add: support should be able to see verifications of user

[gigi.git] / src / org / cacert / gigi / pages / wot / MyPoints.java

diff --git a/src/org/cacert/gigi/pages/wot/MyPoints.java b/src/org/cacert/gigi/pages/wot/MyPoints.java
index ba2bdf5af5da706d62f91b01dae4b52114741a15..9d8a3e3bc0565651b5990faa0f125ed7b86ac7a0 100644 (file)
--- a/src/org/cacert/gigi/pages/wot/MyPoints.java
+++ b/src/org/cacert/gigi/pages/wot/MyPoints.java
@@ -13,22 +13,45 @@ import org.cacert.gigi.util.AuthorizationContext;
 
 public class MyPoints extends Page {
 
+    public static final String SUPPORT_PATH = "/support/user/*/points";
+
     public static final String PATH = "/wot/mypoints";
 
-    private AssurancesDisplay myDisplay = new AssurancesDisplay("asArr", false);
+    private static final int intStart = SUPPORT_PATH.indexOf('*');
+
+    private boolean support;
 
-    private AssurancesDisplay toOtherDisplay = new AssurancesDisplay("otherAsArr", true);
+    private AssurancesDisplay myDisplay;
 
-    public MyPoints(String title) {
-        super(title);
+    private AssurancesDisplay toOtherDisplay;
+
+    public MyPoints(boolean support) {
+        super(support ? "Support User Points" : "My Points");
+        this.support = support;
+        myDisplay = new AssurancesDisplay("asArr", false, support);
+        toOtherDisplay = new AssurancesDisplay("otherAsArr", true, support);
     }
 
     @Override
     public void doGet(HttpServletRequest req, HttpServletResponse resp) throws IOException {
+        User user;
+        if (support) {
+            String info = req.getPathInfo();
+            int id = Integer.parseInt(info.substring(intStart, info.length() - SUPPORT_PATH.length() + intStart + 1));
+            user = User.getById(id);
+            if (user == null) {
+                resp.sendError(404);
+                return;
+            }
+        } else {
+            user = getUser(req);
+        }
+
         HashMap<String, Object> vars = new HashMap<String, Object>();
+        vars.put("support", support);
+        vars.put("username", user.getPreferredName().toString());
         vars.put("pointlist", myDisplay);
         vars.put("madelist", toOtherDisplay);
-        User user = getUser(req);
         vars.put("asArr", user.getReceivedAssurances());
         vars.put("otherAsArr", user.getMadeAssurances());
         vars.put("assP", user.getAssurancePoints());
@@ -41,6 +64,14 @@ public class MyPoints extends Page {
 
     @Override
     public boolean isPermitted(AuthorizationContext ac) {
-        return ac != null && ac.getTarget() instanceof User;
+        if (ac == null) {
+            return false;
+        }
+        if (support) {
+            return ac.canSupport();
+        } else {
+            return ac.getTarget() instanceof User;
+        }
     }
+
 }