Exemple #1
0
        public void UpdateFile(string id, Rock.CMS.DTO.File File)
        {
            var currentUser = Rock.CMS.UserService.GetCurrentUser();

            if (currentUser == null)
            {
                throw new WebFaultException <string>("Must be logged in", System.Net.HttpStatusCode.Forbidden);
            }

            using (Rock.Data.UnitOfWorkScope uow = new Rock.Data.UnitOfWorkScope())
            {
                uow.objectContext.Configuration.ProxyCreationEnabled = false;
                Rock.CMS.FileService FileService  = new Rock.CMS.FileService();
                Rock.CMS.File        existingFile = FileService.Get(int.Parse(id));
                if (existingFile.Authorized("Edit", currentUser))
                {
                    uow.objectContext.Entry(existingFile).CurrentValues.SetValues(File);

                    if (existingFile.IsValid)
                    {
                        FileService.Save(existingFile, currentUser.PersonId);
                    }
                    else
                    {
                        throw new WebFaultException <string>(existingFile.ValidationResults.AsDelimited(", "), System.Net.HttpStatusCode.BadRequest);
                    }
                }
                else
                {
                    throw new WebFaultException <string>("Not Authorized to Edit this File", System.Net.HttpStatusCode.Forbidden);
                }
            }
        }
Exemple #2
0
        public Rock.CMS.DTO.File ApiGet(string id, string apiKey)
        {
            using (Rock.Data.UnitOfWorkScope uow = new Rock.Data.UnitOfWorkScope())
            {
                Rock.CMS.UserService userService = new Rock.CMS.UserService();
                Rock.CMS.User        user        = userService.Queryable().Where(u => u.ApiKey == apiKey).FirstOrDefault();

                if (user != null)
                {
                    uow.objectContext.Configuration.ProxyCreationEnabled = false;
                    Rock.CMS.FileService FileService = new Rock.CMS.FileService();
                    Rock.CMS.File        File        = FileService.Get(int.Parse(id));
                    if (File.Authorized("View", user))
                    {
                        return(File.DataTransferObject);
                    }
                    else
                    {
                        throw new WebFaultException <string>("Not Authorized to View this File", System.Net.HttpStatusCode.Forbidden);
                    }
                }
                else
                {
                    throw new WebFaultException <string>("Invalid API Key", System.Net.HttpStatusCode.Forbidden);
                }
            }
        }
Exemple #3
0
        public void ApiDeleteFile(string id, string apiKey)
        {
            using (Rock.Data.UnitOfWorkScope uow = new Rock.Data.UnitOfWorkScope())
            {
                Rock.CMS.UserService userService = new Rock.CMS.UserService();
                Rock.CMS.User        user        = userService.Queryable().Where(u => u.ApiKey == apiKey).FirstOrDefault();

                if (user != null)
                {
                    uow.objectContext.Configuration.ProxyCreationEnabled = false;
                    Rock.CMS.FileService FileService = new Rock.CMS.FileService();
                    Rock.CMS.File        File        = FileService.Get(int.Parse(id));
                    if (File.Authorized("Edit", user))
                    {
                        FileService.Delete(File, user.PersonId);
                        FileService.Save(File, user.PersonId);
                    }
                    else
                    {
                        throw new WebFaultException <string>("Not Authorized to Edit this File", System.Net.HttpStatusCode.Forbidden);
                    }
                }
                else
                {
                    throw new WebFaultException <string>("Invalid API Key", System.Net.HttpStatusCode.Forbidden);
                }
            }
        }
Exemple #4
0
        public void DeleteFile(string id)
        {
            var currentUser = Rock.CMS.UserService.GetCurrentUser();

            if (currentUser == null)
            {
                throw new WebFaultException <string>("Must be logged in", System.Net.HttpStatusCode.Forbidden);
            }

            using (Rock.Data.UnitOfWorkScope uow = new Rock.Data.UnitOfWorkScope())
            {
                uow.objectContext.Configuration.ProxyCreationEnabled = false;
                Rock.CMS.FileService FileService = new Rock.CMS.FileService();
                Rock.CMS.File        File        = FileService.Get(int.Parse(id));
                if (File.Authorized("Edit", currentUser))
                {
                    FileService.Delete(File, currentUser.PersonId);
                    FileService.Save(File, currentUser.PersonId);
                }
                else
                {
                    throw new WebFaultException <string>("Not Authorized to Edit this File", System.Net.HttpStatusCode.Forbidden);
                }
            }
        }
Exemple #5
0
        public Rock.CMS.DTO.File Get(string id)
        {
            var currentUser = Rock.CMS.UserService.GetCurrentUser();

            if (currentUser == null)
            {
                throw new WebFaultException <string>("Must be logged in", System.Net.HttpStatusCode.Forbidden);
            }

            using (Rock.Data.UnitOfWorkScope uow = new Rock.Data.UnitOfWorkScope())
            {
                uow.objectContext.Configuration.ProxyCreationEnabled = false;
                Rock.CMS.FileService FileService = new Rock.CMS.FileService();
                Rock.CMS.File        File        = FileService.Get(int.Parse(id));
                if (File.Authorized("View", currentUser))
                {
                    return(File.DataTransferObject);
                }
                else
                {
                    throw new WebFaultException <string>("Not Authorized to View this File", System.Net.HttpStatusCode.Forbidden);
                }
            }
        }
Exemple #6
0
        public void ApiUpdateFile(string id, string apiKey, Rock.CMS.DTO.File File)
        {
            using (Rock.Data.UnitOfWorkScope uow = new Rock.Data.UnitOfWorkScope())
            {
                Rock.CMS.UserService userService = new Rock.CMS.UserService();
                Rock.CMS.User        user        = userService.Queryable().Where(u => u.ApiKey == apiKey).FirstOrDefault();

                if (user != null)
                {
                    uow.objectContext.Configuration.ProxyCreationEnabled = false;
                    Rock.CMS.FileService FileService  = new Rock.CMS.FileService();
                    Rock.CMS.File        existingFile = FileService.Get(int.Parse(id));
                    if (existingFile.Authorized("Edit", user))
                    {
                        uow.objectContext.Entry(existingFile).CurrentValues.SetValues(File);

                        if (existingFile.IsValid)
                        {
                            FileService.Save(existingFile, user.PersonId);
                        }
                        else
                        {
                            throw new WebFaultException <string>(existingFile.ValidationResults.AsDelimited(", "), System.Net.HttpStatusCode.BadRequest);
                        }
                    }
                    else
                    {
                        throw new WebFaultException <string>("Not Authorized to Edit this File", System.Net.HttpStatusCode.Forbidden);
                    }
                }
                else
                {
                    throw new WebFaultException <string>("Invalid API Key", System.Net.HttpStatusCode.Forbidden);
                }
            }
        }