Changeset 976 for trunk/grails-app/domain

Timestamp:

Oct 21, 2010, 5:28:04 PM (10 years ago)

Author:

robert@…

Message:

Authentication and authorization for studies is added, according to ticket 118

Location:

trunk/grails-app/domain/dbnp

Files:

• authentication (added)
• authentication/SecRole.groovy (added)
• authentication/SecUser.groovy (added)
• authentication/SecUserSecRole.groovy (added)
• authentication/User.groovy (added)
• studycapturing/Study.groovy (modified) (6 diffs)
• studycapturing/Template.groovy (modified) (2 diffs)
• studycapturing/TemplateEntity.groovy (modified) (1 diff)

trunk/grails-app/domain/dbnp/studycapturing/Study.groovy

@@ -1 +1 @@
 package dbnp.studycapturing
 
-import org.nmcdsp.plugins.aaaa.SecUser
+import dbnp.authentication.SecUser
 
 /**
@@ -12 +12 @@
  */
 class Study extends TemplateEntity {
-        static searchable = {
-        [only: ['title', 'Description']] // the description field will be searched only if defined in a study template
-    }
+        static searchable = {
+            [only: ['title', 'Description']] // the description field will be searched only if defined in a study template
+        }
 
         SecUser owner           // The owner of the study. A new study is automatically owned by its creator.
@@ -29 +29 @@
         List assays
         boolean published = false // Determines whether a study is private (only accessable by the owner and writers) or published (also visible to readers)
-
+        boolean publicstudy = false  // Determines whether anonymous users are allowed to see this study. This has only effect when published = true
+        
         static hasMany = [              
                 subjects: Subject,
@@ -38 +39 @@
                 assays: Assay,
                 persons: StudyPerson,
-                publications: Publication
+                publications: Publication,
+                readers: SecUser,
+                writers: SecUser
         ]
 
@@ -54 +57 @@
                 // Workaround for bug http://jira.codehaus.org/browse/GRAILS-6754
                 templateTextFields type: 'text'
-                owner column: "studyowner"
-                title column: "studytitle"
-                code column: "studycode"
-                subjects column: "studysubjects"
-                events column: "studyevents"
-                samplingEvents column: "studysamplingevents"
-                eventGroups column: "studyeventgroups"
-                samples column: "studysamples"
-                assays column: "studyassays"
         }
 
@@ -407 +401 @@
                 return msg
         }
+
+    /**
+     * Returns true if the given user is allowed to read this study
+     */
+    public boolean canRead(SecUser loggedInUser) {
+        // Anonymous readers are only given access when published and public
+        if( loggedInUser == null ) {
+            return this.publicstudy && this.published;
+        }
+
+        // Owners and writers are allowed to read this study
+        if( this.owner == loggedInUser || this.writers.contains(loggedInUser) ) {
+            return true
+        }
+            
+        // Readers are allowed to read this study when it is published
+        if( this.readers.contains(loggedInUser) && this.published ) {
+            return true
+        }
+        
+        return false
+    }
+
+    /**
+     * Returns true if the given user is allowed to write this study
+     */
+    public boolean canWrite(SecUser loggedInUser) {
+        if( loggedInUser == null ) {
+            return false;
+        }
+        return this.owner == loggedInUser || this.writers.contains(loggedInUser)
+    }
+
+    /**
+     * Returns true if the given user is the owner of this study
+     */
+    public boolean isOwner(SecUser loggedInUser) {
+        if( loggedInUser == null ) {
+            return false;
+        }
+        return this.owner == loggedInUser
+    }
+
 }

trunk/grails-app/domain/dbnp/studycapturing/Template.groovy

@@ -1 +1 @@
 package dbnp.studycapturing
 
-import org.nmcdsp.plugins.aaaa.SecUser
+import dbnp.authentication.SecUser
 
 /**
@@ -39 +39 @@
 
         static mapping = {
-                name column:"templatename"
-                description column:"templatedescription"
-                entity column:"templateentity"
-                owner column:"templateowner"
-                fields column:"templatefields"
         }
 

trunk/grails-app/domain/dbnp/studycapturing/TemplateEntity.groovy

@@ -70 +70 @@
                 // Make sure that the text fields are really stored as TEXT, so that those Strings can have an arbitrary length.
                 templateTextFields type: 'text'
-
-                template column:"templateentitytemplate"
         }