public void permitted(User user, Integer experimentId) throws SecurityException { Experiment experiment = (Experiment) dao.get(Experiment.class.getName(), "id", experimentId); if (experiment.getOwner().equals(user) || experiment.userAllowed(user)) { user.setCurrentExperiment(experiment); User loadedUser = (User) dao.get(User.class.getName(), "username", user.getUsername()); loadedUser.setCurrentExperiment(experiment); dao.update(loadedUser); } else { throw new SecurityException( "You do not have permission to view the experiment: " + experiment.getName()); } }
public Experiment getExperiment(Integer id) { return (Experiment) dao.get(Experiment.class.getName(), "id", id); }