6 files changed, 94 insertions, 0 deletions
diff --git a/web-server/opendc/models/__init__.py b/web-server/opendc/models/__init__.py
new file mode 100644
index 00000000..e69de29b
--- /dev/null
+++ b/web-server/opendc/models/__init__.py
diff --git a/web-server/opendc/models/model.py b/web-server/opendc/models/model.py
new file mode 100644
index 00000000..2505ae61
--- /dev/null
+++ b/web-server/opendc/models/model.py
@@ -0,0 +1,30 @@
+from opendc.util.database import DB
+from opendc.util.exceptions import ClientError
+from opendc.util.rest import Response
+
+
+class Model:
+    collection_name = '<specified in subclasses>'
+
+    @classmethod
+    def from_id(cls, _id):
+        return cls(DB.fetch_one({'_id': _id}, Model.collection_name))
+
+    def __init__(self, obj):
+        self.obj = obj
+
+    def check_exists(self):
+        if self.obj is None:
+            raise ClientError(Response(404, 'Not found.'))
+
+    def set_property(self, key, value):
+        self.obj[key] = value
+
+    def insert(self):
+        self.obj = DB.insert(self.obj, self.collection_name)
+
+    def update(self):
+        self.obj = DB.update(self.obj['_id'], self.obj, self.collection_name)
+
+    def delete(self):
+        self.obj = DB.delete_one({'_id': self.obj['_id']}, self.collection_name)
diff --git a/web-server/opendc/models/simulation.py b/web-server/opendc/models/simulation.py
new file mode 100644
index 00000000..5cd3d49e
--- /dev/null
+++ b/web-server/opendc/models/simulation.py
@@ -0,0 +1,15 @@
+from opendc.models.model import Model
+from opendc.models.user import User
+from opendc.util.exceptions import ClientError
+from opendc.util.rest import Response
+
+
+class Simulation(Model):
+    collection_name = 'simulations'
+
+    def check_user_access(self, google_id, edit_access):
+        user = User.from_google_id(google_id)
+        authorizations = list(
+            filter(lambda x: str(x['simulationId']) == str(self.obj['_id']), user.obj['authorizations']))
+        if len(authorizations) == 0 or (edit_access and authorizations[0]['authorizationLevel'] == 'VIEW'):
+            raise ClientError(Response(403, "Forbidden from retrieving simulation."))
diff --git a/web-server/opendc/models/topology.py b/web-server/opendc/models/topology.py
new file mode 100644
index 00000000..6dde3e2a
--- /dev/null
+++ b/web-server/opendc/models/topology.py
@@ -0,0 +1,15 @@
+from opendc.models.model import Model
+from opendc.models.user import User
+from opendc.util.exceptions import ClientError
+from opendc.util.rest import Response
+
+
+class Topology(Model):
+    collection_name = 'topologies'
+
+    def check_user_access(self, google_id, edit_access):
+        user = User.from_google_id(google_id)
+        authorizations = list(
+            filter(lambda x: str(x['topologyId']) == str(self.obj['_id']), user.obj['authorizations']))
+        if len(authorizations) == 0 or (edit_access and authorizations[0]['authorizationLevel'] == 'VIEW'):
+            raise ClientError(Response(403, "Forbidden from retrieving topology."))
diff --git a/web-server/opendc/models/trace.py b/web-server/opendc/models/trace.py
new file mode 100644
index 00000000..916db073
--- /dev/null
+++ b/web-server/opendc/models/trace.py
@@ -0,0 +1,8 @@
+from opendc.models.model import Model
+from opendc.models.user import User
+from opendc.util.exceptions import ClientError
+from opendc.util.rest import Response
+
+
+class Trace(Model):
+    collection_name = 'traces'
diff --git a/web-server/opendc/models/user.py b/web-server/opendc/models/user.py
new file mode 100644
index 00000000..cd314457
--- /dev/null
+++ b/web-server/opendc/models/user.py
@@ -0,0 +1,26 @@
+from opendc.models.model import Model
+from opendc.util.database import DB
+from opendc.util.exceptions import ClientError
+from opendc.util.rest import Response
+
+
+class User(Model):
+    collection_name = 'users'
+
+    @classmethod
+    def from_email(cls, email):
+        return User(DB.fetch_one({'email': email}, User.collection_name))
+
+    @classmethod
+    def from_google_id(cls, google_id):
+        return User(DB.fetch_one({'googleId': google_id}, User.collection_name))
+
+    def check_correct_user(self, request_google_id):
+        if request_google_id is not None and self.obj['googleId'] != request_google_id:
+            raise ClientError(Response(403, f'Forbidden from editing user with ID {self.obj["_id"]}.'))
+
+    def check_already_exists(self):
+        existing_user = DB.fetch_one({'googleId': self.obj['googleId']}, self.collection_name)
+
+        if existing_user is not None:
+            raise ClientError(Response(409, 'User already exists.'))