acl

defmodule AclWeb.RuleController do
  use AclWeb, :controller

  alias Acl.Acl_context
  alias Acl.Acl_context.Rule


  action_fallback AclWeb.FallbackController

  def index(conn, _params) do
#    IO.inspect(_params)

    acl_rules = Acl_context.list_acl_rules()
    render(conn, "index.json", acl_rules: acl_rules)
  end

  def create(conn, %{"rule" => rule_params}) do
    with {:ok, %Rule{} = rule} <- Acl_context.create_rule(rule_params) do
      conn
      |> put_status(:created)
      |> put_resp_header("location", Routes.rule_path(conn, :show, rule))
      |> render("show.json", rule: rule)
    end
  end

  def show(conn, %{"role" => role, "res" => res, "permission" => permission, "action" => action }) do
    rule = Acl_context.get_rule!([role, res, permission, action])
    render(conn, "show.json", rule: rule)
  end

  def update(conn, %{"id" => id, "rule" => rule_params}) do
    rule = Acl_context.get_rule!(id)

    with {:ok, %Rule{} = rule} <- Acl_context.update_rule(rule, rule_params) do
      render(conn, "show.json", rule: rule)
    end
  end

  def delete(conn, %{"id" => id}) do
    rule = Acl_context.get_rule!(id)

    with {:ok, %Rule{}} <- Acl_context.delete_rule(rule) do
      send_resp(conn, :no_content, "")
    end
  end

  def getRule(params)do

    rule = Acl_context.get_rule_by(params)
    case rule do
      nil -> {:error, "rule_doesnt_exist"}
      _ -> rule
    end
  end


  def checkRule(role , res, action, permission )do

    superRole = Map.from_struct( Acl_context.get_rule_by!(role))
    iterateRules(res, action, permission, superRole.rules)

  end
  def iterateRules(res, action, permission, [rule|rules]) do
   #IO.inspect(rule)

   cond do
     rule.res.res == res and  rule.action == action and rule.permission >= permission(permission) -> {:ok, condition(rule.condition)}
     rule.res.res == res  and rule.permission >= permission(permission) -> {:ok, condition(rule.condition)}
     rule.res.res == nil  and rule.permission >= permission(permission) -> {:ok, condition(rule.condition)}
     true ->  iterateRules(res, action, permission, rules)
   end

  end
  def iterateRules(res, action, permission, []), do: {:error, :permission_denied}

  def permission (param) do
    case param do
      0 -> 'none'
      1 -> 'read'
      2 -> 'write'
      3 -> 'edit'
      "read" -> 1
      "write" -> 2
      "edit" -> 3
      _ -> nil
    end

  end
  def condition (param) do
    case param do
      0 -> 'none'
      1 -> 'self'
      2 -> 'all'
    end
  end










  def addRule( %{"role" => role, "res" => res, "permission" => permission, "action" => action, "allowed" => allowed, "condition" => condition  })do
    rule=Acl_context.get_rule_by( %{"role" => role, "res" => res, "permission" => permission, "action" => action });
  IO.inspect(rule);
    case rule
      do
    nil ->  Acl_context.create_rule(%{"role" => role, "res" => res, "permission" => permission, "action" => action, "allowed" => allowed, "condition" => condition  })

     _ -> Acl_context.update_rule(rule, %{"role" => role, "res" => res, "permission" => permission, "action" => action, "allowed" => allowed, "condition" => condition  })
    end
  end

  def allowRule( %{"role" => role, "res" => res, "permission" => permission, "action" => action, "condition" => condition  })do
    rule=Acl_context.get_rule_by( %{"role" => role, "res" => res, "permission" => permission, "action" => action });
    if rule!= nil
      do
      Acl_context.update_rule(rule,%{"allowed" => true, "condition" => condition  })
      true
      else
      false
    end
  end
  def allowRule( %Rule{}= rule)do

      Acl_context.update_rule(rule,%{"allowed" => true })
  end

  def denyRule( %{"role" => role, "res" => res, "permission" => permission, "action" => action, "condition" => condition  })do
    rule=Acl_context.get_rule_by( %{"role" => role, "res" => res, "permission" => permission, "action" => action });
    if rule!= nil
      do
      Acl_context.update_rule(rule,%{ "allowed" => false, "condition" => condition  })
      true
      else
      false
    end
  end

  def denyRule( %Rule{}= rule)do
    Acl_context.update_rule(rule,%{"allowed" => false })
  end


end