示例#1
0
        public void Delete(Comment request)
        {
            using (Execute)
            {
                Execute.Run(ssn =>
                {
                    if (!(request?.Id > 0))
                    {
                        throw new HttpError(HttpStatusCode.NotFound, $"No Id provided for delete.");
                    }

                    var en = DocEntityComment.Get(request?.Id);
                    if (null == en)
                    {
                        throw new HttpError(HttpStatusCode.NotFound, $"No Comment could be found for Id {request?.Id}.");
                    }
                    if (en.IsRemoved)
                    {
                        return;
                    }

                    if (!DocPermissionFactory.HasPermission(en, currentUser, DocConstantPermission.DELETE))
                    {
                        throw new HttpError(HttpStatusCode.Forbidden, "You do not have DELETE permission for this route.");
                    }

                    en.Remove();

                    DocCacheClient.RemoveSearch(DocConstantModelName.COMMENT);
                    DocCacheClient.RemoveById(request.Id);
                });
            }
        }
示例#2
0
        private Comment GetComment(Comment request)
        {
            var     id    = request?.Id;
            Comment ret   = null;
            var     query = DocQuery.ActiveQuery ?? Execute;

            DocPermissionFactory.SetSelect <Comment>(currentUser, "Comment", request.Select);

            DocEntityComment entity = null;

            if (id.HasValue)
            {
                entity = DocEntityComment.Get(id.Value);
            }
            if (null == entity)
            {
                throw new HttpError(HttpStatusCode.NotFound, $"No Comment found for Id {id.Value}");
            }

            if (!DocPermissionFactory.HasPermission(entity, currentUser, DocConstantPermission.VIEW))
            {
                throw new HttpError(HttpStatusCode.Forbidden, "You do not have VIEW permission for this route.");
            }

            ret = entity?.ToDto();
            return(ret);
        }
示例#3
0
        public Comment Post(CommentCopy request)
        {
            Comment ret = null;

            using (Execute)
            {
                Execute.Run(ssn =>
                {
                    var entity = DocEntityComment.Get(request?.Id);
                    if (null == entity)
                    {
                        throw new HttpError(HttpStatusCode.NoContent, "The COPY request did not succeed.");
                    }
                    if (!DocPermissionFactory.HasPermission(entity, currentUser, DocConstantPermission.ADD))
                    {
                        throw new HttpError(HttpStatusCode.Forbidden, "You do not have ADD permission for this route.");
                    }

                    var pScopes = entity.Scopes.ToList();
                    var pText   = entity.Text;
                    var pUser   = entity.User;
                    var copy    = new DocEntityComment(ssn)
                    {
                        Hash   = Guid.NewGuid()
                        , Text = pText
                        , User = pUser
                    };
                    foreach (var item in pScopes)
                    {
                        entity.Scopes.Add(item);
                    }

                    copy.SaveChanges(DocConstantPermission.ADD);
                    ret = copy.ToDto();
                });
            }
            return(ret);
        }