// Copyright 2019 Yunion // // Licensed under the Apache License, Version 2.0 (the "License"); // you may not use this file except in compliance with the License. // You may obtain a copy of the License at // // http://www.apache.org/licenses/LICENSE-2.0 // // Unless required by applicable law or agreed to in writing, software // distributed under the License is distributed on an "AS IS" BASIS, // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. // See the License for the specific language governing permissions and // limitations under the License. package models import ( "context" "yunion.io/x/jsonutils" "yunion.io/x/pkg/util/rbacscope" "yunion.io/x/sqlchemy" "yunion.io/x/onecloud/pkg/cloudcommon/db" "yunion.io/x/onecloud/pkg/mcclient" ) type SMonitorScopedResourceManager struct { db.SScopedResourceBaseManager } type SMonitorScopedResource struct { db.SScopedResourceBase } func (m *SMonitorScopedResourceManager) FilterByOwner(ctx context.Context, q *sqlchemy.SQuery, man db.FilterByOwnerProvider, userCred mcclient.TokenCredential, ownerId mcclient.IIdentityProvider, scope rbacscope.TRbacScope) *sqlchemy.SQuery { if ownerId == nil { return q } switch scope { case rbacscope.ScopeDomain: q = q.Filter( sqlchemy.OR( sqlchemy.Equals(q.Field("domain_id"), ownerId.GetProjectDomainId()), sqlchemy.IsNullOrEmpty(q.Field("domain_id")), ), ) case rbacscope.ScopeProject: q = q.Filter( sqlchemy.OR( sqlchemy.Equals(q.Field("tenant_id"), ownerId.GetProjectId()), sqlchemy.IsNullOrEmpty(q.Field("domain_id")), sqlchemy.Equals(q.Field("domain_id"), ownerId.GetProjectDomainId()), ), ) } return q } func (s *SMonitorScopedResource) CustomizeCreate(ctx context.Context, userCred mcclient.TokenCredential, ownerId mcclient.IIdentityProvider, query jsonutils.JSONObject, data jsonutils.JSONObject) error { scope, _ := data.GetString("scope") switch rbacscope.TRbacScope(scope) { case rbacscope.ScopeSystem: s.DomainId = "" s.ProjectId = "" case rbacscope.ScopeDomain: s.DomainId = ownerId.GetProjectDomainId() s.ProjectId = "" case rbacscope.ScopeProject: s.DomainId = ownerId.GetProjectDomainId() s.ProjectId = ownerId.GetProjectId() } return nil } func (manager *SMonitorScopedResourceManager) ResourceScope() rbacscope.TRbacScope { return manager.SScopedResourceBaseManager.ResourceScope() } func (manager *SMonitorScopedResourceManager) FetchOwnerId(ctx context.Context, data jsonutils.JSONObject) (mcclient.IIdentityProvider, error) { return manager.SScopedResourceBaseManager.FetchOwnerId(ctx, data) } func (model *SMonitorScopedResource) GetOwnerId() mcclient.IIdentityProvider { return model.SScopedResourceBase.GetOwnerId() }