Subversion Repositories SmartDukaan

package com.spice.profitmandi.web.util;

import java.util.HashSet;

import java.util.List;

import java.util.Set;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.stereotype.Component;

import org.springframework.transaction.annotation.Transactional;

import com.spice.profitmandi.common.exception.ProfitMandiBusinessException;

import com.spice.profitmandi.common.model.ProfitMandiConstants;

import com.spice.profitmandi.dao.entity.dtr.Api;

import com.spice.profitmandi.dao.entity.dtr.RoleApi;

import com.spice.profitmandi.dao.enumuration.dtr.Method;

import com.spice.profitmandi.dao.repository.dtr.ApiRepository;

import com.spice.profitmandi.dao.repository.dtr.RoleApiRepository;

@Transactional

@Component

public class RoleManager {

	@Autowired

	private RoleApiRepository roleApiRepository;

	@Autowired

	private ApiRepository apiRepository;

	public boolean isAuthorizedURI(Set<Integer> roleIds, String contextPath, String uri, String method) throws ProfitMandiBusinessException{

		List<RoleApi> roleApis = roleApiRepository.selectByRoleIds(roleIds);

		Set<Integer> apiIds = new HashSet<>();

		for(RoleApi roleApi : roleApis) {

			apiIds.add(roleApi.getApiId());

		}

		List<Api> apis = apiRepository.selectByIds(apiIds);

		for(Api api : apis) {

			if(uri.matches(contextPath + api.getUri()) && api.getMethod().equals(Method.valueOf(method))) {

				return true;

			}

		}

		throw new ProfitMandiBusinessException(ProfitMandiConstants.URI, uri, "GE_1004");

	}

}