61 lines
1.9 KiB
Go
61 lines
1.9 KiB
Go
package system
|
|
|
|
import (
|
|
"strconv"
|
|
|
|
"gorm.io/gorm"
|
|
)
|
|
|
|
// casbinRulePO mirrors the gorm-adapter CasbinRule storage shape. API
|
|
// metadata (sys_apis) and authorization policy are intentionally independent:
|
|
// a policy may refer to a route that has not been registered in sys_apis yet.
|
|
// Keep this type private so the storage representation does not leak above
|
|
// the data layer.
|
|
type casbinRulePO struct {
|
|
ID uint `gorm:"primaryKey;autoIncrement"`
|
|
Ptype string `gorm:"size:100"`
|
|
V0 string `gorm:"size:100"`
|
|
V1 string `gorm:"size:100"`
|
|
V2 string `gorm:"size:100"`
|
|
V3 string `gorm:"size:100"`
|
|
V4 string `gorm:"size:100"`
|
|
V5 string `gorm:"size:100"`
|
|
}
|
|
|
|
func (casbinRulePO) TableName() string { return "casbin_rule" }
|
|
|
|
func newPolicyRule(authorityID uint, path, method string) casbinRulePO {
|
|
return casbinRulePO{
|
|
Ptype: "p",
|
|
V0: strconv.FormatUint(uint64(authorityID), 10),
|
|
V1: path,
|
|
V2: method,
|
|
}
|
|
}
|
|
|
|
func policyScope(db *gorm.DB) *gorm.DB {
|
|
return db.Session(&gorm.Session{NewDB: true}).Model(&casbinRulePO{}).Where("ptype = ?", "p")
|
|
}
|
|
|
|
func deletePoliciesForAuthority(db *gorm.DB, authorityID uint) error {
|
|
return policyScope(db).Where("v0 = ?", strconv.FormatUint(uint64(authorityID), 10)).Delete(&casbinRulePO{}).Error
|
|
}
|
|
|
|
func deletePoliciesForPath(db *gorm.DB, path, method string) error {
|
|
return policyScope(db).Where("v1 = ? AND v2 = ?", path, method).Delete(&casbinRulePO{}).Error
|
|
}
|
|
|
|
func policyRowsForAuthority(db *gorm.DB, authorityID uint) ([]casbinRulePO, error) {
|
|
var rows []casbinRulePO
|
|
err := policyScope(db).Where("v0 = ?", strconv.FormatUint(uint64(authorityID), 10)).Find(&rows).Error
|
|
return rows, err
|
|
}
|
|
|
|
func policyExists(db *gorm.DB, authorityID uint, path, method string) (bool, error) {
|
|
var count int64
|
|
err := policyScope(db).
|
|
Where("v0 = ? AND v1 = ? AND v2 = ?", strconv.FormatUint(uint64(authorityID), 10), path, method).
|
|
Count(&count).Error
|
|
return count > 0, err
|
|
}
|