reifydb_transaction/transaction/catalog/
granted_role.rs1use reifydb_core::interface::catalog::{
5 change::CatalogTrackGrantedRoleChangeOperations,
6 identity::{GrantedRole, RoleId},
7};
8use reifydb_value::{Result, value::identity::IdentityId};
9
10use crate::{
11 change::{
12 Change,
13 OperationType::{Create, Delete},
14 TransactionalGrantedRoleChanges,
15 },
16 interceptor::granted_role::{GrantedRolePostCreateContext, GrantedRolePreDeleteContext},
17 transaction::admin::AdminTransaction,
18};
19
20impl CatalogTrackGrantedRoleChangeOperations for AdminTransaction {
21 fn track_granted_role_created(&mut self, granted_role: GrantedRole) -> Result<()> {
22 self.interceptors.granted_role_post_create.execute(GrantedRolePostCreateContext::new(&granted_role))?;
23 let change = Change {
24 pre: None,
25 post: Some(granted_role),
26 op: Create,
27 };
28 self.changes.add_granted_role_change(change);
29 Ok(())
30 }
31
32 fn track_granted_role_deleted(&mut self, granted_role: GrantedRole) -> Result<()> {
33 self.interceptors.granted_role_pre_delete.execute(GrantedRolePreDeleteContext::new(&granted_role))?;
34 let change = Change {
35 pre: Some(granted_role),
36 post: None,
37 op: Delete,
38 };
39 self.changes.add_granted_role_change(change);
40 Ok(())
41 }
42}
43
44impl TransactionalGrantedRoleChanges for AdminTransaction {
45 fn find_granted_roles_for_identity(&self, identity: IdentityId) -> Vec<&GrantedRole> {
46 let mut result = Vec::new();
47 for change in &self.changes.granted_role {
48 if let Some(ir) = &change.post
49 && ir.identity == identity && change.op == Create
50 {
51 result.push(ir);
52 }
53 }
54 result
55 }
56
57 fn is_granted_role_deleted(&self, identity: IdentityId, role: RoleId) -> bool {
58 self.changes.granted_role.iter().rev().any(|change| {
59 change.op == Delete
60 && change
61 .pre
62 .as_ref()
63 .map(|ir| ir.identity == identity && ir.role_id == role)
64 .unwrap_or(false)
65 })
66 }
67}