org.daisy.pipeline.webservice.impl.AdminResource Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of webservice Show documentation

There is a newer version: 3.6.0

package org.daisy.pipeline.webservice.impl;

import org.daisy.pipeline.clients.Client;
import org.daisy.pipeline.clients.Client.Role;

import com.google.common.base.Optional;

public class AdminResource extends AuthenticatedResource {
        private boolean isAuthorized = false;

        @Override
        public void doInit() {
                super.doInit();
                // Note: if authentication is not enabled, then all requests can be considered automatically authorized
                isAuthorized = (!webservice().getConfiguration()
                                .isAuthenticationEnabled())
                                || (super.isAuthenticated() && authorizeAsAdmin());
        }

        private boolean authorizeAsAdmin() {
                String id = getQuery().getFirstValue("authid");
                Optional client = webservice().getStorage().getClientStorage().get(id);
                return client.isPresent()&&client.get().getRole()==Role.ADMIN;
        }

        public boolean isAuthorized() {
                return isAuthorized;
        }


}