Restructuring: Move permission code in separate modules

service_impl/src/permission.rs

@@ -0,0 +1,164 @@
+use std::sync::Arc;
+
+use async_trait::async_trait;
+
+pub struct PermissionServiceImpl<PermissionDao, UserService>
+where
+    PermissionDao: dao::PermissionDao + Send + Sync,
+    UserService: service::UserService + Send + Sync,
+{
+    permission_dao: Arc<PermissionDao>,
+    user_service: Arc<UserService>,
+}
+impl<PermissionDao, UserService> PermissionServiceImpl<PermissionDao, UserService>
+where
+    PermissionDao: dao::PermissionDao + Send + Sync,
+    UserService: service::UserService + Send + Sync,
+{
+    pub fn new(permission_dao: Arc<PermissionDao>, user_service: Arc<UserService>) -> Self {
+        Self {
+            permission_dao,
+            user_service,
+        }
+    }
+}
+
+const PERMISSION_SERVICE_PROCESS: &str = "permission-service";
+
+#[async_trait]
+impl<PermissionDao, UserService> service::PermissionService
+    for PermissionServiceImpl<PermissionDao, UserService>
+where
+    PermissionDao: dao::PermissionDao + Send + Sync,
+    UserService: service::UserService + Send + Sync,
+{
+    async fn check_permission(&self, privilege: &str) -> Result<(), service::ServiceError> {
+        let current_user = self.user_service.current_user().await?;
+        if self
+            .permission_dao
+            .has_privilege(current_user.as_ref(), privilege)
+            .await?
+        {
+            Ok(())
+        } else {
+            Err(service::ServiceError::Forbidden)
+        }
+    }
+
+    async fn create_user(&self, user: &str) -> Result<(), service::ServiceError> {
+        self.check_permission("admin").await?;
+        self.permission_dao
+            .create_user(
+                &dao::UserEntity { name: user.into() },
+                PERMISSION_SERVICE_PROCESS,
+            )
+            .await?;
+        Ok(())
+    }
+    async fn delete_user(&self, user: &str) -> Result<(), service::ServiceError> {
+        self.check_permission("admin").await?;
+        self.permission_dao.delete_user(user).await?;
+        Ok(())
+    }
+
+    async fn get_all_users(&self) -> Result<Arc<[service::User]>, service::ServiceError> {
+        self.check_permission("admin").await?;
+        Ok(self
+            .permission_dao
+            .all_users()
+            .await?
+            .iter()
+            .map(service::User::from)
+            .collect())
+    }
+
+    async fn create_role(&self, role: &str) -> Result<(), service::ServiceError> {
+        self.check_permission("admin").await?;
+        self.permission_dao
+            .create_role(
+                &dao::RoleEntity { name: role.into() },
+                PERMISSION_SERVICE_PROCESS,
+            )
+            .await?;
+        Ok(())
+    }
+    async fn delete_role(&self, role: &str) -> Result<(), service::ServiceError> {
+        self.check_permission("admin").await?;
+        self.permission_dao.delete_role(role).await?;
+        Ok(())
+    }
+    async fn get_all_roles(&self) -> Result<Arc<[service::Role]>, service::ServiceError> {
+        self.check_permission("admin").await?;
+        Ok(self
+            .permission_dao
+            .all_roles()
+            .await?
+            .iter()
+            .map(service::Role::from)
+            .collect())
+    }
+
+    async fn create_privilege(&self, privilege: &str) -> Result<(), service::ServiceError> {
+        self.check_permission("admin").await?;
+        self.permission_dao
+            .create_privilege(
+                &dao::PrivilegeEntity {
+                    name: privilege.into(),
+                },
+                PERMISSION_SERVICE_PROCESS,
+            )
+            .await?;
+        Ok(())
+    }
+
+    async fn delete_privilege(&self, privilege: &str) -> Result<(), service::ServiceError> {
+        self.check_permission("admin").await?;
+        self.permission_dao.delete_privilege(privilege).await?;
+        Ok(())
+    }
+    async fn get_all_privileges(&self) -> Result<Arc<[service::Privilege]>, service::ServiceError> {
+        self.check_permission("admin").await?;
+        Ok(self
+            .permission_dao
+            .all_privileges()
+            .await?
+            .iter()
+            .map(service::Privilege::from)
+            .collect())
+    }
+
+    async fn add_user_role(&self, user: &str, role: &str) -> Result<(), service::ServiceError> {
+        self.check_permission("admin").await?;
+        self.permission_dao
+            .add_user_role(user, role, PERMISSION_SERVICE_PROCESS)
+            .await?;
+        Ok(())
+    }
+    async fn add_role_privilege(
+        &self,
+        role: &str,
+        privilege: &str,
+    ) -> Result<(), service::ServiceError> {
+        self.check_permission("admin").await?;
+        self.permission_dao
+            .add_role_privilege(role, privilege, PERMISSION_SERVICE_PROCESS)
+            .await?;
+        Ok(())
+    }
+    async fn delete_role_privilege(
+        &self,
+        role: &str,
+        privilege: &str,
+    ) -> Result<(), service::ServiceError> {
+        self.check_permission("admin").await?;
+        self.permission_dao
+            .delete_role_privilege(role, privilege)
+            .await?;
+        Ok(())
+    }
+    async fn delete_user_role(&self, user: &str, role: &str) -> Result<(), service::ServiceError> {
+        self.check_permission("admin").await?;
+        self.permission_dao.delete_user_role(user, role).await?;
+        Ok(())
+    }
+}