UserSecurityContext.hpp

Go to the documentation of this file.

/*
    Copyright (C) 2014-2016 Leosac

    This file is part of Leosac.

    Leosac is free software: you can redistribute it and/or modify
    it under the terms of the GNU Affero General Public License as published by
    the Free Software Foundation, either version 3 of the License, or
    (at your option) any later version.

    Leosac is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
    GNU Affero General Public License for more details.

    You should have received a copy of the GNU Affero General Public License
    along with this program. If not, see <http://www.gnu.org/licenses/>.
*/

#pragma once

#include "core/SecurityContext.hpp"
#include "core/auth/AuthFwd.hpp"

namespace Leosac
{

class UserSecurityContext : public SecurityContext
{
  public:
    UserSecurityContext(DBServicePtr dbsrv, Auth::UserId id);

    virtual bool check_permission_impl(Action a,
                                       const ActionParam &ap) const override;

    bool is_self(Auth::UserId id) const;

    Auth::UserId user_id() const;

    Auth::UserPtr self() const;

  private:
    bool can_read_group(const GroupActionParam &gap) const;

    bool can_administrate_group(const GroupActionParam &gap) const;

    bool can_read_membership(const MembershipActionParam &map) const;

    bool can_read_user(const UserActionParam &uap) const;

    bool can_read_user_detail(const UserActionParam &uap) const;

    bool can_update_user(const UserActionParam &uap) const;

    bool can_create_membership(const MembershipActionParam &map) const;

    bool can_delete_membership(const MembershipActionParam &map) const;

    bool can_read_credential(const CredentialActionParam &cap) const;

    bool can_read_schedule(const ScheduleActionParam &sap) const;

    bool can_read_door(const DoorActionParam &dap) const;

    bool is_admin() const;

    bool is_manager() const;

    Auth::UserId user_id_;
};


class NullSecurityContext : public UserSecurityContext
{
  public:
    NullSecurityContext();

    virtual bool check_permission_impl(Action a,
                                       const ActionParam &ap) const override;
};
}