src/main/java/de/ids_mannheim/korap/resource/rewrite/CollectionConstraint.java

package de.ids_mannheim.korap.resource.rewrite;

import com.fasterxml.jackson.databind.JsonNode;
import de.ids_mannheim.korap.config.Attributes;
import de.ids_mannheim.korap.config.KustvaktConfiguration;
import de.ids_mannheim.korap.exceptions.KustvaktException;
import de.ids_mannheim.korap.resources.Corpus;
import de.ids_mannheim.korap.resources.KustvaktResource;
import de.ids_mannheim.korap.security.ac.SecurityManager;
import de.ids_mannheim.korap.user.User;

/**
 * @author hanl
 * @date 03/07/2015
 */
public class CollectionConstraint implements RewriteTask.IterableRewritePath {




    @Override
    public JsonNode preProcess (KoralNode node, KustvaktConfiguration config,
            User user) {
        if (node.get("@type").equals("koral:doc")) {
            if (node.get("key").equals(Attributes.CORPUS_SIGLE)
                    && !check(node, user))
                node.removeNode(Attributes.CORPUS_SIGLE);
        }
        return node.rawNode();
    }


    /**
     * @param node
     * @param user
     * @return boolean if true access granted
     */
    private boolean check (KoralNode node, User user) {
        // todo: can be used to circumvent access control if public filter not applied
        if (user == null)
            return true;

        String id = node.get("value");
        KustvaktResource corpus;
        try {
            SecurityManager m = SecurityManager
                    .findbyId(id, user, Corpus.class);
            corpus = m.getResource();
        }
        catch (RuntimeException | KustvaktException e) {
            return false;
        }
        return corpus != null;
    }


    @Override
    public JsonNode postProcess (KoralNode node) {
        return null;
    }


    @Override
    public String path () {
        return "collection";
    }
}