Examples with ProjectIdAndInitiator com.walmartlabs.concord.server.process.queue.ProcessQueueDao.ProjectIdAndInitiator used on opensource projects

Example 1 with ProjectIdAndInitiator

use of com.walmartlabs.concord.server.process.queue.ProcessQueueDao.ProjectIdAndInitiator in project concord by walmartlabs.

the class ProcessEventResource method assertAccessRights.

private void assertAccessRights(PartialProcessKey processKey) {
    if (Roles.isAdmin()) {
        // an admin can access any project
        return;
    }
    UserPrincipal p = UserPrincipal.getCurrent();
    if (p == null) {
        return;
    }
    ProjectIdAndInitiator ids = queueDao.getProjectIdAndInitiator(processKey);
    if (ids.getProjectId() != null) {
        // access extended event data
        if (projectAccessManager.assertAccess(ids.getProjectId(), ResourceAccessLevel.WRITER, true) != null) {
            return;
        }
    }
    if (p.getId().equals(ids.getInitiatorId())) {
        // if it is a standalone process, only the initator can access extended event data
        return;
    }
    throw new UnauthorizedException("Only admins, process initiators and those who have READER access to " + "the process' projects can access the extended process event data");
}