source: cats/SCHEMAcat/trunk/urn.org.isocat.schemacat.interface.rest/interface/isAuthorized.dpml @ 3485

<?xml version="1.0" encoding="UTF-8"?>
<sequence debug="true">
    <!-- TODO: check if enclosing request to sloot.xpath can be removed -->
    <request assignment="response">
        <identifier>active:sloot.xpath2</identifier>
        <argument name="operand">
            <request>
                <identifier>active:xslt2</identifier>
                <argument name="operand">scratch:user</argument>
                <argument name="operator">
                    <literal type="xml">
                        <xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:sc="http://www.isocat.org/ns/schemacat" version="2.0">
                            <xsl:param name="authorizedIDs"/>
                            <xsl:param name="debug"/>
                            <xsl:template match="/">
                                <b><xsl:value-of select="string(/sc:user/sc:role = 'admin' or /sc:user/@xml:id = $authorizedIDs/id)"/></b>
                            </xsl:template>
                        </xsl:stylesheet>
                    </literal>
                </argument>
                <argument name="authorizedIDs">arg:authorizedIDs</argument>
                <argument name="debug">this:sloot-debug</argument>
            </request>
        </argument>
        <argument name="operator">
            <literal type="string">boolean(normalize-space(.)=('t','true'))</literal>
        </argument>
    </request>
    <sloot-debug>
        <log>
            <level>INFO</level>
            <message>
                <literal type="string">[interface.REST] User id [%1] authorized to access resource from id [%2]: [%3]</literal>
            </message>
            <param>
                <request>
                    <identifier>active:sloot.xpath2</identifier>
                    <argument name="operand">scratch:user</argument>
                    <!-- get the user id -->
                    <argument name="operator">
                        <literal type="string">string(/sc:user/@xml:id)</literal>
                    </argument>
                </request>
            </param>
            <param>arg:authorizedIDs</param>
            <param>this:response</param>
        </log>
    </sloot-debug>
</sequence>