mirror of
https://github.com/hanzoai/jube-fork.git
synced 2026-10-30 18:33:33 +00:00
richard-churchman
7e4850a4e7
* Added role‑based data isolation across all entities related to Case Workflows and Visualisation. * Introduced a common UI JavaScript widget for assigning roles to supported entities; updated existing JS components and generic CRUD logic to integrate the new widget. * Added role‑permission tables and corresponding migrations, POCOs, repositories, controllers, DTOs, and validations for all in‑scope entities. * Updated all end‑user queries to include joins through role allocations, enforcing data isolation for both Case Management and Visualisation. * Included role allocations in preservation/backup logic to ensure they can be exported and restored correctly. * Added documentation describing the isolation model and validation behaviour for Case Management and Visualisation. * Renamed various architectural methods where ActiveOnly semantics now also imply role‑allocation filtering. * Improved “no data found” handling on the case page to avoid appearing as though data is still loading. * Updated the case query compilation routine to enforce role‑based isolation. * Forced session cache invalidation via migrations to rebuild SQL with new filtering rules.
90 lines
4.3 KiB
C#
90 lines
4.3 KiB
C#
/* Copyright (C) 2022-present Jube Holdings Limited.
|
|
*
|
|
* This file is part of Jube™ software.
|
|
*
|
|
* Jube™ is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General Public License
|
|
* as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.
|
|
* Jube™ is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty
|
|
* of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more details.
|
|
|
|
* You should have received a copy of the GNU Affero General Public License along with Jube™. If not,
|
|
* see <https://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
namespace Jube.Data.Query.CaseQuery
|
|
{
|
|
using System.Linq;
|
|
using System.Threading;
|
|
using System.Threading.Tasks;
|
|
using Context;
|
|
using Dto;
|
|
using LinqToDB;
|
|
|
|
public class GetCaseByIdQuery
|
|
{
|
|
private readonly DbContext dbContext;
|
|
private readonly ProcessCaseQuery processCaseQuery;
|
|
private readonly string userName;
|
|
|
|
public GetCaseByIdQuery(DbContext dbContext, string user)
|
|
{
|
|
this.dbContext = dbContext;
|
|
userName = user;
|
|
processCaseQuery = new ProcessCaseQuery(this.dbContext, userName);
|
|
}
|
|
|
|
public async Task<CaseQueryDto> ExecuteAsync(int id, CancellationToken token = default)
|
|
{
|
|
var query = from c in dbContext.Case
|
|
from i in dbContext.CaseWorkflow.InnerJoin(w =>
|
|
w.Guid == c.CaseWorkflowGuid
|
|
&& w.Deleted == 0 || w.Deleted == null
|
|
&& (w.CaseWorkflowRole.RoleRegistry.UserRegistry.Name == userName
|
|
&& w.CaseWorkflowRole.Deleted == 0 || w.CaseWorkflowRole.Deleted == null)
|
|
)
|
|
from m in dbContext.EntityAnalysisModel.InnerJoin(w =>
|
|
w.Id == i.EntityAnalysisModelId && (w.Deleted == 0 || w.Deleted == null))
|
|
from t in dbContext.TenantRegistry.InnerJoin(w => w.Id == m.TenantRegistryId)
|
|
from u in dbContext.UserInTenant.InnerJoin(w => w.TenantRegistryId == t.Id)
|
|
from s in dbContext.CaseWorkflowStatus.InnerJoin(w =>
|
|
w.Guid == c.CaseWorkflowStatusGuid
|
|
&& w.CaseWorkflowStatusRole.RoleRegistry.UserRegistry.Name == userName
|
|
&& (w.CaseWorkflowStatusRole.Deleted == 0 || w.CaseWorkflowStatusRole.Deleted == null)
|
|
&& w.CaseWorkflowId == i.Id &&
|
|
(w.Deleted == 0 || w.Deleted == null))
|
|
where c.Id == id && u.User == userName
|
|
select new CaseQueryDto
|
|
{
|
|
Id = c.Id,
|
|
EntityAnalysisModelInstanceEntryGuid = c.EntityAnalysisModelInstanceEntryGuid,
|
|
DiaryDate = c.DiaryDate.GetValueOrDefault(),
|
|
CaseWorkflowGuid = c.CaseWorkflowGuid,
|
|
CaseWorkflowStatusGuid = s.Guid,
|
|
CreatedDate = c.CreatedDate.GetValueOrDefault(),
|
|
Locked = c.Locked.GetValueOrDefault() == 1,
|
|
LockedUser = c.LockedUser ?? "",
|
|
LockedDate = c.LockedDate.GetValueOrDefault(),
|
|
ClosedStatusId = c.ClosedStatusId.GetValueOrDefault(),
|
|
ClosedDate = c.ClosedDate.GetValueOrDefault(),
|
|
ClosedUser = c.ClosedUser ?? "",
|
|
CaseKey = c.CaseKey,
|
|
Diary = c.Diary.GetValueOrDefault() == 1,
|
|
DiaryUser = c.DiaryUser ?? "",
|
|
Rating = c.Rating.GetValueOrDefault(),
|
|
CaseKeyValue = c.CaseKeyValue,
|
|
LastClosedStatus = c.LastClosedStatus.GetValueOrDefault(),
|
|
ClosedStatusMigrationDate = c.ClosedStatusMigrationDate.GetValueOrDefault(),
|
|
ForeColor = s.ForeColor,
|
|
BackColor = s.BackColor,
|
|
Json = c.Json,
|
|
VisualisationRegistryGuid = i.VisualisationRegistryGuid,
|
|
EnableVisualisation = i.EnableVisualisation.GetValueOrDefault() == 1
|
|
};
|
|
|
|
var getCaseByIdDto = await query.FirstOrDefaultAsync(token);
|
|
|
|
return await processCaseQuery.ProcessAsync(getCaseByIdDto, token);
|
|
}
|
|
}
|
|
}
|