Changeset 7914 for branches/OKB (trunk integration)/HeuristicLab.Services.OKB/3.3/RunCreation/RunCreationService.cs

Timestamp:

05/29/12 12:45:22 (12 years ago)

Author:

ascheibe

Message:

#1174 added authorization for algorithms and problems

File:

• branches/OKB (trunk integration)/HeuristicLab.Services.OKB/3.3/RunCreation/RunCreationService.cs (modified) (5 diffs)

branches/OKB (trunk integration)/HeuristicLab.Services.OKB/3.3/RunCreation/RunCreationService.cs

@@ -34 +34 @@
   public class RunCreationService : IRunCreationService {
     IRoleVerifier roleVerifier = AccessServiceLocator.Instance.RoleVerifier;
+    IUserManager userManager = AccessServiceLocator.Instance.UserManager;
 
     public IEnumerable<DataTransfer.Algorithm> GetAlgorithms(string platformName) {
@@ -42 +43 @@
         dlo.LoadWith<Algorithm>(x => x.AlgorithmClass);
         dlo.LoadWith<Algorithm>(x => x.DataType);
+        dlo.LoadWith<Algorithm>(x => x.AlgorithmUsers);
         okb.LoadOptions = dlo;
-        return okb.Algorithms.Where(x => x.Platform.Name == platformName).Select(x => Convert.ToDto(x)).ToArray();
+
+        var query = okb.Algorithms.Where(x => x.Platform.Name == platformName);
+        List<Algorithm> results = new List<Algorithm>();
+
+        if (roleVerifier.IsInRole(OKBRoles.OKBAdministrator)) {
+          results.AddRange(query);
+        } else {
+          foreach (var alg in query) {
+            if (alg.AlgorithmUsers.Count() == 0 || userManager.VerifyUser(userManager.CurrentUserId, alg.AlgorithmUsers.Select(y => y.UserGroupId).ToList())) {
+              results.Add(alg);
+            }
+          }
+        }
+        return results.Select(x => Convert.ToDto(x)).ToArray();
       }
     }
@@ -51 +66 @@
 
       using (OKBDataContext okb = new OKBDataContext()) {
-        return okb.Algorithms.Where(x => x.Id == algorithmId).Select(x => x.BinaryData.Data.ToArray()).FirstOrDefault();
+        var result = okb.Algorithms.Where(x => x.Id == algorithmId).Select(x => x.BinaryData.Data.ToArray()).FirstOrDefault();
+
+        if (roleVerifier.IsInRole(OKBRoles.OKBAdministrator)) {
+          return result;
+        } else {
+          var algUsers = okb.AlgorithmUsers.Where(x => x.AlgorithmId == algorithmId);
+          if (algUsers.Count() == 0 || userManager.VerifyUser(userManager.CurrentUserId, algUsers.Select(y => y.UserGroupId).ToList())) {
+            return result;
+          } else {
+            return null;
+          }
+        }
       }
     }
@@ -62 +88 @@
         dlo.LoadWith<Problem>(x => x.ProblemClass);
         dlo.LoadWith<Problem>(x => x.DataType);
+        dlo.LoadWith<Problem>(x => x.ProblemUsers);
         okb.LoadOptions = dlo;
-        return okb.Problems.Where(x => x.Platform.Name == platformName).Select(x => Convert.ToDto(x)).ToArray();
+
+        var query = okb.Problems.Where(x => x.Platform.Name == platformName);
+        List<Problem> results = new List<Problem>();
+
+        if (roleVerifier.IsInRole(OKBRoles.OKBAdministrator)) {
+          results.AddRange(query);
+        } else {
+          foreach (var problem in query) {
+            if (problem.ProblemUsers.Count() == 0 || userManager.VerifyUser(userManager.CurrentUserId, problem.ProblemUsers.Select(y => y.UserGroupId).ToList())) {
+              results.Add(problem);
+            }
+          }
+        }
+        return results.Select(x => Convert.ToDto(x)).ToArray();
       }
     }
@@ -71 +111 @@
 
       using (OKBDataContext okb = new OKBDataContext()) {
-        return okb.Problems.Where(x => x.Id == problemId).Select(x => x.BinaryData.Data.ToArray()).FirstOrDefault();
+        var result = okb.Problems.Where(x => x.Id == problemId).Select(x => x.BinaryData.Data.ToArray()).FirstOrDefault();
+
+        if (roleVerifier.IsInRole(OKBRoles.OKBAdministrator)) {
+          return result;
+        } else {
+          var problemUsers = okb.ProblemUsers.Where(x => x.ProblemId == problemId);
+          if (problemUsers.Count() == 0 || userManager.VerifyUser(userManager.CurrentUserId, problemUsers.Select(y => y.UserGroupId).ToList())) {
+            return result;
+          } else {
+            return null;
+          }
+        }
       }
     }