private Division GetDivision(Division request) { var id = request?.Id; Division ret = null; var query = DocQuery.ActiveQuery ?? Execute; DocPermissionFactory.SetSelect <Division>(currentUser, "Division", request.Select); DocEntityDivision entity = null; if (id.HasValue) { entity = DocEntityDivision.Get(id.Value); } if (null == entity) { throw new HttpError(HttpStatusCode.NotFound, $"No Division found for Id {id.Value}"); } if (!DocPermissionFactory.HasPermission(entity, currentUser, DocConstantPermission.VIEW)) { throw new HttpError(HttpStatusCode.Forbidden, "You do not have VIEW permission for this route."); } ret = entity?.ToDto(); return(ret); }
public void Delete(Division request) { using (Execute) { Execute.Run(ssn => { if (!(request?.Id > 0)) { throw new HttpError(HttpStatusCode.NotFound, $"No Id provided for delete."); } var en = DocEntityDivision.Get(request?.Id); if (null == en) { throw new HttpError(HttpStatusCode.NotFound, $"No Division could be found for Id {request?.Id}."); } if (en.IsRemoved) { return; } if (!DocPermissionFactory.HasPermission(en, currentUser, DocConstantPermission.DELETE)) { throw new HttpError(HttpStatusCode.Forbidden, "You do not have DELETE permission for this route."); } en.Remove(); DocCacheClient.RemoveSearch(DocConstantModelName.DIVISION); DocCacheClient.RemoveById(request.Id); }); } }
public Division Post(DivisionCopy request) { Division ret = null; using (Execute) { Execute.Run(ssn => { var entity = DocEntityDivision.Get(request?.Id); if (null == entity) { throw new HttpError(HttpStatusCode.NoContent, "The COPY request did not succeed."); } if (!DocPermissionFactory.HasPermission(entity, currentUser, DocConstantPermission.ADD)) { throw new HttpError(HttpStatusCode.Forbidden, "You do not have ADD permission for this route."); } var pClient = entity.Client; var pDefaultLocale = entity.DefaultLocale; var pDocumentSets = entity.DocumentSets.ToList(); var pName = entity.Name; if (!DocTools.IsNullOrEmpty(pName)) { pName += " (Copy)"; } var pRole = entity.Role; var pSettings = entity.Settings; var pUsers = entity.Users.ToList(); var copy = new DocEntityDivision(ssn) { Hash = Guid.NewGuid() , Client = pClient , DefaultLocale = pDefaultLocale , Name = pName , Role = pRole , Settings = pSettings }; foreach (var item in pDocumentSets) { entity.DocumentSets.Add(item); } foreach (var item in pUsers) { entity.Users.Add(item); } copy.SaveChanges(DocConstantPermission.ADD); ret = copy.ToDto(); }); } return(ret); }
private User _AssignValues(User request, DocConstantPermission permission, Session session) { if (permission != DocConstantPermission.ADD && (request == null || request.Id <= 0)) { throw new HttpError(HttpStatusCode.NotFound, $"No record"); } if (permission == DocConstantPermission.ADD && !DocPermissionFactory.HasPermissionTryAdd(currentUser, "User")) { throw new HttpError(HttpStatusCode.Forbidden, "You do not have ADD permission for this route."); } request.Select = request.Select ?? new List <string>(); User ret = null; request = _InitAssignValues <User>(request, permission, session); //In case init assign handles create for us, return it if (permission == DocConstantPermission.ADD && request.Id > 0) { return(request); } var cacheKey = GetApiCacheKey <User>(DocConstantModelName.USER, nameof(User), request); //First, assign all the variables, do database lookups and conversions var pClientDepartment = request.ClientDepartment; var pDivision = DocEntityDivision.Get(request.Division?.Id, true, Execute) ?? DocEntityDivision.Get(request.DivisionId, true, Execute); var pDocumentSets = GetVariable <Reference>(request, nameof(request.DocumentSets), request.DocumentSets?.ToList(), request.DocumentSetsIds?.ToList()); var pEmail = request.Email; var pExpireDate = request.ExpireDate; var pFailedLoginCount = request.FailedLoginCount; var pFirstName = request.FirstName; var pGravatar = request.Gravatar; var pHistory = GetVariable <Reference>(request, nameof(request.History), request.History?.ToList(), request.HistoryIds?.ToList()); var pImpersonated = GetVariable <Reference>(request, nameof(request.Impersonated), request.Impersonated?.ToList(), request.ImpersonatedIds?.ToList()); var pImpersonating = GetVariable <Reference>(request, nameof(request.Impersonating), request.Impersonating?.ToList(), request.ImpersonatingIds?.ToList()); var pIsSystemUser = request.IsSystemUser; var pJobTitle = request.JobTitle; var pLastLogin = request.LastLogin; var pLastName = request.LastName; var pLegacyUsername = request.LegacyUsername; var pLocale = DocEntityLocale.Get(request.Locale?.Id, true, Execute) ?? DocEntityLocale.Get(request.LocaleId, true, Execute); var pLoginCount = request.LoginCount; var pName = request.Name; var pRoles = GetVariable <Role>(request, nameof(request.Roles), request.Roles?.ToList(), request.RolesIds?.ToList()); var pScopes = GetVariable <Reference>(request, nameof(request.Scopes), request.Scopes?.ToList(), request.ScopesIds?.ToList()); var pSessions = GetVariable <Reference>(request, nameof(request.Sessions), request.Sessions?.ToList(), request.SessionsIds?.ToList()); var pSettings = (DocTools.IsNullOrEmpty(request.Settings)) ? null : DocSerialize <JsonObject> .ToString(request.Settings); var pSlack = request.Slack; var pStartDate = request.StartDate; var pStatus = request.Status; var pTeams = GetVariable <Reference>(request, nameof(request.Teams), request.Teams?.ToList(), request.TeamsIds?.ToList()); var pTimeCards = GetVariable <Reference>(request, nameof(request.TimeCards), request.TimeCards?.ToList(), request.TimeCardsIds?.ToList()); var pUpdates = GetVariable <Reference>(request, nameof(request.Updates), request.Updates?.ToList(), request.UpdatesIds?.ToList()); var pUserType = DocEntityUserType.Get(request.UserType?.Id, true, Execute) ?? DocEntityUserType.Get(request.UserTypeId, true, Execute); var pWorkflows = GetVariable <Reference>(request, nameof(request.Workflows), request.Workflows?.ToList(), request.WorkflowsIds?.ToList()); var pArchived = true == request.Archived; var pLocked = request.Locked; var entity = InitEntity <DocEntityUser, User>(request, permission, session); if (AllowPatchValue <User, bool>(request, DocConstantModelName.USER, pArchived, permission, nameof(request.Archived), pArchived != entity.Archived)) { entity.Archived = pArchived; } if (AllowPatchValue <User, string>(request, DocConstantModelName.USER, pClientDepartment, permission, nameof(request.ClientDepartment), pClientDepartment != entity.ClientDepartment)) { entity.ClientDepartment = pClientDepartment; } if (AllowPatchValue <User, DocEntityDivision>(request, DocConstantModelName.USER, pDivision, permission, nameof(request.Division), pDivision != entity.Division)) { entity.Division = pDivision; } if (AllowPatchValue <User, string>(request, DocConstantModelName.USER, pEmail, permission, nameof(request.Email), pEmail != entity.Email)) { entity.Email = pEmail; } if (AllowPatchValue <User, DateTime?>(request, DocConstantModelName.USER, pExpireDate, permission, nameof(request.ExpireDate), pExpireDate != entity.ExpireDate)) { entity.ExpireDate = pExpireDate; } if (AllowPatchValue <User, int?>(request, DocConstantModelName.USER, pFailedLoginCount, permission, nameof(request.FailedLoginCount), pFailedLoginCount != entity.FailedLoginCount)) { if (null != pFailedLoginCount) { entity.FailedLoginCount = (int)pFailedLoginCount; } } if (AllowPatchValue <User, string>(request, DocConstantModelName.USER, pFirstName, permission, nameof(request.FirstName), pFirstName != entity.FirstName)) { entity.FirstName = pFirstName; } if (AllowPatchValue <User, string>(request, DocConstantModelName.USER, pGravatar, permission, nameof(request.Gravatar), pGravatar != entity.Gravatar)) { entity.Gravatar = pGravatar; } if (AllowPatchValue <User, string>(request, DocConstantModelName.USER, pJobTitle, permission, nameof(request.JobTitle), pJobTitle != entity.JobTitle)) { entity.JobTitle = pJobTitle; } if (AllowPatchValue <User, DateTime?>(request, DocConstantModelName.USER, pLastLogin, permission, nameof(request.LastLogin), pLastLogin != entity.LastLogin)) { entity.LastLogin = pLastLogin; } if (AllowPatchValue <User, string>(request, DocConstantModelName.USER, pLastName, permission, nameof(request.LastName), pLastName != entity.LastName)) { entity.LastName = pLastName; } if (AllowPatchValue <User, string>(request, DocConstantModelName.USER, pLegacyUsername, permission, nameof(request.LegacyUsername), pLegacyUsername != entity.LegacyUsername)) { entity.LegacyUsername = pLegacyUsername; } if (AllowPatchValue <User, DocEntityLocale>(request, DocConstantModelName.USER, pLocale, permission, nameof(request.Locale), pLocale != entity.Locale)) { entity.Locale = pLocale; } if (AllowPatchValue <User, int?>(request, DocConstantModelName.USER, pLoginCount, permission, nameof(request.LoginCount), pLoginCount != entity.LoginCount)) { if (null != pLoginCount) { entity.LoginCount = (int)pLoginCount; } } if (AllowPatchValue <User, string>(request, DocConstantModelName.USER, pName, permission, nameof(request.Name), pName != entity.Name)) { entity.Name = pName; } if (AllowPatchValue <User, string>(request, DocConstantModelName.USER, pSettings, permission, nameof(request.Settings), pSettings != entity.Settings)) { entity.Settings = pSettings; } if (AllowPatchValue <User, string>(request, DocConstantModelName.USER, pSlack, permission, nameof(request.Slack), pSlack != entity.Slack)) { entity.Slack = pSlack; } if (AllowPatchValue <User, DateTime?>(request, DocConstantModelName.USER, pStartDate, permission, nameof(request.StartDate), pStartDate != entity.StartDate)) { entity.StartDate = pStartDate; } if (AllowPatchValue <User, StatusEnm?>(request, DocConstantModelName.USER, pStatus, permission, nameof(request.Status), pStatus != entity.Status)) { if (null != pStatus) { entity.Status = pStatus.Value; } } if (AllowPatchValue <User, DocEntityUserType>(request, DocConstantModelName.USER, pUserType, permission, nameof(request.UserType), pUserType != entity.UserType)) { entity.UserType = pUserType; } if (request.Locked && AllowPatchValue <User, bool>(request, DocConstantModelName.USER, pArchived, permission, nameof(request.Locked), pLocked != entity.Locked)) { entity.Archived = pArchived; } entity.SaveChanges(permission); var idsToInvalidate = new List <int>(); idsToInvalidate.AddRange(PatchCollection <User, DocEntityUser, Reference, DocEntityDocumentSet>(request, entity, pDocumentSets, permission, nameof(request.DocumentSets))); idsToInvalidate.AddRange(PatchCollection <User, DocEntityUser, Reference, DocEntityHistory>(request, entity, pHistory, permission, nameof(request.History))); idsToInvalidate.AddRange(PatchCollection <User, DocEntityUser, Reference, DocEntityImpersonation>(request, entity, pImpersonated, permission, nameof(request.Impersonated))); idsToInvalidate.AddRange(PatchCollection <User, DocEntityUser, Reference, DocEntityImpersonation>(request, entity, pImpersonating, permission, nameof(request.Impersonating))); idsToInvalidate.AddRange(PatchCollection <User, DocEntityUser, Role, DocEntityRole>(request, entity, pRoles, permission, nameof(request.Roles))); idsToInvalidate.AddRange(PatchCollection <User, DocEntityUser, Reference, DocEntityScope>(request, entity, pScopes, permission, nameof(request.Scopes))); idsToInvalidate.AddRange(PatchCollection <User, DocEntityUser, Reference, DocEntityUserSession>(request, entity, pSessions, permission, nameof(request.Sessions))); idsToInvalidate.AddRange(PatchCollection <User, DocEntityUser, Reference, DocEntityTeam>(request, entity, pTeams, permission, nameof(request.Teams))); idsToInvalidate.AddRange(PatchCollection <User, DocEntityUser, Reference, DocEntityTimeCard>(request, entity, pTimeCards, permission, nameof(request.TimeCards))); idsToInvalidate.AddRange(PatchCollection <User, DocEntityUser, Reference, DocEntityUpdate>(request, entity, pUpdates, permission, nameof(request.Updates))); idsToInvalidate.AddRange(PatchCollection <User, DocEntityUser, Reference, DocEntityWorkflow>(request, entity, pWorkflows, permission, nameof(request.Workflows))); if (idsToInvalidate.Any()) { idsToInvalidate.Add(entity.Id); DocCacheClient.RemoveByEntityIds(idsToInvalidate); DocCacheClient.RemoveSearch(DocConstantModelName.USER); } entity.SaveChanges(permission); DocPermissionFactory.SetSelect <User>(currentUser, nameof(User), request.Select); ret = entity.ToDto(); var cacheExpires = DocResources.Metadata.GetCacheExpiration(DocConstantModelName.USER); DocCacheClient.Set(key: cacheKey, value: ret, entityId: request.Id, entityType: DocConstantModelName.USER, cacheExpires); return(ret); }