Revize 1e46def4

LoadGraphData user permission check

sources/src/main/java/cz/zcu/kiv/offscreen/servlets/LoadGraphData.java

@@ -60 +60 @@
                 }
 
             } else {
-                // TODO check user permissions to this graph
                 Integer diagramId = Integer.parseInt(diagram_id);
 
                 DB db = new DB(getServletContext());
                 Diagram diagram = new Diagram(db, diagramId);
+
+                if(!diagram.isPublic()){
+
+                    Integer loggedUserId = (Integer) request.getSession().getAttribute("logged_user_id");
+                    if(loggedUserId == null || diagram.getUserId() != loggedUserId) {
+                        response.getWriter().write("");
+                        return;
+                    }
+                }
+
                 response.getWriter().write(diagram.getJsonDiagram());
             }
 

sources/src/main/java/cz/zcu/kiv/offscreen/user/Diagram.java

@@ -50 +50 @@
         return -1;
     }
 
+    public boolean isPublic(){
+        if(this.id < 0) return false;
+
+        String qy = "SELECT public FROM diagram WHERE id = '" + this.id + "'";
+        ResultSet rs = db.exQuery(qy);
+
+        try{
+            if (rs != null && rs.next()) {
+                return rs.getString("public").equals("1");
+            }
+        }  catch (SQLException e){
+            e.printStackTrace();
+        }
+        return false;
+    }
+
     public String getJsonDiagram(){
         if(this.id < 0) return "";