source: cats/SCHEMAcat/trunk/urn.org.isocat.schemacat.interface.rest/interface/isAuthorized.dpml @ 3519

<?xml version="1.0" encoding="UTF-8"?>
<sequence debug="false">
    <sloot-debug>
        <request>
            <verb>SINK</verb>
            <identifier>res:/debug/org.isocat.schemacat.interface.isAuthorized.authorizedIDs.xml</identifier>
            <argument name="primary">arg:authorizedIDs</argument>
        </request>
        <request>
            <verb>SINK</verb>
            <identifier>res:/debug/org.isocat.schemacat.interface.isAuthorized.authorizedRoles.xml</identifier>
            <argument name="primary">arg:authorizedRoles</argument>
        </request>
    </sloot-debug>
    <!-- TODO: check if enclosing request to sloot.xpath can be removed -->
    <request assignment="response">
        <identifier>active:sloot.xpath2</identifier>
        <argument name="operand">
            <request>
                <identifier>active:xslt2</identifier>
                <argument name="operand">scratch:user</argument>
                <argument name="operator">
                    <literal type="xml">
                        <xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:sc="http://www.isocat.org/ns/schemacat" version="2.0">
                            <xsl:param name="authorizedIDs"/>
                            <xsl:param name="authorizedRoles"/>
                            <xsl:param name="debug"/>
                            <xsl:template match="/">
                                <b><xsl:value-of select="string(/sc:user/sc:role = $authorizedRoles/roles/role or $authorizedIDs/ids/id = 'ALL' or /sc:user/@xml:id = $authorizedIDs/ids/id)"/></b>
                            </xsl:template>
                        </xsl:stylesheet>
                    </literal>
                </argument>
                <argument name="authorizedIDs">arg:authorizedIDs</argument>
                <argument name="authorizedRoles">arg:authorizedRoles</argument>
                <argument name="debug">this:sloot-debug</argument>
            </request>
        </argument>
        <argument name="operator">
            <literal type="string">boolean(normalize-space(.)=('t','true'))</literal>
        </argument>
    </request>
    <log>
        <level>INFO</level>
        <message>
            <literal type="string">[interface.REST] [%1] authorized to access resource: [%2]</literal>
        </message>
        <param>
            <request>
                <identifier>active:sloot.xpath2</identifier>
                <argument name="operand">scratch:user</argument>
                <!-- get the user id -->
                <argument name="operator">
                    <literal type="string">string(/sc:user/@xml:id)</literal>
                </argument>
            </request>
        </param>
        <param>this:response</param>
    </log>
    <sloot-debug>
        <log>
            <level>INFO</level>
            <message>
                <literal type="string">[interface.REST]&#xA;Authorized IDs:&#xA;[&#xA;%1]&#xA;Authorized roles:&#xA;[&#xA;%2]</literal>
            </message>
            <param>arg:authorizedIDs</param>
            <param>
                <!-- pass the response trough sloot.toString so the actual
                                user document is logged instead of the value of its pointer!-->
                <request>
                    <identifier>active:sloot.toString</identifier>
                    <argument name="operand">arg:authorizedRoles</argument>
                </request>
            </param>
        </log>
    </sloot-debug>
</sequence>