webidor/src/main/java/cz/xelfi/quoridor/webidor/resources/Users.java
author Jaroslav Tulach <jaroslav.tulach@apidesign.org>
Wed, 23 Dec 2009 07:59:16 +0100
changeset 171 524c7f359c4e
parent 146 0b889d9e4ee1
child 189 6245e1b634aa
permissions -rw-r--r--
Adding support for 'permission.games' to allow special roles to enlist all the available games
     1 /*
     2  * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
     3  *
     4  * The contents of this file are subject to the terms of either the GNU
     5  * General Public License Version 2 only ("GPL") or the Common
     6  * Development and Distribution License("CDDL") (collectively, the
     7  * "License"). You may not use this file except in compliance with the
     8  * License. You can obtain a copy of the License at
     9  * http://www.netbeans.org/cddl-gplv2.html
    10  * or nbbuild/licenses/CDDL-GPL-2-CP. See the License for the
    11  * specific language governing permissions and limitations under the
    12  * License.  When distributing the software, include this License Header
    13  * Notice in each file and include the License file at
    14  * nbbuild/licenses/CDDL-GPL-2-CP.  Sun designates this
    15  * particular file as subject to the "Classpath" exception as provided
    16  * by Sun in the GPL Version 2 section of the License file that
    17  * accompanied this code. If applicable, add the following below the
    18  * License Header, with the fields enclosed by brackets [] replaced by
    19  * your own identifying information:
    20  * "Portions Copyrighted [year] [name of copyright owner]"
    21  *
    22  * Contributor(s):
    23  *
    24  * Portions Copyrighted 2009 Jaroslav Tulach
    25  */
    26 
    27 package cz.xelfi.quoridor.webidor.resources;
    28 
    29 import cz.xelfi.quoridor.webidor.*;
    30 import java.io.File;
    31 import java.io.FileInputStream;
    32 import java.io.FileNotFoundException;
    33 import java.io.FileOutputStream;
    34 import java.io.IOException;
    35 import java.util.Properties;
    36 import java.util.logging.Logger;
    37 import javax.ws.rs.GET;
    38 import javax.ws.rs.POST;
    39 import javax.ws.rs.Path;
    40 import javax.ws.rs.PathParam;
    41 import javax.ws.rs.Produces;
    42 import javax.ws.rs.QueryParam;
    43 import javax.ws.rs.core.MediaType;
    44 import javax.ws.rs.core.Response;
    45 
    46 /**
    47  *
    48  * @author Jaroslav Tulach <jtulach@netbeans.org>
    49  */
    50 public final class Users {
    51     private final Quoridor quoridor;
    52     private final File dir;
    53     private static final Logger LOG = Logger.getLogger(Users.class.getName());
    54 
    55     Users(File dir, Quoridor quoridor) {
    56         this.dir = dir;
    57         this.quoridor = quoridor;
    58         dir.mkdirs();
    59     }
    60 
    61     @GET
    62     @Produces({MediaType.APPLICATION_JSON, MediaType.TEXT_XML})
    63     public User getOwnInfo(
    64             @QueryParam("loginID") String loginId
    65     ) throws IOException {
    66         return getUserInfo(loginId, null);
    67     }
    68     @GET
    69     @Path("{id}")
    70     @Produces({ MediaType.APPLICATION_JSON, MediaType.TEXT_XML })
    71     public User getUserInfo(
    72         @QueryParam("loginID") String loginId,
    73         @PathParam("id") String id
    74     ) throws IOException {
    75         String  myid = quoridor.isLoggedIn(loginId);
    76         if (id == null) {
    77             id = myid;
    78         }
    79         Properties myp = getProp(myid);
    80         Properties p = getProp(id);
    81         User user = new User(id);
    82         for (String n : p.stringPropertyNames()) {
    83             final String prefix = "permission.";
    84             if (n.startsWith(prefix)) {
    85                 if ("true".equals(p.getProperty(n))) {
    86                     user.addPermission(n.substring(prefix.length()));
    87                 }
    88                 continue;
    89             }
    90             if (!id.equals(myid) && !"true".equals(myp.getProperty("permission." + n))) {
    91                 continue;
    92             }
    93             user.addProperty(n, p.getProperty(n));
    94         }
    95         return user;
    96     }
    97 
    98     @POST
    99     @Path("{id}")
   100     @Produces({ MediaType.APPLICATION_JSON, MediaType.TEXT_XML })
   101     public synchronized Response changeProperty(
   102         @QueryParam("loginID") String loginId,
   103         @PathParam("id") String id,
   104         @QueryParam("name") String name,
   105         @QueryParam("value") String value
   106     ) throws IOException {
   107         String myid = quoridor.isLoggedIn(loginId);
   108         if (!id.equals(myid) || name.startsWith("permission.")) {
   109             return Response.status(Response.Status.UNAUTHORIZED).build();
   110         }
   111 
   112         Properties p = getProp(myid);
   113         p.setProperty(name, value);
   114 
   115         File f = new File(dir, id);
   116         FileOutputStream os = new FileOutputStream(f);
   117         p.store(os, "");
   118         os.close();
   119         
   120         return Response.ok().entity(getUserInfo(loginId, id)).build();
   121     }
   122 
   123     private synchronized Properties getProp(String id) throws FileNotFoundException, IOException {
   124         Properties p = new Properties();
   125         if (id != null && id.length() > 0) {
   126             File f = new File(dir, id);
   127             if (f.exists()) {
   128                 FileInputStream is = new FileInputStream(f);
   129                 p.load(is);
   130                 is.close();
   131             }
   132         }
   133         return p;
   134     }
   135 }