Files
jube-fork/Jube.Data/Query/GetCaseWorkflowXPathByCaseWorkflowIdQuery.cs
richard-churchman 7e4850a4e7 Implemented role‑based data isolation for Case Management and Visualisation:
* Added role‑based data isolation across all entities related to Case Workflows and Visualisation.
* Introduced a common UI JavaScript widget for assigning roles to supported entities; updated existing JS components and generic CRUD logic to integrate the new widget.
* Added role‑permission tables and corresponding migrations, POCOs, repositories, controllers, DTOs, and validations for all in‑scope entities.
* Updated all end‑user queries to include joins through role allocations, enforcing data isolation for both Case Management and Visualisation.
* Included role allocations in preservation/backup logic to ensure they can be exported and restored correctly.
* Added documentation describing the isolation model and validation behaviour for Case Management and Visualisation.
* Renamed various architectural methods where ActiveOnly semantics now also imply role‑allocation filtering.
* Improved “no data found” handling on the case page to avoid appearing as though data is still loading.
* Updated the case query compilation routine to enforce role‑based isolation.
* Forced session cache invalidation via migrations to rebuild SQL with new filtering rules.
2026-02-04 13:42:31 +02:00

89 lines
4.0 KiB
C#

/* Copyright (C) 2022-present Jube Holdings Limited.
*
* This file is part of Jube™ software.
*
* Jube™ is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General Public License
* as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.
* Jube™ is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty
* of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more details.
* You should have received a copy of the GNU Affero General Public License along with Jube™. If not,
* see <https://www.gnu.org/licenses/>.
*/
namespace Jube.Data.Query
{
using System;
using System.Collections.Generic;
using System.Linq;
using System.Threading;
using System.Threading.Tasks;
using Context;
using LinqToDB;
public class GetCaseWorkflowXPathByCaseWorkflowIdQuery
{
private readonly DbContext dbContext;
private readonly int tenantRegistryId;
private readonly string userName;
public GetCaseWorkflowXPathByCaseWorkflowIdQuery(DbContext dbContext, string userName)
{
this.dbContext = dbContext;
this.userName = userName;
tenantRegistryId = this.dbContext.UserInTenant.Where(w => w.User == userName)
.Select(s => s.TenantRegistryId).FirstOrDefault();
}
public async Task<IEnumerable<Dto>> ExecuteAsync(Guid caseWorkflowGuid, CancellationToken token = default)
{
return await dbContext.CaseWorkflowXPath.Where(w
=> w.CaseWorkflow.Guid == caseWorkflowGuid &&
w.Active == 1 && (w.Deleted == 0 || w.Deleted == null) &&
w.CaseWorkflow.EntityAnalysisModel.TenantRegistryId == tenantRegistryId
&& (w.CaseWorkflowXPathRole.RoleRegistry.UserRegistry.Name == userName && w.CaseWorkflowXPathRole.Deleted == 0 || w.CaseWorkflowXPathRole.Deleted == null)
&& (w.CaseWorkflow.CaseWorkflowRole.RoleRegistry.UserRegistry.Name == userName && w.CaseWorkflow.CaseWorkflowRole.Deleted == 0 || w.CaseWorkflow.CaseWorkflowRole.Deleted == null)
)
.Select(s => new Dto
{
Name = s.Name,
XPath = FormatXPath(s.XPath),
ConditionalRegularExpressionFormatting = s.ConditionalRegularExpressionFormatting == 1,
ConditionalFormatForeColor = s.ConditionalFormatForeColor,
ConditionalFormatBackColor = s.ConditionalFormatBackColor,
RegularExpression = s.RegularExpression,
ForeRowColorScope = s.ForeRowColorScope == 1,
BackRowColorScope = s.BackRowColorScope == 1,
BoldLineFormatForeColor = s.BoldLineFormatForeColor,
BoldLineFormatBackColor = s.BoldLineFormatBackColor,
BoldLineMatched = s.BoldLineMatched == 1
}).ToListAsync(token);
}
private string FormatXPath(string xPath)
{
var splits = xPath.Split(".");
return splits[0].ToLower() switch
{
"data" => splits[1],
_ => xPath
};
}
public class Dto
{
public string Name { get; set; }
public string XPath { get; set; }
public bool ConditionalRegularExpressionFormatting { get; set; }
public string ConditionalFormatForeColor { get; set; }
public string ConditionalFormatBackColor { get; set; }
public string RegularExpression { get; set; }
public bool ForeRowColorScope { get; set; }
public bool BackRowColorScope { get; set; }
public string BoldLineFormatForeColor { get; set; }
public string BoldLineFormatBackColor { get; set; }
public bool BoldLineMatched { get; set; }
}
}
}