* @see {@link controllers.annotation.IsAllowed}
*/
public class IsAllowedAction extends AbstractProjectCheckAction<IsAllowed> {
@Override
protected Result call(Project project, Context context, PathParser parser) throws Throwable {
ResourceType resourceType = this.configuration.resourceType();
ResourceConvertible resourceObject = Resource.getResourceObject(parser, project, resourceType);
Operation operation = this.configuration.value();
if(resourceObject == null) {
return AccessLogger.log(context.request(),
notFound(ErrorViews.NotFound.render("error.notfound", project, resourceType.resource())) , null);
}
if(!AccessControl.isAllowed(UserApp.currentUser(), resourceObject.asResource(), operation)) {
return AccessLogger.log(context.request(),
forbidden(ErrorViews.Forbidden.render("error.forbidden", project)), null);