implement UploadsAgent for user uploads

controllers/UploadsController.inc

@@ -0,0 +1,174 @@
+<?php
+
+	/**
+	 * The Legend of Z
+	 *
+	 * @author	Oliver Hanraths <oliver.hanraths@uni-duesseldorf.de>
+	 * @copyright	2014 Heinrich-Heine-Universität Düsseldorf
+	 * @license	http://www.gnu.org/licenses/gpl.html
+	 * @link	https://bitbucket.org/coderkun/the-legend-of-z
+	 */
+	
+	namespace hhu\z\controllers;
+	
+	
+	/**
+	 * Controller of the UploadsAgent to process and show user uploads.
+	 * 
+	 * @author	Oliver Hanraths <oliver.hanraths@uni-duesseldorf.de>
+	 */
+	class UploadsController extends \hhu\z\Controller
+	{
+		/**
+		 * Required models
+		 * 
+		 * @var array
+		 */
+		public $models = array('uploads', 'users', 'userroles');
+		/**
+		 * User permissions
+		 * 
+		 * @var array
+		 */
+		public $permissions = array(
+			'index' => array('admin', 'moderator', 'user', 'userseminaryroles')
+		);
+		
+		
+		
+		
+		/**
+		 * Prefilter.
+		 * 
+		 * @param	Request		$request	Current request
+		 * @param	Response	$response	Current response
+		 */
+		public function preFilter(\nre\core\Request $request, \nre\core\Response $response)
+		{
+			parent::preFilter($request, $response);
+			
+			// Set headers for caching control
+			$response->addHeader("Pragma: public");
+			$response->addHeader("Cache-control: public, max-age=".(60*60*24));
+			$response->addHeader("Expires: ".gmdate('r', time()+(60*60*24)));
+			$response->addHeader("Date: ".gmdate(\DateTime::RFC822));
+		}
+		
+		
+		/**
+		 * Action: index.
+		 * 
+		 * Display an upload.
+		 * 
+		 * @throws	AccessDeniedException
+		 * @throws	IdNotFoundException
+		 * @param	string	$uploadUrl	URL-name of the upload
+		 */
+		public function index($uploadUrl)
+		{
+			// Get Upload
+			$upload = $this->Uploads->getUploadByUrl($uploadUrl);
+			
+			// Check permissions
+			$user = $this->Users->getUserById($this->Auth->getUserId());
+			$user['roles'] = array();
+			foreach($this->Userroles->getUserrolesForUserById($user['id']) as $role) {
+				$user['roles'][] = $role['name'];
+			}
+			if(!$upload['public'])
+			{
+				// System roles
+				if(count(array_intersect(array('admin', 'moderator'), $user['roles'])) == 0)
+				{
+					// Owner of file
+					if($upload['created_user_id'] != $user['id'])
+					{
+						if(!is_null($upload['seminary_id'])) {
+							throw new \nre\exceptions\AccessDeniedException();
+						}
+						else
+						{
+							// Seminary
+							$seminary = $this->Seminaries->getSeminaryById($upload['seminary_id']);
+							
+							// Seminary roles
+							$userSeminaryRoles = array();
+							foreach($this->Userseminaryroles->getUserseminaryrolesForUserById($user['id'], $seminary['id']) as $role) {
+								$userSeminaryRoles[] = $role['name'];
+							}
+							
+							if(count(array_intersect(array('admin', 'moderator'), $userSeminaryRoles)) == 0) {
+								throw new \nre\exceptions\AccessDeniedException();
+							}
+						}
+					}
+				}
+			}
+			
+			// Set content-type
+			$this->response->addHeader("Content-type: ".$upload['mimetype']."");
+			
+			// Set filename
+			$upload['filename'] = ROOT.DS.\nre\configs\AppConfig::$dirs['uploads'].DS.$upload['id'];
+			if(!file_exists($upload['filename'])) {
+				throw new \nre\exceptions\IdNotFoundException($uploadUrl);
+			}
+			
+			// Cache
+			if($this->setCacheHeaders($upload['filename'])) {
+				return;
+			}
+			
+			// Load file
+			$file = file_get_contents($upload['filename']);
+
+			
+			
+			
+			// Pass data to view
+			$this->set('upload', $upload);
+			$this->set('file', $file);
+		}
+		
+		
+		
+		
+		/**
+		 * Determine file information and set the HTTP-header for
+		 * caching accordingly.
+		 * 
+		 * @param	string	$fileName	Filename
+		 * @return	boolean			HTTP-status 304 was set (in cache)
+		 */
+		private function setCacheHeaders($fileName)
+		{
+			// Determine last change of file
+			$fileLastModified = gmdate('r', filemtime($fileName));
+			
+			// Generate E-Tag
+			$fileEtag = hash('sha256', $fileLastModified.$fileName);
+			
+			
+			// Set header
+			$this->response->addHeader("Last-Modified: ".$fileLastModified);
+			$this->response->addHeader("Etag: ".$fileEtag);
+			// HTTP-status
+			$headerModifiedSince = $this->request->getServerParam('HTTP_IF_MODIFIED_SINCE');
+			$headerNoneMatch = $this->request->getServerParam('HTTP_IF_NONE_MATCH');
+			if(
+				!is_null($headerModifiedSince) && $fileLastModified < strtotime($headerModifiedSince) &&
+				!is_null($headerNoneMatch) && $headerNoneMatch == $fileEtag
+			) {
+				$this->response->setExit(true);
+				$this->response->addHeader(\nre\core\WebUtils::getHttpHeader(304));
+				
+				return true;
+			}
+			
+			
+			return false;
+		}
+		
+	}
+
+?>