mirror of
https://github.com/zitadel/zitadel.git
synced 2024-12-16 04:48:04 +00:00
f3e6f3b23b
* feat(command): remove org * refactor: imports, unused code, error handling * reduce org removed in action * add org deletion to projections * add org removal to projections * add org removal to projections * org removed projection * lint import * projections * fix: table names in tests * fix: table names in tests * logging * add org state * fix(domain): add Owner removed to object details * feat(ListQuery): add with owner removed * fix(org-delete): add bool to functions to select with owner removed * fix(org-delete): add bools to user grants with events to determine if dependencies lost owner * fix(org-delete): add unit tests for owner removed and org removed events * fix(org-delete): add handling of org remove for grants and members * fix(org-delete): correction of unit tests for owner removed * fix(org-delete): update projections, unit tests and get functions * fix(org-delete): add change date to authnkeys and owner removed to org metadata * fix(org-delete): include owner removed for login names * fix(org-delete): some column fixes in projections and build for queries with owner removed * indexes * fix(org-delete): include review changes * fix(org-delete): change user projection name after merge * fix(org-delete): include review changes for project grant where no project owner is necessary * fix(org-delete): include auth and adminapi tables with owner removed information * fix(org-delete): cleanup username and orgdomain uniqueconstraints when org is removed * fix(org-delete): add permissions for org.remove * remove unnecessary unique constraints * fix column order in primary keys * fix(org-delete): include review changes * fix(org-delete): add owner removed indexes and chang setup step to create tables * fix(org-delete): move PK order of instance_id and change added user_grant from review * fix(org-delete): no params for prepareUserQuery * change to step 6 * merge main * fix(org-delete): OldUserName rename to private * fix linting * cleanup * fix: remove org test * create prerelease * chore: delete org-delete as prerelease Co-authored-by: Stefan Benz <stefan@caos.ch> Co-authored-by: Livio Spring <livio.a@gmail.com> Co-authored-by: Fabi <38692350+hifabienne@users.noreply.github.com> Co-authored-by: Stefan Benz <46600784+stebenz@users.noreply.github.com>
200 lines
6.9 KiB
Go
200 lines
6.9 KiB
Go
package projection
|
|
|
|
import (
|
|
"context"
|
|
|
|
"github.com/zitadel/zitadel/internal/errors"
|
|
"github.com/zitadel/zitadel/internal/eventstore"
|
|
"github.com/zitadel/zitadel/internal/eventstore/handler"
|
|
"github.com/zitadel/zitadel/internal/eventstore/handler/crdb"
|
|
"github.com/zitadel/zitadel/internal/repository/instance"
|
|
"github.com/zitadel/zitadel/internal/repository/org"
|
|
"github.com/zitadel/zitadel/internal/repository/project"
|
|
)
|
|
|
|
const (
|
|
ProjectRoleProjectionTable = "projections.project_roles3"
|
|
|
|
ProjectRoleColumnProjectID = "project_id"
|
|
ProjectRoleColumnKey = "role_key"
|
|
ProjectRoleColumnCreationDate = "creation_date"
|
|
ProjectRoleColumnChangeDate = "change_date"
|
|
ProjectRoleColumnSequence = "sequence"
|
|
ProjectRoleColumnResourceOwner = "resource_owner"
|
|
ProjectRoleColumnInstanceID = "instance_id"
|
|
ProjectRoleColumnDisplayName = "display_name"
|
|
ProjectRoleColumnGroupName = "group_name"
|
|
ProjectRoleColumnOwnerRemoved = "owner_removed"
|
|
)
|
|
|
|
type projectRoleProjection struct {
|
|
crdb.StatementHandler
|
|
}
|
|
|
|
func newProjectRoleProjection(ctx context.Context, config crdb.StatementHandlerConfig) *projectRoleProjection {
|
|
p := new(projectRoleProjection)
|
|
config.ProjectionName = ProjectRoleProjectionTable
|
|
config.Reducers = p.reducers()
|
|
config.InitCheck = crdb.NewTableCheck(
|
|
crdb.NewTable([]*crdb.Column{
|
|
crdb.NewColumn(ProjectRoleColumnProjectID, crdb.ColumnTypeText),
|
|
crdb.NewColumn(ProjectRoleColumnKey, crdb.ColumnTypeText),
|
|
crdb.NewColumn(ProjectRoleColumnCreationDate, crdb.ColumnTypeTimestamp),
|
|
crdb.NewColumn(ProjectRoleColumnChangeDate, crdb.ColumnTypeTimestamp),
|
|
crdb.NewColumn(ProjectRoleColumnSequence, crdb.ColumnTypeInt64),
|
|
crdb.NewColumn(ProjectRoleColumnResourceOwner, crdb.ColumnTypeText),
|
|
crdb.NewColumn(ProjectRoleColumnInstanceID, crdb.ColumnTypeText),
|
|
crdb.NewColumn(ProjectRoleColumnDisplayName, crdb.ColumnTypeText),
|
|
crdb.NewColumn(ProjectRoleColumnGroupName, crdb.ColumnTypeText),
|
|
crdb.NewColumn(ProjectRoleColumnOwnerRemoved, crdb.ColumnTypeBool, crdb.Default(false)),
|
|
},
|
|
crdb.NewPrimaryKey(ProjectRoleColumnInstanceID, ProjectRoleColumnProjectID, ProjectRoleColumnKey),
|
|
crdb.WithIndex(crdb.NewIndex("owner_removed", []string{ProjectRoleColumnOwnerRemoved})),
|
|
),
|
|
)
|
|
p.StatementHandler = crdb.NewStatementHandler(ctx, config)
|
|
return p
|
|
}
|
|
|
|
func (p *projectRoleProjection) reducers() []handler.AggregateReducer {
|
|
return []handler.AggregateReducer{
|
|
{
|
|
Aggregate: project.AggregateType,
|
|
EventRedusers: []handler.EventReducer{
|
|
{
|
|
Event: project.RoleAddedType,
|
|
Reduce: p.reduceProjectRoleAdded,
|
|
},
|
|
{
|
|
Event: project.RoleChangedType,
|
|
Reduce: p.reduceProjectRoleChanged,
|
|
},
|
|
{
|
|
Event: project.RoleRemovedType,
|
|
Reduce: p.reduceProjectRoleRemoved,
|
|
},
|
|
{
|
|
Event: project.ProjectRemovedType,
|
|
Reduce: p.reduceProjectRemoved,
|
|
},
|
|
},
|
|
},
|
|
{
|
|
Aggregate: org.AggregateType,
|
|
EventRedusers: []handler.EventReducer{
|
|
{
|
|
Event: org.OrgRemovedEventType,
|
|
Reduce: p.reduceOwnerRemoved,
|
|
},
|
|
},
|
|
},
|
|
{
|
|
Aggregate: instance.AggregateType,
|
|
EventRedusers: []handler.EventReducer{
|
|
{
|
|
Event: instance.InstanceRemovedEventType,
|
|
Reduce: reduceInstanceRemovedHelper(ProjectRoleColumnInstanceID),
|
|
},
|
|
},
|
|
},
|
|
}
|
|
}
|
|
|
|
func (p *projectRoleProjection) reduceProjectRoleAdded(event eventstore.Event) (*handler.Statement, error) {
|
|
e, ok := event.(*project.RoleAddedEvent)
|
|
if !ok {
|
|
return nil, errors.ThrowInvalidArgumentf(nil, "HANDL-g92Fg", "reduce.wrong.event.type %s", project.RoleAddedType)
|
|
}
|
|
return crdb.NewCreateStatement(
|
|
e,
|
|
[]handler.Column{
|
|
handler.NewCol(ProjectRoleColumnKey, e.Key),
|
|
handler.NewCol(ProjectRoleColumnProjectID, e.Aggregate().ID),
|
|
handler.NewCol(ProjectRoleColumnCreationDate, e.CreationDate()),
|
|
handler.NewCol(ProjectRoleColumnChangeDate, e.CreationDate()),
|
|
handler.NewCol(ProjectRoleColumnResourceOwner, e.Aggregate().ResourceOwner),
|
|
handler.NewCol(ProjectRoleColumnInstanceID, e.Aggregate().InstanceID),
|
|
handler.NewCol(ProjectRoleColumnSequence, e.Sequence()),
|
|
handler.NewCol(ProjectRoleColumnDisplayName, e.DisplayName),
|
|
handler.NewCol(ProjectRoleColumnGroupName, e.Group),
|
|
},
|
|
), nil
|
|
}
|
|
|
|
func (p *projectRoleProjection) reduceProjectRoleChanged(event eventstore.Event) (*handler.Statement, error) {
|
|
e, ok := event.(*project.RoleChangedEvent)
|
|
if !ok {
|
|
return nil, errors.ThrowInvalidArgumentf(nil, "HANDL-sM0f", "reduce.wrong.event.type %s", project.GrantChangedType)
|
|
}
|
|
if e.DisplayName == nil && e.Group == nil {
|
|
return crdb.NewNoOpStatement(e), nil
|
|
}
|
|
columns := make([]handler.Column, 0, 7)
|
|
columns = append(columns, handler.NewCol(ProjectRoleColumnChangeDate, e.CreationDate()),
|
|
handler.NewCol(ProjectRoleColumnSequence, e.Sequence()))
|
|
if e.DisplayName != nil {
|
|
columns = append(columns, handler.NewCol(ProjectRoleColumnDisplayName, *e.DisplayName))
|
|
}
|
|
if e.Group != nil {
|
|
columns = append(columns, handler.NewCol(ProjectRoleColumnGroupName, *e.Group))
|
|
}
|
|
return crdb.NewUpdateStatement(
|
|
e,
|
|
columns,
|
|
[]handler.Condition{
|
|
handler.NewCond(ProjectRoleColumnKey, e.Key),
|
|
handler.NewCond(ProjectRoleColumnProjectID, e.Aggregate().ID),
|
|
handler.NewCond(ProjectRoleColumnInstanceID, e.Aggregate().InstanceID),
|
|
},
|
|
), nil
|
|
}
|
|
|
|
func (p *projectRoleProjection) reduceProjectRoleRemoved(event eventstore.Event) (*handler.Statement, error) {
|
|
e, ok := event.(*project.RoleRemovedEvent)
|
|
if !ok {
|
|
return nil, errors.ThrowInvalidArgumentf(nil, "HANDL-L0fJf", "reduce.wrong.event.type %s", project.GrantRemovedType)
|
|
}
|
|
return crdb.NewDeleteStatement(
|
|
e,
|
|
[]handler.Condition{
|
|
handler.NewCond(ProjectRoleColumnKey, e.Key),
|
|
handler.NewCond(ProjectRoleColumnProjectID, e.Aggregate().ID),
|
|
handler.NewCond(ProjectRoleColumnInstanceID, e.Aggregate().InstanceID),
|
|
},
|
|
), nil
|
|
}
|
|
|
|
func (p *projectRoleProjection) reduceProjectRemoved(event eventstore.Event) (*handler.Statement, error) {
|
|
e, ok := event.(*project.ProjectRemovedEvent)
|
|
if !ok {
|
|
return nil, errors.ThrowInvalidArgumentf(nil, "HANDL-l0geG", "reduce.wrong.event.type %s", project.ProjectRemovedType)
|
|
}
|
|
return crdb.NewDeleteStatement(
|
|
e,
|
|
[]handler.Condition{
|
|
handler.NewCond(ProjectRoleColumnProjectID, e.Aggregate().ID),
|
|
handler.NewCond(ProjectRoleColumnInstanceID, e.Aggregate().InstanceID),
|
|
},
|
|
), nil
|
|
}
|
|
|
|
func (p *projectRoleProjection) reduceOwnerRemoved(event eventstore.Event) (*handler.Statement, error) {
|
|
e, ok := event.(*org.OrgRemovedEvent)
|
|
if !ok {
|
|
return nil, errors.ThrowInvalidArgumentf(nil, "PROJE-3XrHY", "reduce.wrong.event.type %s", org.OrgRemovedEventType)
|
|
}
|
|
|
|
return crdb.NewUpdateStatement(
|
|
e,
|
|
[]handler.Column{
|
|
handler.NewCol(ProjectRoleColumnChangeDate, e.CreationDate()),
|
|
handler.NewCol(ProjectRoleColumnSequence, e.Sequence()),
|
|
handler.NewCol(ProjectRoleColumnOwnerRemoved, true),
|
|
},
|
|
[]handler.Condition{
|
|
handler.NewCond(ProjectRoleColumnInstanceID, e.Aggregate().InstanceID),
|
|
handler.NewCond(ProjectRoleColumnResourceOwner, e.Aggregate().ID),
|
|
},
|
|
), nil
|
|
}
|