| 1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586 |
- // Copyright 2019 Yunion
- //
- // Licensed under the Apache License, Version 2.0 (the "License");
- // you may not use this file except in compliance with the License.
- // You may obtain a copy of the License at
- //
- // http://www.apache.org/licenses/LICENSE-2.0
- //
- // Unless required by applicable law or agreed to in writing, software
- // distributed under the License is distributed on an "AS IS" BASIS,
- // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- // See the License for the specific language governing permissions and
- // limitations under the License.
- package models
- import (
- "context"
- "yunion.io/x/jsonutils"
- "yunion.io/x/pkg/util/rbacscope"
- "yunion.io/x/sqlchemy"
- "yunion.io/x/onecloud/pkg/cloudcommon/db"
- "yunion.io/x/onecloud/pkg/mcclient"
- )
- type SMonitorScopedResourceManager struct {
- db.SScopedResourceBaseManager
- }
- type SMonitorScopedResource struct {
- db.SScopedResourceBase
- }
- func (m *SMonitorScopedResourceManager) FilterByOwner(ctx context.Context, q *sqlchemy.SQuery, man db.FilterByOwnerProvider, userCred mcclient.TokenCredential, ownerId mcclient.IIdentityProvider, scope rbacscope.TRbacScope) *sqlchemy.SQuery {
- if ownerId == nil {
- return q
- }
- switch scope {
- case rbacscope.ScopeDomain:
- q = q.Filter(
- sqlchemy.OR(
- sqlchemy.Equals(q.Field("domain_id"), ownerId.GetProjectDomainId()),
- sqlchemy.IsNullOrEmpty(q.Field("domain_id")),
- ),
- )
- case rbacscope.ScopeProject:
- q = q.Filter(
- sqlchemy.OR(
- sqlchemy.Equals(q.Field("tenant_id"), ownerId.GetProjectId()),
- sqlchemy.IsNullOrEmpty(q.Field("domain_id")),
- sqlchemy.Equals(q.Field("domain_id"), ownerId.GetProjectDomainId()),
- ),
- )
- }
- return q
- }
- func (s *SMonitorScopedResource) CustomizeCreate(ctx context.Context, userCred mcclient.TokenCredential, ownerId mcclient.IIdentityProvider, query jsonutils.JSONObject, data jsonutils.JSONObject) error {
- scope, _ := data.GetString("scope")
- switch rbacscope.TRbacScope(scope) {
- case rbacscope.ScopeSystem:
- s.DomainId = ""
- s.ProjectId = ""
- case rbacscope.ScopeDomain:
- s.DomainId = ownerId.GetProjectDomainId()
- s.ProjectId = ""
- case rbacscope.ScopeProject:
- s.DomainId = ownerId.GetProjectDomainId()
- s.ProjectId = ownerId.GetProjectId()
- }
- return nil
- }
- func (manager *SMonitorScopedResourceManager) ResourceScope() rbacscope.TRbacScope {
- return manager.SScopedResourceBaseManager.ResourceScope()
- }
- func (manager *SMonitorScopedResourceManager) FetchOwnerId(ctx context.Context, data jsonutils.JSONObject) (mcclient.IIdentityProvider, error) {
- return manager.SScopedResourceBaseManager.FetchOwnerId(ctx, data)
- }
- func (model *SMonitorScopedResource) GetOwnerId() mcclient.IIdentityProvider {
- return model.SScopedResourceBase.GetOwnerId()
- }
|