////////////////////////////////////////////////////////////////////////////////
/// DISCLAIMER
///
/// Copyright 2017 ArangoDB GmbH, Cologne, Germany
///
/// Licensed under the Apache License, Version 2.0 (the "License");
/// you may not use this file except in compliance with the License.
/// You may obtain a copy of the License at
///
///     http://www.apache.org/licenses/LICENSE-2.0
///
/// Unless required by applicable law or agreed to in writing, software
/// distributed under the License is distributed on an "AS IS" BASIS,
/// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
/// See the License for the specific language governing permissions and
/// limitations under the License.
///
/// Copyright holder is ArangoDB GmbH, Cologne, Germany
///
/// @author Simon Grätzer
////////////////////////////////////////////////////////////////////////////////

#ifndef ARANGOD_REST_HANDLER_REST_USERS_HANDLER_H
#define ARANGOD_REST_HANDLER_REST_USERS_HANDLER_H 1

#include "RestHandler/RestBaseHandler.h"

namespace arangodb {
class AuthInfo;

class RestUsersHandler : public arangodb::RestBaseHandler {
 public:
  RestUsersHandler(GeneralRequest*, GeneralResponse*);

 public:
  virtual char const* name() const override { return "RestUsersHandler"; }
  bool isDirect() const override { return true; }
  RestStatus execute() override;

 private:
  bool isSystemUser() const;
  bool canAccessUser(std::string const& user) const;

  /// helper to generate a compliant response for individual user requests
  void generateUserResult(rest::ResponseCode code, VPackBuilder const& doc);

  void generateDatabaseResult(AuthInfo* authInfo, std::string const& user,
                              bool full);

  RestStatus getRequest(AuthInfo*);
  RestStatus postRequest(AuthInfo*);
  RestStatus putRequest(AuthInfo*);
  RestStatus patchRequest(AuthInfo*);
  RestStatus deleteRequest(AuthInfo*);
};
}

#endif