script/workflow/getprocessesforuser.js

	getprocessesforuser.js revision 8f17dfbf7c98407b5ede55896cb7135c1f90bddb
/**
 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
 *
 * Copyright (c) 2012 ForgeRock AS. All Rights Reserved
 *
 * The contents of this file are subject to the terms
 * of the Common Development and Distribution License
 * (the License). You may not use this file except in
 * compliance with the License.
 *
 * You can obtain a copy of the License at
 * http://forgerock.org/license/CDDLv1.0.html
 * See the License for the specific language governing
 * permission and limitations under the License.
 *
 * When distributing Covered Code, include this CDDL
 * Header Notice in each file and include the License file
 * at http://forgerock.org/license/CDDLv1.0.html
 * If applicable, add the following below the CDDL Header,
 * with the fields enclosed by brackets [] replaced by
 * your own identifying information:
 * "Portions Copyrighted [year] [name of copyright owner]"
 */

if (request.method !== "query") {
    throw {
        "code" : 403,
        "message" : "Access denied"
    };
}
if (!request.additionalParameters || (!request.additionalParameters.userId && !request.additionalParameters.userName)) {
    throw "Required params: userId or userName";
}

(function () {
    var users = {},

    getUser = function(userId) {
        var user,
            params,
            result;

        if (!users[userId]) {
            user = openidm.read("managed/user/"+userId);
            if (!user) {
                params = {
                    "_queryId": "for-userName",
                    "uid": userId
                };
                result = openidm.query("managed/user", params);
                if (result.result && result.result.length === 1) {
                    user = result.result[0];
                }
                if (!user) {
                    user = openidm.read("repo/internal/user/"+userId);
                }

                if(!user) {
                    throw "Bad userId";
                }
            }
            users[userId] = user;
        }
        return users[userId];
    },

    contains = function(object, items) {
        var i;
        if (typeof items === "string") {
            items = items.split(',');
        }

        for (i = 0; i < items.length; i++) {
            if (items[i] === object) {
                return true;
            }
        }
        return false;
    },

    isProcessAvalibleForUser = function(processAccessPolicies, processDefinition, userRoles) {
        var i,
            props,
            property,
            matches,
            requiresRole;

        for (i = 0; i < processAccessPolicies.length; i++) {
            props =  processAccessPolicies[i].propertiesCheck;
            property = props.property;
            matches = props.matches;
            requiresRole = props.requiresRole;

            if (processDefinition[property].match(matches)) {
                if (contains(requiresRole, userRoles)) {
                    return true;
                }
            }
        }
        return false;
    },

    getProcessesAvalibleForUser = function(processDefinitions, userRoles) {
        var processesAvalibleToUser = [],
            processAccessPolicies = openidm.read("config/process/access").workflowAccess,
            processDefinition,
            i;

        for (i = 0; i < processDefinitions.length; i++) {
            processDefinition = processDefinitions[i];
            if (isProcessAvalibleForUser(processAccessPolicies, processDefinition, userRoles)) {
                processesAvalibleToUser.push(processDefinition);
            }
        }
        return processesAvalibleToUser;
    },
    processDefinitions = {},
    user = {},
    roles,
    processesForUser = [],
    processDefinitionsQueryParams = {
        "_queryId": "query-all-ids"
    };


    //code:

    if (request.additionalParameters.userId) {
        user = getUser(request.additionalParameters.userId);
        roles = user.effectiveRoles || user.roles;
    } else {
        user = getUser(request.additionalParameters.userName);
        roles = user.effectiveRoles || user.roles;
    }

    processDefinitions = openidm.query("workflow/processdefinition", processDefinitionsQueryParams).result;

    processesForUser = getProcessesAvalibleForUser(processDefinitions, roles);

    //return value
    return processesForUser;

} ());