permissions

siteserver · Jan 6, 2020 · 99f70f1 · 99f70f1
1 parent befb6a4
commit 99f70f1
Show file tree

Hide file tree

Showing 15 changed files with 43 additions and 42 deletions.
diff --git a/Controllers/Pages/PagesFieldsController.cs b/Controllers/Pages/PagesFieldsController.cs
@@ -26,7 +26,7 @@ public IHttpActionResult Get()
 
                 var formInfo = FormManager.GetFormInfoByGet(request);
                 if (formInfo == null) return NotFound();
-                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.PluginId)) return Unauthorized();
+                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.MenuFormsPermission)) return Unauthorized();
 
                 var adminToken = Context.AdminApi.GetAccessToken(request.AdminId, request.AdminName, TimeSpan.FromDays(1));
 
@@ -64,7 +64,7 @@ public IHttpActionResult Delete()
 
                 var formInfo = FormManager.GetFormInfoByGet(request);
                 if (formInfo == null) return NotFound();
-                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.PluginId)) return Unauthorized();
+                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.MenuFormsPermission)) return Unauthorized();
 
                 var fieldId = request.GetQueryInt("fieldId");
                 FieldManager.Repository.Delete(formInfo.Id, fieldId);
@@ -103,7 +103,7 @@ public IHttpActionResult Export()
 
                 var formInfo = FormManager.GetFormInfoByPost(request);
                 if (formInfo == null) return NotFound();
-                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.PluginId)) return Unauthorized();
+                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.MenuFormsPermission)) return Unauthorized();
 
                 //var fileName = FieldManager.Export(formInfo.Id);\
 
@@ -140,7 +140,7 @@ public IHttpActionResult Import()
 
                 var formInfo = FormManager.GetFormInfoByGet(request);
                 if (formInfo == null) return NotFound();
-                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.PluginId)) return Unauthorized();
+                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.MenuFormsPermission)) return Unauthorized();
 
                 foreach (string name in HttpContext.Current.Request.Files)
                 {

diff --git a/Controllers/Pages/PagesFieldsLayerModelController.cs b/Controllers/Pages/PagesFieldsLayerModelController.cs
@@ -22,7 +22,7 @@ public IHttpActionResult Get()
 
                 var formInfo = FormManager.GetFormInfoByGet(request);
                 if (formInfo == null) return NotFound();
-                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.PluginId)) return Unauthorized();
+                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.MenuFormsPermission)) return Unauthorized();
 
                 var fieldId = request.GetQueryInt("fieldId");
                 var fieldInfo = FieldManager.GetFieldInfo(formInfo.Id, fieldId) ?? new FieldInfo();
@@ -76,7 +76,7 @@ public IHttpActionResult Submit()
 
                 var formInfo = FormManager.GetFormInfoByPost(request);
                 if (formInfo == null) return NotFound();
-                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.PluginId)) return Unauthorized();
+                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.MenuFormsPermission)) return Unauthorized();
 
                 var fieldId = request.GetPostInt("fieldId");
                 var isRapid = request.GetPostBool("isRapid");

diff --git a/Controllers/Pages/PagesFieldsLayerValidateController.cs b/Controllers/Pages/PagesFieldsLayerValidateController.cs
@@ -20,7 +20,7 @@ public IHttpActionResult Get()
 
                 var formInfo = FormManager.GetFormInfoByGet(request);
                 if (formInfo == null) return NotFound();
-                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.PluginId)) return Unauthorized();
+                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.MenuFormsPermission)) return Unauthorized();
 
                 var fieldId = request.GetQueryInt("fieldId");
                 var fieldInfo = FieldManager.GetFieldInfo(formInfo.Id, fieldId);
@@ -51,7 +51,7 @@ public IHttpActionResult Submit()
 
                 var formInfo = FormManager.GetFormInfoByPost(request);
                 if (formInfo == null) return NotFound();
-                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.PluginId)) return Unauthorized();
+                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.MenuFormsPermission)) return Unauthorized();
 
                 var fieldId = request.GetPostInt("fieldId");
                 var value = request.GetPostString("value");

diff --git a/Controllers/Pages/PagesFormsController.cs b/Controllers/Pages/PagesFormsController.cs
@@ -28,7 +28,7 @@ public IHttpActionResult Get()
 
                 var siteId = request.GetQueryInt("siteId");
                 if (!request.IsAdminLoggin ||
-                    !request.AdminPermissions.HasSitePermissions(siteId, FormUtils.PluginId))
+                    !request.AdminPermissions.HasSitePermissions(siteId, FormUtils.MenuFormsPermission))
                 {
                     return Unauthorized();
                 }
@@ -57,7 +57,7 @@ public IHttpActionResult Delete()
 
                 var siteId = request.GetQueryInt("siteId");
                 if (!request.IsAdminLoggin ||
-                    !request.AdminPermissions.HasSitePermissions(siteId, FormUtils.PluginId))
+                    !request.AdminPermissions.HasSitePermissions(siteId, FormUtils.MenuFormsPermission))
                 {
                     return Unauthorized();
                 }
@@ -86,7 +86,7 @@ public IHttpActionResult Add()
 
                 var siteId = request.GetPostInt("siteId");
                 if (!request.IsAdminLoggin ||
-                    !request.AdminPermissions.HasSitePermissions(siteId, FormUtils.PluginId))
+                    !request.AdminPermissions.HasSitePermissions(siteId, FormUtils.MenuFormsPermission))
                 {
                     return Unauthorized();
                 }
@@ -121,7 +121,7 @@ public IHttpActionResult Edit()
 
                 var siteId = request.GetPostInt("siteId");
                 if (!request.IsAdminLoggin ||
-                    !request.AdminPermissions.HasSitePermissions(siteId, FormUtils.PluginId))
+                    !request.AdminPermissions.HasSitePermissions(siteId, FormUtils.MenuFormsPermission))
                 {
                     return Unauthorized();
                 }
@@ -153,7 +153,7 @@ public IHttpActionResult Up()
 
                 var siteId = request.GetPostInt("siteId");
                 if (!request.IsAdminLoggin ||
-                    !request.AdminPermissions.HasSitePermissions(siteId, FormUtils.PluginId))
+                    !request.AdminPermissions.HasSitePermissions(siteId, FormUtils.MenuFormsPermission))
                 {
                     return Unauthorized();
                 }
@@ -182,7 +182,7 @@ public IHttpActionResult Down()
 
                 var siteId = request.GetPostInt("siteId");
                 if (!request.IsAdminLoggin ||
-                    !request.AdminPermissions.HasSitePermissions(siteId, FormUtils.PluginId))
+                    !request.AdminPermissions.HasSitePermissions(siteId, FormUtils.MenuFormsPermission))
                 {
                     return Unauthorized();
                 }
@@ -211,7 +211,7 @@ public IHttpActionResult Export()
 
                 var formInfo = FormManager.GetFormInfoByPost(request);
                 if (formInfo == null) return NotFound();
-                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.PluginId)) return Unauthorized();
+                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.MenuFormsPermission)) return Unauthorized();
 
                 var fileName = $"{formInfo.Title}.zip";
                 var directoryPath = Context.UtilsApi.GetTemporaryFilesPath("form");
@@ -242,7 +242,7 @@ public IHttpActionResult Import()
                 var request = Context.AuthenticatedRequest;
                 var siteId = request.GetQueryInt("siteId");
 
-                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(siteId, FormUtils.PluginId)) return Unauthorized();
+                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(siteId, FormUtils.MenuFormsPermission)) return Unauthorized();
 
                 foreach (string name in HttpContext.Current.Request.Files)
                 {

diff --git a/Controllers/Pages/PagesLogAddController.cs b/Controllers/Pages/PagesLogAddController.cs
@@ -26,7 +26,7 @@ public IHttpActionResult Get()
 
                 var formInfo = FormManager.GetFormInfoByGet(request);
                 if (formInfo == null) return NotFound();
-                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.PluginId)) return Unauthorized();
+                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.MenuFormsPermission)) return Unauthorized();
 
                 var logId = request.GetQueryInt("logId");
                 var fieldInfoList = FieldManager.GetFieldInfoList(formInfo.Id);
@@ -105,7 +105,7 @@ public IHttpActionResult UploadFile()
                 var fieldId = request.GetQueryInt("fieldId");
 
                 if (!request.IsAdminLoggin ||
-                    !request.AdminPermissions.HasSitePermissions(siteId, FormUtils.PluginId))
+                    !request.AdminPermissions.HasSitePermissions(siteId, FormUtils.MenuFormsPermission))
                 {
                     return Unauthorized();
                 }
@@ -155,7 +155,7 @@ public IHttpActionResult DeleteFile()
                 var fieldId = request.GetQueryInt("fieldId");
 
                 if (!request.IsAdminLoggin ||
-                    !request.AdminPermissions.HasSitePermissions(siteId, FormUtils.PluginId))
+                    !request.AdminPermissions.HasSitePermissions(siteId, FormUtils.MenuFormsPermission))
                 {
                     return Unauthorized();
                 }
@@ -186,7 +186,7 @@ public IHttpActionResult Submit()
 
                 var formInfo = FormManager.GetFormInfoByPost(request);
                 if (formInfo == null) return NotFound();
-                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.PluginId)) return Unauthorized();
+                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.MenuFormsPermission)) return Unauthorized();
 
                 var logId = request.GetPostInt("logId");
 

diff --git a/Controllers/Pages/PagesLogsController.cs b/Controllers/Pages/PagesLogsController.cs
@@ -23,7 +23,7 @@ public IHttpActionResult Get()
 
                 var formInfo = FormManager.GetFormInfoByGet(request);
                 if (formInfo == null) return NotFound();
-                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.PluginId)) return Unauthorized();
+                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.MenuFormsPermission)) return Unauthorized();
 
                 var fieldInfoList = FieldManager.GetFieldInfoList(formInfo.Id);
                 var listAttributeNames = FormUtils.StringCollectionToStringList(formInfo.ListAttributeNames);
@@ -69,7 +69,7 @@ public IHttpActionResult Delete()
 
                 var formInfo = FormManager.GetFormInfoByGet(request);
                 if (formInfo == null) return NotFound();
-                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.PluginId)) return Unauthorized();
+                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.MenuFormsPermission)) return Unauthorized();
 
                 var logId = request.GetQueryInt("logId");
                 var logInfo = LogManager.Repository.GetLogInfo(logId);
@@ -113,7 +113,7 @@ public IHttpActionResult Export()
 
                 var formInfo = FormManager.GetFormInfoByPost(request);
                 if (formInfo == null) return NotFound();
-                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.PluginId)) return Unauthorized();
+                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.MenuFormsPermission)) return Unauthorized();
 
                 var fieldInfoList = FieldManager.GetFieldInfoList(formInfo.Id);
                 var logs = LogManager.Repository.GetAllLogInfoList(formInfo);
@@ -147,8 +147,8 @@ public IHttpActionResult Export()
                 }
 
                 var fileName = $"{formInfo.Title}.csv";
-                CsvUtils.Export(Context.PluginApi.GetPluginPath(FormUtils.PluginId, fileName), head, rows);
-                var downloadUrl = Context.PluginApi.GetPluginUrl(FormUtils.PluginId, fileName);
+                CsvUtils.Export(Context.PluginApi.GetPluginPath(FormUtils.MenuFormsPermission, fileName), head, rows);
+                var downloadUrl = Context.PluginApi.GetPluginUrl(FormUtils.MenuFormsPermission, fileName);
 
                 return Ok(new
                 {
@@ -170,7 +170,7 @@ public IHttpActionResult Visible()
 
                 var formInfo = FormManager.GetFormInfoByPost(request);
                 if (formInfo == null) return NotFound();
-                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.PluginId)) return Unauthorized();
+                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.MenuFormsPermission)) return Unauthorized();
 
                 var attributeName = request.GetPostString("attributeName");
 

diff --git a/Controllers/Pages/PagesLogsLayerReplyController.cs b/Controllers/Pages/PagesLogsLayerReplyController.cs
@@ -21,7 +21,7 @@ public IHttpActionResult Get()
 
                 var formInfo = FormManager.GetFormInfoByGet(request);
                 if (formInfo == null) return NotFound();
-                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.PluginId)) return Unauthorized();
+                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.MenuFormsPermission)) return Unauthorized();
 
                 var logId = request.GetQueryInt("logId");
                 var fieldInfoList = FieldManager.GetFieldInfoList(formInfo.Id);
@@ -55,7 +55,7 @@ public IHttpActionResult Submit()
 
                 var formInfo = FormManager.GetFormInfoByPost(request);
                 if (formInfo == null) return NotFound();
-                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.PluginId)) return Unauthorized();
+                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.MenuFormsPermission)) return Unauthorized();
 
                 var logId = request.GetPostInt("logId");
                 var logInfo = LogManager.Repository.GetLogInfo(logId);

diff --git a/Controllers/Pages/PagesSettingsController.cs b/Controllers/Pages/PagesSettingsController.cs
@@ -21,7 +21,7 @@ public IHttpActionResult Get()
 
                 var formInfo = FormManager.GetFormInfoByGet(request);
                 if (formInfo == null) return NotFound();
-                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.PluginId)) return Unauthorized();
+                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.MenuFormsPermission)) return Unauthorized();
 
                 var fieldInfoList = FieldManager.GetFieldInfoList(formInfo.Id);
 
@@ -58,7 +58,7 @@ public IHttpActionResult Submit()
 
                 var formInfo = FormManager.GetFormInfoByPost(request);
                 if (formInfo == null) return NotFound();
-                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.PluginId)) return Unauthorized();
+                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(formInfo.SiteId, FormUtils.MenuFormsPermission)) return Unauthorized();
 
                 var type = request.GetPostString("type");
                 if (FormUtils.EqualsIgnoreCase(type, nameof(FormInfo.IsClosed)))

diff --git a/Controllers/Pages/PagesTemplateHtmlController.cs b/Controllers/Pages/PagesTemplateHtmlController.cs
@@ -21,7 +21,7 @@ public IHttpActionResult GetTemplateInfo()
                 var request = Context.AuthenticatedRequest;
 
                 var siteId = request.GetQueryInt("siteId");
-                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(siteId, FormUtils.PluginId)) return Unauthorized();
+                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(siteId, FormUtils.MenuTemplatesPermission)) return Unauthorized();
 
                 var type = request.GetQueryString("type");
                 var name = request.GetQueryString("name");
@@ -55,7 +55,7 @@ public IHttpActionResult Submit()
                 var request = Context.AuthenticatedRequest;
 
                 var siteId = request.GetQueryInt("siteId");
-                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(siteId, FormUtils.PluginId)) return Unauthorized();
+                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(siteId, FormUtils.MenuTemplatesPermission)) return Unauthorized();
 
                 var name = request.GetPostString("name");
                 var templateHtml = request.GetPostString("templateHtml");

diff --git a/Controllers/Pages/PagesTemplatesController.cs b/Controllers/Pages/PagesTemplatesController.cs
@@ -19,7 +19,7 @@ public IHttpActionResult List()
                 var request = Context.AuthenticatedRequest;
 
                 var siteId = request.GetQueryInt("siteId");
-                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(siteId, FormUtils.PluginId)) return Unauthorized();
+                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(siteId, FormUtils.MenuTemplatesPermission)) return Unauthorized();
 
                 var type = request.GetQueryString("type");
 
@@ -42,7 +42,7 @@ public IHttpActionResult Delete()
                 var request = Context.AuthenticatedRequest;
 
                 var siteId = request.GetQueryInt("siteId");
-                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(siteId, FormUtils.PluginId)) return Unauthorized();
+                if (!request.IsAdminLoggin || !request.AdminPermissions.HasSitePermissions(siteId, FormUtils.MenuTemplatesPermission)) return Unauthorized();
 
                 var type = request.GetQueryString("type");
                 var name = request.GetQueryString("name");