mirror of https://github.com/grafana/grafana.git
104 lines
3.2 KiB
Go
104 lines
3.2 KiB
Go
|
package resourcepermission
|
||
|
|
|
||
|
|
import (
|
||
|
|
"context"
|
||
|
|
"fmt"
|
||
|
|
"iter"
|
||
|
|
"net/http"
|
||
|
|
"sync"
|
||
|
|
|
||
|
|
apierrors "k8s.io/apimachinery/pkg/api/errors"
|
||
|
|
|
||
|
|
"github.com/grafana/authlib/types"
|
||
|
|
"github.com/grafana/grafana/apps/iam/pkg/apis/iam/v0alpha1"
|
||
|
|
"github.com/grafana/grafana/pkg/infra/log"
|
||
|
|
"github.com/grafana/grafana/pkg/storage/legacysql"
|
||
|
|
"github.com/grafana/grafana/pkg/storage/unified/resource"
|
||
|
|
"github.com/grafana/grafana/pkg/storage/unified/resourcepb"
|
||
|
|
)
|
||
|
|
|
||
|
|
var (
|
||
|
|
_ resource.StorageBackend = &ResourcePermSqlBackend{}
|
||
|
|
)
|
||
|
|
|
||
|
|
type ResourcePermSqlBackend struct {
|
||
|
|
dbProvider legacysql.LegacyDatabaseProvider
|
||
|
|
logger log.Logger
|
||
|
|
|
||
|
|
subscribers []chan *resource.WrittenEvent
|
||
|
|
mutex sync.Mutex
|
||
|
|
}
|
||
|
|
|
||
|
|
func ProvideStorageBackend(dbProvider legacysql.LegacyDatabaseProvider) *ResourcePermSqlBackend {
|
||
|
|
return &ResourcePermSqlBackend{
|
||
|
|
dbProvider: dbProvider,
|
||
|
|
logger: log.New("resourceperm_storage_backend"),
|
||
|
|
|
||
|
|
subscribers: make([]chan *resource.WrittenEvent, 0),
|
||
|
|
mutex: sync.Mutex{},
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
func (s *ResourcePermSqlBackend) GetResourceStats(ctx context.Context, namespace string, minCount int) ([]resource.ResourceStats, error) {
|
||
|
|
return []resource.ResourceStats{}, errNotImplemented
|
||
|
|
}
|
||
|
|
|
||
|
|
func (s *ResourcePermSqlBackend) ListHistory(context.Context, *resourcepb.ListRequest, func(resource.ListIterator) error) (int64, error) {
|
||
|
|
return 0, errNotImplemented
|
||
|
|
}
|
||
|
|
|
||
|
|
func (s *ResourcePermSqlBackend) ListIterator(context.Context, *resourcepb.ListRequest, func(resource.ListIterator) error) (int64, error) {
|
||
|
|
return 0, errNotImplemented
|
||
|
|
}
|
||
|
|
|
||
|
|
func (s *ResourcePermSqlBackend) ListModifiedSince(ctx context.Context, key resource.NamespacedResource, sinceRv int64) (int64, iter.Seq2[*resource.ModifiedResource, error]) {
|
||
|
|
return 0, func(yield func(*resource.ModifiedResource, error) bool) {
|
||
|
|
yield(nil, errNotImplemented)
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
func (s *ResourcePermSqlBackend) ReadResource(_ context.Context, req *resourcepb.ReadRequest) *resource.BackendReadResponse {
|
||
|
|
return &resource.BackendReadResponse{
|
||
|
|
Key: req.GetKey(),
|
||
|
|
Error: &resourcepb.ErrorResult{Code: http.StatusForbidden, Message: errNotImplemented.Error()},
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
func (s *ResourcePermSqlBackend) WatchWriteEvents(ctx context.Context) (<-chan *resource.WrittenEvent, error) {
|
||
|
|
stream := make(chan *resource.WrittenEvent, 10)
|
||
|
|
return stream, nil
|
||
|
|
}
|
||
|
|
|
||
|
|
func isValidKey(key *resourcepb.ResourceKey, requireName bool) error {
|
||
|
|
gr := v0alpha1.ResourcePermissionInfo.GroupResource()
|
||
|
|
if key.Group != gr.Group {
|
||
|
|
return fmt.Errorf("expecting group (%s != %s)", key.Group, gr.Group)
|
||
|
|
}
|
||
|
|
if key.Resource != gr.Resource {
|
||
|
|
return fmt.Errorf("expecting resource (%s != %s)", key.Resource, gr.Resource)
|
||
|
|
}
|
||
|
|
if requireName && key.Name == "" {
|
||
|
|
return fmt.Errorf("expecting name (uid): %w", errEmptyName)
|
||
|
|
}
|
||
|
|
return nil
|
||
|
|
}
|
||
|
|
|
||
|
|
func (s *ResourcePermSqlBackend) WriteEvent(ctx context.Context, event resource.WriteEvent) (rv int64, err error) {
|
||
|
|
ns, err := types.ParseNamespace(event.Key.Namespace)
|
||
|
|
if err != nil {
|
||
|
|
return 0, err
|
||
|
|
}
|
||
|
|
if ns.OrgID <= 0 {
|
||
|
|
return 0, apierrors.NewBadRequest("write requires a valid namespace")
|
||
|
|
}
|
||
|
|
|
||
|
|
if err := isValidKey(event.Key, true); err != nil {
|
||
|
|
return 0, apierrors.NewBadRequest(fmt.Sprintf("invalid key %q: %v", event.Key, err.Error()))
|
||
|
|
}
|
||
|
|
|
||
|
|
switch event.Type {
|
||
|
|
default:
|
||
|
|
return 0, fmt.Errorf("unsupported event type: %v", event.Type)
|
||
|
|
}
|
||
|
|
}
|