ca.uhn.fhir.rest.server.interceptor.auth.OperationRule Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of hapi-fhir-android Show documentation
There is a newer version: 7.6.1
package ca.uhn.fhir.rest.server.interceptor.auth;

/*
 * #%L
 * HAPI FHIR - Core Library
 * %%
 * Copyright (C) 2014 - 2016 University Health Network
 * %%
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 * 
 * http://www.apache.org/licenses/LICENSE-2.0
 * 
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 * #L%
 */

import java.util.HashSet;
import java.util.List;

import org.hl7.fhir.instance.model.api.IBaseResource;
import org.hl7.fhir.instance.model.api.IIdType;

import ca.uhn.fhir.context.FhirContext;
import ca.uhn.fhir.rest.api.RestOperationTypeEnum;
import ca.uhn.fhir.rest.method.RequestDetails;
import ca.uhn.fhir.rest.server.interceptor.auth.AuthorizationInterceptor.Verdict;

class OperationRule extends BaseRule implements IAuthRule {

	public OperationRule(String theRuleName) {
		super(theRuleName);
	}

	private String myOperationName;
	private boolean myAppliesToServer;
	private HashSet> myAppliesToTypes;
	private List myAppliesToIds;
	private HashSet> myAppliesToInstancesOfType;

	/**
	 * Must include the leading $
	 */
	public void setOperationName(String theOperationName) {
		myOperationName = theOperationName;
	}

	public String getOperationName() {
		return myOperationName;
	}

	@Override
	public Verdict applyRule(RestOperationTypeEnum theOperation, RequestDetails theRequestDetails, IBaseResource theInputResource, IIdType theInputResourceId, IBaseResource theOutputResource, IRuleApplier theRuleApplier) {
		FhirContext ctx = theRequestDetails.getServer().getFhirContext();

		boolean applies = false;
		switch (theOperation) {
		case EXTENDED_OPERATION_SERVER:
			if (myAppliesToServer) {
				applies = true;
			}
			break;
		case EXTENDED_OPERATION_TYPE:
			if (myAppliesToTypes != null) {
				// TODO: Convert to a map of strings and keep the result
				for (Class next : myAppliesToTypes) {
					String resName = ctx.getResourceDefinition(next).getName();
					if (resName.equals(theRequestDetails.getResourceName())) {
						applies = true;
						break;
					}
				}
			}
			break;
		case EXTENDED_OPERATION_INSTANCE:
			if (theInputResourceId != null) {
				if (myAppliesToIds != null) {
					String instanceId = theInputResourceId.toUnqualifiedVersionless().getValue();
					for (IIdType next : myAppliesToIds) {
						if (next.toUnqualifiedVersionless().getValue().equals(instanceId)) {
							applies = true;
							break;
						}
					}
				}
				if (myAppliesToInstancesOfType != null) {
					// TODO: Convert to a map of strings and keep the result
					for (Class next : myAppliesToInstancesOfType) {
						String resName = ctx.getResourceDefinition(next).getName();
						if (resName.equals(theInputResourceId.getResourceType())) {
							applies = true;
							break;
						}
					}
				}
			}
			break;
		default:
			return null;
		}

		if (!applies) {
			return null;
		}

		if (myOperationName != null && !myOperationName.equals(theRequestDetails.getOperation())) {
			return null;
		}

		return newVerdict();
	}

	public void appliesToServer() {
		myAppliesToServer = true;
	}

	public void appliesToTypes(HashSet> theAppliesToTypes) {
		myAppliesToTypes = theAppliesToTypes;
	}

	public void appliesToInstances(List theAppliesToIds) {
		myAppliesToIds = theAppliesToIds;
	}

	public void appliesToInstancesOfType(HashSet> theAppliesToTypes) {
		myAppliesToInstancesOfType = theAppliesToTypes;
	}

}