public long?AddProfileEntry(IConnectToDB _Connect, long?identitiesId)
{
SecurityHelper securityHelper = new SecurityHelper();
add addHelp = new add();
long? profilesId = null;
long? privilegesId = ER_Tools.ConvertToInt64(securityHelper.GetPrivID(_Connect, "ADD PROFILE"));
//Enter profile information
Values.AddProfiles ProfilesModel = null;
ProfilesModel = addHelp.ADD_ENTRY_Profiles(_Connect, new Values.AddProfiles
{
I_IDENTITIES_ID = identitiesId,
I_ENABLED = 'Y',
});
profilesId = ProfilesModel.O_PROFILES_ID;
//Enter profile security information
//Values.AddProfilesSecPriv ProfilesSecPrivModel = null;
//ProfilesSecPrivModel = addHelp.ADD_ENTRY_Profiles_Sec_Priv(_Connect, new Values.AddProfilesSecPriv
//{
// I_OBJECT_TYPE = "Permission",
// I_PROFILES_ID = profilesId,
// I_PRIVILEGES_ID = privilegesId,
// I_ENABLED = 'Y',
// I_IDENTITIES_ID = identitiesId
//});
//profilesSecPrivId = ProfilesSecPrivModel.O_PROFILES_SEC_PRIV_ID;
return(profilesId);
}
public long?GetProfileRendition(IConnectToDB _Connect, long?identity_id)
{
long?value = 0;
ER_DML er_dml = new ER_DML();
_DynamicOutputProcedures DynamicOutput = new _DynamicOutputProcedures();
List <DynamicModels.RootReportFilter> Filters = new List <DynamicModels.RootReportFilter>();
Filters.Add(new DynamicModels.RootReportFilter {
FilterName = "IDENTITIES_ID_", DBType = SqlDbType.BigInt, ParamValue = identity_id
});
DataTable TempDataTable = DynamicOutput.DynoProcSearch(_Connect, "Custom Query", "SP_S_VW_PROFILES_DAT_CHAR_RENDITION_SEARCH",
new DataTableDotNetModelMetaData {
length = -1, order = "1 asc", start = 0, verify = "T"
},
Filters);
foreach (DataRow row in TempDataTable.Rows)
{
if (row["rendition"].ToString() != "")
{
value = ER_Tools.ConvertToInt64(row["rendition"].ToString());
}
}
return(value);
}
public string GetObjPropFile(IConnectToDB _Connect, Guid?object_sets_uuid)
{
List <DynamicModels.RootReportFilter> Filters = new List <DynamicModels.RootReportFilter>();
DataTable TempDataTable = new DataTable();
ER_Tools tools = new ER_Tools();
string imageURL = "";
if (object_sets_uuid != null)
{
Filters.Add(new DynamicModels.RootReportFilter {
FilterName = "OBJECT_SETS_UUID_", DBType = SqlDbType.VarChar, SearchParamSize = -1, ParamValue = object_sets_uuid
});
TempDataTable = _DynamicOutputProcedures._DynoProcSearch(_Connect, "Custom Query", "SP_S_VW_OBJ_PROP_FILES_SEARCH",
new DataTableDotNetModelMetaData {
columns = "VALUE", length = -1, order = "1 asc", start = 0, verify = "T"
}, Filters);
}
DataColumnCollection DCC = TempDataTable.Columns;
if (TempDataTable.Rows.Count > 0 && DCC.Contains("VALUE"))
{
byte[] value = TempDataTable.Rows[0].Field <byte[]>("VALUE");
if (value.Length > 0)
{
imageURL = tools.getStringFromBytes(value);
}
}
return(imageURL);
}
public string UpdateProfileEntry(IConnectToDB _Connect, SessionObjects SO, FormCollection _formCollection)
{
SecurityHelper securityHelper = new SecurityHelper();
IdentityHelper identityHelper = new IdentityHelper();
ProfileHelper profileHelper = new ProfileHelper();
add addHelp = new add();
if (_formCollection.Keys.Count > 1)
{
long? identitiesId = ER_Tools.ConvertToInt64(identityHelper.GetIdentityID(_Connect, _formCollection["identitiesUUID"].ToString()));
long? identitiesIdOwner = SO.SessionIdentity.Identity.identities_id;
long? profilesId = ER_Tools.ConvertToInt64(profileHelper.GetProfileId(_Connect, _formCollection["profilesUUID"].ToString()));
string newemail = _formCollection["email"].ToString();
//Update profile information
UpdateProfileEmail(_Connect, identitiesId, newemail);
Values.UpdateProfiles ProfilesModel = null;
ProfilesModel = addHelp.Update_ENTRY_Profiles(_Connect, new Values.UpdateProfiles
{
I_PROFILES_ID = profilesId,
I_IDENTITIES__ID = identitiesIdOwner,
I_FIRST_NAME = _formCollection["firstName"].ToString(),
I_MIDDLE_NAME = _formCollection["middleName"].ToString(),
I_LAST_NAME = _formCollection["lastName"].ToString(),
I_OCCUPATION = _formCollection["occupation"].ToString(),
I_STATE = _formCollection["state"].ToString(),
I_ZIPCODE = _formCollection["zipCode"].ToString(),
I_PHONE = _formCollection["phone"].ToString(),
I_COUNTRY = _formCollection["country"].ToString(),
I_CITY = _formCollection["city"].ToString(),
I_ABOUT = _formCollection["about"].ToString(),
});
}
return("");
}
private static void HandleByteTypes(DataTable theseObjects, ref long?T_OBJECT_SETS_ID, out long?T_PREV_OBJECT_SETS_ID, ref int i, ref DataRow item, ref string PROPERTY_NAME, ref string PROPERTY_VALUE, ref string OBJECT_TYPE, out ColumnStructure thisColumn)
{
var _DataType = "varbinary";
thisColumn = new ColumnStructure {
_Name = PROPERTY_VALUE, _DataType = _DataType, _DefaultValue = "", _IsNull = true
};
T_PREV_OBJECT_SETS_ID = T_OBJECT_SETS_ID;
//Increment i
i++;
for (int y = i; y < theseObjects.AsEnumerable().Count(); y++)
{
item = theseObjects.Rows[i];
AssignValue(out T_OBJECT_SETS_ID, item, out PROPERTY_NAME, out PROPERTY_VALUE, out OBJECT_TYPE);
if (T_PREV_OBJECT_SETS_ID == T_OBJECT_SETS_ID)
{
item = theseObjects.Rows[y];
if (PROPERTY_NAME == "Required" && PROPERTY_VALUE == "true")
{
thisColumn._IsNull = false;
thisColumn._DefaultValue = ER_Tools.ConvertObjectToString(new byte[0]);
}
i++;
T_PREV_OBJECT_SETS_ID = T_OBJECT_SETS_ID;
}
else
{
i--;
item = theseObjects.Rows[i];
AssignValue(out T_OBJECT_SETS_ID, item, out PROPERTY_NAME, out PROPERTY_VALUE, out OBJECT_TYPE);
break;
}
}
}
// GET: Authentication/LoginJson
public async Task <JsonResult> get(Guid?token)
{
var jsonContent = Json(new
{
access = false
});
if (token != null)
{
List <DynamicModels.RootReportFilter> filters = new List <DynamicModels.RootReportFilter> {
new DynamicModels.RootReportFilter {
FilterName = "APPLICATION_NAME_", ParamValue = "Revamp System"
},
new DynamicModels.RootReportFilter {
FilterName = "STAGE_NAME_", ParamValue = "login"
},
new DynamicModels.RootReportFilter {
FilterName = "GRIP_NAME_", ParamValue = "login"
}
};
DataTable Result = await _DynamicOutputProcedures._DynoProcSearchAsync(_Connect, "Custom Query", "SP_S_VW_APPLICATION_OBJECTS_SEARCH",
new DataTableDotNetModelMetaData { length = -1, order = "APPLICATIONS_ID asc, STAGES_ID asc, GRIPS_ID asc, OBJECT_SETS_ID asc, OBJ_PROP_SETS_ID asc ", start = 0, verify = "T" },
filters);
string captchaText = await mvcApplication.ReturnViewToStringAsync(new CommonModels.MVCGetPartial
{
_thisController = ControllerContext,
ViewName = "Shared/_Captcha",
model = null
});
string AntiForgeryObject = await GetAntiForgeryObject();
string AntiForgeryToken = await GetAntiForgeryToken();
string AntiForgeryObject2 = await GetAntiForgeryObject();
var content = System.IO.File.ReadAllText(_hostingEnvironment.ContentRootPath + "/Areas/Authentication/Templates/Login/Objects.html");
ArrayList JsonData = ER_Tools._GetObjectListFromDataTable(new ArrayList(), Result);
string jsonString = Newtonsoft.Json.JsonConvert.SerializeObject(JsonData);
//var thisUser = HttpContext.User.Identity.Name.ToString();
var thisUser = "";// _httpContextAccessor.HttpContext.User.FindFirst(ClaimTypes.NameIdentifier).Value;
bool isCACEnabled = RevampCoreSettings.IsCacEnabled;
jsonContent = Json(new
{
access = true,
d = Revamp.IO.Tools.Box.Base64Encode(jsonString),
c = Revamp.IO.Tools.Box.Base64Encode(captchaText),
a = AntiForgeryObject,
u = thisUser,
s = Revamp.IO.Tools.Box.Base64Encode(content),
z = AntiForgeryToken,
a2 = AntiForgeryObject2,
ca = isCACAvailable(),
ic = isCACEnabled,
});
}
var jsonResult = Json(jsonContent);
return(jsonResult);
}
public SessionObjects AddProfilePic(IConnectToDB _Connect, SessionObjects SO, FormCollection _formCollection)
{
try
{
if (_formCollection.Keys.Count > 1)
{
SecurityHelper securityHelper = new SecurityHelper();
IdentityHelper identityHelper = new IdentityHelper();
ER_DML er_dml = new ER_DML();
add addHelp = new add();
long? identitiesId = ER_Tools.ConvertToInt64(identityHelper.GetIdentityID(_Connect, _formCollection["identitiesUUID"].ToString()));
string fileName = _formCollection["fileName"].ToString();
string fileType = _formCollection["fileType"].ToString();
long? fileSize = ER_Tools.ConvertToInt64(_formCollection["fileSize"].ToString());
byte[] fileContent = Encoding.UTF8.GetBytes(_formCollection["profileImage"].ToString());
Guid? ProfilesUUID = ER_Tools.ConvertToGuid(_formCollection["profilesUUID"].ToString());
long? Profiles_ID = GetProfileId(_Connect, ProfilesUUID.ToString());
long? profileImagesId = 0;
var profileImagesDT = GetImageIdByProfile(_Connect, Profiles_ID);
DataColumnCollection _dccColumnID = profileImagesDT.Columns;
if (_dccColumnID.Contains("PROFILE_IMAGES_ID") && profileImagesDT.Rows.Count > 0)
{
Values.UpdateProfileImages ProfileImagesModel = null;
ProfileImagesModel = addHelp.UPDATE_ENTRY_Profile_Images(_Connect, new Values.UpdateProfileImages
{
I_PROFILE_IMAGES_ID = profileImagesDT.Rows[0].Field <long?>("PROFILE_IMAGES_ID"),
I_PROFILES_ID = Profiles_ID,
I_FILE_NAME = fileName,
I_FILE_SIZE = fileSize,
I_CONTENT_TYPE = fileType,
I_VALUE = fileContent
});
profileImagesId = ProfileImagesModel.O_PROFILE_IMAGES_ID;
//Enable Profile Image
er_dml.TOGGLE_OBJECT(_Connect, "PROFILE_IMAGES", profileImagesId, "Y");
}
else
{
//Values.AddProfilesSecPriv ProfilesSecPrivModel = null;
//ProfilesSecPrivModel = addHelp.ADD_ENTRY_Profiles_Sec_Priv(_Connect, new Values.AddProfilesSecPriv
//{
// I_OBJECT_TYPE = "Permission",
// I_PROFILES_ID = Profiles_ID,
// I_PRIVILEGES_ID = ER_Tools.ConvertToInt64(securityHelper.GetPrivID(_Connect, "CREATE OBJECT")),
// I_ENABLED = 'Y',
// I_IDENTITIES_ID = identitiesId
//});
Values.AddProfileImages ProfileImagesModel = null;
ProfileImagesModel = addHelp.ADD_ENTRY_Profile_Images(_Connect, new Values.AddProfileImages
{
I_IDENTITIES_ID = identitiesId,
I_PROFILES_UUID = ProfilesUUID,
I_ENABLED = 'Y',
I_FILE_NAME = fileName,
I_FILE_SIZE = fileSize,
I_CONTENT_TYPE = fileType,
I_VALUE = fileContent
});
}
//Set Profile Image
_session.SetString("ProfileImage", GetProfileImage(_Connect, identitiesId));
}
}
catch
{
}
return(SO);
}
public override void OnActionExecuting(ActionExecutingContext filterContext)
{
ConnectToDB _Connect = new ConnectToDB {
Platform = RevampCoreSettings.Platform,
DBConnString = RevampCoreSettings.DbConnect,
SourceDBOwner = RevampCoreSettings.SystemDBName
};
IConnectToDB IConnect = _Connect;
SecurityHelper securityHelper = new SecurityHelper();
AppHelper appHelper = new AppHelper();
SessionObjects SO = null;
try
{
byte[] tempSession = null;
bool sessionPresent = filterContext.HttpContext.Session.TryGetValue("SO", out tempSession);
SO = sessionPresent ? Tools.Box.FromByteArray <SessionObjects>(tempSession) : new SessionObjects();
}
catch
{
filterContext.Result = new RedirectResult("~/login");
}
if (SO != null && SO.SessionIdentity != null)
{
bool hasthesePrivs = false;
bool PrivsCheck = false;
if (CheckForThesePrivileges != null && CheckForThesePrivileges.Length > 0)
{
PrivsCheck = true;
hasthesePrivs = securityHelper.DoesIdentityHavePrivileges(IConnect, SO.SessionIdentity.Identity.identities_id, CheckForThesePrivileges);
}
bool hasthesePrivsOnCore = false;
bool PrivsOnCoreCheck = false;
if (CheckForThesePrivilegesOnCore != null && CheckForThesePrivilegesOnCore.Length > 0)
{
var formCollection = filterContext.HttpContext.Request.Form;
Guid?coreUUID = null;
//Cores
if (!string.IsNullOrEmpty(CoreUUID))
{
if (formCollection.ContainsKey(CoreUUID))
{
coreUUID = ER_Tools.ConvertToGuid(formCollection[CoreUUID].ToString());
}
else if (filterContext.HttpContext.Request.Query.ContainsKey(CoreUUID))
{
coreUUID = ER_Tools.ConvertToGuid(filterContext.HttpContext.Request.Query[CoreUUID].ToString());
}
}
//Applications
if (!string.IsNullOrEmpty(ApplicationUUID))
{
Guid?appUUID = null;
if (formCollection.ContainsKey(ApplicationUUID))
{
appUUID = ER_Tools.ConvertToGuid(formCollection[ApplicationUUID].ToString());
}
else if (filterContext.HttpContext.Request.Query.ContainsKey(ApplicationUUID))
{
appUUID = ER_Tools.ConvertToGuid(filterContext.HttpContext.Request.Query[ApplicationUUID].ToString());
}
coreUUID = appHelper.GetAppCoreUUID(_Connect, appUUID);
}
//Roles
if (!string.IsNullOrEmpty(RoleUUID))
{
Guid?roleUUID = null;
if (formCollection.ContainsKey(RoleUUID))
{
roleUUID = ER_Tools.ConvertToGuid(formCollection[RoleUUID].ToString());
}
else if (filterContext.HttpContext.Request.Query.ContainsKey(RoleUUID))
{
roleUUID = ER_Tools.ConvertToGuid(filterContext.HttpContext.Request.Query[RoleUUID].ToString());
}
coreUUID = securityHelper.GetRoleCoreUUID(_Connect, roleUUID);
}
//Groups
if (!string.IsNullOrEmpty(GroupUUID))
{
Guid?groupUUID = null;
if (formCollection.ContainsKey(GroupUUID))
{
groupUUID = ER_Tools.ConvertToGuid(formCollection[GroupUUID].ToString());
}
else if (filterContext.HttpContext.Request.Query.ContainsKey(GroupUUID))
{
groupUUID = ER_Tools.ConvertToGuid(filterContext.HttpContext.Request.Query[GroupUUID].ToString());
}
coreUUID = securityHelper.GetGroupCoreUUID(_Connect, groupUUID);
}
//Check for privileges on core
if (coreUUID != null)
{
PrivsOnCoreCheck = true;
hasthesePrivsOnCore = securityHelper.DoesIdentityHavePrivilegeOnCore(IConnect, SO.SessionIdentity.Identity.identities_id, CheckForThesePrivilegesOnCore, coreUUID);
}
}
bool hastheseRoles = false;
bool RolesCheck = false;
if (CheckForTheseRoles != null && CheckForTheseRoles.Length > 0)
{
RolesCheck = true;
hastheseRoles = securityHelper.DoesIdentityHaveRoles(IConnect, CheckForTheseRoles, SO.SessionIdentity.Identity.identities_id);
}
if (PrivsCheck || RolesCheck || PrivsOnCoreCheck)
{
//if((PrivsOnCoreCheck && !hasthesePrivsOnCore))
//{
// hasthesePrivs = false;
// hastheseRoles = false;
//}
if (hasthesePrivs == false && hastheseRoles == false && hasthesePrivsOnCore == false)
{
if (isActionResult)
{
filterContext.HttpContext.Response.StatusCode = 403;
filterContext.Result = new RedirectResult("/error/error404");
}
else
{
filterContext.HttpContext.Response.StatusCode = 403;
var result = new JsonResult(new
{
Data = new { Success = false, Data = "Access Denied" },
ContentEncoding = System.Text.Encoding.UTF8,
ContentType = "application/json"
//JsonRequestBehavior = JsonRequestBehavior.AllowGet
});
filterContext.Result = result;
}
}
}
}
base.OnActionExecuting(filterContext);
}
