using System; using Yavsc; using System.Web.Mvc; using System.Web; using System.Text.RegularExpressions; using System.IO; using Yavsc.Controllers; using System.Collections.Generic; using Yavsc.Model; using Yavsc.Model.WorkFlow; using WorkFlowProvider; using System.Web.Security; using System.Threading; using Yavsc.Model.FrontOffice; namespace Yavsc.Controllers { /// /// Front office controller. /// Access granted to all /// public class FrontOfficeController : Controller { /// /// The wfmgr. /// protected WorkFlowManager wfmgr = null; /// /// Initialize the specified requestContext. /// /// Request context. protected override void Initialize (System.Web.Routing.RequestContext requestContext) { base.Initialize (requestContext); wfmgr = new WorkFlowManager (); } /// /// Index this instance. /// public ActionResult Index () { return View (); } /// /// Estimates this instance. /// [Authorize] public ActionResult Estimates () { string username = Membership.GetUser ().UserName; return View (wfmgr.GetEstimates (username)); } /// /// Estimate the specified model and submit. /// /// Model. /// Submit. [Authorize] public ActionResult Estimate (Estimate model, string submit) { ViewData ["WebApiBase"] = "http://" + Request.Url.Authority + "/api"; ViewData ["WABASEWF"] = ViewData ["WebApiBase"] + "/WorkFlow"; if (submit == null) { if (model.Id > 0) { Estimate f = wfmgr.GetEstimate (model.Id); if (f == null) { ModelState.AddModelError ("Id", "Wrong Id"); return View (model); } model = f; ModelState.Clear (); string username = HttpContext.User.Identity.Name; if (username != model.Responsible && username != model.Client && !Roles.IsUserInRole ("FrontOffice")) throw new UnauthorizedAccessException ("You're not allowed to view this estimate"); } } else { string username = HttpContext.User.Identity.Name; if (model.Id == 0) { model.Responsible = username; ModelState.Clear (); } if (ModelState.IsValid) { if (username != model.Responsible && !Roles.IsUserInRole ("FrontOffice")) throw new UnauthorizedAccessException ("You're not allowed to modify this estimate"); if (model.Id == 0) model = wfmgr.CreateEstimate ( username, model.Client, model.Title, model.Description); else { wfmgr.UpdateEstimate (model); model = wfmgr.GetEstimate (model.Id); } } } return View (model); } /// /// Catalog this instance. /// [AcceptVerbs ("GET")] public ActionResult Catalog () { return View ( CatalogManager.GetCatalog (Request.Url.AbsolutePath) ); } /// /// Catalog this instance. /// [AcceptVerbs ("GET")] public ActionResult Brand (string id) { Catalog c = CatalogManager.GetCatalog (Request.Url.AbsolutePath); ViewData ["BrandName"] = id; return View (c.GetBrand (id)); } /// /// get the product category /// /// The category object. /// Brand id. /// Product category Id. [AcceptVerbs ("GET")] public ActionResult ProductCategory (string brandid, string pcid) { ViewData ["BrandId"] = brandid; ViewData ["ProductCategoryId"] = pcid; return View ( CatalogManager.GetCatalog (Request.Url.AbsolutePath).GetBrand (brandid).GetProductCategory (pcid) ); } /// /// Product the specified id, pc and pref. /// /// Identifier. /// Pc. /// Preference. [AcceptVerbs ("GET")] public ActionResult Product (string id, string pc, string pref) { Product p = null; ViewData ["BrandName"] = id; ViewData ["ProdCatRef"] = pc; ViewData ["ProdRef"] = pref; Catalog cat = CatalogManager.GetCatalog (Request.Url.AbsolutePath); if (cat == null) { ViewData ["Message"] = "Catalog introuvable"; ViewData ["RefType"] = "Catalog"; return View ("ReferenceNotFound"); } Brand b = cat.GetBrand (id); if (b == null) { ViewData ["RefType"] = "Brand"; return View ("ReferenceNotFound"); } ProductCategory pcat = b.GetProductCategory (pc); if (pcat == null) { ViewData ["RefType"] = "ProductCategory"; return View ("ReferenceNotFound"); } ViewData ["ProdCatName"] = pcat.Name; p = pcat.GetProduct (pref); if (p.CommandForm == null) p.CommandForm = b.DefaultForm; return View ((p is Service) ? "Service" : "Product", p); } /// /// Command this instance. /// public ActionResult Command () { return View (); } private Basket GetBasket () { if (Session ["Basket"] == null) Session ["Basket"] = new Basket(); return Session ["Basket"] as Basket; } /// /// Command the specified collection. /// /// Collection. [HttpPost] [Authorize] public ActionResult Command (FormCollection collection) { try { // get files from the request string fnre = "[A-Za-z0-9~\\-.]+"; HttpFileCollectionBase hfc = Request.Files; // TODO mime-magic on content, and file name filter foreach (String h in hfc.AllKeys) { if (!Regex.Match (hfc [h].FileName, fnre).Success) { ViewData ["Message"] = "File name refused"; ModelState.AddModelError ( h, string.Format ( "The file name {0} dosn't match an acceptable file name {1}", hfc [h].FileName, fnre)); return View (collection); } } foreach (String h in hfc.AllKeys) { // TODO Limit with hfc[h].ContentLength hfc [h].SaveAs (Path.Combine (FileSystemController.BaseDir, hfc [h].FileName)); } // Add specified product command to the basket, GetBasket().Add (Commande.Create (collection)); ViewData ["Message"] = LocalizedText.Item_added_to_basket; return View (collection); } catch (Exception e) { ViewData ["Message"] = "Exception:" + e.Message; return View (collection); } } } }