Changeset 7612 for branches/ClientUserManagement/HeuristicLab.Services.Access/3.3

Timestamp:

03/13/12 17:28:04 (12 years ago)

Author:

ascheibe

Message:

#1648

• added a ws method for resetting a password
• added user role checking for the service

Location:

branches/ClientUserManagement/HeuristicLab.Services.Access/3.3

Files:

• AccessService.cs (modified) (18 diffs)
• IAccessService.cs (modified) (2 diffs)

branches/ClientUserManagement/HeuristicLab.Services.Access/3.3/AccessService.cs

@@ -36 +36 @@
     private IUserManager UserManager {
       get {
-        if (userManager == null) userManager = new UserManager();
+        if (userManager == null) userManager = AccessServiceLocator.Instance.UserManager;
         return userManager;
       }
@@ -44 +44 @@
     private IRoleVerifier RoleVerifier {
       get {
-        if (roleVerifier == null) roleVerifier = new RoleVerifier();
+        if (roleVerifier == null) roleVerifier = AccessServiceLocator.Instance.RoleVerifier;
         return roleVerifier;
       }
@@ -143 +143 @@
 
     public void DeleteClient(DT.Client client) {
+      roleVerifier.AuthenticateForAllRoles(AccessServiceRoles.Administrator);
+
       using (DA.ClientManagementDataContext context = new DA.ClientManagementDataContext()) {
         //load client because we could get a detached object
@@ -198 +200 @@
 
     public void DeleteClientGroup(DT.ClientGroup clientGroup) {
+      roleVerifier.AuthenticateForAllRoles(AccessServiceRoles.Administrator);
+
       using (DA.ClientManagementDataContext context = new DA.ClientManagementDataContext()) {
         //load clientGroup because we could get a detached object
@@ -289 +293 @@
 
     public void DeleteClientLog(DT.ClientLog log) {
+      roleVerifier.AuthenticateForAllRoles(AccessServiceRoles.Administrator);
+
       using (DA.ClientManagementDataContext context = new DA.ClientManagementDataContext()) {
         context.ClientLogs.DeleteOnSubmit(Convert.ToEntity(log));
@@ -484 +490 @@
 
     public DT.User AddUser(DT.User user) {
+      roleVerifier.AuthenticateForAllRoles(AccessServiceRoles.Administrator);
+
       DA.User accessUser;
       DA.aspnet_User aspUser;
@@ -529 +537 @@
 
     public void DeleteUser(DT.User user) {
+      roleVerifier.AuthenticateForAllRoles(AccessServiceRoles.Administrator);
+
       if (user.Id != null && user.Id != Guid.Empty) {
         //delete asp.net user
@@ -551 +561 @@
 
     public void UpdateUser(DT.User user) {
+      roleVerifier.AuthenticateForAllRoles(AccessServiceRoles.Administrator);
+
       AddUser(user);
     }
 
     public void AddUserToRole(DT.Role role, DT.User user) {
+      roleVerifier.AuthenticateForAllRoles(AccessServiceRoles.Administrator);
+
       //TODO: usernames and rolenames have to be unique!
       MembershipUser msUser = Membership.GetUser((object)user.Id);
@@ -563 +577 @@
 
     public void RemoveUserFromRole(DT.Role role, DT.User user) {
+      roleVerifier.AuthenticateForAllRoles(AccessServiceRoles.Administrator);
+
       MembershipUser msUser = Membership.GetUser((object)user.Id);
       if (msUser != null) {
@@ -569 +585 @@
     }
 
-    public bool ResetPassword(Guid userId, string oldPassword, string newPassword) {
+    public bool ChangePassword(Guid userId, string oldPassword, string newPassword) {
       MembershipUser msUser = Membership.GetUser(userId);
       if (msUser != null) {
@@ -575 +591 @@
       }
       return false;
+    }
+
+    public string ResetPassword(Guid userId) {
+      roleVerifier.AuthenticateForAllRoles(AccessServiceRoles.Administrator);
+
+      MembershipUser msUser = Membership.GetUser(userId);
+      if (msUser != null) {
+        return msUser.ResetPassword();
+      } else {
+        throw new Exception("Password reset failed.");
+      }
     }
     #endregion
@@ -626 +653 @@
 
     public void DeleteUserGroup(DT.UserGroup group) {
+      roleVerifier.AuthenticateForAllRoles(AccessServiceRoles.Administrator);
+
       using (DA.ClientManagementDataContext context = new DA.ClientManagementDataContext()) {
         context.UserGroupBases.DeleteOnSubmit(Convert.ToEntity(group));
@@ -733 +762 @@
 
     public DT.Role AddRole(DT.Role role) {
+      roleVerifier.AuthenticateForAllRoles(AccessServiceRoles.Administrator);
+
       Roles.CreateRole(role.Name);
       return role;
@@ -738 +769 @@
 
     public void DeleteRole(DT.Role role) {
+      roleVerifier.AuthenticateForAllRoles(AccessServiceRoles.Administrator);
+
       Roles.DeleteRole(role.Name);
     }
@@ -767 +800 @@
 
     public void RemoveRoleFromGroup(DT.UserGroup userGroup, DT.Role role) {
+      roleVerifier.AuthenticateForAllRoles(AccessServiceRoles.Administrator);
+
       Guid[] userIds;
       string[] aspUsers;
@@ -795 +830 @@
 
     public IEnumerable<DT.ClientError> GetClientErrors() {
+      roleVerifier.AuthenticateForAllRoles(AccessServiceRoles.Administrator);
+
       using (DA.ClientManagementDataContext context = new DA.ClientManagementDataContext()) {
         var query = from c in context.ClientErrors
@@ -803 +840 @@
 
     public IEnumerable<DT.ClientError> GetLastClientErrors(DateTime startDate) {
+      roleVerifier.AuthenticateForAllRoles(AccessServiceRoles.Administrator);
+
       using (DA.ClientManagementDataContext context = new DA.ClientManagementDataContext()) {
         var query = from c in context.ClientErrors
@@ -812 +851 @@
 
     public void DeleteError(DT.ClientError error) {
+      roleVerifier.AuthenticateForAllRoles(AccessServiceRoles.Administrator);
+
       using (DA.ClientManagementDataContext context = new DA.ClientManagementDataContext()) {
         var query = context.ClientErrors.Where(x => x.Id == error.Id);

branches/ClientUserManagement/HeuristicLab.Services.Access/3.3/IAccessService.cs

@@ -104 +104 @@
 
     #region User
-    //TODO: i don't think this method is needed
     [OperationContract]
     LightweightUser Login();
@@ -142 +141 @@
 
     [OperationContract]
-    bool ResetPassword(Guid userId, string oldPassword, string newPassword);
+    bool ChangePassword(Guid userId, string oldPassword, string newPassword);
+
+    [OperationContract]
+    string ResetPassword(Guid userId);
     #endregion