ProjectController.cs

using Coscine.Action;
using Coscine.Action.EventArgs;
using Coscine.Action.Implementations.Project;
using Coscine.Api.Project.Models;
using Coscine.Api.Project.ReturnObjects;
using Coscine.ApiCommons;
using Coscine.ApiCommons.Exceptions;
using Coscine.ApiCommons.Factories;
using Microsoft.AspNetCore.Mvc;
using Microsoft.SharePoint;
using System;
using System.Collections.Generic;
using System.Linq;

namespace Coscine.Api.Project.Controllers
{
    public class ProjectController : Controller
    {
        private readonly Authenticator _authenticator;
        private readonly List<IProjectAction> projectActions;

        public ProjectController()
        {
            _authenticator = new Authenticator(this, Program.Configuration);
            projectActions = new List<IProjectAction>()
            {
                new PIDAction(),
                new SharePointSiteAction()
            };
        }

        [Route("[controller]")]
        public IActionResult Index()
        {
            return Ok(_authenticator.ValidateAndExecute((user) =>
            {
                ProjectModel projectModel = new ProjectModel();
                return projectModel.GetAllWhere((project) =>                
                    (from projectRole in project.ProjectRolesProjectIdIds
                            where projectRole.User == user
                            && projectRole.Role.DisplayName == "Owner"
                            select projectRole).Any()
                ).Select((project) => new ProjectObject(project.Id, project.Description, project.DisplayName, project.Organization, project.StartDate, project.EndDate, project.Keywords));
            }));
        }

        [HttpGet("[controller]/{id}")]
        public IActionResult Get(string id)
        {
            return Ok(_authenticator.ValidateAndExecute((user) =>
            {
                ProjectModel projectModel = new ProjectModel();
                var project = projectModel.GetById(Guid.Parse(id));
                return new ProjectObject(project.Id, project.Description, project.DisplayName, project.Organization, project.StartDate, project.EndDate, project.Keywords);
            }));
        }

        [HttpPost("[controller]/{id}")]
        public IActionResult Update(string id)
        {
            return Ok(_authenticator.ValidateAndExecute((user) =>
            {
                ProjectObject projectObject = ObjectFactory<ProjectObject>.DeserializeFromStream(Request.Body);
                ProjectModel projectModel = new ProjectModel();
                var project = projectModel.GetById(Guid.Parse(id));
                if(projectModel.OwnsProject(user, project))
                {
                    return projectModel.UpdateByObject(project, projectObject);
                }
                else
                {
                    throw new NotAuthorizedException("The user is not authorized to perform an update on the selected project!");
                }
            }));
        }

        [HttpPost("[controller]")]
        public IActionResult Store()
        {
            return base.Ok(_authenticator.ValidateAndExecute((user) =>
            {
                ProjectObject projectObject = ObjectFactory<ProjectObject>.DeserializeFromStream(Request.Body);
                ProjectModel projectModel = new ProjectModel();
                var project = projectModel.StoreFromObject(projectObject, user);

                if (projectObject.ParentId != null 
                    && projectObject.ParentId != new Guid()
                    && projectModel.OwnsProject(user, projectModel.GetById(projectObject.ParentId))) // for now, only an owner can add subprojects to projects
                {
                    SubProjectModel subProjectModel = new SubProjectModel();
                    subProjectModel.LinkSubProject(projectObject.ParentId, project.Id);
                }

                FireEvents((projectAction, projectEventArgs) => projectAction.OnProjectCreate(project, projectEventArgs));

                return new ProjectObject(project.Id, project.Description, project.DisplayName, project.Organization, project.StartDate, project.EndDate, project.Keywords);
            }));
        }

        private void FireEvents(Action<IProjectAction, ProjectEventArgs> eventAction)
        {
            var sharePointSite = Request.Headers["Referer"];

            SPUserToken systemAccount = SPUserToken.SystemAccount;
            using (SPSite site = new SPSite(sharePointSite, systemAccount))
            {
                using (SPWeb web = site.OpenWeb())
                {
                    SPContext context = SPContext.GetContext(web);
                    object[] args = new object[]
                    {
                        context
                    };
                    ProjectEventArgs projectEventArgs = new ProjectEventArgs(Program.Configuration, args);
                    foreach (var projectAction in projectActions)
                    {
                        eventAction(projectAction, projectEventArgs);
                    }
                }
            }
        }
    }
}