---|---|
date | Fri, 05 Jul 2013 14:59:27 +0200 (2013-07-05) |
parents | 0d545e6d1885 |
children | 2bf8ef754356 |
files | src/main/java/de/intevation/lada/auth/Authorization.java src/main/java/de/intevation/lada/auth/DataAuthorization.java |
diffstat | 2 files changed, 54 insertions(+), 0 deletions(-) [+] |
line wrap: on
line diff
--- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/src/main/java/de/intevation/lada/auth/Authorization.java Fri Jul 05 14:59:27 2013 +0200 @@ -0,0 +1,7 @@ +package de.intevation.lada.auth; + + +public interface Authorization +{ + public boolean isReadOnly(String id); +}
--- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/src/main/java/de/intevation/lada/auth/DataAuthorization.java Fri Jul 05 14:59:27 2013 +0200 @@ -0,0 +1,47 @@ +package de.intevation.lada.auth; + +import java.util.List; + +import javax.enterprise.context.ApplicationScoped; +import javax.inject.Inject; +import javax.inject.Named; + +import de.intevation.lada.data.QueryBuilder; +import de.intevation.lada.data.Repository; +import de.intevation.lada.model.LMessung; +import de.intevation.lada.rest.Response; + +@ApplicationScoped +@Named("dataauthorization") +public class DataAuthorization +implements Authorization +{ + @Inject + @Named("readonlyrepository") + private Repository repository; + + /** + * Determine if the LProbe identified by probeId is writable for the user. + * + * @param probeId The probe id. + */ + public boolean isReadOnly(String probeId) { + QueryBuilder<LMessung> builder = + new QueryBuilder<LMessung>( + repository.getEntityManager(), + LMessung.class); + builder.and("probeId", probeId); + Response response = repository.filter(builder.getQuery()); + @SuppressWarnings("unchecked") + List<LMessung> messungen = (List<LMessung>) response.getData(); + if (messungen.isEmpty()) { + return false; + } + for(LMessung messung : messungen) { + if (messung.isFertig()) { + return true; + } + } + return false; + } +}