Compare commits
	
		
			2 Commits
		
	
	
		
			1f14890d43
			...
			25009ba149
		
	
	| Author | SHA1 | Date | |
|---|---|---|---|
| 25009ba149 | |||
| 208c6c63e8 | 
@ -44,17 +44,17 @@ public class ApplicationsController {
 | 
				
			|||||||
        Role posterRole = authServ.getUserFromToken(token).getRole();
 | 
					        Role posterRole = authServ.getUserFromToken(token).getRole();
 | 
				
			||||||
        ArrayList<Applications> authorizedApps = new ArrayList<>();
 | 
					        ArrayList<Applications> authorizedApps = new ArrayList<>();
 | 
				
			||||||
 | 
					
 | 
				
			||||||
        authorizedApps.add(Applications.LOGIN);
 | 
					        authorizedApps.add(Applications.Login);
 | 
				
			||||||
        authorizedApps.add(Applications.PROFILE);
 | 
					        authorizedApps.add(Applications.Profile);
 | 
				
			||||||
        authorizedApps.add(Applications.MSG);
 | 
					        authorizedApps.add(Applications.Msg);
 | 
				
			||||||
        authorizedApps.add(Applications.FORUM);
 | 
					        authorizedApps.add(Applications.Forum);
 | 
				
			||||||
        authorizedApps.add(Applications.RDV);
 | 
					        authorizedApps.add(Applications.Rdv);
 | 
				
			||||||
 | 
					
 | 
				
			||||||
        if (posterRole == Role.Student || posterRole == Role.Admin) return authorizedApps;
 | 
					        if (posterRole == Role.Student || posterRole == Role.Admin) return authorizedApps;
 | 
				
			||||||
 | 
					
 | 
				
			||||||
        if (posterRole == Role.Teacher || posterRole == Role.Secretary || posterRole == Role.Admin) authorizedApps.add(Applications.MANAGECOURSES);
 | 
					        if (posterRole == Role.Teacher || posterRole == Role.Secretary || posterRole == Role.Admin) authorizedApps.add(Applications.ManageCourses);
 | 
				
			||||||
 | 
					
 | 
				
			||||||
        if (posterRole == Role.InscriptionService || posterRole == Role.Admin) authorizedApps.add(Applications.INSCRIPTION);
 | 
					        if (posterRole == Role.InscriptionService || posterRole == Role.Admin) authorizedApps.add(Applications.Inscription);
 | 
				
			||||||
 | 
					
 | 
				
			||||||
        return authorizedApps;
 | 
					        return authorizedApps;
 | 
				
			||||||
    }
 | 
					    }
 | 
				
			||||||
 | 
				
			|||||||
@ -31,7 +31,7 @@ public class InscriptionController {
 | 
				
			|||||||
    @GetMapping("/inscriptionRequests")
 | 
					    @GetMapping("/inscriptionRequests")
 | 
				
			||||||
    public ResponseEntity<Iterable<Map<String,Object>>> getAllRequests(@RequestHeader("Authorization") String token){
 | 
					    public ResponseEntity<Iterable<Map<String,Object>>> getAllRequests(@RequestHeader("Authorization") String token){
 | 
				
			||||||
 | 
					
 | 
				
			||||||
        if (!isSecretaryOrAdmin(token)){return new UnauthorizedResponse<>(null);}
 | 
					        if (authServ.isNotSecretaryOrAdmin(token)){return new UnauthorizedResponse<>(null);}
 | 
				
			||||||
 | 
					
 | 
				
			||||||
        Iterable<InscriptionRequest> inscriptionRequests = inscriptionServ.getAll();
 | 
					        Iterable<InscriptionRequest> inscriptionRequests = inscriptionServ.getAll();
 | 
				
			||||||
        ArrayList<Map<String,Object>> toReturn = new ArrayList<>();
 | 
					        ArrayList<Map<String,Object>> toReturn = new ArrayList<>();
 | 
				
			||||||
@ -70,15 +70,4 @@ public class InscriptionController {
 | 
				
			|||||||
        toReturn.put("state", inscriptionRequest.getState());
 | 
					        toReturn.put("state", inscriptionRequest.getState());
 | 
				
			||||||
        return toReturn;
 | 
					        return toReturn;
 | 
				
			||||||
    }
 | 
					    }
 | 
				
			||||||
 | 
					}
 | 
				
			||||||
 | 
					 | 
				
			||||||
    private boolean isSecretaryOrAdmin(String authorization){
 | 
					 | 
				
			||||||
        if (authorization ==null)
 | 
					 | 
				
			||||||
            return false;
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
        User poster = authServ.getUserFromToken(authorization);
 | 
					 | 
				
			||||||
        if (poster == null) return false;
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
        return poster.getRole() == Role.Secretary && poster.getRole() == Role.Admin;
 | 
					 | 
				
			||||||
    }
 | 
					 | 
				
			||||||
}
 | 
					 | 
				
			||||||
@ -43,7 +43,7 @@ public class UserController {
 | 
				
			|||||||
    @PostMapping("/user")
 | 
					    @PostMapping("/user")
 | 
				
			||||||
    public ResponseEntity<String> postUser(@RequestBody User user,@RequestHeader("Authorization") String authorization){
 | 
					    public ResponseEntity<String> postUser(@RequestBody User user,@RequestHeader("Authorization") String authorization){
 | 
				
			||||||
 | 
					
 | 
				
			||||||
        if (!isSecretaryOrAdmin(authorization))
 | 
					        if (authServ.isNotSecretaryOrAdmin(authorization))
 | 
				
			||||||
            return new UnauthorizedResponse<>(null);
 | 
					            return new UnauthorizedResponse<>(null);
 | 
				
			||||||
 | 
					
 | 
				
			||||||
        userService.save(user);
 | 
					        userService.save(user);
 | 
				
			||||||
@ -53,7 +53,7 @@ public class UserController {
 | 
				
			|||||||
    @GetMapping("/users")
 | 
					    @GetMapping("/users")
 | 
				
			||||||
    public ResponseEntity<Iterable<HashMap<String,Object>>> getAllUsers(@RequestHeader("Authorization") String authorization){
 | 
					    public ResponseEntity<Iterable<HashMap<String,Object>>> getAllUsers(@RequestHeader("Authorization") String authorization){
 | 
				
			||||||
 | 
					
 | 
				
			||||||
        if (!isSecretaryOrAdmin(authorization))
 | 
					        if (authServ.isNotSecretaryOrAdmin(authorization))
 | 
				
			||||||
            return new UnauthorizedResponse<>(null);
 | 
					            return new UnauthorizedResponse<>(null);
 | 
				
			||||||
 | 
					
 | 
				
			||||||
        Iterable<User> users = userService.getAll();
 | 
					        Iterable<User> users = userService.getAll();
 | 
				
			||||||
@ -85,7 +85,6 @@ public class UserController {
 | 
				
			|||||||
         */
 | 
					         */
 | 
				
			||||||
    private HashMap<String,Object> userWithoutPassword(User user){
 | 
					    private HashMap<String,Object> userWithoutPassword(User user){
 | 
				
			||||||
        HashMap<String,Object> toReturn = new HashMap<>();
 | 
					        HashMap<String,Object> toReturn = new HashMap<>();
 | 
				
			||||||
 | 
					 | 
				
			||||||
        toReturn.put("regNo",user.getRegNo());
 | 
					        toReturn.put("regNo",user.getRegNo());
 | 
				
			||||||
        toReturn.put("firstName",user.getFirstName());
 | 
					        toReturn.put("firstName",user.getFirstName());
 | 
				
			||||||
        toReturn.put("lastName",user.getLastName());
 | 
					        toReturn.put("lastName",user.getLastName());
 | 
				
			||||||
@ -93,18 +92,7 @@ public class UserController {
 | 
				
			|||||||
        toReturn.put("country",user.getCountry());
 | 
					        toReturn.put("country",user.getCountry());
 | 
				
			||||||
        toReturn.put("address",user.getAddress());
 | 
					        toReturn.put("address",user.getAddress());
 | 
				
			||||||
        toReturn.put("role",user.getRole());
 | 
					        toReturn.put("role",user.getRole());
 | 
				
			||||||
 | 
					 | 
				
			||||||
        return toReturn;
 | 
					        return toReturn;
 | 
				
			||||||
    }
 | 
					    }
 | 
				
			||||||
 | 
					 | 
				
			||||||
    private boolean isSecretaryOrAdmin(String authorization){
 | 
					 | 
				
			||||||
        if (authorization ==null)
 | 
					 | 
				
			||||||
            return false;
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
        User poster = authServ.getUserFromToken(authorization);
 | 
					 | 
				
			||||||
        if (poster == null) return false;
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
        return poster.getRole() == Role.Secretary && poster.getRole() == Role.Admin;
 | 
					 | 
				
			||||||
    }
 | 
					 | 
				
			||||||
}
 | 
					}
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
				
			|||||||
@ -4,6 +4,7 @@ import org.springframework.stereotype.Service;
 | 
				
			|||||||
import ovh.herisson.Clyde.EndPoints.LoginController;
 | 
					import ovh.herisson.Clyde.EndPoints.LoginController;
 | 
				
			||||||
import ovh.herisson.Clyde.Repositories.InscriptionRepository;
 | 
					import ovh.herisson.Clyde.Repositories.InscriptionRepository;
 | 
				
			||||||
import ovh.herisson.Clyde.Tables.InscriptionRequest;
 | 
					import ovh.herisson.Clyde.Tables.InscriptionRequest;
 | 
				
			||||||
 | 
					import ovh.herisson.Clyde.Tables.Role;
 | 
				
			||||||
import ovh.herisson.Clyde.Tables.Token;
 | 
					import ovh.herisson.Clyde.Tables.Token;
 | 
				
			||||||
import ovh.herisson.Clyde.Tables.User;
 | 
					import ovh.herisson.Clyde.Tables.User;
 | 
				
			||||||
 | 
					
 | 
				
			||||||
@ -39,4 +40,17 @@ public class AuthenticatorService {
 | 
				
			|||||||
    public void register(InscriptionRequest inscriptionRequest) {
 | 
					    public void register(InscriptionRequest inscriptionRequest) {
 | 
				
			||||||
        inscriptionService.save(inscriptionRequest);
 | 
					        inscriptionService.save(inscriptionRequest);
 | 
				
			||||||
    }
 | 
					    }
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					    public boolean isNotSecretaryOrAdmin(String authorization){
 | 
				
			||||||
 | 
					        if (authorization ==null)
 | 
				
			||||||
 | 
					            return true;
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					        User poster = getUserFromToken(authorization);
 | 
				
			||||||
 | 
					        if (poster == null) return true;
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					        return poster.getRole() != Role.Secretary || poster.getRole() != Role.Admin;
 | 
				
			||||||
 | 
					    }
 | 
				
			||||||
 | 
					
 | 
				
			||||||
}
 | 
					}
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
				
			|||||||
@ -2,23 +2,20 @@ package ovh.herisson.Clyde.Tables;
 | 
				
			|||||||
 | 
					
 | 
				
			||||||
public enum Applications {
 | 
					public enum Applications {
 | 
				
			||||||
    // without any token
 | 
					    // without any token
 | 
				
			||||||
    LOGIN,
 | 
					    Login,
 | 
				
			||||||
 | 
					
 | 
				
			||||||
    // with any token
 | 
					    // with any token
 | 
				
			||||||
    PROFILE,
 | 
					    Profile,
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					
 | 
				
			||||||
    // Students and higher authorization
 | 
					    // Students and higher authorization
 | 
				
			||||||
    MSG,
 | 
					    Msg,
 | 
				
			||||||
    FORUM,
 | 
					    Forum,
 | 
				
			||||||
    RDV,
 | 
					    Rdv,
 | 
				
			||||||
 | 
					
 | 
				
			||||||
    // teachers and Secretary authorization
 | 
					    // teachers and Secretary authorization
 | 
				
			||||||
    MANAGECOURSES,
 | 
					    ManageCourses,
 | 
				
			||||||
 | 
					
 | 
				
			||||||
    // InscriptionService authorization
 | 
					    // InscriptionService authorization
 | 
				
			||||||
    INSCRIPTION;
 | 
					    Inscription
 | 
				
			||||||
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
}
 | 
					}
 | 
				
			||||||
 | 
				
			|||||||
@ -2,7 +2,7 @@ package ovh.herisson.Clyde.Tables;
 | 
				
			|||||||
 | 
					
 | 
				
			||||||
public enum CursusType {
 | 
					public enum CursusType {
 | 
				
			||||||
 | 
					
 | 
				
			||||||
    infoBab1,
 | 
					    InfoBab1,
 | 
				
			||||||
    chemistryBab1,
 | 
					    ChemistryBab1,
 | 
				
			||||||
    psychologyBab1;
 | 
					    PsychologyBab1
 | 
				
			||||||
}
 | 
					}
 | 
				
			||||||
 | 
				
			|||||||
@ -3,5 +3,5 @@ package ovh.herisson.Clyde.Tables;
 | 
				
			|||||||
public enum RequestState {
 | 
					public enum RequestState {
 | 
				
			||||||
    Accepted,
 | 
					    Accepted,
 | 
				
			||||||
    Refused,
 | 
					    Refused,
 | 
				
			||||||
    Pending;
 | 
					    Pending
 | 
				
			||||||
}
 | 
					}
 | 
				
			||||||
 | 
				
			|||||||
@ -5,5 +5,5 @@ public enum Role {
 | 
				
			|||||||
    Student,
 | 
					    Student,
 | 
				
			||||||
    Admin,
 | 
					    Admin,
 | 
				
			||||||
    InscriptionService,
 | 
					    InscriptionService,
 | 
				
			||||||
    Secretary;
 | 
					    Secretary
 | 
				
			||||||
}
 | 
					}
 | 
				
			||||||
		Reference in New Issue
	
	Block a user