73 lines
2.9 KiB
Go
73 lines
2.9 KiB
Go
package client
|
|
|
|
import (
|
|
"context"
|
|
"net/http"
|
|
"net/url"
|
|
)
|
|
|
|
// AdminRoles lists application and shared garden role templates.
|
|
func (c *Client) AdminRoles(ctx context.Context) ([]Role, []Role, *Response, error) {
|
|
var envelope struct {
|
|
ApplicationRoles []Role `json:"application_roles"`
|
|
GardenRoles []Role `json:"garden_roles"`
|
|
}
|
|
response, err := c.do(ctx, http.MethodGet, "v1/admin/roles", nil, &envelope)
|
|
return envelope.ApplicationRoles, envelope.GardenRoles, response, err
|
|
}
|
|
|
|
// CreateAdminRole adds a shared role template.
|
|
func (c *Client) CreateAdminRole(ctx context.Context, input RoleInput) (Role, *Response, error) {
|
|
var envelope struct {
|
|
Role Role `json:"role"`
|
|
}
|
|
response, err := c.do(ctx, http.MethodPost, "v1/admin/roles", input, &envelope)
|
|
return envelope.Role, response, err
|
|
}
|
|
|
|
// UpdateAdminRole changes a shared role template.
|
|
func (c *Client) UpdateAdminRole(ctx context.Context, name string, input RoleInput) (Role, *Response, error) {
|
|
var envelope struct {
|
|
Role Role `json:"role"`
|
|
}
|
|
response, err := c.do(ctx, http.MethodPatch, "v1/admin/roles/"+url.PathEscape(name), input, &envelope)
|
|
return envelope.Role, response, err
|
|
}
|
|
|
|
// DeleteAdminRole removes an unused shared role template.
|
|
func (c *Client) DeleteAdminRole(ctx context.Context, name string) (*Response, error) {
|
|
return c.do(ctx, http.MethodDelete, "v1/admin/roles/"+url.PathEscape(name), nil, nil)
|
|
}
|
|
|
|
// GardenRoleSettings lists roles and their effective permissions in a garden.
|
|
func (c *Client) GardenRoleSettings(ctx context.Context, gardenID int) ([]GardenRoleSetting, *Response, error) {
|
|
var envelope struct {
|
|
Roles []GardenRoleSetting `json:"roles"`
|
|
}
|
|
response, err := c.do(ctx, http.MethodGet, gardenPath(gardenID)+"/roles", nil, &envelope)
|
|
return envelope.Roles, response, err
|
|
}
|
|
|
|
// UpdateGardenRoleSettings replaces a role's effective permissions in a garden.
|
|
func (c *Client) UpdateGardenRoleSettings(ctx context.Context, gardenID int, name string, permissions []string) ([]string, *Response, error) {
|
|
var envelope struct {
|
|
EffectivePermissions []string `json:"effective_permissions"`
|
|
}
|
|
response, err := c.do(ctx, http.MethodPut, gardenPath(gardenID)+"/roles/"+url.PathEscape(name), map[string][]string{"permissions": permissions}, &envelope)
|
|
return envelope.EffectivePermissions, response, err
|
|
}
|
|
|
|
// CreateGardenRole adds a custom role owned by one garden.
|
|
func (c *Client) CreateGardenRole(ctx context.Context, gardenID int, input RoleInput) (Role, *Response, error) {
|
|
var envelope struct {
|
|
Role Role `json:"role"`
|
|
}
|
|
response, err := c.do(ctx, http.MethodPost, gardenPath(gardenID)+"/roles", input, &envelope)
|
|
return envelope.Role, response, err
|
|
}
|
|
|
|
// DeleteGardenRole removes an unused custom role from a garden.
|
|
func (c *Client) DeleteGardenRole(ctx context.Context, gardenID int, name string) (*Response, error) {
|
|
return c.do(ctx, http.MethodDelete, gardenPath(gardenID)+"/roles/"+url.PathEscape(name), nil, nil)
|
|
}
|