public ActionResult Manage()
{
ViewBag.ReturnUrl = Url.Action("Manage");
var uc = new UserManagementController();
return View(uc.getUserProfile(User.Identity.Name));
}
public ActionResult Unlock(long id)
{
var rlc = new RequestLockManagementController();
// add AuditLog entry for lock remove
var upc = new UserManagementController();
var almc = new AuditLogManagementController();
almc.addEntry(id, upc.getUserProfile(User.Identity.Name).UserId,
Constants.AuditType.RequestUnlock);
rlc.removeLock(id);
return RedirectToAction("Index", "Home", new {
status = Constants.URLStatus.Unlocked
});
}
public ActionResult Create(RequestContent reqContent)
{
var rmc = new RequestManagementController();
bool valid = ModelState.IsValid;
if (reqContent.parentRequestID != null &&
!rmc.requestExists((long) reqContent.parentRequestID)) {
ModelState.AddModelError("NonexistentParentRequest",
"Parent Request ID must correspond to an existing request.");
valid = false;
}
if (Request.Form["mark_as_complete"] != null) {
foreach (
QuestionResponseContent qrContent in
reqContent.questionResponseList) {
if (String.IsNullOrEmpty(qrContent.question) ||
removeNewLinesAndTabs(qrContent.question).Equals("<br />") ||
String.IsNullOrEmpty(qrContent.response) ||
removeNewLinesAndTabs(qrContent.response).Equals("<br />") ||
qrContent.questionTypeID == null ||
qrContent.tumourGroupID == null ||
qrContent.timeSpent == null ||
qrContent.severity == null ||
qrContent.consequence == null ||
qrContent.keywords.Count < 1) {
ModelState.AddModelError("IncompleteQuestion",
"Questions must be completed before marking request as complete.");
valid = false;
break;
}
if (qrContent.keywords.Any(keyword => keyword.Length > 128)) {
ModelState.AddModelError("KeywordTooLong",
"Keywords must be less than 128 characters.");
valid = false;
}
if (qrContent.referenceList.Any(refContent => String.IsNullOrEmpty(refContent.referenceString))) {
ModelState.AddModelError("IncompleteReference",
"References must be completed before marking request as complete.");
valid = false;
}
}
reqContent.timeClosed = DateTime.Now;
reqContent.requestStatus = Constants.RequestStatus.Completed;
}
// Encode HTML in question responses
// Replace null references with empty string
foreach (
QuestionResponseContent qrContent in
reqContent.questionResponseList) {
if (!String.IsNullOrEmpty(qrContent.question)) {
qrContent.question = HttpUtility.HtmlEncode(
removeNewLinesAndTabs(qrContent.question))
.Replace("'", "'");
}
if (!String.IsNullOrEmpty(qrContent.response)) {
qrContent.response = HttpUtility.HtmlEncode(
removeNewLinesAndTabs(qrContent.response))
.Replace("'", "'");
}
if (!String.IsNullOrEmpty(qrContent.specialNotes)) {
qrContent.specialNotes = HttpUtility.HtmlEncode(
removeNewLinesAndTabs(qrContent.specialNotes))
.Replace("'", "'");
}
foreach (
ReferenceContent refContent in qrContent.referenceList) {
refContent.referenceString =
refContent.referenceString == null ?
"" :
refContent.referenceString.Replace("\\", "\\\\");
}
}
if (!valid) {
var dc = new DropdownManagementController();
ViewBag.RequestorTypes = new SelectList(
dc.getEntries(Constants.DropdownTable.RequestorType),
"id", "text");
ViewBag.Regions = new SelectList(
dc.getEntries(Constants.DropdownTable.Region),
"id", "text");
ViewBag.GenderOptions = new SelectList(Constants.genderOptions);
return View(reqContent);
}
long reqId = rmc.create(reqContent);
var uc = new UserManagementController();
UserProfile up = uc.getUserProfile(User.Identity.Name);
var almc = new AuditLogManagementController();
almc.addEntry(reqId, up.UserId,
Constants.AuditType.RequestCreation,
reqContent.timeOpened);
if (reqContent.requestStatus == Constants.RequestStatus.Completed &&
reqContent.timeClosed != null) {
almc.addEntry(reqId, up.UserId,
Constants.AuditType.RequestCompletion,
(DateTime) reqContent.timeClosed);
}
if (Roles.IsUserInRole(Constants.Roles.VIEWER)) {
return RedirectToAction("Details", "Request",
new {
id = reqId
});
}
return RedirectToAction("Index", "Home",
new {
status =
Constants.URLStatus.SuccessfulCreate
});
}
/// <summary>
/// Ability to Export a locked Request as a DOCX
/// </summary>
/// <param name="id">The Request ID to Export</param>
/// <returns>A DOCX file.</returns>
/// <request type="GET">/Request/Export</request>
public ActionResult Export(long id)
{
var wec = new WordExportController();
var db = new CAIRSDataContext();
Request request = db.Requests.FirstOrDefault(r => r.RequestID == id);
var markDate = new DateTime(2010, 01, 01, 00, 00, 00, 00);
TimeSpan dateStamp = DateTime.Now.Subtract(markDate);
string filePath =
Server.MapPath(Constants.Export.REPORT_TEMP_PATH +
dateStamp.TotalSeconds + ".docx");
string templatePath =
Server.MapPath(Constants.Export.REPORT_TEMPLATE_PATH);
IEnumerable<string> output = wec.requestToStrings(request);
wec.generateDocument(output, templatePath, filePath, id);
// add AuditLog entry for exporting
var upc = new UserManagementController();
var almc = new AuditLogManagementController();
almc.addEntry(id, upc.getUserProfile(User.Identity.Name).UserId,
Constants.AuditType.RequestExport);
return View("Details", new RequestContent(request));
}
public ActionResult Edit(long id)
{
var rlc = new RequestLockManagementController();
var uc = new UserManagementController();
UserProfile up = uc.getUserProfile(User.Identity.Name);
RequestLock rl = rlc.getRequestLock(id);
if (rl == null) {
rlc.addLock(id, up.UserId);
} else if (rl.UserID != up.UserId) {
// Locked to someone else, redirect
return RedirectToAction("Index", "Home", new {
status = Constants.URLStatus.AccessingLocked
});
}
var dc = new DropdownManagementController();
var rmc = new RequestManagementController();
RequestContent reqContent = rmc.getRequestDetails(id);
if (reqContent.requestStatus == Constants.RequestStatus.Invalid) {
// Invalid request, cannot edit
return RedirectToAction("Index", "Home", new {
status = Constants.URLStatus.EditingInvalid
});
}
ViewBag.RequestorTypes = new SelectList(
dc.getEntries(Constants.DropdownTable.RequestorType),
"id", "text");
ViewBag.Regions = new SelectList(
dc.getEntries(Constants.DropdownTable.Region),
"id", "text");
ViewBag.GenderOptions = new SelectList(Constants.genderOptions);
return View(reqContent);
}
public ActionResult Details(long id)
{
var rmc = new RequestManagementController();
var rlc = new RequestLockManagementController();
var upc = new UserManagementController();
var db = new CAIRSDataContext();
int timeSpent = 0;
// Set up the Request Object
RequestContent request = rmc.getRequestDetails(id);
if (request == null) {
ViewBag.Title = Constants.UIString.TitleText.VIEW_REQUEST
+ " - "
+ Constants.UIString.TitleText.ERROR;
ViewBag.Error =
"The Request ID provided does not exist in the database.";
return View((object) null);
}
ViewBag.Title = Constants.UIString.TitleText.VIEW_REQUEST
+ " - "
+ Constants.UIString.TitleText.REQUEST_NUM
+ request.requestID;
// Show error if not editor/administrator and request isn't complete
if (!User.IsInRole(Constants.Roles.REQUEST_EDITOR)
&& !User.IsInRole(Constants.Roles.ADMINISTRATOR)
&& request.requestStatus != Constants.RequestStatus.Completed) {
ViewBag.Title = Constants.UIString.TitleText.VIEW_REQUEST
+ " - "
+ Constants.UIString.TitleText.ERROR;
ViewBag.Error =
"You do not have the necessary permissions to view this request.";
return View((object) null);
}
// Show error if not administrator and request is invalid (deleted)
if (!User.IsInRole(Constants.Roles.ADMINISTRATOR)
&& request.requestStatus == Constants.RequestStatus.Invalid) {
ViewBag.Title = Constants.UIString.TitleText.VIEW_REQUEST
+ " - "
+ Constants.UIString.TitleText.ERROR;
ViewBag.Error =
"You do not have the necessary permissions to view this request.";
return View((object) null);
}
// Show error if you can't view due to locked status
if (rlc.isLocked(id) &&
!User.IsInRole(Constants.Roles.ADMINISTRATOR)) {
// Check if it's not locked to you
if (!User.IsInRole(Constants.Roles.REQUEST_EDITOR) ||
rlc.getRequestLock(id).UserID !=
upc.getUserProfile(User.Identity.Name).UserId) {
request = null;
ViewBag.Title = Constants.UIString.TitleText.VIEW_REQUEST
+ " - "
+ Constants.UIString.TitleText.ERROR;
ViewBag.Error =
"This request has been locked to another person and cannot be viewed until unlocked.";
return View((object) null);
}
}
// Set up Time Spent (Question-Dependent)
foreach (QuestionResponseContent qr in request.questionResponseList) {
timeSpent += qr.timeSpent.GetValueOrDefault(0);
}
ViewBag.TimeSpent = timeSpent;
ViewBag.DataContext = new CAIRSDataContext();
// Created By
AuditLog auditLog = (from al in db.AuditLogs
where
(int) al.AuditType ==
(int) Constants.AuditType.RequestCreation &&
al.RequestID == request.requestID
select al).FirstOrDefault();
if (auditLog != null && auditLog.UserProfile != null) {
ViewBag.CreatedBy = auditLog.UserProfile.UserFullName;
} else {
ViewBag.CreatedBy = "";
}
// Closed By
auditLog = (from al in db.AuditLogs
where
(int) al.AuditType ==
(int) Constants.AuditType.RequestCompletion &&
al.RequestID == request.requestID
select al).FirstOrDefault();
if (auditLog != null && auditLog.UserProfile != null) {
ViewBag.CompletedBy = auditLog.UserProfile.UserFullName;
} else {
ViewBag.CompletedBy = "";
}
// add AuditLog entry for viewing
var almc = new AuditLogManagementController();
almc.addEntry(id, upc.getUserProfile(User.Identity.Name).UserId,
Constants.AuditType.RequestView);
ViewBag.IsLocked = rlc.isLocked(id);
if (ViewBag.IsLocked) {
ViewBag.IsLockedToMe = rlc.getRequestLock(id).UserID ==
upc.getUserProfile(User.Identity.Name)
.UserId;
} else {
ViewBag.IsLockedToMe = false;
}
return View(request);
}