use backbone_auth::{ResourcePolicy, ResourceAction, PermissionGuard, ServicePermissionGuard};
use async_trait::async_trait;
use crate::application::service::ConversionJobService;
use crate::domain::entity::ConversionJob;
pub mod permissions {
pub const LIST: &str = "conversion_job:list";
pub const READ: &str = "conversion_job:read";
pub const CREATE: &str = "conversion_job:create";
pub const UPDATE: &str = "conversion_job:update";
pub const DELETE: &str = "conversion_job:delete";
pub const RESTORE: &str = "conversion_job:restore";
pub const TRASH: &str = "conversion_job:trash";
pub const EMPTY_TRASH: &str = "conversion_job:empty_trash";
pub const BULK_CREATE: &str = "conversion_job:bulk_create";
pub const UPSERT: &str = "conversion_job:upsert";
}
pub struct ConversionJobPolicy;
#[async_trait]
impl ResourcePolicy<ConversionJob> for ConversionJobPolicy {
async fn can(
&self,
action: ResourceAction,
_entity: &ConversionJob,
ctx: &backbone_auth::middleware::AuthContext,
) -> bool {
let required = match action {
ResourceAction::Read | ResourceAction::List => permissions::READ,
ResourceAction::Create => permissions::CREATE,
ResourceAction::Update | ResourceAction::Patch => permissions::UPDATE,
ResourceAction::Delete | ResourceAction::HardDelete => permissions::DELETE,
ResourceAction::Restore => permissions::RESTORE,
ResourceAction::Custom(_) => return false,
};
ctx.permissions.iter().any(|p| p == required)
}
}
pub type ConversionJobGuard = PermissionGuard<ConversionJob>;
pub type ConversionJobServiceGuard = ServicePermissionGuard<ConversionJob, ConversionJobService, ConversionJobPolicy>;