org.visallo.web.parameterProviders.AuthorizationsParameterProviderFactory Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of visallo-web Show documentation
There is a newer version: 2.2.0
package org.visallo.web.parameterProviders;

import com.google.inject.Inject;
import com.v5analytics.webster.HandlerChain;
import com.v5analytics.webster.parameterProviders.ParameterProvider;
import com.v5analytics.webster.parameterProviders.ParameterProviderFactory;
import org.vertexium.Authorizations;
import org.visallo.core.config.Configuration;
import org.visallo.core.exception.VisalloAccessDeniedException;
import org.visallo.core.model.user.UserRepository;
import org.visallo.core.model.workspace.WorkspaceRepository;
import org.visallo.core.user.User;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.lang.annotation.Annotation;
import java.lang.reflect.Method;

public class AuthorizationsParameterProviderFactory extends ParameterProviderFactory {
    private final ParameterProvider parameterProvider;

    @Inject
    public AuthorizationsParameterProviderFactory(
            final WorkspaceRepository workspaceRepository,
            UserRepository userRepository,
            Configuration configuration
    ) {
        parameterProvider = new VisalloBaseParameterProvider(userRepository, configuration) {
            @Override
            public Authorizations getParameter(HttpServletRequest request, HttpServletResponse response, HandlerChain chain) {
                return getAuthorizations(request, getUserRepository(), workspaceRepository);
            }
        };
    }

    public static Authorizations getAuthorizations(HttpServletRequest request, UserRepository userRepository, WorkspaceRepository workspaceRepository) {
        String workspaceId = VisalloBaseParameterProvider.getActiveWorkspaceIdOrDefault(request);
        User user = VisalloBaseParameterProvider.getUser(request, userRepository);
        if (workspaceId != null) {
            if (!workspaceRepository.hasReadPermissions(workspaceId, user)) {
                throw new VisalloAccessDeniedException("You do not have access to workspace: " + workspaceId, user, workspaceId);
            }
            return userRepository.getAuthorizations(user, workspaceId);
        }

        return userRepository.getAuthorizations(user);
    }

    @Override
    public boolean isHandled(Method handleMethod, Class parameterType, Annotation[] parameterAnnotations) {
        return Authorizations.class.isAssignableFrom(parameterType);
    }

    @Override
    public ParameterProvider createParameterProvider(Method handleMethod, Class parameterType, Annotation[] parameterAnnotations) {
        return parameterProvider;
    }
}