/** * Asserts that the user has permission to edit a site in a given database belonging to a given * partner */ protected void assertSiteEditPrivileges(User user, UserDatabase db, OrgUnit partner) { if (db.getOwner().getId() == user.getId()) { return; } UserPermission perm = db.getPermissionByUser(user); if (perm.isAllowEditAll()) { return; } if (!perm.isAllowEdit()) { throw new IllegalAccessError(); } if (perm.getPartner().getId() != partner.getId()) { throw new IllegalAccessError(); } }
@Override public Integer create(User user, PropertyMap properties) { Activity activity = null; UserDatabase database; LocationType locationType; OrgUnit partner = null; if (properties.containsKey("activityId")) { activity = activityDAO.findById((Integer) properties.get("activityId")); locationType = activity.getLocationType(); database = activity.getDatabase(); } else if (properties.containsKey("databaseId")) { database = userDatabaseDAO.findById((Integer) properties.get("databaseId")); Set<LocationType> locationTypes = database.getCountry().getLocationTypes(); if (locationTypes.isEmpty()) { throw new RuntimeException( "A site cannot be created without a location type, and the country '" + database.getCountry().getName() + "' (id = " + database.getCountry().getId() + ") has no location types defined."); } locationType = locationTypes.iterator().next(); if (user.getOrganization() != null) { partner = user.getOrganization().getRoot(); } } else { throw new RuntimeException("An activityId or databaseId must be provided to create a site"); } if (properties.containsKey("partner")) { partner = partnerDAO.findById(((PartnerDTO) properties.get("partner")).getId()); } if (partner == null) { throw new RuntimeException("No orgUnit id provided for new site"); } /* * Create and save a new Location object in the database */ Location location = new Location(); location.setLocationType(locationType); updateLocationProperties(location, properties); locationDAO.persist(location); updateAdminProperties(location, properties, true); /* * Create and persist the Site object */ Site site = new Site(); site.setLocation(location); site.setActivity(activity); site.setDatabase(database); site.setPartner(partner); site.setDateCreated(new Date()); updateSiteProperties(site, properties, true); siteDAO.persist(site); updateAttributeValueProperties(site, properties, true); /* * Create the reporting period object * IF this is a report-once activity (punctual) * * otherwise ReportingPeriods are modeled separately on the client. */ if (activity != null && activity.getReportingFrequency() == ActivityDTO.REPORT_ONCE) { ReportingPeriod period = new ReportingPeriod(); period.setSite(site); period.setMonitoring(false); updatePeriodProperties(period, properties, true); reportingPeriodDAO.persist(period); updateIndicatorValueProperties(period, properties, true); } return site.getId(); }