001package usecase.auth;
002
003import javax.annotation.Priority;
004import javax.inject.Inject;
005import javax.interceptor.AroundInvoke;
006import javax.interceptor.Interceptor;
007import javax.interceptor.InvocationContext;
008
009/**
010 * Classe interceptor per verificare lo stato di admin di un utente loggato.
011 */
012@Interceptor
013@AdminsOnly
014@Priority(Interceptor.Priority.APPLICATION+3)
015public class AdminsOnlyInterceptor {
016    @Inject private CurrentUser currentUser;
017
018    /**
019     * Controlla se l'utente loggato รจ un admin.
020     * @param invocationContext
021     * @return Oggetto che autorizza a procedere con le operazioni.
022     * @throws AuthorizationException
023     */
024    @AroundInvoke
025    public Object checkAdmin(InvocationContext invocationContext) throws Exception{
026        if(!currentUser.isLoggedIn() || !currentUser.isAdmin()){
027            throw new AuthorizationException();
028        }
029        return invocationContext.proceed();
030    }
031}