[authentication] Request tracker permission

PET-EC-Sobral · Jul 3, 2016 · 8c1ca76 · 8c1ca76
1 parent 7c8c8ba
commit 8c1ca76
Show file tree

Hide file tree

Showing 2 changed files with 36 additions and 0 deletions.
diff --git a/application/controllers/Bus.php b/application/controllers/Bus.php
@@ -221,6 +221,7 @@ function getLocalizations($idRoute, $idBus){
      * @api {post} /routes/:idRoute/buses/:idBus/position Adicionar uma localização a um ônibus
      * @apiName PostPosition
      * @apiGroup Bus
+     * @apiPermission tracker
      *
      * @apiParam {Integer} idRoute ID da rota que contem o onibus que será adicionada a localização.
      * @apiParam {Integer} idBus ID do onibus que será adicionada a localização.
@@ -260,6 +261,11 @@ function getLocalizations($idRoute, $idBus){
      *           
      */
     function addLocalization($idRoute, $idBus){
+        //check write permissions
+        $token = $this->authenticate();
+        if(!$token->valid(Authentication::TRACKER_PERMISSION))
+            return $this->makeUnauthorizedResponse();
+
         $this->loadModel();
 
         if($this->bus_model->getBus($idRoute, $idBus) === null){
@@ -282,6 +288,7 @@ function addLocalization($idRoute, $idBus){
      * @api {post} /routes/:idRoute/buses Adicionar um ônibus a uma rota
      * @apiName PostBus
      * @apiGroup Bus
+     * @apiPermission tracker
      *
      * @apiSuccess (201 - RouteCreated) {Integer} idBus ID unico do onibus criado.
      * @apiSuccess (201 - RouteCreated) {Integer} idRoute ID da rota em que o onibus foi criado.
@@ -306,6 +313,11 @@ function addLocalization($idRoute, $idBus){
      *   ]
      */
     function addBus($idRoute){
+        //check write permissions
+        $token = $this->authenticate();
+        if(!$token->valid(Authentication::TRACKER_PERMISSION))
+            return $this->makeUnauthorizedResponse();
+
         $this->loadModel();
         $validator = $this->validateJson($this->input->raw_input_stream, APPPATH.'/controllers/Schemas/BusesAdd.json');
 
@@ -324,6 +336,7 @@ function addBus($idRoute){
      * @api {delete} /routes/:idRoute/buses/:idBus/positions Deletar as localizações de um ônibus
      * @apiName DeleteBusPositions
      * @apiGroup Bus
+     * @apiPermission tracker
      *
      * @apiParam {Integer} idRoute ID da rota que contem o onibus.
      * @apiParam {Integer} idBus ID do onibus que se deseja apagar as localizações.
@@ -342,6 +355,11 @@ function addBus($idRoute){
      *     }
      */
     function deleteLocalizations($idRoute, $idBus){
+        //check write permissions
+        $token = $this->authenticate();
+        if(!$token->valid(Authentication::TRACKER_PERMISSION))
+            return $this->makeUnauthorizedResponse();
+
         $this->loadModel();
         $statusCode = 404;
 
@@ -356,6 +374,7 @@ function deleteLocalizations($idRoute, $idBus){
      * @api {delete} /routes/:idRoute/buses/:idBus Deletar um onibus de uma rota
      * @apiName DeleteBus
      * @apiGroup Bus
+     * @apiPermission tracker
      *
      * @apiParam {Integer} idRoute ID da rota que contem o onibus.
      * @apiParam {Integer} idBus ID do onibus que se deseja apagar.
@@ -374,6 +393,11 @@ function deleteLocalizations($idRoute, $idBus){
      *     }
      */
     function deleteBus($idRoute, $idBus){
+        //check write permissions
+        $token = $this->authenticate();
+        if(!$token->valid(Authentication::TRACKER_PERMISSION))
+            return $this->makeUnauthorizedResponse();
+
         $this->loadModel();
         $statusCode = 404;
 

diff --git a/application/controllers/Routes.php b/application/controllers/Routes.php
@@ -86,6 +86,7 @@ function getRoutes(){
      * @api {post} /routes Adicionar uma rota
      * @apiName PostRoutes
      * @apiGroup Routes
+     * @apiPermission tracker
      *
      * @apiParam {String} name Nome da rota a ser adicionada.
      * @apiParam {String} description Descrição da rota a ser adicionada.
@@ -125,6 +126,11 @@ function getRoutes(){
      *   ]
      */
     function addRoute(){
+        //check write permissions
+        $token = $this->authenticate();
+        if(!$token->valid(Authentication::TRACKER_PERMISSION))
+            return $this->makeUnauthorizedResponse();
+
         $validator = $this->validateJson($this->input->raw_input_stream, APPPATH.'/controllers/Schemas/RoutesAdd.json');
     	if($validator->valid){
             $this->loadModel();
@@ -280,6 +286,7 @@ function getPoints($id){
      * @api {delete} /routes/:id Deletar uma rota 
      * @apiName DeleteRoutes
      * @apiGroup Routes
+     * @apiPermission tracker
      *
      * @apiParam {Integer} id ID da rota a ser deletada.
      * @apiSuccess (204 - RouteDeleted) {Integer} id ID da rota deletada.
@@ -292,6 +299,11 @@ function getPoints($id){
      *     }
      */
     function deleteRoute($id){
+        //check write permissions
+        $token = $this->authenticate();
+        if(!$token->valid(Authentication::TRACKER_PERMISSION))
+            return $this->makeUnauthorizedResponse();
+
     	$this->loadModel();
         $statusCode = 404;