DigitalState / Identities

api/src/Service/RoleService.php

<?php

namespace App\Service;

use App\Entity\Role;
use Doctrine\ORM\EntityManagerInterface;

The type Doctrine\ORM\EntityManagerInterface was not found. Maybe you did not declare it correctly or list all dependencies?

use Ds\Component\Api\Api\Api;

The type Ds\Component\Api\Api\Api was not found. Maybe you did not declare it correctly or list all dependencies?

use Ds\Component\Api\Model\Access;

The type Ds\Component\Api\Model\Access was not found. Maybe you did not declare it correctly or list all dependencies?

use Ds\Component\Api\Model\Permission;

The type Ds\Component\Api\Model\Permission was not found. Maybe you did not declare it correctly or list all dependencies?

use Ds\Component\Api\Model\Scope;

The type Ds\Component\Api\Model\Scope was not found. Maybe you did not declare it correctly or list all dependencies?

use Ds\Component\Api\Query\AccessParameters;

The type Ds\Component\Api\Query\AccessParameters was not found. Maybe you did not declare it correctly or list all dependencies?

use Ds\Component\Discovery\Repository\ServiceRepository;

The type Ds\Component\Discovery\Repository\ServiceRepository was not found. Maybe you did not declare it correctly or list all dependencies?

use Ds\Component\Entity\Service\EntityService;

The type Ds\Component\Entity\Service\EntityService was not found. Maybe you did not declare it correctly or list all dependencies?

use LogicException;

/**
 * Class RoleService
 */
final class RoleService extends EntityService
{
    /**
     * @var \Ds\Component\Api\Api\Api
     */
    private $api;

    /**
     * @var \Ds\Component\Discovery\Repository\ServiceRepository
     */
    private $serviceRepository;

    /**
     * @var string
     */
    private $namespace;

    /**
     * Constructor
     *
     * @param \Doctrine\ORM\EntityManagerInterface $manager
     * @param \Ds\Component\Api\Api\Api $api
     * @param \Ds\Component\Discovery\Repository\ServiceRepository $serviceRepository
     * @param string $namespace
     * @param string $entity
     */
    public function __construct(EntityManagerInterface $manager, Api $api, ServiceRepository $serviceRepository, string $namespace = 'ds', string $entity = Role::class)
    {
        parent::__construct($manager, $entity);
        $this->api = $api;
        $this->serviceRepository = $serviceRepository;
        $this->namespace = $namespace;
    }

    /**
     * Create access across all microservices
     *
     * @param \App\Entity\Role $role
     * @return \App\Service\RoleService
     * @throws \LogicException
     */
    public function createAccess(Role $role)
    {
        if (null === $role->getUuid()) {
            throw new LogicException('Role does not have a uuid.');
        }

        foreach ($role->getPermissions() as $service => $servicePermissions) {
            if (!$this->serviceRepository->find($this->namespace.'_'.$service.'_api_http')) {
                continue;
            }

            $access = new Access;
            $access
                ->setOwner($role->getOwner())
                ->setOwnerUuid($role->getOwnerUuid())
                ->setAssignee('Role')
                ->setAssigneeUuid($role->getUuid())
                ->setVersion(1);

            foreach ($servicePermissions as $servicePermission) {
                foreach ($servicePermission['permissions'] as $entry) {
                    $permission = new Permission;
                    $scope = new Scope;
                    $scope
                        ->setType($servicePermission['scope']['type'])
                        ->setEntity($servicePermission['scope']['entity'])
                        ->setEntityUuid($servicePermission['scope']['entityUuid']);
                    $permission
                        ->setScope($scope)
                        ->setKey($entry['key'])
                        ->setAttributes($entry['attributes']);
                    $access->addPermission($permission);
                }
            }

            $this->api->get($service.'.access')->create($access);
        }

        return $this;
    }

    /**
     * Delete access across all microservices
     *
     * @param \App\Entity\Role $role
     * @return \App\Service\RoleService
     * @throws \LogicException
     */
    public function deleteAccess(Role $role)
    {
        if (null === $role->getUuid()) {
            throw new LogicException('Role does not have a uuid.');
        }

        foreach ($role->getPermissions() as $service => $scopes) {
            if (!$this->serviceRepository->find($this->namespace.'_'.$service.'_api_http')) {
                continue;
            }

            $service = $this->api->get($service.'.access');
            $parameters = new AccessParameters;
            $parameters
                ->setAssignee('Role')
                ->setAssigneeUuid($role->getUuid());
            $accesses = $service->getList($parameters);

            foreach ($accesses as $access) {
                $service->delete($access);
            }
        }

        return $this;
    }
}