Mirrors/VILLASweb-backend-go
1
0
Fork 0
mirror of https://git.rwth-aachen.de/acs/public/villas/web-backend-go/ synced 2025-03-30 00:00:12 +01:00
Code Issues Releases Wiki Activity

consider user's role for GET simulaitons endpoint

Browse source
This commit is contained in:
Sonja Happ 2019-06-05 11:18:57 +02:00
parent 4806583b1f
commit a293b1d954
1 changed files with 22 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

29
routes/simulation/simulationEndpoints.go
View file

@ -1,6 +1,7 @@
package simulation package simulation
import ( import (
"fmt"
"net/http" "net/http"
"github.com/gin-gonic/gin" "github.com/gin-gonic/gin"
@ -33,22 +34,36 @@ func RegisterSimulationEndpoints(r *gin.RouterGroup) {
// @Router /simulations [get] // @Router /simulations [get]
func getSimulations(c *gin.Context) { func getSimulations(c *gin.Context) {
// ATTENTION: do not use c.GetInt ("user_id") since user_id is of type uint and not int err := common.ValidateRole(c, common.ModelSimulation, common.Read)
userID, _ := c.Get("user_id") if err != nil {
c.JSON(http.StatusUnprocessableEntity, fmt.Sprintf("%v", err))
return
}
// ATTENTION: do not use c.GetInt (common.UserIDCtx) since user_id is of type uint and not int
userID, _ := c.Get(common.UserIDCtx)
userRole, _ := c.Get(common.UserRoleCtx)
var u user.User var u user.User
err := u.ByID(userID.(uint)) err = u.ByID(userID.(uint))
if common.ProvideErrorResponse(c, err) { if common.ProvideErrorResponse(c, err) {
return return
} }
// get all simulations for the user who issues the request // get all simulations for the user who issues the request
// TODO consider role of user, if admin return all simulations
db := common.GetDB() db := common.GetDB()
var simulations []common.Simulation var simulations []common.Simulation
err = db.Order("ID asc").Model(&u).Related(&simulations, "Simulations").Error if userRole == "Admin" { // Admin can see all simulations
if common.ProvideErrorResponse(c, err) { err = db.Order("ID asc").Find(&simulations).Error
return if common.ProvideErrorResponse(c, err) {
return
}
} else { // User or Guest roles see only their simulations
err = db.Order("ID asc").Model(&u).Related(&simulations, "Simulations").Error
if common.ProvideErrorResponse(c, err) {
return
}
} }
serializer := common.SimulationsSerializer{c, simulations} serializer := common.SimulationsSerializer{c, simulations}