Skip to main content

reifydb_transaction/transaction/catalog/
granted_role.rs

1// SPDX-License-Identifier: Apache-2.0
2// Copyright (c) 2026 ReifyDB
3
4use reifydb_core::interface::catalog::{
5	change::CatalogTrackGrantedRoleChangeOperations,
6	identity::{GrantedRole, RoleId},
7};
8use reifydb_value::{Result, value::identity::IdentityId};
9
10use crate::{
11	change::{
12		Change,
13		OperationType::{Create, Delete},
14		TransactionalGrantedRoleChanges,
15	},
16	interceptor::granted_role::{GrantedRolePostCreateContext, GrantedRolePreDeleteContext},
17	transaction::admin::AdminTransaction,
18};
19
20impl CatalogTrackGrantedRoleChangeOperations for AdminTransaction {
21	fn track_granted_role_created(&mut self, granted_role: GrantedRole) -> Result<()> {
22		self.interceptors.granted_role_post_create.execute(GrantedRolePostCreateContext::new(&granted_role))?;
23		let change = Change {
24			pre: None,
25			post: Some(granted_role),
26			op: Create,
27		};
28		self.changes.add_granted_role_change(change);
29		Ok(())
30	}
31
32	fn track_granted_role_deleted(&mut self, granted_role: GrantedRole) -> Result<()> {
33		self.interceptors.granted_role_pre_delete.execute(GrantedRolePreDeleteContext::new(&granted_role))?;
34		let change = Change {
35			pre: Some(granted_role),
36			post: None,
37			op: Delete,
38		};
39		self.changes.add_granted_role_change(change);
40		Ok(())
41	}
42}
43
44impl TransactionalGrantedRoleChanges for AdminTransaction {
45	fn find_granted_roles_for_identity(&self, identity: IdentityId) -> Vec<&GrantedRole> {
46		let mut result = Vec::new();
47		for change in &self.changes.granted_role {
48			if let Some(ir) = &change.post
49				&& ir.identity == identity && change.op == Create
50			{
51				result.push(ir);
52			}
53		}
54		result
55	}
56
57	fn is_granted_role_deleted(&self, identity: IdentityId, role: RoleId) -> bool {
58		self.changes.granted_role.iter().rev().any(|change| {
59			change.op == Delete
60				&& change
61					.pre
62					.as_ref()
63					.map(|ir| ir.identity == identity && ir.role_id == role)
64					.unwrap_or(false)
65		})
66	}
67}