58 lines
1.6 KiB
Go
58 lines
1.6 KiB
Go
package native
|
|
|
|
import (
|
|
"context"
|
|
|
|
"git.sendico.io/tech/sxchnge/bff/pkg/auth/management"
|
|
"git.sendico.io/tech/sxchnge/bff/pkg/db/policy"
|
|
"git.sendico.io/tech/sxchnge/bff/pkg/db/role"
|
|
"git.sendico.io/tech/sxchnge/bff/pkg/mlogger"
|
|
"git.sendico.io/tech/sxchnge/bff/pkg/model"
|
|
"go.uber.org/zap"
|
|
)
|
|
|
|
// NativeManager implements the auth.Manager interface by aggregating Role and Permission managers.
|
|
type NativeManager struct {
|
|
logger mlogger.Logger
|
|
roleManager management.Role
|
|
permManager management.Permission
|
|
}
|
|
|
|
// NewManager creates a new CasbinManager with specified domains and role-domain mappings.
|
|
func NewManager(
|
|
l mlogger.Logger,
|
|
pdb policy.DB,
|
|
rdb role.DB,
|
|
enforcer *Enforcer,
|
|
) (*NativeManager, error) {
|
|
logger := l.Named("manager")
|
|
|
|
var pdesc model.PolicyDescription
|
|
if err := pdb.GetBuiltInPolicy(context.Background(), "roles", &pdesc); err != nil {
|
|
logger.Warn("Failed to fetch roles permission reference", zap.Error(err))
|
|
return nil, err
|
|
}
|
|
|
|
return &NativeManager{
|
|
logger: logger,
|
|
roleManager: NewRoleManager(logger, enforcer, pdesc.ID, rdb),
|
|
permManager: NewPermissionManager(logger, enforcer),
|
|
}, nil
|
|
}
|
|
|
|
// Permission returns the Permission manager.
|
|
func (m *NativeManager) Permission() management.Permission {
|
|
return m.permManager
|
|
}
|
|
|
|
// Role returns the Role manager.
|
|
func (m *NativeManager) Role() management.Role {
|
|
return m.roleManager
|
|
}
|
|
|
|
// TransactionalGrants reports that native grants are plain database writes:
|
|
// they join the caller's transaction context and roll back with it.
|
|
func (m *NativeManager) TransactionalGrants() bool {
|
|
return true
|
|
}
|