import { css } from '@emotion/css'; import { sortBy } from 'lodash'; import React, { useCallback, useEffect, useMemo, useState } from 'react'; import { GrafanaTheme2 } from '@grafana/data'; import { Space } from '@grafana/experimental'; import { config } from '@grafana/runtime'; import { Button, useStyles2 } from '@grafana/ui'; import { SlideDown } from 'app/core/components/Animations/SlideDown'; import { getBackendSrv } from 'app/core/services/backend_srv'; import { DescendantCount } from 'app/features/browse-dashboards/components/BrowseActions/DescendantCount'; import { AddPermission } from './AddPermission'; import { PermissionList } from './PermissionList'; import { PermissionTarget, ResourcePermission, SetPermission, Description } from './types'; const EMPTY_PERMISSION = ''; const INITIAL_DESCRIPTION: Description = { permissions: [], assignments: { teams: false, users: false, builtInRoles: false, }, }; type ResourceId = string | number; type Type = 'users' | 'teams' | 'builtInRoles'; export type Props = { title?: string; buttonLabel?: string; emptyLabel?: string; addPermissionTitle?: string; resource: string; resourceId: ResourceId; canSetPermissions: boolean; }; export const Permissions = ({ title = 'Permissions', buttonLabel = 'Add a permission', emptyLabel = 'There are no permissions', resource, resourceId, canSetPermissions, addPermissionTitle, }: Props) => { const styles = useStyles2(getStyles); const [isAdding, setIsAdding] = useState(false); const [items, setItems] = useState([]); const [desc, setDesc] = useState(INITIAL_DESCRIPTION); const fetchItems = useCallback(() => { return getPermissions(resource, resourceId).then((r) => setItems(r)); }, [resource, resourceId]); useEffect(() => { getDescription(resource).then((r) => { setDesc(r); return fetchItems(); }); }, [resource, resourceId, fetchItems]); const onAdd = (state: SetPermission) => { let promise: Promise | null = null; if (state.target === PermissionTarget.User) { promise = setUserPermission(resource, resourceId, state.userId!, state.permission); } else if (state.target === PermissionTarget.Team) { promise = setTeamPermission(resource, resourceId, state.teamId!, state.permission); } else if (state.target === PermissionTarget.BuiltInRole) { promise = setBuiltInRolePermission(resource, resourceId, state.builtInRole!, state.permission); } if (promise !== null) { promise.then(fetchItems); } }; const onRemove = (item: ResourcePermission) => { let promise: Promise | null = null; if (item.userId) { promise = setUserPermission(resource, resourceId, item.userId, EMPTY_PERMISSION); } else if (item.teamId) { promise = setTeamPermission(resource, resourceId, item.teamId, EMPTY_PERMISSION); } else if (item.builtInRole) { promise = setBuiltInRolePermission(resource, resourceId, item.builtInRole, EMPTY_PERMISSION); } if (promise !== null) { promise.then(fetchItems); } }; const onChange = (item: ResourcePermission, permission: string) => { if (item.permission === permission) { return; } if (item.userId) { onAdd({ permission, userId: item.userId, target: PermissionTarget.User }); } else if (item.teamId) { onAdd({ permission, teamId: item.teamId, target: PermissionTarget.Team }); } else if (item.builtInRole) { onAdd({ permission, builtInRole: item.builtInRole, target: PermissionTarget.BuiltInRole }); } }; const teams = useMemo( () => sortBy( items.filter((i) => i.teamId), ['team', 'isManaged'] ), [items] ); const users = useMemo( () => sortBy( items.filter((i) => i.userId), ['userLogin', 'isManaged'] ), [items] ); const builtInRoles = useMemo( () => sortBy( items.filter((i) => i.builtInRole), ['builtInRole', 'isManaged'] ), [items] ); return (
{config.featureToggles.nestedFolders && resource === 'folders' && ( <> This will change permissions for this folder and all its descendants. In total, this will affect: )} {canSetPermissions && ( )} setIsAdding(false)} /> {items.length === 0 && (
{emptyLabel}
)}
); }; const getDescription = async (resource: string): Promise => { try { return await getBackendSrv().get(`/api/access-control/${resource}/description`); } catch (e) { console.error('failed to load resource description: ', e); return INITIAL_DESCRIPTION; } }; const getPermissions = (resource: string, resourceId: ResourceId): Promise => getBackendSrv().get(`/api/access-control/${resource}/${resourceId}`); const setUserPermission = (resource: string, resourceId: ResourceId, userId: number, permission: string) => setPermission(resource, resourceId, 'users', userId, permission); const setTeamPermission = (resource: string, resourceId: ResourceId, teamId: number, permission: string) => setPermission(resource, resourceId, 'teams', teamId, permission); const setBuiltInRolePermission = (resource: string, resourceId: ResourceId, builtInRole: string, permission: string) => setPermission(resource, resourceId, 'builtInRoles', builtInRole, permission); const setPermission = ( resource: string, resourceId: ResourceId, type: Type, typeId: number | string, permission: string ): Promise => getBackendSrv().post(`/api/access-control/${resource}/${resourceId}/${type}/${typeId}`, { permission }); const getStyles = (theme: GrafanaTheme2) => ({ breakdown: css({ ...theme.typography.bodySmall, color: theme.colors.text.secondary, marginBottom: theme.spacing(2), }), addPermissionButton: css({ marginBottom: theme.spacing(2), }), });