Files
Steve Munene 178a62c08f MG-370 - Add fine grained access control to reports (#403)
* add access control to rules engine

Signed-off-by: nyagamunene <stevenyaga2014@gmail.com>

* fix build

Signed-off-by: nyagamunene <stevenyaga2014@gmail.com>

* remove unused variable

Signed-off-by: nyagamunene <stevenyaga2014@gmail.com>

* fix report database

Signed-off-by: nyagamunene <stevenyaga2014@gmail.com>

* fix variable naming

Signed-off-by: nyagamunene <stevenyaga2014@gmail.com>

* fix entity type

Signed-off-by: Arvindh <arvindh91@gmail.com>

* update authorize method

Signed-off-by: nyagamunene <stevenyaga2014@gmail.com>

* fix generate report

Signed-off-by: nyagamunene <stevenyaga2014@gmail.com>

* revert env changes

Signed-off-by: nyagamunene <stevenyaga2014@gmail.com>

* fix linter

Signed-off-by: nyagamunene <stevenyaga2014@gmail.com>

* fix failing linter

Signed-off-by: nyagamunene <stevenyaga2014@gmail.com>

* update generate permission

Signed-off-by: nyagamunene <stevenyaga2014@gmail.com>

* revert go mod file

Signed-off-by: nyagamunene <stevenyaga2014@gmail.com>

* revert go mod file

Signed-off-by: nyagamunene <stevenyaga2014@gmail.com>

---------

Signed-off-by: nyagamunene <stevenyaga2014@gmail.com>
Signed-off-by: Arvindh <arvindh91@gmail.com>
Co-authored-by: Arvindh <arvindh91@gmail.com>
2026-03-05 13:59:22 +01:00

295 lines
7.4 KiB
Go

// Copyright (c) Abstract Machines
// SPDX-License-Identifier: Apache-2.0
package api
import (
"context"
"github.com/absmach/magistrala/reports"
"github.com/absmach/supermq/pkg/authn"
svcerr "github.com/absmach/supermq/pkg/errors/service"
"github.com/go-kit/kit/endpoint"
)
func generateReportEndpoint(svc reports.Service) endpoint.Endpoint {
return func(ctx context.Context, request any) (any, error) {
session, ok := ctx.Value(authn.SessionKey).(authn.Session)
if !ok {
return nil, svcerr.ErrAuthorization
}
req := request.(generateReportReq)
if err := req.validate(); err != nil {
return generateReportResp{}, err
}
res, err := svc.GenerateReport(ctx, session, req.ReportConfig, req.action)
if err != nil {
return generateReportResp{}, err
}
switch req.action {
case reports.DownloadReport:
return downloadReportResp{
File: res.File,
}, nil
case reports.EmailReport:
return emailReportResp{}, nil
default:
return generateReportResp{
Total: res.Total,
From: res.From,
To: res.To,
Aggregation: res.Aggregation,
Reports: res.Reports,
}, nil
}
}
}
func listReportsConfigEndpoint(svc reports.Service) endpoint.Endpoint {
return func(ctx context.Context, request any) (any, error) {
session, ok := ctx.Value(authn.SessionKey).(authn.Session)
if !ok {
return nil, svcerr.ErrAuthorization
}
req := request.(listReportsConfigReq)
if err := req.validate(); err != nil {
return listReportsConfigRes{}, err
}
page, err := svc.ListReportsConfig(ctx, session, req.PageMeta)
if err != nil {
return listReportsConfigRes{}, err
}
return listReportsConfigRes{
pageRes: pageRes{
Limit: page.Limit,
Offset: page.Offset,
Total: page.Total,
},
ReportConfigs: page.ReportConfigs,
}, nil
}
}
func deleteReportConfigEndpoint(svc reports.Service) endpoint.Endpoint {
return func(ctx context.Context, request any) (any, error) {
session, ok := ctx.Value(authn.SessionKey).(authn.Session)
if !ok {
return nil, svcerr.ErrAuthorization
}
req := request.(deleteReportConfigReq)
if err := req.validate(); err != nil {
return deleteReportConfigRes{}, err
}
err := svc.RemoveReportConfig(ctx, session, req.ID)
if err != nil {
return deleteReportConfigRes{false}, err
}
return deleteReportConfigRes{true}, nil
}
}
func updateReportConfigEndpoint(svc reports.Service) endpoint.Endpoint {
return func(ctx context.Context, request any) (any, error) {
session, ok := ctx.Value(authn.SessionKey).(authn.Session)
if !ok {
return nil, svcerr.ErrAuthorization
}
req := request.(updateReportConfigReq)
if err := req.validate(); err != nil {
return updateReportConfigRes{}, err
}
cfg, err := svc.UpdateReportConfig(ctx, session, req.ReportConfig)
if err != nil {
return updateReportConfigRes{}, err
}
return updateReportConfigRes{ReportConfig: cfg}, nil
}
}
func updateReportScheduleEndpoint(s reports.Service) endpoint.Endpoint {
return func(ctx context.Context, request any) (any, error) {
session, ok := ctx.Value(authn.SessionKey).(authn.Session)
if !ok {
return nil, svcerr.ErrAuthorization
}
req := request.(updateReportScheduleReq)
if err := req.validate(); err != nil {
return updateReportConfigRes{}, err
}
rpt := reports.ReportConfig{
ID: req.id,
Schedule: req.Schedule,
}
updatedReport, err := s.UpdateReportSchedule(ctx, session, rpt)
if err != nil {
return updateReportConfigRes{}, err
}
return updateReportConfigRes{ReportConfig: updatedReport}, nil
}
}
func viewReportConfigEndpoint(svc reports.Service) endpoint.Endpoint {
return func(ctx context.Context, request any) (any, error) {
session, ok := ctx.Value(authn.SessionKey).(authn.Session)
if !ok {
return nil, svcerr.ErrAuthorization
}
req := request.(viewReportConfigReq)
if err := req.validate(); err != nil {
return viewReportConfigRes{}, err
}
cfg, err := svc.ViewReportConfig(ctx, session, req.ID, req.withRoles)
if err != nil {
return viewReportConfigRes{}, err
}
return viewReportConfigRes{ReportConfig: cfg}, nil
}
}
func addReportConfigEndpoint(svc reports.Service) endpoint.Endpoint {
return func(ctx context.Context, request any) (any, error) {
session, ok := ctx.Value(authn.SessionKey).(authn.Session)
if !ok {
return nil, svcerr.ErrAuthorization
}
req := request.(addReportConfigReq)
if err := req.validate(); err != nil {
return addReportConfigRes{}, err
}
cfg, err := svc.AddReportConfig(ctx, session, req.ReportConfig)
if err != nil {
return addReportConfigRes{}, err
}
return addReportConfigRes{
ReportConfig: cfg,
created: true,
}, nil
}
}
func enableReportConfigEndpoint(svc reports.Service) endpoint.Endpoint {
return func(ctx context.Context, request any) (any, error) {
session, ok := ctx.Value(authn.SessionKey).(authn.Session)
if !ok {
return nil, svcerr.ErrAuthorization
}
req := request.(updateReportStatusReq)
if err := req.validate(); err != nil {
return updateReportConfigRes{}, err
}
cfg, err := svc.EnableReportConfig(ctx, session, req.id)
if err != nil {
return updateReportConfigRes{}, err
}
return updateReportConfigRes{ReportConfig: cfg}, nil
}
}
func disableReportConfigEndpoint(svc reports.Service) endpoint.Endpoint {
return func(ctx context.Context, request any) (any, error) {
session, ok := ctx.Value(authn.SessionKey).(authn.Session)
if !ok {
return nil, svcerr.ErrAuthorization
}
req := request.(updateReportStatusReq)
if err := req.validate(); err != nil {
return updateReportConfigRes{}, err
}
cfg, err := svc.DisableReportConfig(ctx, session, req.id)
if err != nil {
return updateReportConfigRes{}, err
}
return updateReportConfigRes{ReportConfig: cfg}, nil
}
}
func updateReportTemplateEndpoint(svc reports.Service) endpoint.Endpoint {
return func(ctx context.Context, request any) (any, error) {
session, ok := ctx.Value(authn.SessionKey).(authn.Session)
if !ok {
return nil, svcerr.ErrAuthorization
}
req := request.(updateReportTemplateReq)
if err := req.validate(); err != nil {
return updateReportTemplateRes{false}, err
}
err := svc.UpdateReportTemplate(ctx, session, req.ReportConfig)
if err != nil {
return updateReportTemplateRes{false}, err
}
return updateReportTemplateRes{true}, nil
}
}
func viewReportTemplateEndpoint(svc reports.Service) endpoint.Endpoint {
return func(ctx context.Context, request any) (any, error) {
session, ok := ctx.Value(authn.SessionKey).(authn.Session)
if !ok {
return nil, svcerr.ErrAuthorization
}
req := request.(getReportTemplateReq)
if err := req.validate(); err != nil {
return viewReportTemplateRes{}, err
}
template, err := svc.ViewReportTemplate(ctx, session, req.ID)
if err != nil {
return viewReportTemplateRes{}, err
}
return viewReportTemplateRes{Template: template}, nil
}
}
func deleteReportTemplateEndpoint(svc reports.Service) endpoint.Endpoint {
return func(ctx context.Context, request any) (any, error) {
session, ok := ctx.Value(authn.SessionKey).(authn.Session)
if !ok {
return nil, svcerr.ErrAuthorization
}
req := request.(deleteReportTemplateReq)
if err := req.validate(); err != nil {
return deleteReportTemplateRes{false}, err
}
err := svc.DeleteReportTemplate(ctx, session, req.ID)
if err != nil {
return deleteReportTemplateRes{false}, err
}
return deleteReportTemplateRes{true}, nil
}
}