haste-access-control 0.15.0

Access control utilities for Haste Health FHIR server and clients.
use haste_fhir_client::request::{
    DeleteRequest, FHIRRequest, InvocationRequest, SearchRequest, UpdateRequest,
};
use haste_reflect::MetaValue;

#[derive(Debug)]
struct LocalData {
    request_type: String,
    request_level: String,
    resource_type: Option<String>,
}

// Use Internal Hashmap for storing created Values.
#[derive(Debug)]
pub struct RequestReflection(FHIRRequest, LocalData);

impl From<FHIRRequest> for RequestReflection {
    fn from(request: FHIRRequest) -> Self {
        let local_data = LocalData {
            request_level: request_to_level(&request).to_string(),
            request_type: request_to_request_type(&request).to_string(),
            resource_type: request_resource_type_string(&request),
        };

        RequestReflection(request, local_data)
    }
}

impl From<RequestReflection> for FHIRRequest {
    fn from(reflection: RequestReflection) -> Self {
        reflection.0
    }
}

fn request_resource_type_string(fhir_request: &FHIRRequest) -> Option<String> {
    match fhir_request {
        FHIRRequest::Create(fhircreate_request) => {
            Some(fhircreate_request.resource_type.as_ref().to_string())
        }
        FHIRRequest::Read(fhirread_request) => {
            Some(fhirread_request.resource_type.as_ref().to_string())
        }
        FHIRRequest::VersionRead(fhirversion_read_request) => {
            Some(fhirversion_read_request.resource_type.as_ref().to_string())
        }
        FHIRRequest::Update(update_request) => match update_request {
            UpdateRequest::Conditional(conditional_update) => {
                Some(conditional_update.resource_type.as_ref().to_string())
            }
            UpdateRequest::Instance(instance_update) => {
                Some(instance_update.resource_type.as_ref().to_string())
            }
        },
        FHIRRequest::Patch(fhirpatch_request) => {
            Some(fhirpatch_request.resource_type.as_ref().to_string())
        }
        FHIRRequest::Delete(delete_request) => match delete_request {
            DeleteRequest::Instance(instance_delete) => {
                Some(instance_delete.resource_type.as_ref().to_string())
            }
            DeleteRequest::Type(type_delete) => {
                Some(type_delete.resource_type.as_ref().to_string())
            }
            DeleteRequest::System(_) => None,
        },
        FHIRRequest::Search(search_request) => match search_request {
            SearchRequest::System(_) => None,
            SearchRequest::Type(type_search_request) => {
                Some(type_search_request.resource_type.as_ref().to_string())
            }
        },
        FHIRRequest::Compartment(compartment_request) => {
            request_resource_type_string(&compartment_request.request)
        }
        _ => None,
    }
}

static SHARED_FIELDS: &[&str] = &["type", "level"];

// Type codes pulled from https://hl7.org/fhir/R4/http.html
///
/// Instance Level Interactions
// read	Read the current state of the resource
// vread	Read the state of a specific version of the resource
// update	Update an existing resource by its id (or create it if it is new)
// patch	Update an existing resource by posting a set of changes to it
// delete	Delete a resource
// history	Retrieve the change history for a particular resource
// Type Level Interactions
// create	Create a new resource with a server assigned id
// search	Search the resource type based on some filter criteria
// history	Retrieve the change history for a particular resource type
// Whole System Interactions
// capabilities	Get a capability statement for the system
// batch/transaction	Update, create or delete a set of resources in a single interaction
// history	Retrieve the change history for all resources
// search	Search across all resource types based on some filter criteria

fn request_to_request_type(request: &FHIRRequest) -> &'static str {
    match request {
        FHIRRequest::Create(_) => "create",
        FHIRRequest::Read(_) => "read",
        FHIRRequest::VersionRead(_) => "vread",
        FHIRRequest::Update(_) => "update",
        FHIRRequest::Patch(_) => "patch",
        FHIRRequest::Delete(_) => "delete",
        FHIRRequest::Capabilities => "capabilities",
        FHIRRequest::Search(_) => "search",
        FHIRRequest::History(_) => "history",
        FHIRRequest::Invocation(_) => "invoke",
        FHIRRequest::Batch(_) => "batch",
        FHIRRequest::Transaction(_) => "transaction",
        FHIRRequest::Compartment(_) => "compartment",
    }
}

// fn request_resource_type() -> &'static str {}

fn request_to_level(request: &FHIRRequest) -> &'static str {
    match request {
        FHIRRequest::Read(_)
        | FHIRRequest::VersionRead(_)
        | FHIRRequest::Update(_)
        | FHIRRequest::Patch(_) => "instance",
        FHIRRequest::Create(_) | FHIRRequest::Search(_) => "type",
        FHIRRequest::Delete(delete_request) => match delete_request {
            DeleteRequest::Instance(_) => "instance",
            DeleteRequest::Type(_) => "type",
            DeleteRequest::System(_) => "system",
        },
        FHIRRequest::History(hl) => match hl {
            haste_fhir_client::request::HistoryRequest::Instance(_) => "instance",
            haste_fhir_client::request::HistoryRequest::Type(_) => "type",
            haste_fhir_client::request::HistoryRequest::System(_) => "system",
        },
        FHIRRequest::Invocation(invocation_request) => match invocation_request {
            InvocationRequest::Instance(_) => "instance",
            InvocationRequest::Type(_) => "type",
            InvocationRequest::System(_) => "system",
        },
        FHIRRequest::Capabilities | FHIRRequest::Batch(_) | FHIRRequest::Transaction(_) => "system",
        FHIRRequest::Compartment(compartment_request) => {
            request_to_level(&compartment_request.request)
        }
    }
}

fn get_request_id(fhir_request: &FHIRRequest) -> Option<&String> {
    match fhir_request {
        FHIRRequest::Read(fhirread_request) => Some(&fhirread_request.id),
        FHIRRequest::VersionRead(fhirversion_read_request) => Some(&fhirversion_read_request.id),
        FHIRRequest::Update(update_request) => match update_request {
            UpdateRequest::Instance(instance) => Some(&instance.id),
            _ => None,
        },
        FHIRRequest::Patch(fhirpatch_request) => Some(&fhirpatch_request.id),
        FHIRRequest::Delete(delete_request) => match delete_request {
            DeleteRequest::Instance(instance) => Some(&instance.id),
            _ => None,
        },
        FHIRRequest::Compartment(comp) => get_request_id(&comp.request),
        _ => None,
    }
}

impl MetaValue for RequestReflection {
    fn fields(&self) -> Vec<&'static str> {
        SHARED_FIELDS.to_vec()
    }

    fn get_field<'a>(&'a self, field: &str) -> Option<&'a dyn MetaValue> {
        match field {
            "type" => Some(&self.1.request_type),
            "level" => Some(&self.1.request_level),
            "resource_type" => {
                if let Some(v) = self.1.resource_type.as_ref() {
                    Some(v)
                } else {
                    None
                }
            }
            "resource" => match &self.0 {
                FHIRRequest::Create(fhircreate_request) => Some(&fhircreate_request.resource),
                FHIRRequest::Batch(fhirbatch_request) => Some(&fhirbatch_request.resource),
                FHIRRequest::Transaction(fhirtransaction_request) => {
                    Some(&fhirtransaction_request.resource)
                }
                FHIRRequest::Update(update_request) => match update_request {
                    UpdateRequest::Conditional(conditional_update) => {
                        Some(&conditional_update.resource)
                    }
                    UpdateRequest::Instance(instance_update) => Some(&instance_update.resource),
                },
                FHIRRequest::Invocation(invocation_request) => match invocation_request {
                    InvocationRequest::Instance(invocation_request) => {
                        Some(&invocation_request.parameters)
                    }
                    InvocationRequest::Type(invocation_request) => {
                        Some(&invocation_request.parameters)
                    }
                    InvocationRequest::System(invocation_request) => {
                        Some(&invocation_request.parameters)
                    }
                },
                FHIRRequest::Compartment(_)
                | FHIRRequest::Read(_)
                | FHIRRequest::VersionRead(_)
                | FHIRRequest::Patch(_)
                | FHIRRequest::Delete(_)
                | FHIRRequest::Capabilities
                | FHIRRequest::Search(_)
                | FHIRRequest::History(_) => None,
            },
            "id" => {
                if let Some(id) = get_request_id(&self.0) {
                    Some(id)
                } else {
                    None
                }
            }
            "parameters" => match &self.0 {
                FHIRRequest::Search(search_request) => match search_request {
                    SearchRequest::Type(type_search_request) => {
                        Some(&type_search_request.parameters)
                    }
                    SearchRequest::System(system_search_request) => {
                        Some(&system_search_request.parameters)
                    }
                },
                FHIRRequest::Update(update_request) => match update_request {
                    UpdateRequest::Conditional(conditional_update) => {
                        Some(&conditional_update.parameters)
                    }
                    _ => None,
                },
                FHIRRequest::Delete(delete_request) => match delete_request {
                    DeleteRequest::Type(type_delete_request) => {
                        Some(&type_delete_request.parameters)
                    }
                    DeleteRequest::System(system_delete_request) => {
                        Some(&system_delete_request.parameters)
                    }
                    _ => None,
                },
                _ => None,
            },

            _ => None,
        }
    }

    fn get_field_mut<'a>(&'a mut self, _field: &str) -> Option<&'a mut dyn MetaValue> {
        None
    }

    fn get_index<'a>(&'a self, _index: usize) -> Option<&'a dyn MetaValue> {
        None
    }

    fn get_index_mut<'a>(&'a mut self, _index: usize) -> Option<&'a mut dyn MetaValue> {
        None
    }

    fn flatten(&self) -> Vec<&dyn MetaValue> {
        vec![self]
    }

    fn as_any(&self) -> &dyn std::any::Any {
        self
    }

    fn typename(&self) -> &'static str {
        "FHIRRequest"
    }

    fn is_many(&self) -> bool {
        false
    }
}