Cloudpods/backend/pkg/keystone/models/usages.go

// Copyright 2019 Yunion
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

package models

import (
	"context"

	"yunion.io/x/sqlchemy"

	api "yunion.io/x/onecloud/pkg/apis/identity"
	"yunion.io/x/onecloud/pkg/cloudcommon/db"
	"yunion.io/x/onecloud/pkg/util/rbacutils"
	"yunion.io/x/onecloud/pkg/util/tagutils"
)

func Usage(ctx context.Context, result rbacutils.SPolicyResult) map[string]int {
	results := make(map[string]int)

	dq := DomainManager.Query()
	dq = db.ObjectIdQueryWithPolicyResult(ctx, dq, DomainManager, result)
	domCnt, _ := dq.IsTrue("is_domain").NotEquals("id", api.KeystoneDomainRoot).CountWithError()
	results["domains"] = domCnt

	pq := ProjectManager.Query()
	pq = db.ObjectIdQueryWithPolicyResult(ctx, pq, ProjectManager, result)

	// 根据项目标签过滤
	if result.ProjectTags.Len() > 0 {
		tagFilters := tagutils.STagFilters{}
		tagFilters.AddFilters(result.ProjectTags)
		orConditions := []sqlchemy.ICondition{}
		metadataResSQ := db.Metadata.Query().Equals("obj_type", "project").SubQuery()
		for _, filter := range tagFilters.Filters {
			for key, val := range filter {
				orConditions = append(orConditions,
					sqlchemy.AND(
						sqlchemy.Equals(metadataResSQ.Field("key"), key),
						sqlchemy.In(metadataResSQ.Field("value"), val),
					),
				)
			}
		}
		metadataResQ := metadataResSQ.Query().AppendField(sqlchemy.COUNT("count", metadataResSQ.Field("obj_id")), metadataResSQ.Field("obj_id"), metadataResSQ.Field("key"), metadataResSQ.Field("value"))
		metadataResSQ = metadataResQ.Filter(sqlchemy.OR(orConditions...)).GroupBy("obj_id").SubQuery()
		metadataResSecSQ := metadataResSQ.Query().GE("count", len(orConditions)).SubQuery()
		pq = pq.Join(metadataResSecSQ, sqlchemy.Equals(pq.Field("id"), metadataResSecSQ.Field("obj_id")))
	}

	projCnt, _ := pq.IsFalse("is_domain").CountWithError()
	results["projects"] = projCnt

	rq := RoleManager.Query()
	rq = db.ObjectIdQueryWithPolicyResult(ctx, rq, RoleManager, result)
	roleCnt, _ := rq.CountWithError()
	results["roles"] = roleCnt

	uq := UserManager.Query()
	uq = db.ObjectIdQueryWithPolicyResult(ctx, uq, UserManager, result)
	usrCnt, _ := uq.CountWithError()
	results["users"] = usrCnt

	gq := GroupManager.Query()
	gq = db.ObjectIdQueryWithPolicyResult(ctx, gq, GroupManager, result)
	grpCnt, _ := gq.CountWithError()
	results["groups"] = grpCnt

	pcq := PolicyManager.Query()
	pcq = db.ObjectIdQueryWithPolicyResult(ctx, pcq, PolicyManager, result)
	policy, _ := pcq.CountWithError()
	results["policies"] = policy

	return results
}