How to use

hasOperation

method

in

org.activityinfo.model.permission.GrantModel

private static Optional<String> getFilter(Operation operation, ResourceId resourceId, UserDatabaseMeta db) {
  Optional<String> filter = Optional.empty();
  if (db.hasGrant(resourceId) && db.getGrant(resourceId).get().hasOperation(operation)) {
    filter = db.getGrant(resourceId).get().getFilter(operation);
  }
  return filter;
}

private static void matchGrants(GrantModel testGrant, GrantModel expectedGrant) {
  assertThat(testGrant.getOperations().size(), equalTo(expectedGrant.getOperations().size()));
  for (Operation operation : expectedGrant.getOperations()) {
    assertTrue(testGrant.hasOperation(operation));
    assertThat(testGrant.getFilter(operation), equalTo(expectedGrant.getFilter(operation)));
  }
}

/**
 * If user is requesting permission on a database, need to check specified database is the provided
 * {@link UserDatabaseMeta} and whether the specified operation is permitted.
 *
 * Otherwise, we ensure that the specified resource is visible and then check whether the specified operation
 * is permitted.
 */
private static boolean operationPermitted(Operation operation, ResourceId resourceId, UserDatabaseMeta db) {
  if (isDatabase(resourceId)) {
    return db.getDatabaseId().equals(resourceId)
        && db.hasGrant(resourceId)
        && db.getGrant(resourceId).get().hasOperation(operation);
  } else if (isProjectForm(resourceId)) {
    return allowedProjectOperation(resourceId, operation, db);
  } else if (isAdminLevelForm(resourceId)) {
    return allowedAdminLevelOperation(operation, db);
  } else {
    return db.hasResource(resourceId)
        && granted(operation, db.getResource(resourceId).get(), db);
  }
}

return db.getGrant(resource.getId()).get().hasOperation(operation);
    && db.getGrant(resource.getParentId()).get().hasOperation(operation);