access

type AssignSystemRoleByEmailCommand struct {
	Email     string
	FullName  string
	Role      entity.SystemRole
	GrantedBy string
}

type AssignSystemRoleCommand struct {
	UserID    string
	Role      entity.SystemRole
	GrantedBy string
}

type RecordAccessCommand struct {
	UserID     string
	EntityType entity.AccessEntityType
	EntityID   string
}

type RevokeSystemRoleCommand struct {
	UserID    string
	RevokedBy string
}

type SystemRoleUseCase interface {
	// ListUsersWithSystemRoles lists all users that have system roles.
	ListUsersWithSystemRoles(ctx context.Context) ([]*entity.SystemRoleWithUser, error)

	// AssignRole assigns a system role to a user.
	AssignRole(ctx context.Context, cmd AssignSystemRoleCommand) (*entity.SystemRoleAssignment, error)

	// AssignRoleByEmail assigns a system role to a user identified by email.
	// Creates a shadow user if the email doesn't exist.
	AssignRoleByEmail(ctx context.Context, cmd AssignSystemRoleByEmailCommand) (*entity.SystemRoleWithUser, error)

	// RevokeRole revokes a user's system role.
	RevokeRole(ctx context.Context, cmd RevokeSystemRoleCommand) error

	// GetUserSystemRole gets a user's system role.
	GetUserSystemRole(ctx context.Context, userID string) (*entity.SystemRoleAssignment, error)
}

type UserAccessHistoryUseCase interface {
	// RecordTenantAccess records that a user accessed a tenant.
	RecordTenantAccess(ctx context.Context, userID, tenantID string) error

	// RecordWorkspaceAccess records that a user accessed a workspace.
	RecordWorkspaceAccess(ctx context.Context, userID, workspaceID string) error

	// GetRecentTenantIDs returns the IDs of recently accessed tenants for a user.
	GetRecentTenantIDs(ctx context.Context, userID string) ([]string, error)

	// GetRecentWorkspaceIDs returns the IDs of recently accessed workspaces for a user.
	GetRecentWorkspaceIDs(ctx context.Context, userID string) ([]string, error)
}