use backbone_auth::{ResourcePolicy, ResourceAction, PermissionGuard, ServicePermissionGuard};
use async_trait::async_trait;
use crate::application::service::WarrantyClaimService;
use crate::domain::entity::WarrantyClaim;
pub mod permissions {
pub const LIST: &str = "warranty_claim:list";
pub const READ: &str = "warranty_claim:read";
pub const CREATE: &str = "warranty_claim:create";
pub const UPDATE: &str = "warranty_claim:update";
pub const DELETE: &str = "warranty_claim:delete";
pub const RESTORE: &str = "warranty_claim:restore";
pub const TRASH: &str = "warranty_claim:trash";
pub const EMPTY_TRASH: &str = "warranty_claim:empty_trash";
pub const BULK_CREATE: &str = "warranty_claim:bulk_create";
pub const UPSERT: &str = "warranty_claim:upsert";
}
pub struct WarrantyClaimPolicy;
#[async_trait]
impl ResourcePolicy<WarrantyClaim> for WarrantyClaimPolicy {
async fn can(
&self,
action: ResourceAction,
_entity: &WarrantyClaim,
ctx: &backbone_auth::middleware::AuthContext,
) -> bool {
let required = match action {
ResourceAction::Read | ResourceAction::List => permissions::READ,
ResourceAction::Create => permissions::CREATE,
ResourceAction::Update | ResourceAction::Patch => permissions::UPDATE,
ResourceAction::Delete | ResourceAction::HardDelete => permissions::DELETE,
ResourceAction::Restore => permissions::RESTORE,
ResourceAction::Custom(_) => return false,
};
ctx.permissions.iter().any(|p| p == required)
}
}
pub type WarrantyClaimGuard = PermissionGuard<WarrantyClaim>;
pub type WarrantyClaimServiceGuard = ServicePermissionGuard<WarrantyClaim, WarrantyClaimService, WarrantyClaimPolicy>;