public boolean isValid(HttpServletRequest request, HttpServletResponse response)
throws IOException {
String vsName = request.getParameter("name");
// Added by Behnaz
HttpSession session = request.getSession();
User user = (User) session.getAttribute("user");
if (vsName == null || vsName.trim().length() == 0) {
response.sendError(WebConstants.MISSING_VSNAME_ERROR, "The virtual sensor name is missing");
return false;
}
VSensorConfig sensorConfig = Mappings.getVSensorConfig(vsName);
if (sensorConfig == null) {
response.sendError(
WebConstants.ERROR_INVALID_VSNAME, "The specified virtual sensor doesn't exist.");
return false;
}
// Added by Behnaz.
if (user != null) // meaning, that a login session is active, otherwise we couldn't get there
if (Main.getContainerConfig().isAcEnabled() == true) {
if (user.hasReadAccessRight(vsName) == false && user.isAdmin() == false) // ACCESS_DENIED
{
response.sendError(
WebConstants.ACCESS_DENIED, "Access denied to the specified virtual sensor .");
return false;
}
}
return true;
}
