mirror of
https://github.com/hanzoai/jube-fork.git
synced 2026-10-30 18:33:33 +00:00
* Added role‑based data isolation across all entities related to Case Workflows and Visualisation. * Introduced a common UI JavaScript widget for assigning roles to supported entities; updated existing JS components and generic CRUD logic to integrate the new widget. * Added role‑permission tables and corresponding migrations, POCOs, repositories, controllers, DTOs, and validations for all in‑scope entities. * Updated all end‑user queries to include joins through role allocations, enforcing data isolation for both Case Management and Visualisation. * Included role allocations in preservation/backup logic to ensure they can be exported and restored correctly. * Added documentation describing the isolation model and validation behaviour for Case Management and Visualisation. * Renamed various architectural methods where ActiveOnly semantics now also imply role‑allocation filtering. * Improved “no data found” handling on the case page to avoid appearing as though data is still loading. * Updated the case query compilation routine to enforce role‑based isolation. * Forced session cache invalidation via migrations to rebuild SQL with new filtering rules.
158 lines
5.4 KiB
C#
158 lines
5.4 KiB
C#
/* Copyright (C) 2022-present Jube Holdings Limited.
|
|
*
|
|
* This file is part of Jube™ software.
|
|
*
|
|
* Jube™ is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General Public License
|
|
* as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.
|
|
* Jube™ is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty
|
|
* of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more details.
|
|
|
|
* You should have received a copy of the GNU Affero General Public License along with Jube™. If not,
|
|
* see <https://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
namespace Jube.App.Controllers.Repository
|
|
{
|
|
using System;
|
|
using System.Collections.Generic;
|
|
using System.Threading;
|
|
using System.Threading.Tasks;
|
|
using AutoMapper;
|
|
using Code;
|
|
using Data.Context;
|
|
using Data.Poco;
|
|
using Data.Repository;
|
|
using Dto;
|
|
using DynamicEnvironment;
|
|
using FluentValidation;
|
|
using log4net;
|
|
using Microsoft.AspNetCore.Authorization;
|
|
using Microsoft.AspNetCore.Http;
|
|
using Microsoft.AspNetCore.Mvc;
|
|
using Validators;
|
|
|
|
[Route("api/[controller]")]
|
|
[Produces("application/json")]
|
|
[Authorize]
|
|
public class VisualisationRegistryParameterRoleController : Controller
|
|
{
|
|
private readonly DbContext dbContext;
|
|
private readonly ILog log;
|
|
private readonly IMapper mapper;
|
|
private readonly PermissionValidation permissionValidation;
|
|
private readonly VisualisationRegistryParameterRoleRepository repository;
|
|
private readonly string userName;
|
|
private readonly IValidator<VisualisationRegistryParameterRoleDto> validator;
|
|
|
|
public VisualisationRegistryParameterRoleController(ILog log,
|
|
IHttpContextAccessor httpContextAccessor, DynamicEnvironment dynamicEnvironment)
|
|
{
|
|
if (httpContextAccessor.HttpContext?.User.Identity != null)
|
|
{
|
|
userName = httpContextAccessor.HttpContext.User.Identity.Name;
|
|
}
|
|
|
|
this.log = log;
|
|
|
|
dbContext =
|
|
DataConnectionDbContext.GetDbContextDataConnection(dynamicEnvironment.AppSettings("ConnectionString"));
|
|
permissionValidation = new PermissionValidation(dbContext, userName);
|
|
|
|
var config = new MapperConfiguration(cfg =>
|
|
{
|
|
cfg.CreateMap<VisualisationRegistryParameterRole, VisualisationRegistryParameterRoleDto>();
|
|
cfg.CreateMap<VisualisationRegistryParameterRoleDto, VisualisationRegistryParameterRole>();
|
|
});
|
|
|
|
mapper = new Mapper(config);
|
|
repository = new VisualisationRegistryParameterRoleRepository(dbContext, userName);
|
|
validator = new VisualisationRegistryParameterRoleDtoValidator();
|
|
}
|
|
|
|
protected override void Dispose(bool disposing)
|
|
{
|
|
if (disposing)
|
|
{
|
|
dbContext.Close();
|
|
dbContext.Dispose();
|
|
}
|
|
|
|
base.Dispose(disposing);
|
|
}
|
|
|
|
[HttpGet("ByVisualisationRegistryParameterGuid/{guid:guid}")]
|
|
public async Task<ActionResult<List<VisualisationRegistryParameterRoleDto>>> ByVisualisationRegistryParameterGuidAsync(Guid guid, CancellationToken token = default)
|
|
{
|
|
try
|
|
{
|
|
if (!permissionValidation.Validate(new[]
|
|
{
|
|
32
|
|
}))
|
|
{
|
|
return Forbid();
|
|
}
|
|
|
|
return Ok(mapper.Map<List<VisualisationRegistryParameterRoleDto>>(await repository.GetByVisualisationRegistryGuidAsync(guid, token)));
|
|
}
|
|
catch (Exception e)
|
|
{
|
|
log.Error(e);
|
|
return StatusCode(500);
|
|
}
|
|
}
|
|
|
|
[HttpPost]
|
|
public async Task<ActionResult<List<VisualisationRegistryParameterRoleDto>>> CreateAsync([FromBody] VisualisationRegistryParameterRoleDto model, CancellationToken token = default)
|
|
{
|
|
try
|
|
{
|
|
if (!permissionValidation.Validate(new[]
|
|
{
|
|
32
|
|
}))
|
|
{
|
|
return Forbid();
|
|
}
|
|
|
|
var results = await validator.ValidateAsync(model, token);
|
|
if (results.IsValid)
|
|
{
|
|
return Ok(await repository.InsertAsync(mapper.Map<VisualisationRegistryParameterRole>(model), token));
|
|
}
|
|
|
|
return BadRequest(results);
|
|
}
|
|
catch (Exception e)
|
|
{
|
|
log.Error(e);
|
|
return StatusCode(500);
|
|
}
|
|
}
|
|
|
|
[HttpDelete("{id:int}")]
|
|
public async Task<ActionResult<List<VisualisationRegistryParameterRoleDto>>> DeleteAsync(int id, CancellationToken token = default)
|
|
{
|
|
try
|
|
{
|
|
if (!permissionValidation.Validate(new[]
|
|
{
|
|
32
|
|
}))
|
|
{
|
|
return Forbid();
|
|
}
|
|
|
|
await repository.DeleteAsync(id, token);
|
|
|
|
return Ok();
|
|
}
|
|
catch (Exception e)
|
|
{
|
|
log.Error(e);
|
|
return StatusCode(500);
|
|
}
|
|
}
|
|
}
|
|
}
|