models

type AccountBase struct {
	ID        uint64                  `json:"id" gorm:"primaryKey"`
	Approve   pkgModels.ApproveStatus `json:"approved" db:"approve_status" gorm:"column:approve_status"`
	CreatedAt time.Time               `json:"created_at"`
	UpdatedAt time.Time               `json:"updated_at"`
	DeletedAt gorm.DeletedAt          `json:"deleted_at"`

	Permissions PermissionChecker `json:"-" gorm:"-"`
	Admins      []uint64          `json:"-" gorm:"-"`
}

type M2MAccountMemberRole struct {
	MemberID  uint64    `db:"member_id" gorm:"primaryKey"`
	RoleID    uint64    `db:"role_id" gorm:"primaryKey"`
	CreatedAt time.Time `db:"created_at"`
}

type MemberBase struct {
	ID        uint64                  `db:"id" gorm:"primaryKey"`
	Approve   pkgModels.ApproveStatus `db:"approve_status" gorm:"column:approve_status"`
	AccountID uint64                  `db:"account_id"`
	UserID    uint64                  `db:"user_id"`
	IsAdmin   bool                    `db:"is_admin"`
	Roles     []*rbacModels.Role      `gorm:"many2many:m2m_account_member_role;foreignKey:ID;joinForeignKey:MemberID;references:ID;joinReferences:RoleID"`
	CreatedAt time.Time               `db:"created_at"`
	UpdatedAt time.Time               `db:"updated_at"`
	DeletedAt gorm.DeletedAt          `db:"deleted_at"`
}

type PermissionChecker interface {
	// CheckPermissions verifies if the given patterns are permitted for a resource in the context.
	CheckPermissions(ctx context.Context, resource any, patterns ...string) bool
	// CheckedPermissions returns the permission object if patterns are permitted, nil otherwise.
	CheckedPermissions(ctx context.Context, resource any, patterns ...string) rbac.Permission
	// ChildRoles returns all child roles associated with this permission checker.
	ChildRoles() []rbac.Role
	// ChildPermissions returns all child permissions associated with this permission checker.
	ChildPermissions() []rbac.Permission
	// Permissions returns all permissions matching the given patterns.
	Permissions(patterns ...string) []rbac.Permission
	// HasPermission checks if any of the given permission patterns exist.
	HasPermission(patterns ...string) bool
}