aboutsummaryrefslogtreecommitdiff
path: root/wqflask/utility/authentication_tools.py
blob: 07ceacc091ffdbf1cfcc46ea8717b8f9224efb6e (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
from __future__ import absolute_import, print_function, division

import json
import requests

from base import data_set

from utility import hmac
from utility.redis_tools import get_redis_conn, get_resource_info, get_resource_id

from flask import Flask, g, redirect, url_for

import logging
logger = logging.getLogger(__name__ )

def check_resource_availability(dataset, trait_id=None):
    resource_id = get_resource_id(dataset, trait_id)

    response = None
    if resource_id:
        resource_info = get_resource_info(resource_id)

        the_url = "http://localhost:8080/available?resource={}&user={}".format(resource_id, g.user_session.user_id)
        try:
            response = json.loads(requests.get(the_url).content)['data']
        except:
            response = resource_info['default_mask']['data']

        if 'edit' in response:
            return "edit"
        elif 'view' in response:
            return "view"
        else:
            return "no-access"

    return False

def check_admin(resource_id=None):

    return "not-admin"

    # ZS: commented out until proxy can return this
    # the_url = "http://localhost:8080/available?resource={}&user={}".format(resource_id, g.user_session.user_id)
    # try:
    #     response = json.loads(requests.get(the_url).content)
    # except:
    #     response = resource_info['default_mask']['admin']

    # if 'edit-admins' in response:
    #     return "edit-admins"
    # elif 'edit-access' in response:
    #     return "edit-access"
    # else:
    #     return "not-admin"

def check_owner(dataset=None, trait_id=None, resource_id=None):
    if resource_id:
        resource_info = get_resource_info(resource_id)
        if g.user_session.user_id == resource_info['owner_id']:
            return resource_id
    else:
        resource_id = get_resource_id(dataset, trait_id)
        if resource_id:
            resource_info = get_resource_info(resource_id)
            if g.user_session.user_id == resource_info['owner_id']:
                return resource_id

    return False

def check_owner_or_admin(dataset=None, trait_id=None, resource_id=None):
    if resource_id:
        resource_info = get_resource_info(resource_id)
        if g.user_session.user_id == resource_info['owner_id']:
            return [resource_id, "owner"]
        else:
            return [resource_id, check_admin(resource_id)]
    else:
        resource_id = get_resource_id(dataset, trait_id)
        if resource_id:
            resource_info = get_resource_info(resource_id)
            if g.user_session.user_id == resource_info['owner_id']:
                return [resource_id, "owner"]
            else:
                return [resource_id, check_admin(resource_id)]

    return [resource_id, "not-admin"]