Changeset 935

Timestamp:

Oct 11, 2010, 12:48:31 PM (13 years ago)

Author:

j.saito@…

Message:

Added dummy REST resource for getAuthorizationLevel.

File:

• trunk/grails-app/controllers/RestController.groovy (modified) (7 diffs)

trunk/grails-app/controllers/RestController.groovy

@@ -18 +18 @@
 import dbnp.studycapturing.Study
 import dbnp.studycapturing.Assay
+import dbnp.user.User
 import grails.converters.*
 import nl.metabolomicscentre.dsp.http.BasicAuthentication
@@ -33 +34 @@
         def beforeInterceptor = [action:this.&auth,except:["isUser"]]
         def credentials
-        def requestUser
+        def requestUser = User.findByName( "user" )
 
         /**
@@ -44 +45 @@
 
             credentials = BasicAuthentication.credentialsFromRequest(request)
-                requestUser = authService.authUser(credentials.u,credentials.p)
+                //requestUser = authService.authUser(credentials.u,credentials.p)
+                // we circumvene the user
                 if(!requestUser) {
                     response.sendError(403)
@@ -130 +132 @@
                         def study = Study.find( "from Study as s where s.code=?", [id] )
                         if(study && study.owner == requestUser) study.assays.each{ assay ->
-                                //if (assay.module.url.equals(params.moduleURL)) {
+                                if (assay.module.url.equals(params.moduleURL)) {
                                 def map = ['name':assay.name, 'assayToken':assay.getToken()]
                                         assays.push( map )
-                                //}
+                                }
                         }
                 }
@@ -275 +277 @@
         }
 
-        /**
+   /**
         * REST resource for dbNP modules.
         *
@@ -283 +285 @@
         *
         * Example REST call (without authentication):
-        * http://localhost:8080/gscf/rest/getStudy/study?studyToken=PPSH
-        *
+    *   http://localhost:8080/gscf/rest/getStudy/study?studyToken=PPSH
+    *
         * Returns the JSON object:
         * {"title":"NuGO PPS human study","studyToken":"PPSH","startDate":"2008-01-13T23:00:00Z",
@@ -299 +301 @@
         render items as JSON*/
         }
+
+
+
+
+
+   /**
+        * REST resource for dbNP modules.
+        *
+        * @param studyToken String, the external identifier of the study
+        *
+        * Dummy for testing only. (Warning: to be replaced as soon as the authorization is implemented!)
+        * @param Hash with exactly the values that will be returned 
+        *
+        * @return Hash with keys 'isReader', 'isEditor', 'isOwner' }
+        */
+
+        def getAuthorizationLevel = {
+
+                isReader = false 
+                isEditor = false 
+                isOwner  = false 
+
+                // Warning: this case is only for testing! 
+                // The code below should be used until the
+                // authorization works. 
+                if( params.isOwner || params.isEditor || params.Owner ) { 
+                        return render ['isReader':params.isOwner, 
+                                'isEditor':params.isEditor, 'isOwner':params.isOwner] as JSON
+                }
+
+
+                // in future the users authorization level will be based on authorization model
+                /*
+                if( params.studyToken ) {
+                        def id = params.studyToken
+                        def study = Study.find( "from Study as s where s.code=?", [id])
+                        if(study) study.subjects.each { subjects.push it.name }
+                }
+
+                def user
+                if( params.user ) {
+                        def id = params.user
+                        user = users.find( "from User as u where u.code=?", [id])
+                }
+
+                if( study.readers.contains(user) ) isReader = true
+                if( study.editors.contains(user) ) isEditor = true
+                if( study.owner.contains(user) )   isOwner  = true
+
+                */
+
+                render ['isReader':isOwner, 'isEditor':isEditor, 'isOwner':isOwner] as JSON
+    }
+
+
 }