pcvolkmer/onkostar-plugin-dnpm
1
0
Fork 0
mirror of https://github.com/pcvolkmer/onkostar-plugin-dnpm.git synced 2025-07-03 09:42:54 +00:00
Code Issues Activity

Issue #24: Füge PermissionEvaluator zur Gesamtprüfung der Berechtigung hinzu

Browse Source 
Dieser PermissionEvaluator delegiert die einzelnen Prüfungen an PermissionEvaluatoren
welche `AbstractDelegatedPermissionEvaluator` erweitern.

Nur, wenn all diese PermissionEvaluatoren die Berechtigung erfolgreich geprüft haben,
gibt dieser PermissionEvaluator ein positives Prüfungsergebnis zurück.
This commit is contained in:
Paul-Christian Volkmer
2023-04-10 13:09:54 +02:00
parent 2495d851fc
commit 44396ff04a
5 changed files with 217 additions and 31 deletions
Download Patch File Download Diff File Expand all files Collapse all files

31
src/main/java/DNPM/security/PersonPoolBasedPermissionEvaluator.java
View File

@ -3,8 +3,6 @@ package DNPM.security;
import de.itc.onkostar.api.IOnkostarApi;
import de.itc.onkostar.api.Patient;
import de.itc.onkostar.api.Procedure;
import org.springframework.jdbc.core.JdbcTemplate;
import org.springframework.security.access.PermissionEvaluator;
import org.springframework.security.core.Authentication;
import org.springframework.security.core.userdetails.UserDetails;
import org.springframework.stereotype.Component;
@ -17,15 +15,10 @@ import java.util.List;
* Permission-Evaluator zur Auswertung der Berechtigung auf Objekte aufgrund der Personenstammberechtigung
*/
@Component
public class PersonPoolBasedPermissionEvaluator implements PermissionEvaluator {
private final IOnkostarApi onkostarApi;
private final JdbcTemplate jdbcTemplate;
public class PersonPoolBasedPermissionEvaluator extends AbstractDelegatedPermissionEvaluator {
public PersonPoolBasedPermissionEvaluator(final IOnkostarApi onkostarApi, final DataSource dataSource) {
this.onkostarApi = onkostarApi;
this.jdbcTemplate = new JdbcTemplate(dataSource);
super(onkostarApi, dataSource);
}
/**
@ -70,18 +63,14 @@ public class PersonPoolBasedPermissionEvaluator implements PermissionEvaluator {
private String getPersonPoolCode(int id, String type) {
Patient patient = null;
switch (type) {
case "Patient":
patient = onkostarApi.getPatient(id);
break;
case "Procedure":
var procedure = onkostarApi.getProcedure(id);
if (null != procedure) {
patient = procedure.getPatient();
}
break;
default:
break;
if (PATIENT.equals(type)) {
patient = onkostarApi.getPatient(id);
} else if (PROCEDURE.equals(type)) {
var procedure = onkostarApi.getProcedure(id);
if (null != procedure) {
patient = procedure.getPatient();
}
}
if (null != patient) {