feat: remove org (#4148)

* feat(command): remove org

* refactor: imports, unused code, error handling

* reduce org removed in action

* add org deletion to projections

* add org removal to projections

* add org removal to projections

* org removed projection

* lint import

* projections

* fix: table names in tests

* fix: table names in tests

* logging

* add org state

* fix(domain): add Owner removed to object details

* feat(ListQuery): add with owner removed

* fix(org-delete): add bool to functions to select with owner removed

* fix(org-delete): add bools to user grants with events to determine if dependencies lost owner

* fix(org-delete): add unit tests for owner removed and org removed events

* fix(org-delete): add handling of org remove for grants and members

* fix(org-delete): correction of unit tests for owner removed

* fix(org-delete): update projections, unit tests and get functions

* fix(org-delete): add change date to authnkeys and owner removed to org metadata

* fix(org-delete): include owner removed for login names

* fix(org-delete): some column fixes in projections and build for queries with owner removed

* indexes

* fix(org-delete): include review changes

* fix(org-delete): change user projection name after merge

* fix(org-delete): include review changes for project grant where no project owner is necessary

* fix(org-delete): include auth and adminapi tables with owner removed information

* fix(org-delete): cleanup username and orgdomain uniqueconstraints when org is removed

* fix(org-delete): add permissions for org.remove

* remove unnecessary unique constraints

* fix column order in primary keys

* fix(org-delete): include review changes

* fix(org-delete): add owner removed indexes and chang setup step to create tables

* fix(org-delete): move PK order of instance_id and change added user_grant from review

* fix(org-delete): no params for prepareUserQuery

* change to step 6

* merge main

* fix(org-delete): OldUserName rename to private

* fix linting

* cleanup

* fix: remove org test

* create prerelease

* chore: delete org-delete as prerelease

Co-authored-by: Stefan Benz <stefan@caos.ch>
Co-authored-by: Livio Spring <livio.a@gmail.com>
Co-authored-by: Fabi <38692350+hifabienne@users.noreply.github.com>
Co-authored-by: Stefan Benz <46600784+stebenz@users.noreply.github.com>

internal/iam/repository/view/idp_provider_view.go

@@ -15,7 +15,8 @@ func GetIDPProviderByAggregateIDAndConfigID(db *gorm.DB, table, aggregateID, idp
 	aggIDQuery := &model.IDPProviderSearchQuery{Key: iam_model.IDPProviderSearchKeyAggregateID, Value: aggregateID, Method: domain.SearchMethodEquals}
 	idpConfigIDQuery := &model.IDPProviderSearchQuery{Key: iam_model.IDPProviderSearchKeyIdpConfigID, Value: idpConfigID, Method: domain.SearchMethodEquals}
 	instanceIDQuery := &model.IDPProviderSearchQuery{Key: iam_model.IDPProviderSearchKeyInstanceID, Value: instanceID, Method: domain.SearchMethodEquals}
-	query := repository.PrepareGetByQuery(table, aggIDQuery, idpConfigIDQuery, instanceIDQuery)
+	ownerRemovedQuery := &model.IDPProviderSearchQuery{Key: iam_model.IDPProviderSearchKeyOwnerRemoved, Value: false, Method: domain.SearchMethodEquals}
+	query := repository.PrepareGetByQuery(table, aggIDQuery, idpConfigIDQuery, instanceIDQuery, ownerRemovedQuery)
 	err := query(db, policy)
 	if caos_errs.IsNotFound(err) {
 		return nil, caos_errs.ThrowNotFound(nil, "VIEW-Skvi8", "Errors.IAM.LoginPolicy.IDP.NotExisting")
@@ -36,6 +37,11 @@ func IDPProvidersByIdpConfigID(db *gorm.DB, table, idpConfigID, instanceID strin
 			Value:  instanceID,
 			Method: domain.SearchMethodEquals,
 		},
+		{
+			Key:    iam_model.IDPProviderSearchKeyOwnerRemoved,
+			Value:  false,
+			Method: domain.SearchMethodEquals,
+		},
 	}
 	query := repository.PrepareSearchQuery(table, model.IDPProviderSearchRequest{Queries: queries})
 	_, err := query(db, &providers)
@@ -63,6 +69,11 @@ func IDPProvidersByAggregateIDAndState(db *gorm.DB, table string, aggregateID, i
 			Value:  instanceID,
 			Method: domain.SearchMethodEquals,
 		},
+		{
+			Key:    iam_model.IDPProviderSearchKeyOwnerRemoved,
+			Value:  false,
+			Method: domain.SearchMethodEquals,
+		},
 	}
 	query := repository.PrepareSearchQuery(table, model.IDPProviderSearchRequest{Queries: queries})
 	_, err := query(db, &providers)
@@ -114,6 +125,19 @@ func DeleteIDPProvidersByAggregateID(db *gorm.DB, table, aggregateID, instanceID
 }
 
 func DeleteInstanceIDPProviders(db *gorm.DB, table, instanceID string) error {
-	delete := repository.PrepareDeleteByKey(table, model.IDPProviderSearchKey(iam_model.IDPProviderSearchKeyInstanceID), instanceID)
+	delete := repository.PrepareDeleteByKey(table,
+		model.IDPProviderSearchKey(iam_model.IDPProviderSearchKeyInstanceID),
+		instanceID,
+	)
 	return delete(db)
 }
+
+func UpdateOrgOwnerRemovedIDPProviders(db *gorm.DB, table, instanceID, aggID string) error {
+	update := repository.PrepareUpdateByKeys(table,
+		model.IDPProviderSearchKey(iam_model.IDPProviderSearchKeyOwnerRemoved),
+		true,
+		repository.Key{Key: model.IDPProviderSearchKey(iam_model.IDPProviderSearchKeyInstanceID), Value: instanceID},
+		repository.Key{Key: model.IDPProviderSearchKey(iam_model.IDPProviderSearchKeyAggregateID), Value: aggID},
+	)
+	return update(db)
+}

internal/iam/repository/view/idp_view.go

@@ -14,7 +14,8 @@ func IDPByID(db *gorm.DB, table, idpID, instanceID string) (*model.IDPConfigView
 	idp := new(model.IDPConfigView)
 	idpIDQuery := &model.IDPConfigSearchQuery{Key: iam_model.IDPConfigSearchKeyIdpConfigID, Value: idpID, Method: domain.SearchMethodEquals}
 	instanceIDQuery := &model.IDPConfigSearchQuery{Key: iam_model.IDPConfigSearchKeyInstanceID, Value: instanceID, Method: domain.SearchMethodEquals}
-	query := repository.PrepareGetByQuery(table, idpIDQuery, instanceIDQuery)
+	ownerRemovedQuery := &model.IDPConfigSearchQuery{Key: iam_model.IDPConfigSearchKeyOwnerRemoved, Value: false, Method: domain.SearchMethodEquals}
+	query := repository.PrepareGetByQuery(table, idpIDQuery, instanceIDQuery, ownerRemovedQuery)
 	err := query(db, idp)
 	if caos_errs.IsNotFound(err) {
 		return nil, caos_errs.ThrowNotFound(nil, "VIEW-Ahq2s", "Errors.IDP.NotExisting")
@@ -34,6 +35,11 @@ func GetIDPConfigsByAggregateID(db *gorm.DB, table string, aggregateID, instance
 			Value:  instanceID,
 			Method: domain.SearchMethodEquals,
 		},
+		{
+			Key:    iam_model.IDPConfigSearchKeyOwnerRemoved,
+			Value:  false,
+			Method: domain.SearchMethodEquals,
+		},
 	}
 	query := repository.PrepareSearchQuery(table, model.IDPConfigSearchRequest{Queries: queries})
 	_, err := query(db, &idps)
@@ -66,6 +72,16 @@ func DeleteIDP(db *gorm.DB, table, idpID, instanceID string) error {
 	return delete(db)
 }
 
+func UpdateOrgOwnerRemovedIDPs(db *gorm.DB, table, instanceID, aggID string) error {
+	update := repository.PrepareUpdateByKeys(table,
+		model.IDPConfigSearchKey(iam_model.IDPConfigSearchKeyOwnerRemoved),
+		true,
+		repository.Key{Key: model.IDPConfigSearchKey(iam_model.IDPConfigSearchKeyInstanceID), Value: instanceID},
+		repository.Key{Key: model.IDPConfigSearchKey(iam_model.IDPConfigSearchKeyAggregateID), Value: aggID},
+	)
+	return update(db)
+}
+
 func DeleteInstanceIDPs(db *gorm.DB, table, instanceID string) error {
 	delete := repository.PrepareDeleteByKey(table, model.IDPConfigSearchKey(iam_model.IDPConfigSearchKeyInstanceID), instanceID)
 	return delete(db)

internal/iam/repository/view/model/idp_config.go

@@ -23,6 +23,7 @@ const (
 	IDPConfigKeyName         = "name"
 	IDPConfigKeyProviderType = "idp_provider_type"
 	IDPConfigKeyInstanceID   = "instance_id"
+	IDPConfigKeyOwnerRemoved = "owner_removed"
 )
 
 type IDPConfigView struct {

internal/iam/repository/view/model/idp_config_query.go

@@ -61,6 +61,8 @@ func (key IDPConfigSearchKey) ToColumnName() string {
 		return IDPConfigKeyProviderType
 	case iam_model.IDPConfigSearchKeyInstanceID:
 		return IDPConfigKeyInstanceID
+	case iam_model.IDPConfigSearchKeyOwnerRemoved:
+		return IDPConfigKeyOwnerRemoved
 	default:
 		return ""
 	}

internal/iam/repository/view/model/idp_provider.go

@@ -15,10 +15,11 @@ import (
 )
 
 const (
-	IDPProviderKeyAggregateID = "aggregate_id"
-	IDPProviderKeyIdpConfigID = "idp_config_id"
-	IDPProviderKeyState       = "idp_state"
-	IDPProviderKeyInstanceID  = "instance_id"
+	IDPProviderKeyAggregateID  = "aggregate_id"
+	IDPProviderKeyIdpConfigID  = "idp_config_id"
+	IDPProviderKeyState        = "idp_state"
+	IDPProviderKeyInstanceID   = "instance_id"
+	IDPProviderKeyOwnerRemoved = "owner_removed"
 )
 
 type IDPProviderView struct {

internal/iam/repository/view/model/idp_provider_query.go

@@ -59,6 +59,8 @@ func (key IDPProviderSearchKey) ToColumnName() string {
 		return IDPProviderKeyState
 	case iam_model.IDPProviderSearchKeyInstanceID:
 		return IDPProviderKeyInstanceID
+	case iam_model.IDPProviderSearchKeyOwnerRemoved:
+		return IDPProviderKeyOwnerRemoved
 	default:
 		return ""
 	}

internal/iam/repository/view/model/label_policy.go

@@ -15,9 +15,10 @@ import (
 )
 
 const (
-	LabelPolicyKeyAggregateID = "aggregate_id"
-	LabelPolicyKeyState       = "label_policy_state"
-	LabelPolicyKeyInstanceID  = "instance_id"
+	LabelPolicyKeyAggregateID  = "aggregate_id"
+	LabelPolicyKeyState        = "label_policy_state"
+	LabelPolicyKeyInstanceID   = "instance_id"
+	LabelPolicyKeyOwnerRemoved = "owner_removed"
 )
 
 type LabelPolicyView struct {

internal/iam/repository/view/model/label_policy_query.go

@@ -57,6 +57,8 @@ func (key LabelPolicySearchKey) ToColumnName() string {
 		return LabelPolicyKeyState
 	case iam_model.LabelPolicySearchKeyInstanceID:
 		return LabelPolicyKeyInstanceID
+	case iam_model.LabelPolicySearchKeyOwnerRemoved:
+		return LabelPolicyKeyOwnerRemoved
 
 	default:
 		return ""

internal/iam/repository/view/styling.go

@@ -15,7 +15,8 @@ func GetStylingByAggregateIDAndState(db *gorm.DB, table, aggregateID, instanceID
 	aggregateIDQuery := &model.LabelPolicySearchQuery{Key: iam_model.LabelPolicySearchKeyAggregateID, Value: aggregateID, Method: domain.SearchMethodEquals}
 	stateQuery := &model.LabelPolicySearchQuery{Key: iam_model.LabelPolicySearchKeyState, Value: state, Method: domain.SearchMethodEquals}
 	instanceIDQuery := &model.LabelPolicySearchQuery{Key: iam_model.LabelPolicySearchKeyInstanceID, Value: instanceID, Method: domain.SearchMethodEquals}
-	query := repository.PrepareGetByQuery(table, aggregateIDQuery, stateQuery, instanceIDQuery)
+	ownerRemovedQuery := &model.LabelPolicySearchQuery{Key: iam_model.LabelPolicySearchKeyOwnerRemoved, Value: false, Method: domain.SearchMethodEquals}
+	query := repository.PrepareGetByQuery(table, aggregateIDQuery, stateQuery, instanceIDQuery, ownerRemovedQuery)
 	err := query(db, policy)
 	if caos_errs.IsNotFound(err) {
 		return nil, caos_errs.ThrowNotFound(nil, "VIEW-68G11", "Errors.IAM.LabelPolicy.NotExisting")
@@ -28,6 +29,16 @@ func PutStyling(db *gorm.DB, table string, policy *model.LabelPolicyView) error
 	return save(db, policy)
 }
 
+func UpdateOrgOwnerRemovedStyling(db *gorm.DB, table, instanceID, aggID string) error {
+	update := repository.PrepareUpdateByKeys(table,
+		model.LabelPolicySearchKey(iam_model.LabelPolicySearchKeyOwnerRemoved),
+		true,
+		repository.Key{Key: model.LabelPolicySearchKey(iam_model.LabelPolicySearchKeyInstanceID), Value: instanceID},
+		repository.Key{Key: model.LabelPolicySearchKey(iam_model.LabelPolicySearchKeyAggregateID), Value: aggID},
+	)
+	return update(db)
+}
+
 func DeleteInstanceStyling(db *gorm.DB, table, instanceID string) error {
 	delete := repository.PrepareDeleteByKey(table, model.LabelPolicySearchKey(iam_model.LabelPolicySearchKeyInstanceID), instanceID)
 	return delete(db)