|
|
|
@ -72,11 +72,11 @@ public class DocumentApi extends BaseHandler { |
|
|
|
private boolean deleteDocument(HttpExchange ex, long docId, UmbrellaUser user) throws IOException, UmbrellaException { |
|
|
|
private boolean deleteDocument(HttpExchange ex, long docId, UmbrellaUser user) throws IOException, UmbrellaException { |
|
|
|
var doc = db.loadDoc(docId); |
|
|
|
var doc = db.loadDoc(docId); |
|
|
|
var companyId = doc.companyId(); |
|
|
|
var companyId = doc.companyId(); |
|
|
|
var company = companies.get(companyId); |
|
|
|
|
|
|
|
var members = companies.getMembers(companyId); |
|
|
|
var members = companies.getMembers(companyId); |
|
|
|
var isMember = false; |
|
|
|
var isMember = false; |
|
|
|
for (var member : members) isMember |= user.equals(member); |
|
|
|
for (var member : members) isMember |= user.equals(member); |
|
|
|
if (!isMember) return sendContent(ex,HTTP_FORBIDDEN,"You are mot a member of company "+doc.companyId()); |
|
|
|
if (!isMember) throw new UmbrellaException(HTTP_FORBIDDEN,"You are mot a member of company {0}",doc.companyId()); |
|
|
|
|
|
|
|
if (doc.state() != NEW) throw new UmbrellaException(HTTP_BAD_REQUEST,"This document has already been sent"); |
|
|
|
return sendContent(ex,db.deleteDoc(docId)); |
|
|
|
return sendContent(ex,db.deleteDoc(docId)); |
|
|
|
} |
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
|