DD.WellWorkover.Cloud/AsbCloudWebApi/Controllers/WellCompositeOperationController.cs

using AsbCloudApp.Data;
using AsbCloudApp.Services;
using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc;
using System.Collections.Generic;
using System.Threading;
using System.Threading.Tasks;
using AsbCloudApp.Data.WellOperation;

namespace AsbCloudWebApi.Controllers
{

    [ApiController]
    [Authorize]
    [Route("api/[controller]")]
    public class WellCompositeOperationController : ControllerBase
    {
        private readonly IWellCompositeOperationService wellCompositeOperationService;
        private readonly IWellService wellService;

        public WellCompositeOperationController(IWellCompositeOperationService wellCompositeOperationService, IWellService wellService)
        {
            this.wellCompositeOperationService = wellCompositeOperationService;
            this.wellService = wellService;
        }

        [HttpGet]
        [ProducesResponseType(typeof(WellCompositeOperationDto), (int)System.Net.HttpStatusCode.OK)]
        public async Task<IActionResult> GetAsync([FromQuery] IEnumerable<int> idsWells, CancellationToken token)
        {
            foreach (var idWell in idsWells)
                if (!await UserHasAccessToWellAsync(idWell, token))
                    return Forbid();

            var result = await wellCompositeOperationService.GetAsync(idsWells, token)
                .ConfigureAwait(false);

            return Ok(result);
        }

        protected async Task<bool> UserHasAccessToWellAsync(int idWell, CancellationToken token)
        {
            var idCompany = User.GetCompanyId();
            if (idCompany is not null &&
                await wellService.IsCompanyInvolvedInWellAsync((int)idCompany, idWell, token)
                    .ConfigureAwait(false))
                return true;
            return false;
        }
    }

}