101 lines
3.9 KiB
C#
101 lines
3.9 KiB
C#
using System.Collections.Generic;
|
|
using Microsoft.AspNetCore.Mvc;
|
|
using Microsoft.AspNetCore.Authorization;
|
|
using Oqtane.Enums;
|
|
using Oqtane.Models;
|
|
using Oqtane.Shared;
|
|
using Oqtane.Infrastructure;
|
|
using Oqtane.Repository;
|
|
using System.Linq;
|
|
|
|
namespace Oqtane.Controllers
|
|
{
|
|
[Route(ControllerRoutes.Default)]
|
|
public class UserRoleController : Controller
|
|
{
|
|
private readonly IUserRoleRepository _userRoles;
|
|
private readonly IRoleRepository _roles;
|
|
private readonly ITenantResolver _tenants;
|
|
private readonly ISyncManager _syncManager;
|
|
private readonly ILogManager _logger;
|
|
|
|
public UserRoleController(IUserRoleRepository userRoles, IRoleRepository roles, ITenantResolver tenants, ISyncManager syncManager, ILogManager logger)
|
|
{
|
|
_userRoles = userRoles;
|
|
_roles = roles;
|
|
_syncManager = syncManager;
|
|
_tenants = tenants;
|
|
_logger = logger;
|
|
}
|
|
|
|
// GET: api/<controller>?siteid=x
|
|
[HttpGet]
|
|
[Authorize(Roles = RoleNames.Admin)]
|
|
public IEnumerable<UserRole> Get(string siteid)
|
|
{
|
|
return _userRoles.GetUserRoles(int.Parse(siteid));
|
|
}
|
|
|
|
// GET api/<controller>/5
|
|
[HttpGet("{id}")]
|
|
[Authorize(Roles = RoleNames.Admin)]
|
|
public UserRole Get(int id)
|
|
{
|
|
return _userRoles.GetUserRole(id);
|
|
}
|
|
|
|
// POST api/<controller>
|
|
[HttpPost]
|
|
[Authorize(Roles = RoleNames.Admin)]
|
|
public UserRole Post([FromBody] UserRole userRole)
|
|
{
|
|
var role = _roles.GetRole(userRole.RoleId);
|
|
if (ModelState.IsValid && (User.IsInRole(RoleNames.Host) || role.Name != RoleNames.Host))
|
|
{
|
|
if (role.Name == RoleNames.Host)
|
|
{
|
|
_userRoles.DeleteUserRoles(userRole.UserId);
|
|
}
|
|
userRole = _userRoles.AddUserRole(userRole);
|
|
_syncManager.AddSyncEvent(_tenants.GetTenant().TenantId, EntityNames.User, userRole.UserId);
|
|
_logger.Log(LogLevel.Information, this, LogFunction.Create, "User Role Added {UserRole}", userRole);
|
|
}
|
|
return userRole;
|
|
}
|
|
|
|
// PUT api/<controller>/5
|
|
[HttpPut("{id}")]
|
|
[Authorize(Roles = RoleNames.Admin)]
|
|
public UserRole Put(int id, [FromBody] UserRole userRole)
|
|
{
|
|
var role = _roles.GetRole(userRole.RoleId);
|
|
if (ModelState.IsValid && (User.IsInRole(RoleNames.Host) || role.Name != RoleNames.Host))
|
|
{
|
|
userRole = _userRoles.UpdateUserRole(userRole);
|
|
_syncManager.AddSyncEvent(_tenants.GetTenant().TenantId, EntityNames.User, userRole.UserId);
|
|
_logger.Log(LogLevel.Information, this, LogFunction.Update, "User Role Updated {UserRole}", userRole);
|
|
}
|
|
return userRole;
|
|
}
|
|
|
|
// DELETE api/<controller>/5
|
|
[HttpDelete("{id}")]
|
|
[Authorize(Roles = RoleNames.Admin)]
|
|
public void Delete(int id)
|
|
{
|
|
UserRole userRole = _userRoles.GetUserRole(id);
|
|
if (User.IsInRole(RoleNames.Host) || userRole.Role.Name != RoleNames.Host)
|
|
{
|
|
_userRoles.DeleteUserRole(id);
|
|
if (userRole.Role.Name == RoleNames.Host)
|
|
{
|
|
var role = _roles.GetRoles(_tenants.GetAlias().SiteId).FirstOrDefault(item => item.Name == RoleNames.Registered);
|
|
_userRoles.AddUserRole(new UserRole { UserId = userRole.UserId, RoleId = role.RoleId, EffectiveDate = null, ExpiryDate = null });
|
|
}
|
|
_syncManager.AddSyncEvent(_tenants.GetTenant().TenantId, EntityNames.User, userRole.UserId);
|
|
_logger.Log(LogLevel.Information, this, LogFunction.Delete, "User Role Deleted {UserRole}", userRole);
|
|
}
|
|
}
|
|
}
|
|
}
|