public void UpdateAuth(string id, Rock.CMS.DTO.Auth Auth)
{
var currentUser = Rock.CMS.UserService.GetCurrentUser();
if (currentUser == null)
{
throw new WebFaultException <string>("Must be logged in", System.Net.HttpStatusCode.Forbidden);
}
using (Rock.Data.UnitOfWorkScope uow = new Rock.Data.UnitOfWorkScope())
{
uow.objectContext.Configuration.ProxyCreationEnabled = false;
Rock.CMS.AuthService AuthService = new Rock.CMS.AuthService();
Rock.CMS.Auth existingAuth = AuthService.Get(int.Parse(id));
if (existingAuth.Authorized("Edit", currentUser))
{
uow.objectContext.Entry(existingAuth).CurrentValues.SetValues(Auth);
if (existingAuth.IsValid)
{
AuthService.Save(existingAuth, currentUser.PersonId);
}
else
{
throw new WebFaultException <string>(existingAuth.ValidationResults.AsDelimited(", "), System.Net.HttpStatusCode.BadRequest);
}
}
else
{
throw new WebFaultException <string>("Not Authorized to Edit this Auth", System.Net.HttpStatusCode.Forbidden);
}
}
}
public Rock.CMS.DTO.Auth ApiGet(string id, string apiKey)
{
using (Rock.Data.UnitOfWorkScope uow = new Rock.Data.UnitOfWorkScope())
{
Rock.CMS.UserService userService = new Rock.CMS.UserService();
Rock.CMS.User user = userService.Queryable().Where(u => u.ApiKey == apiKey).FirstOrDefault();
if (user != null)
{
uow.objectContext.Configuration.ProxyCreationEnabled = false;
Rock.CMS.AuthService AuthService = new Rock.CMS.AuthService();
Rock.CMS.Auth Auth = AuthService.Get(int.Parse(id));
if (Auth.Authorized("View", user))
{
return(Auth.DataTransferObject);
}
else
{
throw new WebFaultException <string>("Not Authorized to View this Auth", System.Net.HttpStatusCode.Forbidden);
}
}
else
{
throw new WebFaultException <string>("Invalid API Key", System.Net.HttpStatusCode.Forbidden);
}
}
}
public void ApiDeleteAuth(string id, string apiKey)
{
using (Rock.Data.UnitOfWorkScope uow = new Rock.Data.UnitOfWorkScope())
{
Rock.CMS.UserService userService = new Rock.CMS.UserService();
Rock.CMS.User user = userService.Queryable().Where(u => u.ApiKey == apiKey).FirstOrDefault();
if (user != null)
{
uow.objectContext.Configuration.ProxyCreationEnabled = false;
Rock.CMS.AuthService AuthService = new Rock.CMS.AuthService();
Rock.CMS.Auth Auth = AuthService.Get(int.Parse(id));
if (Auth.Authorized("Edit", user))
{
AuthService.Delete(Auth, user.PersonId);
AuthService.Save(Auth, user.PersonId);
}
else
{
throw new WebFaultException <string>("Not Authorized to Edit this Auth", System.Net.HttpStatusCode.Forbidden);
}
}
else
{
throw new WebFaultException <string>("Invalid API Key", System.Net.HttpStatusCode.Forbidden);
}
}
}
public void DeleteAuth(string id)
{
var currentUser = Rock.CMS.UserService.GetCurrentUser();
if (currentUser == null)
{
throw new WebFaultException <string>("Must be logged in", System.Net.HttpStatusCode.Forbidden);
}
using (Rock.Data.UnitOfWorkScope uow = new Rock.Data.UnitOfWorkScope())
{
uow.objectContext.Configuration.ProxyCreationEnabled = false;
Rock.CMS.AuthService AuthService = new Rock.CMS.AuthService();
Rock.CMS.Auth Auth = AuthService.Get(int.Parse(id));
if (Auth.Authorized("Edit", currentUser))
{
AuthService.Delete(Auth, currentUser.PersonId);
AuthService.Save(Auth, currentUser.PersonId);
}
else
{
throw new WebFaultException <string>("Not Authorized to Edit this Auth", System.Net.HttpStatusCode.Forbidden);
}
}
}
public Rock.CMS.DTO.Auth Get(string id)
{
var currentUser = Rock.CMS.UserService.GetCurrentUser();
if (currentUser == null)
{
throw new WebFaultException <string>("Must be logged in", System.Net.HttpStatusCode.Forbidden);
}
using (Rock.Data.UnitOfWorkScope uow = new Rock.Data.UnitOfWorkScope())
{
uow.objectContext.Configuration.ProxyCreationEnabled = false;
Rock.CMS.AuthService AuthService = new Rock.CMS.AuthService();
Rock.CMS.Auth Auth = AuthService.Get(int.Parse(id));
if (Auth.Authorized("View", currentUser))
{
return(Auth.DataTransferObject);
}
else
{
throw new WebFaultException <string>("Not Authorized to View this Auth", System.Net.HttpStatusCode.Forbidden);
}
}
}
public void ApiUpdateAuth(string id, string apiKey, Rock.CMS.DTO.Auth Auth)
{
using (Rock.Data.UnitOfWorkScope uow = new Rock.Data.UnitOfWorkScope())
{
Rock.CMS.UserService userService = new Rock.CMS.UserService();
Rock.CMS.User user = userService.Queryable().Where(u => u.ApiKey == apiKey).FirstOrDefault();
if (user != null)
{
uow.objectContext.Configuration.ProxyCreationEnabled = false;
Rock.CMS.AuthService AuthService = new Rock.CMS.AuthService();
Rock.CMS.Auth existingAuth = AuthService.Get(int.Parse(id));
if (existingAuth.Authorized("Edit", user))
{
uow.objectContext.Entry(existingAuth).CurrentValues.SetValues(Auth);
if (existingAuth.IsValid)
{
AuthService.Save(existingAuth, user.PersonId);
}
else
{
throw new WebFaultException <string>(existingAuth.ValidationResults.AsDelimited(", "), System.Net.HttpStatusCode.BadRequest);
}
}
else
{
throw new WebFaultException <string>("Not Authorized to Edit this Auth", System.Net.HttpStatusCode.Forbidden);
}
}
else
{
throw new WebFaultException <string>("Invalid API Key", System.Net.HttpStatusCode.Forbidden);
}
}
}
