authorization

type AuthService struct {
	// contains filtered or unexported fields
}

type Authorization interface {
	PermissionChecker
	GroupManager
	RoleManager
	AuthorizationSetup
	UserAccessQuery
	RoleDefinitionQuery
	CustomRoleManager
}

type AuthorizationInterceptor struct {
	// contains filtered or unexported fields
}

type AuthorizationRule struct {
	Resource   string
	Action     string
	DomainType string
}

type AuthorizationSetup interface {
	SetupOrganization(tx *gorm.DB, orgID, ownerID string) error
	DestroyOrganization(tx *gorm.DB, orgID string) error
}

type CustomRoleManager interface {
	CreateCustomRole(domainID string, roleDefinition *RoleDefinition) error
	UpdateCustomRole(domainID string, roleDefinition *RoleDefinition) error
	DeleteCustomRole(domainID string, domainType string, roleName string) error
	IsDefaultRole(roleName string, domainType string) bool
}

type GroupManager interface {
	CreateGroup(domainID string, domainType string, groupName string, role string, displayName string, description string) error
	DeleteGroup(domainID string, domainType string, groupName string) error
	UpdateGroup(domainID string, domainType string, groupName string, newRole string, displayName string, description string) error
	AddUserToGroup(domainID string, domainType string, userID string, group string) error
	RemoveUserFromGroup(domainID string, domainType string, userID string, group string) error
	GetGroupUsers(domainID string, domainType string, group string) ([]string, error)
	GetGroups(domainID string, domainType string) ([]string, error)
	GetGroupRole(domainID string, domainType string, group string) (string, error)
}

type Permission struct {
	Resource   string
	Action     string
	DomainType string
}

type PermissionChecker interface {
	CheckOrganizationPermission(userID, orgID, resource, action string) (bool, error)
}

type RoleDefinition struct {
	Name         string
	DisplayName  string
	DomainType   string
	Description  string
	Permissions  []*Permission
	InheritsFrom *RoleDefinition
	Readonly     bool
}

type RoleDefinitionQuery interface {
	GetRoleDefinition(roleName string, domainType string, domainID string) (*RoleDefinition, error)
	GetAllRoleDefinitions(domainType string, domainID string) ([]*RoleDefinition, error)
	GetRolePermissions(roleName string, domainType string, domainID string) ([]*Permission, error)
	GetRoleHierarchy(roleName string, domainType string, domainID string) ([]string, error)
}

type RoleManager interface {
	AssignRole(userID, role, domainID string, domainType string) error
	RemoveRole(userID, role, domainID string, domainType string) error
	GetOrgUsersForRole(role string, orgID string) ([]string, error)
}

type UserAccessQuery interface {
	GetUserRolesForOrg(userID string, orgID string) ([]*RoleDefinition, error)
}