use backbone_auth::{ResourcePolicy, ResourceAction, PermissionGuard, ServicePermissionGuard};
use async_trait::async_trait;
use crate::application::service::UomConversionService;
use crate::domain::entity::UomConversion;
pub mod permissions {
pub const LIST: &str = "uom_conversion:list";
pub const READ: &str = "uom_conversion:read";
pub const CREATE: &str = "uom_conversion:create";
pub const UPDATE: &str = "uom_conversion:update";
pub const DELETE: &str = "uom_conversion:delete";
pub const RESTORE: &str = "uom_conversion:restore";
pub const TRASH: &str = "uom_conversion:trash";
pub const EMPTY_TRASH: &str = "uom_conversion:empty_trash";
pub const BULK_CREATE: &str = "uom_conversion:bulk_create";
pub const UPSERT: &str = "uom_conversion:upsert";
}
pub struct UomConversionPolicy;
#[async_trait]
impl ResourcePolicy<UomConversion> for UomConversionPolicy {
async fn can(
&self,
action: ResourceAction,
_entity: &UomConversion,
ctx: &backbone_auth::middleware::AuthContext,
) -> bool {
let required = match action {
ResourceAction::Read | ResourceAction::List => permissions::READ,
ResourceAction::Create => permissions::CREATE,
ResourceAction::Update | ResourceAction::Patch => permissions::UPDATE,
ResourceAction::Delete | ResourceAction::HardDelete => permissions::DELETE,
ResourceAction::Restore => permissions::RESTORE,
ResourceAction::Custom(_) => return false,
};
ctx.permissions.iter().any(|p| p == required)
}
}
pub type UomConversionGuard = PermissionGuard<UomConversion>;
pub type UomConversionServiceGuard = ServicePermissionGuard<UomConversion, UomConversionService, UomConversionPolicy>;