Subversion Repositories bacoAlunos

Rev

Rev 1928 | Go to most recent revision | Show entire file | Ignore whitespace | Details | Blame | Last modification | View Log | RSS feed

Rev 1928 Rev 1934
Line 5... Line 5...
5
import pt.estgp.estgweb.domain.UserSession;
5
import pt.estgp.estgweb.domain.UserSession;
6
import pt.estgp.estgweb.domain.dao.DaoFactory;
6
import pt.estgp.estgweb.domain.dao.DaoFactory;
7
import pt.estgp.estgweb.filters.chains.LoadControlFilter;
7
import pt.estgp.estgweb.filters.chains.LoadControlFilter;
8
import pt.estgp.estgweb.filters.exceptions.AccessDeniedOperationException;
8
import pt.estgp.estgweb.filters.exceptions.AccessDeniedOperationException;
9
import pt.estgp.estgweb.filters.exceptions.NeedAuthenticationException;
9
import pt.estgp.estgweb.filters.exceptions.NeedAuthenticationException;
-
 
10
import pt.estgp.estgweb.services.courses.coursereport.documentmodel.CourseReportDocument;
10
import pt.estgp.estgweb.utils.Globals;
11
import pt.estgp.estgweb.utils.Globals;
11
import pt.utl.ist.berserk.ServiceRequest;
12
import pt.utl.ist.berserk.ServiceRequest;
12
import pt.utl.ist.berserk.ServiceResponse;
13
import pt.utl.ist.berserk.ServiceResponse;
13
import pt.utl.ist.berserk.logic.filterManager.FilterParameters;
14
import pt.utl.ist.berserk.logic.filterManager.FilterParameters;
14
import pt.utl.ist.berserk.logic.filterManager.exceptions.FilterException;
15
import pt.utl.ist.berserk.logic.filterManager.exceptions.FilterException;
Line 28... Line 29...
28
        }
29
        }
29
 
30
 
30
        if(userSession.getUser().isSuperuser())
31
        if(userSession.getUser().isSuperuser())
31
            return;
32
            return;
32
 
33
 
33
        1.5.0/docs/api/java/lang/String.html">String courseCode = (1.5.0/docs/api/java/lang/String.html">String) request.getServiceParameters().getParameter((1.5.0/docs/api/java/lang/String.html">String) filterParameters.getParameter(0));
34
        5+0%2Fdocs%2Fapi+Object">Object obj = request.getServiceParameters().getParameter((1.5.0/docs/api/java/lang/String.html">String) filterParameters.getParameter(0));
-
 
35
        1.5.0/docs/api/java/lang/String.html">String courseCode;
-
 
36
        if (obj instanceof 1.5.0/docs/api/java/lang/String.html">String) {
-
 
37
            courseCode = (1.5.0/docs/api/java/lang/String.html">String) obj;
-
 
38
        }
-
 
39
        else if (obj instanceof CourseReportDocument) {
-
 
40
            courseCode = ((CourseReportDocument) obj).getCourseCode();
-
 
41
        }
-
 
42
        else {
-
 
43
            logger.info("Filter: IsFromCourseCommission - Invalid parameter");
-
 
44
            throw new AccessDeniedOperationException("fail.owner");
-
 
45
        }
-
 
46
 
34
        CourseImpl course = DaoFactory.getCourseDaoImpl().findCourseByCode(courseCode);
47
        CourseImpl course = DaoFactory.getCourseDaoImpl().findCourseByCode(courseCode);
35
 
48
 
36
        if(!course.isFromCourseCommission(userSession.getUser()))
49
        if(!course.isFromCourseCommission(userSession.getUser()))
37
        {
50
        {
38
            logger.warn(userSession.getUser().getUsername() + ": try access restricted area");
51
            logger.warn(userSession.getUser().getUsername() + ": try access restricted area");