mirror of
https://github.com/andwati/zitadel.git
synced 2026-10-18 05:52:51 +00:00
9274e008fe
This pull request introduces a new feature that allows adding, updating, and querying project grants The changes are primarily in the backend and include new database tables, repositories, and domain logic to support project grants. ## Changes * New `project_grants` table: A new table `zitadel.project_grants` is introduced to store project grants It includes columns for `instance_id`, `id`, `state`, `project_id`, `granted_org_id` and `granting_org_id`. * New `ProjectGrantRepository`: A new repository `ProjectGrantRepository` is created to handle all database operations for project grants. It provides methods to `Get`, `List`, `Create`, `Update`, and `Delete`. * New `project_grant_roles` table: A new table `zitadel.project_grant_roles` is introduced to store project grant roles It includes columns for `instance_id`, `grant_id`, `key`, `project_id` and `project_org_id`. * New `ProjectGrantRoleRepository`: A new repository `ProjectGrantRoleRepository` is created to handle all database operations for project grant roles. It provides methods to `Get`, `List`, `Add`, and `Delete`. * New `project_grant_relational_projection`: A new projection `project_grant_relational_projection` is added to update the `zitadel.project_grants` and `zitadel.project_grant_roles` tables based on events. It handles all project grant events. * Updated `ProjectRepository`: The `ProjectRepository` is updated to list granted projects. # Additional Context Closes https://github.com/zitadel/zitadel/issues/10766 --------- Co-authored-by: Stefan Benz <[email protected]> Co-authored-by: Marco A. <[email protected]> Co-authored-by: Silvan <[email protected]>
103 lines
4.8 KiB
Go
103 lines
4.8 KiB
Go
package domain
|
|
|
|
import (
|
|
"context"
|
|
"time"
|
|
|
|
"github.com/zitadel/zitadel/backend/v3/storage/database"
|
|
)
|
|
|
|
//go:generate enumer -type ProjectGrantState -transform lower -trimprefix ProjectGrantState -sql
|
|
type ProjectGrantState uint8
|
|
|
|
const (
|
|
ProjectGrantStateActive ProjectGrantState = iota
|
|
ProjectGrantStateInactive
|
|
)
|
|
|
|
type ProjectGrant struct {
|
|
InstanceID string `json:"instanceId,omitempty" db:"instance_id"`
|
|
ID string `json:"id,omitempty" db:"id"`
|
|
ProjectID string `json:"projectId,omitempty" db:"project_id"`
|
|
GrantedOrganizationID string `json:"grantedOrganizationId,omitempty" db:"granted_organization_id"`
|
|
GrantingOrganizationID string `json:"grantingOrganizationId,omitempty" db:"granting_organization_id"`
|
|
CreatedAt time.Time `json:"createdAt,omitzero" db:"created_at"`
|
|
UpdatedAt time.Time `json:"updatedAt,omitzero" db:"updated_at"`
|
|
State ProjectGrantState `json:"state,omitempty" db:"state"`
|
|
RoleKeys []string `json:"roleKeys,omitempty" db:"role_keys"`
|
|
}
|
|
|
|
type projectGrantColumns interface {
|
|
// PrimaryKeyColumns returns the columns for the primary key fields
|
|
PrimaryKeyColumns() []database.Column
|
|
// InstanceIDColumn returns the column for the instance id field
|
|
InstanceIDColumn() database.Column
|
|
// IDColumn returns the column for the id field
|
|
IDColumn() database.Column
|
|
// ProjectIDColumn returns the column for the project id field
|
|
ProjectIDColumn() database.Column
|
|
// GrantingOrganizationIDColumn returns the column for the granting organization id field
|
|
GrantingOrganizationIDColumn() database.Column
|
|
// GrantedOrganizationIDColumn returns the column for the granted organization id field
|
|
GrantedOrganizationIDColumn() database.Column
|
|
// CreatedAtColumn returns the column for the created at field.
|
|
CreatedAtColumn() database.Column
|
|
// UpdatedAtColumn returns the column for the updated at field.
|
|
UpdatedAtColumn() database.Column
|
|
// StateColumn returns the column for the state field.
|
|
StateColumn() database.Column
|
|
}
|
|
|
|
type projectGrantConditions interface {
|
|
// PrimaryKeyCondition returns a filter on the primary key fields.
|
|
PrimaryKeyCondition(instanceID, id string) database.Condition
|
|
// InstanceIDCondition returns a filter on the instance id field.
|
|
InstanceIDCondition(instanceID string) database.Condition
|
|
// IDCondition returns a filter on the id field.
|
|
IDCondition(id string) database.Condition
|
|
// ProjectIDCondition returns a filter on the project id field.
|
|
ProjectIDCondition(projectID string) database.Condition
|
|
// GrantingOrganizationIDCondition returns a filter on the granting organization id field.
|
|
GrantingOrganizationIDCondition(grantingOrgID string) database.Condition
|
|
// GrantedOrganizationIDCondition returns a filter on the granted organization id field.
|
|
GrantedOrganizationIDCondition(grantedOrgID string) database.Condition
|
|
// StateCondition returns a filter on the state field.
|
|
StateCondition(state ProjectGrantState) database.Condition
|
|
// RoleKeyCondition returns a filter on the role field.
|
|
RoleKeyCondition(op database.TextOperation, role string) database.Condition
|
|
ExistsRoleKey(cond database.Condition) database.Condition
|
|
}
|
|
|
|
type projectGrantChanges interface {
|
|
// SetUpdatedAt sets the updated at column.
|
|
// Only use this when reducing events,
|
|
// during regular updates the DB sets this column automatically.
|
|
SetUpdatedAt(updatedAt time.Time) database.Change
|
|
// SetState sets the state column.
|
|
SetState(state ProjectGrantState) database.Change
|
|
}
|
|
|
|
// ProjectGrantRepository manages project grants.
|
|
//
|
|
//go:generate mockgen -typed -package domainmock -destination ./mock/project_grant.mock.go . ProjectGrantRepository
|
|
type ProjectGrantRepository interface {
|
|
Repository
|
|
|
|
projectGrantColumns
|
|
projectGrantConditions
|
|
projectGrantChanges
|
|
|
|
// Get a single project grant. An error is returned if not exactly one project is found.
|
|
Get(ctx context.Context, client database.QueryExecutor, opts ...database.QueryOption) (*ProjectGrant, error)
|
|
// List projects grant. An empty list is returned if no project grants are found.
|
|
List(ctx context.Context, client database.QueryExecutor, opts ...database.QueryOption) ([]*ProjectGrant, error)
|
|
// Create a new project grant.
|
|
Create(ctx context.Context, client database.QueryExecutor, project *ProjectGrant) error
|
|
// Update an existing project grant.
|
|
// The condition must include the instanceID and ID of the project grant to update.
|
|
Update(ctx context.Context, client database.QueryExecutor, condition database.Condition, roleKeys []string, changes ...database.Change) (int64, error)
|
|
// Delete an existing project grant.
|
|
// The condition must include the instanceID and ID of the project grant to delete.
|
|
Delete(ctx context.Context, client database.QueryExecutor, condition database.Condition) (int64, error)
|
|
}
|