boundary/internal/iam/group.go

package iam

import (
	"context"
	"fmt"

	"github.com/hashicorp/watchtower/internal/db"
	"github.com/hashicorp/watchtower/internal/iam/store"
	"google.golang.org/protobuf/proto"
)

// Group is made up of principals which are scoped to an organization.
type Group struct {
	*store.Group
	tableName string `gorm:"-"`
}

// ensure that Group implements the interfaces of: Resource, Clonable, and db.VetForWriter.
var _ Resource = (*Group)(nil)
var _ Clonable = (*Group)(nil)
var _ db.VetForWriter = (*Group)(nil)

// NewGroup creates a new in memory group with a scope (project/organization)
// and allowed options include: withDescripion, WithName.
func NewGroup(scopeId string, opt ...Option) (*Group, error) {
	if scopeId == "" {
		return nil, fmt.Errorf("new group: missing scope id %w", db.ErrInvalidParameter)
	}
	opts := getOpts(opt...)
	g := &Group{
		Group: &store.Group{
			Name:        opts.withName,
			Description: opts.withDescription,
			ScopeId:     scopeId,
		},
	}
	return g, nil
}

// Clone creates a clone of the Group.
func (g *Group) Clone() interface{} {
	cp := proto.Clone(g.Group)
	return &Group{
		Group: cp.(*store.Group),
	}
}

func allocGroup() Group {
	return Group{
		Group: &store.Group{},
	}
}

// VetForWrite implements db.VetForWrite() interface and validates the group
// before it's written.
func (g *Group) VetForWrite(ctx context.Context, r db.Reader, opType db.OpType, opt ...db.Option) error {
	if g.PublicId == "" {
		return fmt.Errorf("group vet for write: missing public id: %w", db.ErrInvalidParameter)
	}
	if err := validateScopeForWrite(ctx, r, g, opType, opt...); err != nil {
		return err
	}
	return nil
}

func (u *Group) validScopeTypes() []ScopeType {
	return []ScopeType{OrganizationScope, ProjectScope}
}

// GetScope returns the scope for the Group.
func (g *Group) GetScope(ctx context.Context, r db.Reader) (*Scope, error) {
	return LookupScope(ctx, r, g)
}

// ResourceType returns the type of the Group.
func (*Group) ResourceType() ResourceType { return ResourceTypeGroup }

// Actions returns the  available actions for Group
func (*Group) Actions() map[string]Action {
	return CrudActions()
}

// TableName returns the tablename to override the default gorm table name.
func (g *Group) TableName() string {
	if g.tableName != "" {
		return g.tableName
	}
	return "iam_group"
}

// SetTableName sets the tablename and satisfies the ReplayableMessage interface.
func (g *Group) SetTableName(n string) {
	if n != "" {
		g.tableName = n
	}
}