From 86e1ec7585bcbc44b5f7f32b87b73b2e2bda0cba Mon Sep 17 00:00:00 2001 From: jc0b Date: Fri, 3 Jul 2020 20:56:26 +0200 Subject: prefabs groundwork --- web-server/opendc/models/prefab.py | 31 +++++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) create mode 100644 web-server/opendc/models/prefab.py (limited to 'web-server/opendc/models') diff --git a/web-server/opendc/models/prefab.py b/web-server/opendc/models/prefab.py new file mode 100644 index 00000000..a3611a11 --- /dev/null +++ b/web-server/opendc/models/prefab.py @@ -0,0 +1,31 @@ +from opendc.models.model import Model +from opendc.models.user import User +from opendc.util.database import DB +from opendc.util.exceptions import ClientError +from opendc.util.rest import Response + + +class Prefab(Model): + """Model representing a Simulation.""" + + collection_name = 'prefabs' + + def check_user_access(self, google_id, edit_access): + """Raises an error if the user with given [google_id] has insufficient access. + + :param google_id: The Google ID of the user. + :param edit_access: True when edit access should be checked, otherwise view access. + """ + user = User.from_google_id(google_id) + authorizations = list(filter(lambda x: str(x['prefabId']) == str(self.get_id()), + user.obj['authorizations'])) + if len(authorizations) == 0 or (edit_access and authorizations[0]['authorizationLevel'] == 'VIEW'): + raise ClientError(Response(403, "Forbidden from retrieving prefab.")) + + def get_all_authorizations(self): + """Get all user IDs having access to this simulation.""" + return [ + str(user['_id']) for user in DB.fetch_all({'authorizations': { + 'prefabId': self.obj['_id'] + }}, User.collection_name) + ] -- cgit v1.2.3