mirror of
https://github.com/Telecominfraproject/wlan-cloud-owprov.git
synced 2026-03-20 03:40:31 +00:00
Signed-off-by: stephb9959 <stephane.bourque@gmail.com>
This commit is contained in:
@@ -4,170 +4,183 @@
|
||||
|
||||
#include "RESTAPI_map_handler.h"
|
||||
|
||||
#include "RESTObjects/RESTAPI_ProvObjects.h"
|
||||
#include "StorageService.h"
|
||||
#include "Poco/JSON/Parser.h"
|
||||
#include "Poco/StringTokenizer.h"
|
||||
#include "RESTAPI/RESTAPI_db_helpers.h"
|
||||
#include "RESTObjects/RESTAPI_ProvObjects.h"
|
||||
#include "StorageService.h"
|
||||
|
||||
namespace OpenWifi{
|
||||
namespace OpenWifi {
|
||||
|
||||
void RESTAPI_map_handler::DoGet() {
|
||||
void RESTAPI_map_handler::DoGet() {
|
||||
|
||||
ProvObjects::Map Existing;
|
||||
std::string UUID = GetBinding(RESTAPI::Protocol::UUID,"");
|
||||
if(UUID.empty() || !DB_.GetRecord(RESTAPI::Protocol::ID,UUID,Existing)) {
|
||||
return NotFound();
|
||||
}
|
||||
ProvObjects::Map Existing;
|
||||
std::string UUID = GetBinding(RESTAPI::Protocol::UUID, "");
|
||||
if (UUID.empty() || !DB_.GetRecord(RESTAPI::Protocol::ID, UUID, Existing)) {
|
||||
return NotFound();
|
||||
}
|
||||
|
||||
Poco::JSON::Object Answer;
|
||||
if(QB_.AdditionalInfo)
|
||||
AddExtendedInfo(Existing,Answer);
|
||||
Existing.to_json(Answer);
|
||||
ReturnObject(Answer);
|
||||
}
|
||||
Poco::JSON::Object Answer;
|
||||
if (QB_.AdditionalInfo)
|
||||
AddExtendedInfo(Existing, Answer);
|
||||
Existing.to_json(Answer);
|
||||
ReturnObject(Answer);
|
||||
}
|
||||
|
||||
void RESTAPI_map_handler::DoDelete() {
|
||||
ProvObjects::Map Existing;
|
||||
std::string UUID = GetBinding(RESTAPI::Protocol::UUID,"");
|
||||
if(UUID.empty() || !DB_.GetRecord(RESTAPI::Protocol::ID,UUID,Existing)) {
|
||||
return NotFound();
|
||||
}
|
||||
void RESTAPI_map_handler::DoDelete() {
|
||||
ProvObjects::Map Existing;
|
||||
std::string UUID = GetBinding(RESTAPI::Protocol::UUID, "");
|
||||
if (UUID.empty() || !DB_.GetRecord(RESTAPI::Protocol::ID, UUID, Existing)) {
|
||||
return NotFound();
|
||||
}
|
||||
|
||||
if( UserInfo_.userinfo.userRole!=SecurityObjects::ROOT &&
|
||||
UserInfo_.userinfo.userRole!=SecurityObjects::ADMIN &&
|
||||
UserInfo_.userinfo.id!=Existing.creator) {
|
||||
return UnAuthorized(RESTAPI::Errors::ACCESS_DENIED);
|
||||
}
|
||||
if (UserInfo_.userinfo.userRole != SecurityObjects::ROOT &&
|
||||
UserInfo_.userinfo.userRole != SecurityObjects::ADMIN &&
|
||||
UserInfo_.userinfo.id != Existing.creator) {
|
||||
return UnAuthorized(RESTAPI::Errors::ACCESS_DENIED);
|
||||
}
|
||||
|
||||
DB_.DeleteRecord("id", Existing.info.id);
|
||||
MoveUsage(StorageService()->PolicyDB(),DB_,Existing.managementPolicy,"",Existing.info.id);
|
||||
RemoveMembership(StorageService()->EntityDB(),&ProvObjects::Entity::maps,Existing.entity,Existing.info.id);
|
||||
RemoveMembership(StorageService()->VenueDB(),&ProvObjects::Venue::maps,Existing.venue,Existing.info.id);
|
||||
return OK();
|
||||
}
|
||||
DB_.DeleteRecord("id", Existing.info.id);
|
||||
MoveUsage(StorageService()->PolicyDB(), DB_, Existing.managementPolicy, "",
|
||||
Existing.info.id);
|
||||
RemoveMembership(StorageService()->EntityDB(), &ProvObjects::Entity::maps, Existing.entity,
|
||||
Existing.info.id);
|
||||
RemoveMembership(StorageService()->VenueDB(), &ProvObjects::Venue::maps, Existing.venue,
|
||||
Existing.info.id);
|
||||
return OK();
|
||||
}
|
||||
|
||||
static bool ValidateVisibility(const std::string &V) {
|
||||
return (V=="private" || V=="public" || V=="select");
|
||||
}
|
||||
static bool ValidateVisibility(const std::string &V) {
|
||||
return (V == "private" || V == "public" || V == "select");
|
||||
}
|
||||
|
||||
void RESTAPI_map_handler::DoPost() {
|
||||
std::string UUID = GetBinding(RESTAPI::Protocol::UUID,"");
|
||||
if(UUID.empty()) {
|
||||
return BadRequest(RESTAPI::Errors::MissingUUID);
|
||||
}
|
||||
void RESTAPI_map_handler::DoPost() {
|
||||
std::string UUID = GetBinding(RESTAPI::Protocol::UUID, "");
|
||||
if (UUID.empty()) {
|
||||
return BadRequest(RESTAPI::Errors::MissingUUID);
|
||||
}
|
||||
|
||||
const auto & RawObject = ParsedBody_;
|
||||
ProvObjects::Map NewObject;
|
||||
if (!NewObject.from_json(RawObject)) {
|
||||
return BadRequest(RESTAPI::Errors::InvalidJSONDocument);
|
||||
}
|
||||
const auto &RawObject = ParsedBody_;
|
||||
ProvObjects::Map NewObject;
|
||||
if (!NewObject.from_json(RawObject)) {
|
||||
return BadRequest(RESTAPI::Errors::InvalidJSONDocument);
|
||||
}
|
||||
|
||||
if(!CreateObjectInfo(RawObject, UserInfo_.userinfo, NewObject.info)) {
|
||||
return BadRequest( RESTAPI::Errors::NameMustBeSet);
|
||||
}
|
||||
if (!CreateObjectInfo(RawObject, UserInfo_.userinfo, NewObject.info)) {
|
||||
return BadRequest(RESTAPI::Errors::NameMustBeSet);
|
||||
}
|
||||
|
||||
if(!ValidateVisibility(NewObject.visibility)) {
|
||||
return BadRequest(RESTAPI::Errors::InvalidVisibilityAttribute);
|
||||
}
|
||||
if (!ValidateVisibility(NewObject.visibility)) {
|
||||
return BadRequest(RESTAPI::Errors::InvalidVisibilityAttribute);
|
||||
}
|
||||
|
||||
if(RawObject->has("entity")) {
|
||||
if(!NewObject.entity.empty() && !StorageService()->EntityDB().Exists("id",NewObject.entity))
|
||||
return BadRequest(RESTAPI::Errors::EntityMustExist);
|
||||
}
|
||||
if (RawObject->has("entity")) {
|
||||
if (!NewObject.entity.empty() &&
|
||||
!StorageService()->EntityDB().Exists("id", NewObject.entity))
|
||||
return BadRequest(RESTAPI::Errors::EntityMustExist);
|
||||
}
|
||||
|
||||
if(RawObject->has("managementPolicy")) {
|
||||
if(!NewObject.managementPolicy.empty() && !StorageService()->PolicyDB().Exists("id",NewObject.managementPolicy))
|
||||
return BadRequest(RESTAPI::Errors::UnknownManagementPolicyUUID);
|
||||
}
|
||||
if (RawObject->has("managementPolicy")) {
|
||||
if (!NewObject.managementPolicy.empty() &&
|
||||
!StorageService()->PolicyDB().Exists("id", NewObject.managementPolicy))
|
||||
return BadRequest(RESTAPI::Errors::UnknownManagementPolicyUUID);
|
||||
}
|
||||
|
||||
NewObject.creator = UserInfo_.userinfo.id;
|
||||
NewObject.creator = UserInfo_.userinfo.id;
|
||||
|
||||
if(DB_.CreateRecord(NewObject)) {
|
||||
AddMembership(StorageService()->EntityDB(),&ProvObjects::Entity::maps,NewObject.entity,NewObject.info.id);
|
||||
AddMembership(StorageService()->VenueDB(),&ProvObjects::Venue::maps,NewObject.venue,NewObject.info.id);
|
||||
MoveUsage(StorageService()->PolicyDB(),DB_,"",NewObject.managementPolicy,NewObject.info.id);
|
||||
Poco::JSON::Object Answer;
|
||||
ProvObjects::Map M;
|
||||
DB_.GetRecord("id", NewObject.info.id,M);
|
||||
M.to_json(Answer);
|
||||
return ReturnObject(Answer);
|
||||
}
|
||||
InternalError(RESTAPI::Errors::RecordNotCreated);
|
||||
}
|
||||
if (DB_.CreateRecord(NewObject)) {
|
||||
AddMembership(StorageService()->EntityDB(), &ProvObjects::Entity::maps,
|
||||
NewObject.entity, NewObject.info.id);
|
||||
AddMembership(StorageService()->VenueDB(), &ProvObjects::Venue::maps, NewObject.venue,
|
||||
NewObject.info.id);
|
||||
MoveUsage(StorageService()->PolicyDB(), DB_, "", NewObject.managementPolicy,
|
||||
NewObject.info.id);
|
||||
Poco::JSON::Object Answer;
|
||||
ProvObjects::Map M;
|
||||
DB_.GetRecord("id", NewObject.info.id, M);
|
||||
M.to_json(Answer);
|
||||
return ReturnObject(Answer);
|
||||
}
|
||||
InternalError(RESTAPI::Errors::RecordNotCreated);
|
||||
}
|
||||
|
||||
void RESTAPI_map_handler::DoPut() {
|
||||
ProvObjects::Map Existing;
|
||||
std::string UUID = GetBinding(RESTAPI::Protocol::UUID,"");
|
||||
if(UUID.empty() || !DB_.GetRecord(RESTAPI::Protocol::ID,UUID,Existing)) {
|
||||
return NotFound();
|
||||
}
|
||||
void RESTAPI_map_handler::DoPut() {
|
||||
ProvObjects::Map Existing;
|
||||
std::string UUID = GetBinding(RESTAPI::Protocol::UUID, "");
|
||||
if (UUID.empty() || !DB_.GetRecord(RESTAPI::Protocol::ID, UUID, Existing)) {
|
||||
return NotFound();
|
||||
}
|
||||
|
||||
const auto & RawObject = ParsedBody_;
|
||||
ProvObjects::Map NewObject;
|
||||
if(!NewObject.from_json(RawObject)) {
|
||||
return BadRequest(RESTAPI::Errors::InvalidJSONDocument);
|
||||
}
|
||||
const auto &RawObject = ParsedBody_;
|
||||
ProvObjects::Map NewObject;
|
||||
if (!NewObject.from_json(RawObject)) {
|
||||
return BadRequest(RESTAPI::Errors::InvalidJSONDocument);
|
||||
}
|
||||
|
||||
if(!UpdateObjectInfo(RawObject, UserInfo_.userinfo, Existing.info)) {
|
||||
return BadRequest( RESTAPI::Errors::NameMustBeSet);
|
||||
}
|
||||
if (!UpdateObjectInfo(RawObject, UserInfo_.userinfo, Existing.info)) {
|
||||
return BadRequest(RESTAPI::Errors::NameMustBeSet);
|
||||
}
|
||||
|
||||
if( UserInfo_.userinfo.userRole!=SecurityObjects::ROOT &&
|
||||
UserInfo_.userinfo.userRole!=SecurityObjects::ADMIN &&
|
||||
UserInfo_.userinfo.id!=Existing.creator) {
|
||||
return UnAuthorized(RESTAPI::Errors::ACCESS_DENIED);
|
||||
}
|
||||
if (UserInfo_.userinfo.userRole != SecurityObjects::ROOT &&
|
||||
UserInfo_.userinfo.userRole != SecurityObjects::ADMIN &&
|
||||
UserInfo_.userinfo.id != Existing.creator) {
|
||||
return UnAuthorized(RESTAPI::Errors::ACCESS_DENIED);
|
||||
}
|
||||
|
||||
if( UserInfo_.userinfo.userRole==SecurityObjects::ROOT ||
|
||||
UserInfo_.userinfo.userRole==SecurityObjects::ADMIN) {
|
||||
if (UserInfo_.userinfo.userRole == SecurityObjects::ROOT ||
|
||||
UserInfo_.userinfo.userRole == SecurityObjects::ADMIN) {
|
||||
|
||||
} else if(Existing.creator != UserInfo_.userinfo.id) {
|
||||
if(Existing.visibility == "private") {
|
||||
return UnAuthorized(RESTAPI::Errors::ACCESS_DENIED);
|
||||
}
|
||||
if(Existing.visibility == "select") {
|
||||
bool allowed=false;
|
||||
for(const auto &i:Existing.access.list) {
|
||||
for(const auto &j:i.users.list) {
|
||||
if(j==UserInfo_.userinfo.id) {
|
||||
allowed=true;
|
||||
}
|
||||
}
|
||||
}
|
||||
if(!allowed) {
|
||||
return UnAuthorized(RESTAPI::Errors::ACCESS_DENIED);
|
||||
}
|
||||
}
|
||||
}
|
||||
} else if (Existing.creator != UserInfo_.userinfo.id) {
|
||||
if (Existing.visibility == "private") {
|
||||
return UnAuthorized(RESTAPI::Errors::ACCESS_DENIED);
|
||||
}
|
||||
if (Existing.visibility == "select") {
|
||||
bool allowed = false;
|
||||
for (const auto &i : Existing.access.list) {
|
||||
for (const auto &j : i.users.list) {
|
||||
if (j == UserInfo_.userinfo.id) {
|
||||
allowed = true;
|
||||
}
|
||||
}
|
||||
}
|
||||
if (!allowed) {
|
||||
return UnAuthorized(RESTAPI::Errors::ACCESS_DENIED);
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
std::string FromPolicy, ToPolicy;
|
||||
if(!CreateMove(RawObject,"managementPolicy",&MapDB::RecordName::managementPolicy, Existing, FromPolicy, ToPolicy, StorageService()->PolicyDB()))
|
||||
return BadRequest(RESTAPI::Errors::EntityMustExist);
|
||||
std::string FromPolicy, ToPolicy;
|
||||
if (!CreateMove(RawObject, "managementPolicy", &MapDB::RecordName::managementPolicy,
|
||||
Existing, FromPolicy, ToPolicy, StorageService()->PolicyDB()))
|
||||
return BadRequest(RESTAPI::Errors::EntityMustExist);
|
||||
|
||||
std::string FromEntity, ToEntity;
|
||||
if(!CreateMove(RawObject,"entity",&MapDB::RecordName::entity, Existing, FromEntity, ToEntity, StorageService()->EntityDB()))
|
||||
return BadRequest(RESTAPI::Errors::EntityMustExist);
|
||||
std::string FromEntity, ToEntity;
|
||||
if (!CreateMove(RawObject, "entity", &MapDB::RecordName::entity, Existing, FromEntity,
|
||||
ToEntity, StorageService()->EntityDB()))
|
||||
return BadRequest(RESTAPI::Errors::EntityMustExist);
|
||||
|
||||
std::string FromVenue, ToVenue;
|
||||
if(!CreateMove(RawObject,"venue",&MapDB::RecordName::venue, Existing, FromVenue, ToVenue, StorageService()->VenueDB()))
|
||||
return BadRequest(RESTAPI::Errors::VenueMustExist);
|
||||
std::string FromVenue, ToVenue;
|
||||
if (!CreateMove(RawObject, "venue", &MapDB::RecordName::venue, Existing, FromVenue, ToVenue,
|
||||
StorageService()->VenueDB()))
|
||||
return BadRequest(RESTAPI::Errors::VenueMustExist);
|
||||
|
||||
AssignIfPresent(RawObject,"data", Existing.data);
|
||||
if(RawObject->has("visibility"))
|
||||
Existing.visibility = NewObject.visibility;
|
||||
AssignIfPresent(RawObject, "data", Existing.data);
|
||||
if (RawObject->has("visibility"))
|
||||
Existing.visibility = NewObject.visibility;
|
||||
|
||||
if(DB_.UpdateRecord("id",UUID,Existing)) {
|
||||
MoveUsage(StorageService()->PolicyDB(),DB_,FromPolicy,ToPolicy,Existing.info.id);
|
||||
ManageMembership(StorageService()->EntityDB(),&ProvObjects::Entity::maps,FromEntity,ToEntity,Existing.info.id);
|
||||
ManageMembership(StorageService()->VenueDB(),&ProvObjects::Venue::maps,FromVenue,ToVenue,Existing.info.id);
|
||||
if (DB_.UpdateRecord("id", UUID, Existing)) {
|
||||
MoveUsage(StorageService()->PolicyDB(), DB_, FromPolicy, ToPolicy, Existing.info.id);
|
||||
ManageMembership(StorageService()->EntityDB(), &ProvObjects::Entity::maps, FromEntity,
|
||||
ToEntity, Existing.info.id);
|
||||
ManageMembership(StorageService()->VenueDB(), &ProvObjects::Venue::maps, FromVenue,
|
||||
ToVenue, Existing.info.id);
|
||||
|
||||
ProvObjects::Map NewRecord;
|
||||
DB_.GetRecord("id", UUID, NewRecord);
|
||||
Poco::JSON::Object Answer;
|
||||
NewRecord.to_json(Answer);
|
||||
return ReturnObject(Answer);
|
||||
}
|
||||
InternalError(RESTAPI::Errors::RecordNotUpdated);
|
||||
}
|
||||
}
|
||||
ProvObjects::Map NewRecord;
|
||||
DB_.GetRecord("id", UUID, NewRecord);
|
||||
Poco::JSON::Object Answer;
|
||||
NewRecord.to_json(Answer);
|
||||
return ReturnObject(Answer);
|
||||
}
|
||||
InternalError(RESTAPI::Errors::RecordNotUpdated);
|
||||
}
|
||||
} // namespace OpenWifi
|
||||
Reference in New Issue
Block a user