diff options
| author | Abyss777 <abyss@fox5.ru> | 2017-01-13 09:26:52 +0500 |
|---|---|---|
| committer | Abyss777 <abyss@fox5.ru> | 2017-01-16 13:44:54 +0500 |
| commit | cffbce4b3bc5ef817c4063a74f148a2a5986d58a (patch) | |
| tree | 3eb18f009ec1a7ae5d806eed1a4af7b6a16840e2 /src/org/traccar/api/resource/GroupPermissionResource.java | |
| parent | 3533a7c9007c4ef4f761ff4d959e396b65a7b140 (diff) | |
| download | trackermap-server-cffbce4b3bc5ef817c4063a74f148a2a5986d58a.tar.gz trackermap-server-cffbce4b3bc5ef817c4063a74f148a2a5986d58a.tar.bz2 trackermap-server-cffbce4b3bc5ef817c4063a74f148a2a5986d58a.zip | |
Initial manager implementation
Diffstat (limited to 'src/org/traccar/api/resource/GroupPermissionResource.java')
| -rw-r--r-- | src/org/traccar/api/resource/GroupPermissionResource.java | 10 |
1 files changed, 7 insertions, 3 deletions
diff --git a/src/org/traccar/api/resource/GroupPermissionResource.java b/src/org/traccar/api/resource/GroupPermissionResource.java index 07f101765..61a725222 100644 --- a/src/org/traccar/api/resource/GroupPermissionResource.java +++ b/src/org/traccar/api/resource/GroupPermissionResource.java @@ -1,5 +1,5 @@ /* - * Copyright 2016 Anton Tananaev (anton@traccar.org) + * Copyright 2016 - 2017 Anton Tananaev (anton@traccar.org) * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. @@ -35,7 +35,9 @@ public class GroupPermissionResource extends BaseResource { @POST public Response add(GroupPermission entity) throws SQLException { - Context.getPermissionsManager().checkAdmin(getUserId()); + Context.getPermissionsManager().checkReadonly(getUserId()); + Context.getPermissionsManager().checkUser(getUserId(), entity.getUserId()); + Context.getPermissionsManager().checkGroup(getUserId(), entity.getGroupId()); Context.getDataManager().linkGroup(entity.getUserId(), entity.getGroupId()); Context.getPermissionsManager().refreshPermissions(); if (Context.getGeofenceManager() != null) { @@ -46,7 +48,9 @@ public class GroupPermissionResource extends BaseResource { @DELETE public Response remove(GroupPermission entity) throws SQLException { - Context.getPermissionsManager().checkAdmin(getUserId()); + Context.getPermissionsManager().checkReadonly(getUserId()); + Context.getPermissionsManager().checkUser(getUserId(), entity.getUserId()); + Context.getPermissionsManager().checkGroup(getUserId(), entity.getGroupId()); Context.getDataManager().unlinkGroup(entity.getUserId(), entity.getGroupId()); Context.getPermissionsManager().refreshPermissions(); if (Context.getGeofenceManager() != null) { |