package view import ( "github.com/caos/zitadel/internal/domain" caos_errs "github.com/caos/zitadel/internal/errors" grant_model "github.com/caos/zitadel/internal/usergrant/model" "github.com/caos/zitadel/internal/usergrant/repository/view/model" "github.com/caos/zitadel/internal/view/repository" "github.com/jinzhu/gorm" ) func UserGrantByID(db *gorm.DB, table, grantID string) (*model.UserGrantView, error) { grant := new(model.UserGrantView) query := repository.PrepareGetByKey(table, model.UserGrantSearchKey(grant_model.UserGrantSearchKeyID), grantID) err := query(db, grant) if caos_errs.IsNotFound(err) { return nil, caos_errs.ThrowNotFound(nil, "VIEW-Nqwf1", "Errors.UserGrant.NotFound") } return grant, err } func UserGrantByIDs(db *gorm.DB, table, resourceOwnerID, projectID, userID string) (*model.UserGrantView, error) { user := new(model.UserGrantView) resourceOwnerIDQuery := model.UserGrantSearchQuery{Key: grant_model.UserGrantSearchKeyResourceOwner, Value: resourceOwnerID, Method: domain.SearchMethodEquals} projectIDQuery := model.UserGrantSearchQuery{Key: grant_model.UserGrantSearchKeyProjectID, Value: projectID, Method: domain.SearchMethodEquals} userIDQuery := model.UserGrantSearchQuery{Key: grant_model.UserGrantSearchKeyUserID, Value: userID, Method: domain.SearchMethodEquals} query := repository.PrepareGetByQuery(table, resourceOwnerIDQuery, projectIDQuery, userIDQuery) err := query(db, user) if caos_errs.IsNotFound(err) { return nil, caos_errs.ThrowNotFound(nil, "VIEW-Q1tq2", "Errors.UserGrant.NotFound") } return user, err } func SearchUserGrants(db *gorm.DB, table string, req *grant_model.UserGrantSearchRequest) ([]*model.UserGrantView, uint64, error) { grants := make([]*model.UserGrantView, 0) var orgID string var withGranted bool for i := len(req.Queries) - 1; i >= 0; i-- { shouldRemove := false if req.Queries[i].Key == grant_model.UserGrantSearchKeyResourceOwner { orgID = req.Queries[i].Value.(string) shouldRemove = true } if req.Queries[i].Key == grant_model.UserGrantSearchKeyWithGranted { withGranted = true shouldRemove = true } if shouldRemove { req.Queries[i] = req.Queries[len(req.Queries)-1] req.Queries[len(req.Queries)-1] = nil req.Queries = req.Queries[:len(req.Queries)-1] } } if withGranted { db = db.Where("resource_owner = ? OR project_owner = ?", orgID, orgID) } else { db = db.Where("resource_owner = ?", orgID) } query := repository.PrepareSearchQuery(table, model.UserGrantSearchRequest{Limit: req.Limit, Offset: req.Offset, Queries: req.Queries}) count, err := query(db, &grants) if err != nil { return nil, 0, err } return grants, count, nil } func UserGrantsByUserID(db *gorm.DB, table, userID string) ([]*model.UserGrantView, error) { users := make([]*model.UserGrantView, 0) queries := []*grant_model.UserGrantSearchQuery{ {Key: grant_model.UserGrantSearchKeyUserID, Value: userID, Method: domain.SearchMethodEquals}, } query := repository.PrepareSearchQuery(table, model.UserGrantSearchRequest{Queries: queries}) _, err := query(db, &users) if err != nil { return nil, err } return users, nil } func UserGrantsByProjectID(db *gorm.DB, table, projectID string) ([]*model.UserGrantView, error) { users := make([]*model.UserGrantView, 0) queries := []*grant_model.UserGrantSearchQuery{ {Key: grant_model.UserGrantSearchKeyProjectID, Value: projectID, Method: domain.SearchMethodEquals}, } query := repository.PrepareSearchQuery(table, model.UserGrantSearchRequest{Queries: queries}) _, err := query(db, &users) if err != nil { return nil, err } return users, nil } func UserGrantsByProjectAndUserID(db *gorm.DB, table, projectID, userID string) ([]*model.UserGrantView, error) { users := make([]*model.UserGrantView, 0) queries := []*grant_model.UserGrantSearchQuery{ {Key: grant_model.UserGrantSearchKeyProjectID, Value: projectID, Method: domain.SearchMethodEquals}, {Key: grant_model.UserGrantSearchKeyUserID, Value: userID, Method: domain.SearchMethodEquals}, } query := repository.PrepareSearchQuery(table, model.UserGrantSearchRequest{Queries: queries}) _, err := query(db, &users) if err != nil { return nil, err } return users, nil } func UserGrantsByProjectAndGrantID(db *gorm.DB, table, projectID, grantID string) ([]*model.UserGrantView, error) { users := make([]*model.UserGrantView, 0) queries := []*grant_model.UserGrantSearchQuery{ {Key: grant_model.UserGrantSearchKeyProjectID, Value: projectID, Method: domain.SearchMethodEquals}, {Key: grant_model.UserGrantSearchKeyGrantID, Value: grantID, Method: domain.SearchMethodEquals}, } query := repository.PrepareSearchQuery(table, model.UserGrantSearchRequest{Queries: queries}) _, err := query(db, &users) if err != nil { return nil, err } return users, nil } func UserGrantsByProjectIDAndRole(db *gorm.DB, table, projectID, roleKey string) ([]*model.UserGrantView, error) { users := make([]*model.UserGrantView, 0) queries := []*grant_model.UserGrantSearchQuery{ {Key: grant_model.UserGrantSearchKeyProjectID, Value: projectID, Method: domain.SearchMethodEquals}, {Key: grant_model.UserGrantSearchKeyRoleKey, Value: roleKey, Method: domain.SearchMethodListContains}, } query := repository.PrepareSearchQuery(table, model.UserGrantSearchRequest{Queries: queries}) _, err := query(db, &users) if err != nil { return nil, err } return users, nil } func UserGrantsByOrgIDAndProjectID(db *gorm.DB, table, orgID, projectID string) ([]*model.UserGrantView, error) { users := make([]*model.UserGrantView, 0) queries := []*grant_model.UserGrantSearchQuery{ {Key: grant_model.UserGrantSearchKeyResourceOwner, Value: orgID, Method: domain.SearchMethodEquals}, {Key: grant_model.UserGrantSearchKeyProjectID, Value: projectID, Method: domain.SearchMethodEquals}, } query := repository.PrepareSearchQuery(table, model.UserGrantSearchRequest{Queries: queries}) _, err := query(db, &users) if err != nil { return nil, err } return users, nil } func UserGrantsByOrgID(db *gorm.DB, table, orgID string) ([]*model.UserGrantView, error) { users := make([]*model.UserGrantView, 0) queries := []*grant_model.UserGrantSearchQuery{ {Key: grant_model.UserGrantSearchKeyResourceOwner, Value: orgID, Method: domain.SearchMethodEquals}, } query := repository.PrepareSearchQuery(table, model.UserGrantSearchRequest{Queries: queries}) _, err := query(db, &users) if err != nil { return nil, err } return users, nil } func PutUserGrant(db *gorm.DB, table string, grant *model.UserGrantView) error { save := repository.PrepareSave(table) return save(db, grant) } func PutUserGrants(db *gorm.DB, table string, grants ...*model.UserGrantView) error { save := repository.PrepareBulkSave(table) g := make([]interface{}, len(grants)) for i, grant := range grants { g[i] = grant } return save(db, g...) } func DeleteUserGrant(db *gorm.DB, table, grantID string) error { delete := repository.PrepareDeleteByKey(table, model.UserGrantSearchKey(grant_model.UserGrantSearchKeyID), grantID) return delete(db) }