Mercurial > hg > orthanc-authorization

comparison Plugin/DefaultAuthorizationParser.cpp @ 1:d5d3cb00556a

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
initial release
author Sebastien Jodogne <s.jodogne@gmail.com>
date Wed, 22 Mar 2017 16:13:52 +0100
parents
children 544732bbd87b
comparison
equal deleted inserted replaced
0:decac5df19c4 1:d5d3cb00556a
1 /**
2 * Advanced authorization plugin for Orthanc
3 * Copyright (C) 2017 Osimis, Belgium
4 *
5 * This program is free software: you can redistribute it and/or
6 * modify it under the terms of the GNU Affero General Public License
7 * as published by the Free Software Foundation, either version 3 of
8 * the License, or (at your option) any later version.
9 *
10 * This program is distributed in the hope that it will be useful, but
11 * WITHOUT ANY WARRANTY; without even the implied warranty of
12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
13 * Affero General Public License for more details.
14 *
15 * You should have received a copy of the GNU Affero General Public License
16 * along with this program. If not, see <http://www.gnu.org/licenses/>.
17 **/
18
19 #include "DefaultAuthorizationParser.h"
20
21 #include "../Resources/Orthanc/Core/OrthancException.h"
22
23 namespace OrthancPlugins
24 {
25 DefaultAuthorizationParser::DefaultAuthorizationParser(OrthancPluginContext* context,
26 ICacheFactory& factory,
27 const std::string& dicomWebRoot) :
28 AuthorizationParserBase(context, factory),
29 resourcesPattern_("^/(patients|studies|series|instances)/([a-f0-9-]+)(|/.*)$"),
30 seriesPattern_("^/(web-viewer/series|web-viewer/is-stable-series|wsi/pyramids|wsi/tiles)/([a-f0-9-]+)(|/.*)$"),
31 instancesPattern_("^/web-viewer/instances/[a-z0-9]+-([a-f0-9-]+)_[0-9]+$")
32 {
33 std::string tmp = dicomWebRoot;
34 while (!tmp.empty() &&
35 tmp[tmp.size() - 1] == '/')
36 {
37 tmp = tmp.substr(0, tmp.size() - 1);
38 }
39
40 dicomWebStudies_ = boost::regex(
41 "^" + tmp + "/studies/([.0-9]+)(|/series)(|/)$");
42
43 dicomWebSeries_ = boost::regex(
44 "^" + tmp + "/studies/([.0-9]+)/series/([.0-9]+)(|/instances)(|/)$");
45
46 dicomWebInstances_ = boost::regex(
47 "^" + tmp + "/studies/([.0-9]+)/series/([.0-9]+)/instances/([.0-9]+)(|/|/frames/.*)$");
48 }
49
50
51 bool DefaultAuthorizationParser::Parse(AccessedResources& target,
52 const std::string& uri)
53 {
54 // The mutex below should not be necessary, but we prefer to
55 // ensure thread safety in boost::regex
56 boost::mutex::scoped_lock lock(mutex_);
57
58 boost::smatch what;
59
60 if (boost::regex_match(uri, what, resourcesPattern_))
61 {
62 AccessLevel level = StringToAccessLevel(what[1]);
63
64 switch (level)
65 {
66 case AccessLevel_Instance:
67 AddOrthancInstance(target, what[2]);
68 break;
69
70 case AccessLevel_Series:
71 AddOrthancSeries(target, what[2]);
72 break;
73
74 case AccessLevel_Study:
75 AddOrthancStudy(target, what[2]);
76 break;
77
78 case AccessLevel_Patient:
79 AddOrthancPatient(target, what[2]);
80 break;
81
82 default:
83 throw Orthanc::OrthancException(Orthanc::ErrorCode_InternalError);
84 }
85
86 return true;
87 }
88 else if (boost::regex_match(uri, what, seriesPattern_))
89 {
90 AddOrthancSeries(target, what[2]);
91 return true;
92 }
93 else if (boost::regex_match(uri, what, instancesPattern_))
94 {
95 AddOrthancInstance(target, what[1]);
96 return true;
97 }
98 else if (boost::regex_match(uri, what, dicomWebStudies_))
99 {
100 AddDicomStudy(target, what[1]);
101 return true;
102 }
103 else if (boost::regex_match(uri, what, dicomWebSeries_))
104 {
105 AddDicomSeries(target, what[1], what[2]);
106 return true;
107 }
108 else if (boost::regex_match(uri, what, dicomWebInstances_))
109 {
110 AddDicomInstance(target, what[1], what[2], what[3]);
111 return true;
112 }
113 else
114 {
115 // Unknown type of resource: Consider it as a system access
116
117 // Remove the trailing slashes if need be
118 std::string s = uri;
119 while (!s.empty() &&
120 s[s.length() - 1] == '/')
121 {
122 s = s.substr(0, s.length() - 1);
123 }
124
125 target.push_back(AccessedResource(AccessLevel_System, s, ""));
126 return true;
127 }
128 }
129 }