Merge from booking branch

booking/ApiControllers/CircleController.cs

@@ -0,0 +1,138 @@
+//
+//  CircleController.cs
+//
+//  Author:
+//       Paul Schneider <paul@pschneider.fr>
+//
+//  Copyright (c) 2015 GNU GPL
+//
+//  This program is free software: you can redistribute it and/or modify
+//  it under the terms of the GNU Lesser General Public License as published by
+//  the Free Software Foundation, either version 3 of the License, or
+//  (at your option) any later version.
+//
+//  This program is distributed in the hope that it will be useful,
+//  but WITHOUT ANY WARRANTY; without even the implied warranty of
+//  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+//  GNU Lesser General Public License for more details.
+//
+//  You should have received a copy of the GNU Lesser General Public License
+//  along with this program.  If not, see <http://www.gnu.org/licenses/>.
+using System;
+using System.Web.Http;
+using Yavsc.Model.RolesAndMembers;
+using System.Collections.Generic;
+using Yavsc.Model.Circles;
+using System.Web.Security;
+using System.Collections.Specialized;
+using Yavsc.Model;
+
+namespace Yavsc.ApiControllers
+{
+
+	/// <summary>
+	/// Circle controller.
+	/// </summary>
+	public class CircleController : ApiController
+	{
+
+		/// <summary>
+		/// Create the specified circle.
+		/// </summary>
+		/// <param name="model">Model.</param>
+		[Authorize,
+			AcceptVerbs ("POST")]
+		public long Create(Circle model) 
+		{
+			string user = Membership.GetUser ().UserName;
+			return CircleManager.DefaultProvider.Create (user, model.Title, model.Members);
+		}
+
+		/// <summary>
+		/// Add the specified users to the circle.
+		/// </summary>
+		/// <param name="id">Circle Identifier.</param>
+		/// <param name="username">username.</param>
+		[Authorize,
+			AcceptVerbs ("POST")]
+		public void Add(long id, string username)
+		{
+			checkIsOwner (CircleManager.DefaultProvider.Get (id));
+			CircleManager.DefaultProvider.AddMember (id, username);
+		}
+
+
+		/// <summary>
+		/// Delete the circle specified by id.
+		/// </summary>
+		/// <param name="id">Identifier.</param>
+		[Authorize,
+			AcceptVerbs ("GET")] 
+		public void Delete(long id) 
+		{
+			checkIsOwner (CircleManager.DefaultProvider.Get (id));
+			CircleManager.DefaultProvider.Delete (id);
+		}
+
+
+		/// <summary>
+		/// Removes the user from circle.
+		/// </summary>
+		/// <param name="id">Identifier.</param>
+		/// <param name="username">Username.</param>
+		[Authorize,
+			AcceptVerbs ("GET")] 
+		public void RemoveUserFromCircle(long id, string username) 
+		{
+			checkIsOwner (CircleManager.DefaultProvider.Get(id));
+			CircleManager.DefaultProvider.RemoveMembership (id,username);
+		}
+
+		private void checkIsOwner(CircleBase c)
+		{
+			string user = Membership.GetUser ().UserName;
+			if (c.Owner != user)
+			throw new AccessViolationException ("You're not owner of this circle");
+		}
+
+		/// <summary>
+		/// Get the circle specified id.
+		/// </summary>
+		/// <param name="id">Identifier.</param>
+		[Authorize,
+		AcceptVerbs ("GET")]
+		public Circle Get(long id)
+		{
+			var c = CircleManager.DefaultProvider.GetMembers (id);
+			checkIsOwner (c);
+			return c;
+		}
+
+		/// <summary>
+		/// List the circles
+		/// </summary>
+		[Authorize,
+			AcceptVerbs ("GET")]
+		public IEnumerable<CircleBase> List()
+		{
+			string user = Membership.GetUser ().UserName;
+			return CircleManager.DefaultProvider.List (user);
+		}
+
+		/// <summary>
+		/// List the circles
+		/// </summary>
+		[Authorize,
+			AcceptVerbs ("POST")]
+		public void Update(CircleBase circle)
+		{
+			string user = Membership.GetUser ().UserName;
+			CircleBase current = CircleManager.DefaultProvider.Get (circle.Id);
+			if (current.Owner != user)
+				throw new AuthorizationDenied ("Your not owner of circle at id "+circle.Id);
+			CircleManager.DefaultProvider.UpdateCircle (circle);
+		}
+
+	}
+}
+