Skip to content

Commit ea746a2

Browse files
committed
remove roles op in channels
Signed-off-by: nyagamunene <stevenyaga2014@gmail.com>
1 parent ba03b84 commit ea746a2

File tree

2 files changed

+24
-36
lines changed

2 files changed

+24
-36
lines changed

channels/middleware/authorization.go

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -59,7 +59,8 @@ func AuthorizationMiddleware(
5959
svc channels.Service,
6060
repo channels.Repository,
6161
authz smqauthz.Authorization,
62-
channelsOpPerm, rolesOpPerm map[channels.Operation]channels.Permission,
62+
channelsOpPerm map[channels.Operation]channels.Permission,
63+
rolesOpPerm map[svcutil.Operation]svcutil.Permission,
6364
extOpPerm map[channels.ExternalOperation]channels.Permission,
6465
callout callout.Callout,
6566
) (channels.Service, error) {

channels/roleoperations.go

Lines changed: 22 additions & 35 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,11 @@
33

44
package channels
55

6+
import (
7+
"github.com/absmach/supermq/pkg/roles"
8+
"github.com/absmach/supermq/pkg/svcutil"
9+
)
10+
611
// Internal Operations.
712
const (
813
OpViewChannel Operation = iota
@@ -116,41 +121,23 @@ func NewOperationPermissionMap() map[Operation]Permission {
116121
return opPerm
117122
}
118123

119-
const (
120-
OpAddRole Operation = iota
121-
OpRemoveRole
122-
OpUpdateRoleName
123-
OpRetrieveRole
124-
OpRetrieveAllRoles
125-
OpRoleAddActions
126-
OpRoleListActions
127-
OpRoleCheckActionsExists
128-
OpRoleRemoveActions
129-
OpRoleRemoveAllActions
130-
OpRoleAddMembers
131-
OpRoleListMembers
132-
OpRoleCheckMembersExists
133-
OpRoleRemoveMembers
134-
OpRoleRemoveAllMembers
135-
)
136-
137-
func NewRolesOperationPermissionMap() map[Operation]Permission {
138-
opPerm := map[Operation]Permission{
139-
OpAddRole: manageRolePermission,
140-
OpRemoveRole: manageRolePermission,
141-
OpUpdateRoleName: manageRolePermission,
142-
OpRetrieveRole: manageRolePermission,
143-
OpRetrieveAllRoles: manageRolePermission,
144-
OpRoleAddActions: manageRolePermission,
145-
OpRoleListActions: manageRolePermission,
146-
OpRoleCheckActionsExists: manageRolePermission,
147-
OpRoleRemoveActions: manageRolePermission,
148-
OpRoleRemoveAllActions: manageRolePermission,
149-
OpRoleAddMembers: addRoleUsersPermission,
150-
OpRoleListMembers: viewRoleUsersPermission,
151-
OpRoleCheckMembersExists: viewRoleUsersPermission,
152-
OpRoleRemoveMembers: removeRoleUsersPermission,
153-
OpRoleRemoveAllMembers: manageRolePermission,
124+
func NewRolesOperationPermissionMap() map[svcutil.Operation]svcutil.Permission {
125+
opPerm := map[svcutil.Operation]svcutil.Permission{
126+
roles.OpAddRole: manageRolePermission,
127+
roles.OpRemoveRole: manageRolePermission,
128+
roles.OpUpdateRoleName: manageRolePermission,
129+
roles.OpRetrieveRole: manageRolePermission,
130+
roles.OpRetrieveAllRoles: manageRolePermission,
131+
roles.OpRoleAddActions: manageRolePermission,
132+
roles.OpRoleListActions: manageRolePermission,
133+
roles.OpRoleCheckActionsExists: manageRolePermission,
134+
roles.OpRoleRemoveActions: manageRolePermission,
135+
roles.OpRoleRemoveAllActions: manageRolePermission,
136+
roles.OpRoleAddMembers: addRoleUsersPermission,
137+
roles.OpRoleListMembers: viewRoleUsersPermission,
138+
roles.OpRoleCheckMembersExists: viewRoleUsersPermission,
139+
roles.OpRoleRemoveMembers: removeRoleUsersPermission,
140+
roles.OpRoleRemoveAllMembers: manageRolePermission,
154141
}
155142
return opPerm
156143
}

0 commit comments

Comments
 (0)