@app.route('/doc/<int:doc_id>')
def view_document(doc_id):
	# 헤더에서 Referer와 X-User를 가져옴
    referer = request.headers.get('Referer', '')
    user_level = request.headers.get('X-User', 'guest')

    # doc_id가 0~999가 아니면 404
    if doc_id < 0 or doc_id >= 1000:
        abort(404)

    # documents에 doc_id가 없으면 404
    if doc_id not in documents:
        abort(404)
    
    document = documents[doc_id]

    # referer에 /share가 없을 때
    if '/share' not in referer:
        return render_template('error.html', 
            message="Access denied. Documents can only be accessed from the share page."), 403
	
	# document 분류가 confidential일 때
    if document['classification'] == 'confidential':
	    # user_level이 admin이 아니면
        if user_level != 'admin':
            return render_template('error.html', 
                message="Insufficient privileges. Administrator access required."), 403
    # document 분류가 internal일 때
    elif document['classification'] == 'internal':
	    # user_level이 guest이면
        if user_level == 'guest':
            return render_template('error.html', 
                message="Internal documents require user authentication."), 401
    
    return render_template('document.html', doc=document, doc_id=doc_id)

# flag가 담겨 있는 문서의 id는 100~999 사이 랜덤값
flag_doc_id = random.randint(100, 999)

documents = {
    flag_doc_id: {
        'title': 'Confidential Report - Access Restricted',
        'content': f'This is a confidential internal document.\n\nDocument ID: {flag_doc_id}\nClassification: TOP SECRET\n\n<!-- FLAG: {FLAG} -->\n\nThis document contains sensitive information and should only be accessed by authorized personnel.',
        'classification': 'confidential',
        'author': 'System Administrator'
    }
}

for i in range(1000):
    if i not in documents:
        uid = random.randint(0, 9)
        documents[i] = {
            'title': f'Document #{i:03d}',
            'content': f'This is document number {i}.\n\nContent: Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat.\n\nDocument ID: {i}\nCreated: 2025-01-{(i % 28) + 1:02d}\nAuthor: User{uid}',
            'classification': 'public' if random.randint(0, 2) == 0 else 'internal',
            'author': f'User{uid}'
        }