Cloudpods/backend/pkg/compute/models/policy_assignment.go

// Copyright 2019 Yunion
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

package models

import (
	"context"
	"fmt"

	"yunion.io/x/jsonutils"
	"yunion.io/x/pkg/errors"
	"yunion.io/x/sqlchemy"

	api "yunion.io/x/onecloud/pkg/apis/compute"
	"yunion.io/x/onecloud/pkg/cloudcommon/db"
	"yunion.io/x/onecloud/pkg/httperrors"
	"yunion.io/x/onecloud/pkg/mcclient"
	"yunion.io/x/onecloud/pkg/util/stringutils2"
)

type SPolicyAssignmentManager struct {
	db.SDomainLevelResourceBaseManager
	SPolicyDefinitionResourceBaseManager
}

var PolicyAssignmentManager *SPolicyAssignmentManager

func init() {
	PolicyAssignmentManager = &SPolicyAssignmentManager{
		SDomainLevelResourceBaseManager: db.NewDomainLevelResourceBaseManager(
			SPolicyAssignment{},
			"policy_assignments_tbl",
			"policy_assignment",
			"policy_assignments",
		),
	}
	PolicyAssignmentManager.SetVirtualObject(PolicyAssignmentManager)
}

type SPolicyAssignment struct {
	db.SDomainLevelResourceBase

	SPolicyDefinitionResourceBase
}

// 策略分配列表
func (manager *SPolicyAssignmentManager) ListItemFilter(ctx context.Context, q *sqlchemy.SQuery, userCred mcclient.TokenCredential, query api.PolicyAssignmentListInput) (*sqlchemy.SQuery, error) {
	var err error
	q, err = manager.SDomainLevelResourceBaseManager.ListItemFilter(ctx, q, userCred, query.DomainLevelResourceListInput)
	if err != nil {
		return nil, err
	}

	q, err = manager.SPolicyDefinitionResourceBaseManager.ListItemFilter(ctx, q, userCred, query.PolicyDefinitionResourceListInput)
	if err != nil {
		return nil, err
	}

	return q, nil
}

func (manager *SPolicyAssignmentManager) FetchCustomizeColumns(ctx context.Context, userCred mcclient.TokenCredential, query jsonutils.JSONObject, objs []interface{}, fields stringutils2.SSortedStrings, isList bool) []api.PolicyAssignmentDetails {
	rows := make([]api.PolicyAssignmentDetails, len(objs))
	domainRows := manager.SDomainLevelResourceBaseManager.FetchCustomizeColumns(ctx, userCred, query, objs, fields, isList)
	definitionRows := manager.SPolicyDefinitionResourceBaseManager.FetchCustomizeColumns(ctx, userCred, query, objs, fields, isList)
	for i := range rows {
		rows[i] = api.PolicyAssignmentDetails{
			DomainLevelResourceDetails:   domainRows[i],
			PolicyDefinitionResourceInfo: definitionRows[i],
		}
	}
	return rows
}

func (manager *SPolicyAssignmentManager) OrderByExtraFields(ctx context.Context, q *sqlchemy.SQuery, userCred mcclient.TokenCredential, query api.PolicyAssignmentListInput) (*sqlchemy.SQuery, error) {
	q, err := manager.SStandaloneResourceBaseManager.OrderByExtraFields(ctx, q, userCred, query.StandaloneResourceListInput)
	if err != nil {
		return nil, errors.Wrap(err, "SStandaloneResourceBaseManager.OrderByExtraFields")
	}

	return q, nil
}

func (manager *SPolicyAssignmentManager) ValidateCreateData(ctx context.Context, userCred mcclient.TokenCredential, ownerId mcclient.IIdentityProvider, query jsonutils.JSONObject, input api.PolicyAssignmentCreateInput) (api.PolicyAssignmentCreateInput, error) {
	return input, httperrors.NewInputParameterError("not support create")
}

func (manager *SPolicyAssignmentManager) QueryDistinctExtraField(q *sqlchemy.SQuery, field string) (*sqlchemy.SQuery, error) {
	var err error
	q, err = manager.SDomainLevelResourceBaseManager.QueryDistinctExtraField(q, field)
	if err == nil {
		return q, nil
	}

	return q, httperrors.ErrNotFound
}

func (manager *SPolicyAssignmentManager) checkAndSetAssignment(ctx context.Context, definition *SPolicyDefinition, domainId string) error {
	q := manager.Query().Equals("policydefinition_id", definition.Id).Equals("domain_id", domainId)
	count, err := q.CountWithError()
	if err != nil {
		return errors.Wrap(err, "CountWithError")
	}
	if count == 0 {
		return manager.newAssignment(ctx, definition, domainId)
	}
	return nil
}

func (manager *SPolicyAssignmentManager) newAssignment(ctx context.Context, definition *SPolicyDefinition, domainId string) error {
	assignment := SPolicyAssignment{}
	assignment.SetModelManager(manager, &assignment)

	assignment.Name = fmt.Sprintf("assignment for %s domain %s", definition.Name, domainId)
	assignment.DomainId = domainId
	assignment.PolicydefinitionId = definition.Id

	return manager.TableSpec().Insert(ctx, &assignment)
}