path: root/Project-Unite/ACL.cs

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using Project_Unite.Models;
using Microsoft.AspNet.Identity.Owin;
using System.Web.Mvc;
using System.Diagnostics;
using System.Web.Mvc.Html;
using System.Data.Entity;
using System.Text;

namespace Project_Unite
{
    public static class ACL
    {
        public static IHtmlString NotificationCount(this HtmlHelper hpr, string uid)
        {
            var db = new ApplicationDbContext();
            var usr = db.Users.FirstOrDefault(x => x.Id == uid||x.UserName==uid);
            if (usr == null)
                return hpr.Raw("N/A");
            return hpr.Raw(usr.UnreadNotifications.ToString());
        }

        public static IHtmlString NewestUser(this HtmlHelper hpr)
        {
            var db = new ApplicationDbContext();
            var user = db.Users.OrderByDescending(x => x.JoinedAt).FirstOrDefault();
            if (user == null)
                return hpr.Raw(@"<a href=""#"">No new users</a>");
            else
                return hpr.Raw("<a href=\"/Profiles/ViewProfile/" + user.DisplayName + "\"><span class=\"glyphicon glyphicon-star\"></span> Our newest user, <strong>" + user.DisplayName + "</strong></a>");
        }

        public static IHtmlString GetLatestUnread(this HtmlHelper hpr, string userName)
        {
            var db = new ApplicationDbContext();
            var user = db.Users.FirstOrDefault(x => x.UserName == userName);
            if (user == null)
                return hpr.Raw("");
            var notesOrdered = user.Notifications.Where(x => x.IsRead == false).OrderByDescending(x => x.Timestamp).ToArray();
            StringBuilder builder = new StringBuilder();

            for (int i = 0; i < notesOrdered.Length && i < 5; i++)
            {
                builder.AppendLine("<li><a href=\"" + notesOrdered[i].ActionUrl + "\">");
                //Avatar holder start:
                builder.AppendLine("<div style=\"width:64px;height:64px;display:inline-block;\">");
                //Avatar
                builder.AppendLine("<img src=\"" + notesOrdered[i].AvatarUrl + "\" width=\"64\" height=\"64\"/>");
                //Avatar holder end:
                builder.AppendLine("</div>");

                //Notification title.
                builder.AppendLine("<p><strong>" + notesOrdered[i].Title + "</strong><br/><br/>");
                //Contents.
                builder.AppendLine(notesOrdered[i].Description + "</p>");

                builder.AppendLine("</a></li>");
            }
            return hpr.Raw(builder.ToString());
        }

        public static IHtmlString Markdown(this HtmlHelper hpr, string md)
        {
            return hpr.Raw(CommonMark.CommonMarkConverter.Convert(hpr.Encode(md)));
        }

        public static bool IsFollowed(string you, string fId)
        {
            var db = new ApplicationDbContext();
            var uid = db.Users.FirstOrDefault(x => x.UserName == you).Id;
            return db.Follows.FirstOrDefault(x => x.Follower == uid && x.Followed == fId) != null;
        }

        public static IHtmlString UserLink(this HtmlHelper hpr, string userId)
        {
            using(var db = new ApplicationDbContext())
            {
                var usr = db.Users.Include(x=>x.Roles).FirstOrDefault(x => x.Id == userId);

                var userRoles = new List<Role>();
                foreach (var usrRole in usr.Roles)
                {
                    userRoles.Add(db.Roles.FirstOrDefault(r => r.Id == usrRole.RoleId) as Role);
                }
                var userRole = userRoles.OrderByDescending(m => m.Priority).FirstOrDefault();
                return hpr.ActionLink(usr.DisplayName, "ViewProfile", "Profiles", new { id = usr.DisplayName }, new { style = userRole == null ? "color:white;" : @"color: " + userRole.ColorHex });

            }
        }

        public static IHtmlString UserName(this HtmlHelper hpr, string userId)
        {
            using (var db = new ApplicationDbContext())
            {
                var usr = db.Users.Include(x => x.Roles).FirstOrDefault(x => x.Id == userId);

                var userRoles = new List<Role>();
                foreach (var usrRole in usr.Roles)
                {
                    userRoles.Add(db.Roles.FirstOrDefault(r => r.Id == usrRole.RoleId) as Role);
                }
                var userRole = userRoles.OrderByDescending(m => m.Priority).FirstOrDefault();
                if (userRole == null)
                {
                    return hpr.Raw($@"<strong>{hpr.Encode(usr.DisplayName)}</strong>");
                }
                else
                {
                    return hpr.Raw($@"<strong style=""color:{userRole.ColorHex}"">{hpr.Encode(usr.DisplayName)}</strong>");
                }
            }
        }


        public static string UserNameRaw(string userId)
        {
            using (var db = new ApplicationDbContext())
            {
                var usr = db.Users.Include(x => x.Roles).FirstOrDefault(x => x.Id == userId);


                return usr.DisplayName;

            }
        }

        public static string UserNameFromEmailRaw(string userId)
        {
            using (var db = new ApplicationDbContext())
            {
                var usr = db.Users.Include(x => x.Roles).FirstOrDefault(x => x.UserName == userId);


                return usr.DisplayName;

            }
        }

        public static bool CanSee(string userName, string fId)
        {


            if (string.IsNullOrWhiteSpace(userName) || string.IsNullOrWhiteSpace(fId))
                return false;
            if (!Granted(userName, "CanPostTopics"))
                return false; //obviously if this role has a global restraint for this ACL def we shouldn't let them post in ANY forum.

            var db = new ApplicationDbContext();

            var usr = db.Users.Include(x => x.Roles).FirstOrDefault(u => u.UserName == userName);

            var userRoles = new List<Role>();
            foreach (var usrRole in usr.Roles)
            {
                userRoles.Add(db.Roles.FirstOrDefault(r => r.Id == usrRole.RoleId) as Role);
            }
            db.Dispose();
            var userRole = userRoles.OrderByDescending(m => m.Priority).First();

            db = new ApplicationDbContext();




            var forums = db.ForumCategories;
            var forum = forums.First(x => x.Id == fId);
            var perms = forum.Permissions.FirstOrDefault(x => x.RoleId == userRole.Id);
            if (perms == null)
            {
                UpdateACLDefinitions(fId);
                return true;
            }
            return (int)perms.Permissions >= (int)PermissionPreset.CanRead;
        }

        public static bool UserEmailConfirmed(string username)
        {
            if (string.IsNullOrWhiteSpace(username))
                return true;
            return new ApplicationDbContext().Users.FirstOrDefault(x => x.UserName == username).EmailConfirmed;
        }

        public static Role LowestPriorityRole()
        {
            var db = new ApplicationDbContext();
            var roles = db.Roles;
            List<Role> actualRoles = new List<Role>();
            foreach (Role r in roles)
            {
                actualRoles.Add(r);
            }
            return actualRoles.OrderBy(x => x.Priority).First();
        }

        public static bool CanReply(string userName, string fId)
        {


            if (string.IsNullOrWhiteSpace(userName) || string.IsNullOrWhiteSpace(fId))
                return false;
            if (!Granted(userName, "CanPostTopics"))
                return false; //obviously if this role has a global restraint for this ACL def we shouldn't let them post in ANY forum.

            var db = new ApplicationDbContext();

            var usr = db.Users.Include(x => x.Roles).FirstOrDefault(u => u.UserName == userName);

            var userRoles = new List<Role>();
            foreach (var usrRole in usr.Roles)
            {
                userRoles.Add(db.Roles.FirstOrDefault(r => r.Id == usrRole.RoleId) as Role);
            }
            db.Dispose();
            var userRole = userRoles.OrderByDescending(m => m.Priority).First();

            db = new ApplicationDbContext();




            var forums = db.ForumCategories;
            var forum = forums.First(x => x.Id == fId);
            var perms = forum.Permissions.FirstOrDefault(x => x.RoleId == userRole.Id);
            if (perms == null)
            {
                UpdateACLDefinitions(fId);
                return true;
            }
            return perms.Permissions >= PermissionPreset.CanReply;
        }

        public static ApplicationUser GetUserInfo(string id)
        {
            return new ApplicationDbContext().Users.FirstOrDefault(x => x.Id == id);
        }

        public static bool CanPost(string userName, string fId)
        {
            

            if (string.IsNullOrWhiteSpace(userName) || string.IsNullOrWhiteSpace(fId))
                return false;
            if (!Granted(userName, "CanPostTopics"))
                return false; //obviously if this role has a global restraint for this ACL def we shouldn't let them post in ANY forum.

            var db = new ApplicationDbContext();

            var usr = db.Users.Include(x => x.Roles).FirstOrDefault(u => u.UserName == userName);

            var userRoles = new List<Role>();
            foreach (var usrRole in usr.Roles)
            {
                userRoles.Add(db.Roles.FirstOrDefault(r => r.Id == usrRole.RoleId) as Role);
            }
            db.Dispose();
            var userRole = userRoles.OrderByDescending(m => m.Priority).First();

            db = new ApplicationDbContext();




            var forums = db.ForumCategories;
            var forum = forums.First(x => x.Id == fId);
            var perms = forum.Permissions.FirstOrDefault(x=>x.RoleId==userRole.Id);
            if (perms == null)
            {
                UpdateACLDefinitions(fId);
                return true;
            }
            return perms.Permissions >= PermissionPreset.CanPost;
        }

        public static void UpdateACLDefinitions(string fid)
        {
            var db = new ApplicationDbContext();
            var forum = db.ForumCategories.FirstOrDefault(x => x.Id == fid);
            if (forum == null)
                return;
            int recordsAdded = 0;

            if (forum.Permissions.Length < db.Roles.Count())
            {
                var roles = db.Roles.ToArray();
                foreach(var role in roles)
                {
                    if (db.ForumPermissions.FirstOrDefault(x => x.CategoryId == fid && x.RoleId == role.Id) == null)
                    {
                        var perm = new ForumPermission();
                        perm.Id = Guid.NewGuid().ToString();
                        perm.CategoryId = forum.Id;
                        perm.RoleId = role.Id;
                        perm.Permissions = PermissionPreset.CanPost;
                        db.ForumPermissions.Add(perm);
                        recordsAdded++;
                    }
                }
                db.AuditLogs.Add(new AuditLog("system", AuditLogLevel.Admin, $"Automatic forum ACL update occurred - Forum: {forum.Name}, records added: {recordsAdded}."));
                db.SaveChanges();
            }

        }

        public static bool CanManageRole(string userId, string roleId)
        {
            try
            {
                if (!Granted(userId, "CanEditRoles"))
                    return false;

                var db = new ApplicationDbContext();

                var usr = db.Users.FirstOrDefault(u => u.UserName == userId);

                var userRoles = new List<Role>();
                foreach (var usrRole in usr.Roles)
                {
                    userRoles.Add(db.Roles.FirstOrDefault(r => r.Id == usrRole.RoleId) as Role);
                }
                var manageRole = (Role)db.Roles.FirstOrDefault(x => x.Id == roleId);

                db.Dispose();
                var userRole = (Role)userRoles.OrderByDescending(m => m.Priority).First();
                if (manageRole.Priority > userRole.Priority)
                    return false;

                return true;
            }
            catch
            {
                return false;
            }
        }


        public static ForumCategory GetForumById(string id)
        {
            var db = new ApplicationDbContext();
            
                return db.ForumCategories.FirstOrDefault(x => x.Id == id);
            
        }

        public static bool Granted(string userName, string prop)
        {
            if (string.IsNullOrWhiteSpace(prop))
                return true;

            try
            {
                var db = new ApplicationDbContext();

                var usr = db.Users.FirstOrDefault(u => u.UserName == userName);

                var userRoles = new List<Role>();
                foreach (var usrRole in usr.Roles)
                {
                    userRoles.Add(db.Roles.FirstOrDefault(r => r.Id == usrRole.RoleId) as Role);
                }
                db.Dispose();
                var userRole = userRoles.OrderByDescending(m => m.Priority).First();

                var t = userRole.GetType();
                foreach (var propInf in t.GetProperties(System.Reflection.BindingFlags.Public | System.Reflection.BindingFlags.Instance))
                {
                    if (propInf.Name == prop && propInf.PropertyType == typeof(bool))
                        return (bool)propInf.GetValue(userRole);
                }

                return false;
            }
            catch (Exception ex)
            {
                Debug.Print(ex.ToString());
                return false;
            }

        }
    }
}