Changeset 8051 for trunk/sources/HeuristicLab.Services.Hive/3.3/Manager

Timestamp:

06/19/12 12:06:18 (12 years ago)

Author:

jkarder

Message:

#1859: manually merged branch "HiveResourcePermissionManagement (trunk integration)" into trunk

File:

• trunk/sources/HeuristicLab.Services.Hive/3.3/Manager/AuthorizationManager.cs (modified) (2 diffs)

trunk/sources/HeuristicLab.Services.Hive/3.3/Manager/AuthorizationManager.cs

@@ -34 +34 @@
 
     public void AuthorizeForTask(Guid taskId, DT.Permission requiredPermission) {
-      if (ServiceLocator.Instance.AuthenticationManager.IsInRole(HiveRoles.Slave)) return; // slave-users can access all tasks
+      if (ServiceLocator.Instance.RoleVerifier.IsInRole(HiveRoles.Slave)) return; // slave-users can access all tasks
 
       Permission permission = ServiceLocator.Instance.HiveDao.GetPermissionForTask(taskId, ServiceLocator.Instance.UserManager.CurrentUserId);
@@ -46 +46 @@
         throw new SecurityException("Current user is not authorized to access task");
     }
+
+    public void AuthorizeForResourceAdministration(Guid resourceId) {
+      Resource resource = DT.Convert.ToEntity(ServiceLocator.Instance.HiveDao.GetResource(resourceId));
+      if (resource.OwnerUserId != ServiceLocator.Instance.UserManager.CurrentUserId && !ServiceLocator.Instance.RoleVerifier.IsInRole(HiveRoles.Administrator))
+        throw new SecurityException("Current user is not authorized to access resource");
+    }
   }
 }