zitadel/internal/command/user_membership.go

package command

import (
	"context"

	"github.com/zitadel/zitadel/internal/eventstore"
	"github.com/zitadel/zitadel/internal/repository/instance"
	"github.com/zitadel/zitadel/internal/repository/org"
	"github.com/zitadel/zitadel/internal/repository/project"
)

type CascadingMembership struct {
	UserID        string
	ResourceOwner string

	IAM          *CascadingIAMMembership
	Org          *CascadingOrgMembership
	Project      *CascadingProjectMembership
	ProjectGrant *CascadingProjectGrantMembership
}

type CascadingIAMMembership struct {
	IAMID string
}

type CascadingOrgMembership struct {
	OrgID string
}

type CascadingProjectMembership struct {
	ProjectID string
}

type CascadingProjectGrantMembership struct {
	ProjectID string
	GrantID   string
}

func (c *Commands) removeUserMemberships(ctx context.Context, memberships []*CascadingMembership) (_ []eventstore.Command, err error) {
	events := make([]eventstore.Command, 0)
	for _, membership := range memberships {
		if membership.IAM != nil {
			iamAgg := instance.NewAggregate(membership.IAM.IAMID)
			removeEvent := c.removeInstanceMember(ctx, &iamAgg.Aggregate, membership.UserID, true)
			events = append(events, removeEvent)
		} else if membership.Org != nil {
			orgAgg := org.NewAggregate(membership.Org.OrgID)
			removeEvent := c.removeOrgMember(ctx, &orgAgg.Aggregate, membership.UserID, true)
			events = append(events, removeEvent)
		} else if membership.Project != nil {
			projectAgg := project.NewAggregate(membership.Project.ProjectID, membership.ResourceOwner)
			removeEvent := c.removeProjectMember(ctx, &projectAgg.Aggregate, membership.UserID, true)
			events = append(events, removeEvent)
		} else if membership.ProjectGrant != nil {
			projectAgg := project.NewAggregate(membership.ProjectGrant.ProjectID, membership.ResourceOwner)
			removeEvent := c.removeProjectGrantMember(ctx, &projectAgg.Aggregate, membership.UserID, membership.ProjectGrant.GrantID, true)
			events = append(events, removeEvent)
		}
	}
	return events, nil
}