zallery/src/zall/page/ProfileServlet.java

package zall.page;

import zall.ZalleryServlet;
import zall.bean.User;
import zall.manager.AuthenticationManager;
import zall.util.UserMessage;
import zutil.db.DBConnection;
import zutil.log.LogUtil;

import javax.servlet.ServletException;
import javax.servlet.annotation.WebServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
import java.sql.SQLException;
import java.util.logging.Logger;

@WebServlet("/profile")
public class ProfileServlet extends ZalleryServlet {
	private static Logger logger = LogUtil.getLogger();

	private static final String JSP_FILE = "page_profile.jsp";


	public void doGet(HttpServletRequest request, HttpServletResponse  response, DBConnection db) throws ServletException, IOException, SQLException {
	    UserMessage msgs = UserMessage.getUserMessage(request.getSession());
	    User user = AuthenticationManager.getUserSession(request.getSession());

		if(request.getParameter("id") != null){
			User profile_user = User.load(db, Long.parseLong( request.getParameter("id") ));
			if(AuthenticationManager.canEdit(user, profile_user)){
				request.setAttribute("profile_user", profile_user);
			} else {
				msgs.add(UserMessage.MessageType.ERROR, lang.getString("error.not.allowed.edit.user"));
			}
		} else {
			request.setAttribute("profile_user", user);
		}

		include(JSP_FILE, request, response);

	}


	public void doPost(HttpServletRequest request, HttpServletResponse  response, DBConnection db) throws SQLException, IOException, ServletException {
		doGet(request, response, db);
    }
}