package api_impl import ( "database/sql" "net/http" "atlas9.dev/c/core/dbi" "atlas9.dev/c/core/iam" "atlas9.dev/c/demo/api" "atlas9.dev/c/demo/lib/access" ) type BotGrantsImpl struct { DB *sql.DB Guard access.Guard Grants dbi.Factory[iam.BotGrantStore] Audit dbi.Factory[iam.AuditStore] } func (s *BotGrantsImpl) ServeMux(mux *http.ServeMux) { mux.HandleFunc(api.Path_BotGrants_Add, s.Add) mux.HandleFunc(api.Path_BotGrants_Remove, s.Remove) mux.HandleFunc(api.Path_BotGrants_ListByTenant, s.ListByTenant) } func (s *BotGrantsImpl) Add(w http.ResponseWriter, r *http.Request) { var req api.BotGrants_AddReq if read(w, r, &req) { return } if check(w, r, s.Guard, iam.CapGrantsAdd, req.Grant.Tenant, "") { return } ctx := r.Context() err := dbi.ReadWrite(ctx, s.DB, func(tx dbi.DBI) error { if err := s.Grants(tx).Add(ctx, req.Grant); err != nil { return err } return audit(ctx, s.Audit(tx), iam.AuditEntry{ Tenant: req.Grant.Tenant, Action: "BotGrants_Add", Resource: req.Grant.Bot.String(), Detail: req.Grant.Role, }) }) write(ctx, w, err, nil) } func (s *BotGrantsImpl) Remove(w http.ResponseWriter, r *http.Request) { var req api.BotGrants_RemoveReq if read(w, r, &req) { return } if check(w, r, s.Guard, iam.CapGrantsRemove, req.Grant.Tenant, "") { return } ctx := r.Context() err := dbi.ReadWrite(ctx, s.DB, func(tx dbi.DBI) error { if err := s.Grants(tx).Remove(ctx, req.Grant); err != nil { return err } return audit(ctx, s.Audit(tx), iam.AuditEntry{ Tenant: req.Grant.Tenant, Action: "BotGrants_Remove", Resource: req.Grant.Bot.String(), Detail: req.Grant.Role, }) }) write(ctx, w, err, nil) } func (s *BotGrantsImpl) ListByTenant(w http.ResponseWriter, r *http.Request) { var req api.BotGrants_ListByTenantReq if read(w, r, &req) { return } if check(w, r, s.Guard, iam.CapGrantsList, req.Tenant, "") { return } ctx := r.Context() var res api.BotGrants_ListByTenantRes err := dbi.ReadOnly(ctx, s.DB, func(tx dbi.DBI) error { page, err := s.Grants(tx).ListByTenant(ctx, req.Tenant, req.Page) res.Page = page return err }) write(ctx, w, err, res) }