daf4d4b94b
draft pr for the test demo harness for permit.io * harness working for permit.io demo * user is const * aws profile * permit import code for research * cleanup * create user tool poc * Merge branch 'main' of bitbucket.org:aarete/query-orchestration into feature/permit-io-demo * tests for user creation * add audit logs and dry-run * add tests sanity check the requested roles * update docs for delete * disable/enable users and test * more tests and make user name required only for create operations * clean up * add docs * aws tag tests * audit -> slog * attempt build fix devbox * edit * just devbox * remove lock change for merge * Merge branch 'main' of bitbucket.org:aarete/query-orchestration into feature/permit-io-demo
170 lines
6.7 KiB
Go
170 lines
6.7 KiB
Go
package api
|
|
|
|
import (
|
|
"context"
|
|
"github.com/google/uuid"
|
|
"github.com/permitio/permit-golang/pkg/config"
|
|
"github.com/permitio/permit-golang/pkg/errors"
|
|
"github.com/permitio/permit-golang/pkg/models"
|
|
"github.com/permitio/permit-golang/pkg/openapi"
|
|
"go.uber.org/zap"
|
|
)
|
|
|
|
type ResourceActionGroups struct {
|
|
permitBaseApi
|
|
}
|
|
|
|
func NewResourceActionGroupsApi(client *openapi.APIClient, config *config.PermitConfig) *ResourceActionGroups {
|
|
return &ResourceActionGroups{
|
|
permitBaseApi{
|
|
client: client,
|
|
config: config,
|
|
logger: config.Logger,
|
|
},
|
|
}
|
|
}
|
|
|
|
// List all resource action groups of a resource by resource key.
|
|
// Usage Example:
|
|
//
|
|
// `resourceActions, err := PermitClient.Api.ResourceActions.List(ctx, "resource-key", 1, 10)`
|
|
func (a *ResourceActionGroups) List(ctx context.Context, resourceKey string, page int, perPage int) ([]models.ResourceActionGroupRead, error) {
|
|
perPageLimit := int32(DefaultPerPageLimit)
|
|
if !isPaginationInLimit(int32(page), int32(perPage), perPageLimit) {
|
|
err := errors.NewPermitPaginationError()
|
|
a.logger.Error("error listing resource actions - max per page: "+string(perPageLimit), zap.Error(err))
|
|
return nil, err
|
|
}
|
|
err := a.lazyLoadPermitContext(ctx)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
resourceActionGroups, _, err := a.client.ResourceActionGroupsApi.ListResourceActionGroups(ctx, a.config.Context.GetProject(), a.config.Context.GetEnvironment(), resourceKey).Page(int32(page)).PerPage(int32(perPage)).Execute()
|
|
if err != nil {
|
|
a.logger.Error("error listing resource action groups for resource: "+resourceKey, zap.Error(err))
|
|
return nil, err
|
|
}
|
|
return resourceActionGroups, nil
|
|
}
|
|
|
|
// ListByAttributes lists all action groups in the current environment by attributes filter
|
|
func (a *ResourceActionGroups) ListByAttributes(ctx context.Context, resourceKey string, page int, perPage int, attributesFilter map[string]interface{}) ([]models.ResourceActionGroupRead, error) {
|
|
perPageLimit := int32(DefaultPerPageLimit)
|
|
if !isPaginationInLimit(int32(page), int32(perPage), perPageLimit) {
|
|
err := errors.NewPermitPaginationError()
|
|
a.logger.Error("error listing roles - max per page: "+string(perPageLimit), zap.Error(err))
|
|
return nil, err
|
|
}
|
|
err := a.lazyLoadPermitContext(ctx)
|
|
if err != nil {
|
|
a.logger.Error("", zap.Error(err))
|
|
return nil, err
|
|
}
|
|
actionGroups, httpRes, err := a.client.ResourceActionGroupsApi.ListResourceActionGroups(
|
|
ctx,
|
|
a.config.Context.GetProject(),
|
|
a.config.Context.GetEnvironment(),
|
|
resourceKey,
|
|
).Page(int32(page)).PerPage(int32(perPage)).AttributesFilter(attributesFilter).Execute()
|
|
|
|
err = errors.HttpErrorHandle(err, httpRes)
|
|
if err != nil {
|
|
a.logger.Error("error listing action groups", zap.Error(err))
|
|
return nil, err
|
|
}
|
|
return actionGroups, nil
|
|
}
|
|
|
|
// Get a resource action by resource key and action key.
|
|
// Usage Example:
|
|
//
|
|
// `resourceAction, err := PermitClient.Api.ResourceActions.Get(ctx, "resource-key", "action-key")`
|
|
func (a *ResourceActionGroups) Get(ctx context.Context, resourceKey string, actionKey string) (*models.ResourceActionGroupRead, error) {
|
|
err := a.lazyLoadPermitContext(ctx)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
resourceActionsGroups, _, err := a.client.ResourceActionGroupsApi.GetResourceActionGroup(ctx, a.config.Context.GetProject(), a.config.Context.GetEnvironment(), resourceKey, actionKey).Execute()
|
|
if err != nil {
|
|
a.logger.Error("error getting resource action: "+resourceKey+":"+actionKey, zap.Error(err))
|
|
return nil, err
|
|
}
|
|
return resourceActionsGroups, nil
|
|
}
|
|
|
|
// GetByKey gets a resource action by resource key and action key.
|
|
// Usage Example:
|
|
//
|
|
// `resourceAction, err := PermitClient.Api.ResourceActions.GetByKey(ctx, "resource-key", "action-key")`
|
|
func (a *ResourceActionGroups) GetByKey(ctx context.Context, resourceKey string, actionKey string) (*models.ResourceActionGroupRead, error) {
|
|
return a.Get(ctx, resourceKey, actionKey)
|
|
}
|
|
|
|
// GetById gets a resource action by resource ID and action ID.
|
|
// Usage Example:
|
|
//
|
|
// `resourceAction, err := PermitClient.Api.ResourceActions.GetById(ctx, uuid.New(), uuid.New())`
|
|
func (a *ResourceActionGroups) GetById(ctx context.Context, resourceKey uuid.UUID, actionKey uuid.UUID) (*models.ResourceActionGroupRead, error) {
|
|
return a.Get(ctx, resourceKey.String(), actionKey.String())
|
|
}
|
|
|
|
// Create a resource action by resource key.
|
|
// Usage Example:
|
|
// ```
|
|
//
|
|
// resourceActionCreate := models.NewResourceActionCreate("action-key", "action-name")
|
|
// resourceAction, err := PermitClient.Api.ResourceActions.Create(ctx, "resource-key", resourceActionCreate)
|
|
//
|
|
// ```
|
|
func (a *ResourceActionGroups) Create(ctx context.Context, resourceKey string, resourceActionCreate models.ResourceActionGroupCreate) (*models.ResourceActionGroupRead, error) {
|
|
err := a.lazyLoadPermitContext(ctx)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
resourceActionGroup, _, err := a.client.ResourceActionGroupsApi.CreateResourceActionGroup(ctx, a.config.Context.GetProject(), a.config.Context.GetEnvironment(), resourceKey).ResourceActionGroupCreate(resourceActionCreate).Execute()
|
|
if err != nil {
|
|
a.logger.Error("error creating resource action: "+resourceKey+":"+resourceActionCreate.GetKey(), zap.Error(err))
|
|
return nil, err
|
|
}
|
|
return resourceActionGroup, nil
|
|
}
|
|
|
|
// Update a resource action by resource key and action key.
|
|
// Usage Example:
|
|
// ```
|
|
//
|
|
// resourceActionUpdate := models.NewResourceActionUpdate()
|
|
// resourceActionUpdate.SetName("new-action-name")
|
|
// resourceAction, err := PermitClient.Api.ResourceActions.Update(ctx, "resource-key", "action-key", resourceActionUpdate)
|
|
//
|
|
// ```
|
|
//func (a *ResourceActionGroups) Update(ctx context.Context, resourceKey string, actionKey string, resourceActionUpdate models.ResourceActionGroupUpdate) (*models.ResourceActionRead, error) {
|
|
// err := a.lazyLoadPermitContext(ctx)
|
|
// if err != nil {
|
|
// return nil, err
|
|
// }
|
|
// resourceAction, _, err := a.client.ResourceActionsApi.UpdateResourceAction(ctx, a.config.Context.GetProject(), a.config.Context.GetEnvironment(), resourceKey, actionKey).ResourceActionUpdate(resourceActionUpdate).Execute()
|
|
// if err != nil {
|
|
// a.logger.Error("error updating resource action: "+resourceKey+":"+actionKey, zap.Error(err))
|
|
// return nil, err
|
|
// }
|
|
// return resourceAction, nil
|
|
//}
|
|
|
|
// Delete a resource action by resource key and action key.
|
|
// Usage Example:
|
|
//
|
|
// `err := PermitClient.Api.ResourceActions.Delete(ctx, "resource-key", "action-key")`
|
|
func (a *ResourceActionGroups) Delete(ctx context.Context, resourceKey string, actionKey string) error {
|
|
err := a.lazyLoadPermitContext(ctx)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
_, err = a.client.ResourceActionsApi.DeleteResourceAction(ctx, a.config.Context.GetProject(), a.config.Context.GetEnvironment(), resourceKey, actionKey).Execute()
|
|
if err != nil {
|
|
a.logger.Error("error deleting resource action: "+resourceKey+":"+actionKey, zap.Error(err))
|
|
return err
|
|
}
|
|
return nil
|
|
}
|