source: cats/SCHEMAcat/trunk/urn.org.isocat.schemacat.interface.rest/interface/user.dpml @ 3492

<?xml version="1.0" encoding="UTF-8"?>
<sequence debug="false">
        <sloot-debug>
                <log>
                        <level>INFO</level>
                        <message>
                                <literal type="string">[interface.REST] Requested user for id: %1</literal>
                        </message>
                        <param>arg:userID</param>
                </log>
        </sloot-debug>
        <if>
                <cond>
                        <request>
                                <identifier>active:isAuthorized</identifier>
                                <argument name="authorizedIDs">
                                        <request>
                                                <identifier>active:sloot.xquery</identifier>
                                                <argument name="operator">
                                                        <literal type="xml">
                                                                <ids>
                                                                        <id>{$userID}</id>
                                                                </ids>
                                                        </literal>
                                                </argument>
                                                <argument name="userID">arg:userID</argument>
                                        </request>
                                </argument>
                        </request>
                </cond>
                <then>
                        <request assignment="response">
                                <identifier>active:org.isocat.schemacat.access.data.user</identifier>
                                <verb>SOURCE</verb>
                                <argument name="id">arg:userID</argument>
                        </request>
                </then>
                <else>
                        <request assignment="response">
                                <identifier>active:groovy</identifier>
                                <argument name="operator">
                                        <!-- TODO: check if this is the proper way to generata a forbidden response -->
                                        <literal type="string">
                                                context.createResponseFrom("Forbidden!");
                                                context.sink("httpResponse:/code", 403);
                                        </literal>
                                </argument>
                        </request>
                </else>
        </if>
        <sloot-debug>
                <request>
                        <verb>SINK</verb>
                        <identifier>res:/debug/org.isocat.schemacat.interface.rest.user.response.xml</identifier>
                        <argument name="primary">this:response</argument>
                </request>
        </sloot-debug>
</sequence>