use backbone_auth::{ResourcePolicy, ResourceAction, PermissionGuard, ServicePermissionGuard};
use async_trait::async_trait;
use crate::application::service::FiscalPeriodService;
use crate::domain::entity::FiscalPeriod;
pub mod permissions {
pub const LIST: &str = "fiscal_period:list";
pub const READ: &str = "fiscal_period:read";
pub const CREATE: &str = "fiscal_period:create";
pub const UPDATE: &str = "fiscal_period:update";
pub const DELETE: &str = "fiscal_period:delete";
pub const RESTORE: &str = "fiscal_period:restore";
pub const TRASH: &str = "fiscal_period:trash";
pub const EMPTY_TRASH: &str = "fiscal_period:empty_trash";
pub const BULK_CREATE: &str = "fiscal_period:bulk_create";
pub const UPSERT: &str = "fiscal_period:upsert";
}
pub struct FiscalPeriodPolicy;
#[async_trait]
impl ResourcePolicy<FiscalPeriod> for FiscalPeriodPolicy {
async fn can(
&self,
action: ResourceAction,
_entity: &FiscalPeriod,
ctx: &backbone_auth::middleware::AuthContext,
) -> bool {
let required = match action {
ResourceAction::Read | ResourceAction::List => permissions::READ,
ResourceAction::Create => permissions::CREATE,
ResourceAction::Update | ResourceAction::Patch => permissions::UPDATE,
ResourceAction::Delete | ResourceAction::HardDelete => permissions::DELETE,
ResourceAction::Restore => permissions::RESTORE,
ResourceAction::Custom(_) => return false,
};
ctx.permissions.iter().any(|p| p == required)
}
}
pub type FiscalPeriodGuard = PermissionGuard<FiscalPeriod>;
pub type FiscalPeriodServiceGuard = ServicePermissionGuard<FiscalPeriod, FiscalPeriodService, FiscalPeriodPolicy>;