mirror of
https://github.com/zitadel/zitadel.git
synced 2024-12-12 19:14:23 +00:00
f3e6f3b23b
* feat(command): remove org * refactor: imports, unused code, error handling * reduce org removed in action * add org deletion to projections * add org removal to projections * add org removal to projections * org removed projection * lint import * projections * fix: table names in tests * fix: table names in tests * logging * add org state * fix(domain): add Owner removed to object details * feat(ListQuery): add with owner removed * fix(org-delete): add bool to functions to select with owner removed * fix(org-delete): add bools to user grants with events to determine if dependencies lost owner * fix(org-delete): add unit tests for owner removed and org removed events * fix(org-delete): add handling of org remove for grants and members * fix(org-delete): correction of unit tests for owner removed * fix(org-delete): update projections, unit tests and get functions * fix(org-delete): add change date to authnkeys and owner removed to org metadata * fix(org-delete): include owner removed for login names * fix(org-delete): some column fixes in projections and build for queries with owner removed * indexes * fix(org-delete): include review changes * fix(org-delete): change user projection name after merge * fix(org-delete): include review changes for project grant where no project owner is necessary * fix(org-delete): include auth and adminapi tables with owner removed information * fix(org-delete): cleanup username and orgdomain uniqueconstraints when org is removed * fix(org-delete): add permissions for org.remove * remove unnecessary unique constraints * fix column order in primary keys * fix(org-delete): include review changes * fix(org-delete): add owner removed indexes and chang setup step to create tables * fix(org-delete): move PK order of instance_id and change added user_grant from review * fix(org-delete): no params for prepareUserQuery * change to step 6 * merge main * fix(org-delete): OldUserName rename to private * fix linting * cleanup * fix: remove org test * create prerelease * chore: delete org-delete as prerelease Co-authored-by: Stefan Benz <stefan@caos.ch> Co-authored-by: Livio Spring <livio.a@gmail.com> Co-authored-by: Fabi <38692350+hifabienne@users.noreply.github.com> Co-authored-by: Stefan Benz <46600784+stebenz@users.noreply.github.com>
287 lines
11 KiB
Go
287 lines
11 KiB
Go
package projection
|
|
|
|
import (
|
|
"context"
|
|
|
|
"github.com/zitadel/zitadel/internal/database"
|
|
"github.com/zitadel/zitadel/internal/domain"
|
|
"github.com/zitadel/zitadel/internal/errors"
|
|
"github.com/zitadel/zitadel/internal/eventstore"
|
|
"github.com/zitadel/zitadel/internal/eventstore/handler"
|
|
"github.com/zitadel/zitadel/internal/eventstore/handler/crdb"
|
|
"github.com/zitadel/zitadel/internal/repository/instance"
|
|
"github.com/zitadel/zitadel/internal/repository/org"
|
|
"github.com/zitadel/zitadel/internal/repository/project"
|
|
)
|
|
|
|
const (
|
|
ProjectGrantProjectionTable = "projections.project_grants3"
|
|
|
|
ProjectGrantColumnGrantID = "grant_id"
|
|
ProjectGrantColumnCreationDate = "creation_date"
|
|
ProjectGrantColumnChangeDate = "change_date"
|
|
ProjectGrantColumnSequence = "sequence"
|
|
ProjectGrantColumnState = "state"
|
|
ProjectGrantColumnResourceOwner = "resource_owner"
|
|
ProjectGrantColumnInstanceID = "instance_id"
|
|
ProjectGrantColumnProjectID = "project_id"
|
|
ProjectGrantColumnGrantedOrgID = "granted_org_id"
|
|
ProjectGrantColumnRoleKeys = "granted_role_keys"
|
|
ProjectGrantColumnOwnerRemoved = "owner_removed"
|
|
ProjectGrantColumnGrantedOrgRemoved = "granted_org_removed"
|
|
)
|
|
|
|
type projectGrantProjection struct {
|
|
crdb.StatementHandler
|
|
}
|
|
|
|
func newProjectGrantProjection(ctx context.Context, config crdb.StatementHandlerConfig) *projectGrantProjection {
|
|
p := new(projectGrantProjection)
|
|
config.ProjectionName = ProjectGrantProjectionTable
|
|
config.Reducers = p.reducers()
|
|
config.InitCheck = crdb.NewTableCheck(
|
|
crdb.NewTable([]*crdb.Column{
|
|
crdb.NewColumn(ProjectGrantColumnGrantID, crdb.ColumnTypeText),
|
|
crdb.NewColumn(ProjectGrantColumnCreationDate, crdb.ColumnTypeTimestamp),
|
|
crdb.NewColumn(ProjectGrantColumnChangeDate, crdb.ColumnTypeTimestamp),
|
|
crdb.NewColumn(ProjectGrantColumnSequence, crdb.ColumnTypeInt64),
|
|
crdb.NewColumn(ProjectGrantColumnState, crdb.ColumnTypeEnum),
|
|
crdb.NewColumn(ProjectGrantColumnResourceOwner, crdb.ColumnTypeText),
|
|
crdb.NewColumn(ProjectGrantColumnInstanceID, crdb.ColumnTypeText),
|
|
crdb.NewColumn(ProjectGrantColumnProjectID, crdb.ColumnTypeText),
|
|
crdb.NewColumn(ProjectGrantColumnGrantedOrgID, crdb.ColumnTypeText),
|
|
crdb.NewColumn(ProjectGrantColumnRoleKeys, crdb.ColumnTypeTextArray, crdb.Nullable()),
|
|
crdb.NewColumn(ProjectGrantColumnOwnerRemoved, crdb.ColumnTypeBool, crdb.Default(false)),
|
|
crdb.NewColumn(ProjectGrantColumnGrantedOrgRemoved, crdb.ColumnTypeBool, crdb.Default(false)),
|
|
},
|
|
crdb.NewPrimaryKey(ProjectGrantColumnInstanceID, ProjectGrantColumnGrantID),
|
|
crdb.WithIndex(crdb.NewIndex("resource_owner", []string{ProjectGrantColumnResourceOwner})),
|
|
crdb.WithIndex(crdb.NewIndex("granted_org", []string{ProjectGrantColumnGrantedOrgID})),
|
|
crdb.WithIndex(crdb.NewIndex("owner_removed", []string{ProjectGrantColumnOwnerRemoved})),
|
|
crdb.WithIndex(crdb.NewIndex("granted_org_removed", []string{ProjectGrantColumnGrantedOrgRemoved})),
|
|
),
|
|
)
|
|
p.StatementHandler = crdb.NewStatementHandler(ctx, config)
|
|
return p
|
|
}
|
|
|
|
func (p *projectGrantProjection) reducers() []handler.AggregateReducer {
|
|
return []handler.AggregateReducer{
|
|
{
|
|
Aggregate: project.AggregateType,
|
|
EventRedusers: []handler.EventReducer{
|
|
{
|
|
Event: project.GrantAddedType,
|
|
Reduce: p.reduceProjectGrantAdded,
|
|
},
|
|
{
|
|
Event: project.GrantChangedType,
|
|
Reduce: p.reduceProjectGrantChanged,
|
|
},
|
|
{
|
|
Event: project.GrantCascadeChangedType,
|
|
Reduce: p.reduceProjectGrantCascadeChanged,
|
|
},
|
|
{
|
|
Event: project.GrantDeactivatedType,
|
|
Reduce: p.reduceProjectGrantDeactivated,
|
|
},
|
|
{
|
|
Event: project.GrantReactivatedType,
|
|
Reduce: p.reduceProjectGrantReactivated,
|
|
},
|
|
{
|
|
Event: project.GrantRemovedType,
|
|
Reduce: p.reduceProjectGrantRemoved,
|
|
},
|
|
{
|
|
Event: project.ProjectRemovedType,
|
|
Reduce: p.reduceProjectRemoved,
|
|
},
|
|
},
|
|
},
|
|
{
|
|
Aggregate: org.AggregateType,
|
|
EventRedusers: []handler.EventReducer{
|
|
{
|
|
Event: org.OrgRemovedEventType,
|
|
Reduce: p.reduceOwnerRemoved,
|
|
},
|
|
},
|
|
},
|
|
{
|
|
Aggregate: instance.AggregateType,
|
|
EventRedusers: []handler.EventReducer{
|
|
{
|
|
Event: instance.InstanceRemovedEventType,
|
|
Reduce: reduceInstanceRemovedHelper(ProjectGrantColumnInstanceID),
|
|
},
|
|
},
|
|
},
|
|
}
|
|
}
|
|
|
|
func (p *projectGrantProjection) reduceProjectGrantAdded(event eventstore.Event) (*handler.Statement, error) {
|
|
e, ok := event.(*project.GrantAddedEvent)
|
|
if !ok {
|
|
return nil, errors.ThrowInvalidArgumentf(nil, "HANDL-g92Fg", "reduce.wrong.event.type %s", project.GrantAddedType)
|
|
}
|
|
return crdb.NewCreateStatement(
|
|
e,
|
|
[]handler.Column{
|
|
handler.NewCol(ProjectGrantColumnGrantID, e.GrantID),
|
|
handler.NewCol(ProjectGrantColumnProjectID, e.Aggregate().ID),
|
|
handler.NewCol(ProjectGrantColumnCreationDate, e.CreationDate()),
|
|
handler.NewCol(ProjectGrantColumnChangeDate, e.CreationDate()),
|
|
handler.NewCol(ProjectGrantColumnResourceOwner, e.Aggregate().ResourceOwner),
|
|
handler.NewCol(ProjectGrantColumnInstanceID, e.Aggregate().InstanceID),
|
|
handler.NewCol(ProjectGrantColumnState, domain.ProjectGrantStateActive),
|
|
handler.NewCol(ProjectGrantColumnSequence, e.Sequence()),
|
|
handler.NewCol(ProjectGrantColumnGrantedOrgID, e.GrantedOrgID),
|
|
handler.NewCol(ProjectGrantColumnRoleKeys, database.StringArray(e.RoleKeys)),
|
|
},
|
|
), nil
|
|
}
|
|
|
|
func (p *projectGrantProjection) reduceProjectGrantChanged(event eventstore.Event) (*handler.Statement, error) {
|
|
e, ok := event.(*project.GrantChangedEvent)
|
|
if !ok {
|
|
return nil, errors.ThrowInvalidArgumentf(nil, "HANDL-g0fg4", "reduce.wrong.event.type %s", project.GrantChangedType)
|
|
}
|
|
return crdb.NewUpdateStatement(
|
|
e,
|
|
[]handler.Column{
|
|
handler.NewCol(ProjectColumnChangeDate, e.CreationDate()),
|
|
handler.NewCol(ProjectGrantColumnSequence, e.Sequence()),
|
|
handler.NewCol(ProjectGrantColumnRoleKeys, database.StringArray(e.RoleKeys)),
|
|
},
|
|
[]handler.Condition{
|
|
handler.NewCond(ProjectGrantColumnGrantID, e.GrantID),
|
|
handler.NewCond(ProjectGrantColumnProjectID, e.Aggregate().ID),
|
|
handler.NewCond(ProjectGrantColumnInstanceID, e.Aggregate().InstanceID),
|
|
},
|
|
), nil
|
|
}
|
|
|
|
func (p *projectGrantProjection) reduceProjectGrantCascadeChanged(event eventstore.Event) (*handler.Statement, error) {
|
|
e, ok := event.(*project.GrantCascadeChangedEvent)
|
|
if !ok {
|
|
return nil, errors.ThrowInvalidArgumentf(nil, "HANDL-ll9Ts", "reduce.wrong.event.type %s", project.GrantCascadeChangedType)
|
|
}
|
|
return crdb.NewUpdateStatement(
|
|
e,
|
|
[]handler.Column{
|
|
handler.NewCol(ProjectGrantColumnChangeDate, e.CreationDate()),
|
|
handler.NewCol(ProjectGrantColumnSequence, e.Sequence()),
|
|
handler.NewCol(ProjectGrantColumnRoleKeys, database.StringArray(e.RoleKeys)),
|
|
},
|
|
[]handler.Condition{
|
|
handler.NewCond(ProjectGrantColumnGrantID, e.GrantID),
|
|
handler.NewCond(ProjectGrantColumnProjectID, e.Aggregate().ID),
|
|
handler.NewCond(ProjectGrantColumnInstanceID, e.Aggregate().InstanceID),
|
|
},
|
|
), nil
|
|
}
|
|
|
|
func (p *projectGrantProjection) reduceProjectGrantDeactivated(event eventstore.Event) (*handler.Statement, error) {
|
|
e, ok := event.(*project.GrantDeactivateEvent)
|
|
if !ok {
|
|
return nil, errors.ThrowInvalidArgumentf(nil, "HANDL-0fj2f", "reduce.wrong.event.type %s", project.GrantDeactivatedType)
|
|
}
|
|
return crdb.NewUpdateStatement(
|
|
e,
|
|
[]handler.Column{
|
|
handler.NewCol(ProjectGrantColumnChangeDate, e.CreationDate()),
|
|
handler.NewCol(ProjectGrantColumnSequence, e.Sequence()),
|
|
handler.NewCol(ProjectGrantColumnState, domain.ProjectGrantStateInactive),
|
|
},
|
|
[]handler.Condition{
|
|
handler.NewCond(ProjectGrantColumnGrantID, e.GrantID),
|
|
handler.NewCond(ProjectGrantColumnProjectID, e.Aggregate().ID),
|
|
handler.NewCond(ProjectGrantColumnInstanceID, e.Aggregate().InstanceID),
|
|
},
|
|
), nil
|
|
}
|
|
|
|
func (p *projectGrantProjection) reduceProjectGrantReactivated(event eventstore.Event) (*handler.Statement, error) {
|
|
e, ok := event.(*project.GrantReactivatedEvent)
|
|
if !ok {
|
|
return nil, errors.ThrowInvalidArgumentf(nil, "HANDL-2M0ve", "reduce.wrong.event.type %s", project.GrantReactivatedType)
|
|
}
|
|
return crdb.NewUpdateStatement(
|
|
e,
|
|
[]handler.Column{
|
|
handler.NewCol(ProjectGrantColumnChangeDate, e.CreationDate()),
|
|
handler.NewCol(ProjectGrantColumnSequence, e.Sequence()),
|
|
handler.NewCol(ProjectGrantColumnState, domain.ProjectGrantStateActive),
|
|
},
|
|
[]handler.Condition{
|
|
handler.NewCond(ProjectGrantColumnGrantID, e.GrantID),
|
|
handler.NewCond(ProjectGrantColumnProjectID, e.Aggregate().ID),
|
|
handler.NewCond(ProjectGrantColumnInstanceID, e.Aggregate().InstanceID),
|
|
},
|
|
), nil
|
|
}
|
|
|
|
func (p *projectGrantProjection) reduceProjectGrantRemoved(event eventstore.Event) (*handler.Statement, error) {
|
|
e, ok := event.(*project.GrantRemovedEvent)
|
|
if !ok {
|
|
return nil, errors.ThrowInvalidArgumentf(nil, "HANDL-o0w4f", "reduce.wrong.event.type %s", project.GrantRemovedType)
|
|
}
|
|
return crdb.NewDeleteStatement(
|
|
e,
|
|
[]handler.Condition{
|
|
handler.NewCond(ProjectGrantColumnGrantID, e.GrantID),
|
|
handler.NewCond(ProjectGrantColumnProjectID, e.Aggregate().ID),
|
|
handler.NewCond(ProjectGrantColumnInstanceID, e.Aggregate().InstanceID),
|
|
},
|
|
), nil
|
|
}
|
|
|
|
func (p *projectGrantProjection) reduceProjectRemoved(event eventstore.Event) (*handler.Statement, error) {
|
|
e, ok := event.(*project.ProjectRemovedEvent)
|
|
if !ok {
|
|
return nil, errors.ThrowInvalidArgumentf(nil, "HANDL-gn9rw", "reduce.wrong.event.type %s", project.ProjectRemovedType)
|
|
}
|
|
return crdb.NewDeleteStatement(
|
|
e,
|
|
[]handler.Condition{
|
|
handler.NewCond(ProjectGrantColumnProjectID, e.Aggregate().ID),
|
|
handler.NewCond(ProjectGrantColumnInstanceID, e.Aggregate().InstanceID),
|
|
},
|
|
), nil
|
|
}
|
|
|
|
func (p *projectGrantProjection) reduceOwnerRemoved(event eventstore.Event) (*handler.Statement, error) {
|
|
e, ok := event.(*org.OrgRemovedEvent)
|
|
if !ok {
|
|
return nil, errors.ThrowInvalidArgumentf(nil, "PROJE-HDgW3", "reduce.wrong.event.type %s", org.OrgRemovedEventType)
|
|
}
|
|
|
|
return crdb.NewMultiStatement(
|
|
e,
|
|
crdb.AddUpdateStatement(
|
|
[]handler.Column{
|
|
handler.NewCol(ProjectGrantColumnChangeDate, e.CreationDate()),
|
|
handler.NewCol(ProjectGrantColumnSequence, e.Sequence()),
|
|
handler.NewCol(ProjectGrantColumnOwnerRemoved, true),
|
|
},
|
|
[]handler.Condition{
|
|
handler.NewCond(ProjectGrantColumnInstanceID, e.Aggregate().InstanceID),
|
|
handler.NewCond(ProjectGrantColumnResourceOwner, e.Aggregate().ID),
|
|
},
|
|
),
|
|
crdb.AddUpdateStatement(
|
|
[]handler.Column{
|
|
handler.NewCol(ProjectGrantColumnChangeDate, e.CreationDate()),
|
|
handler.NewCol(ProjectGrantColumnSequence, e.Sequence()),
|
|
handler.NewCol(ProjectGrantColumnGrantedOrgRemoved, true),
|
|
},
|
|
[]handler.Condition{
|
|
handler.NewCond(ProjectGrantColumnInstanceID, e.Aggregate().InstanceID),
|
|
handler.NewCond(ProjectGrantColumnGrantedOrgID, e.Aggregate().ID),
|
|
},
|
|
),
|
|
), nil
|
|
}
|