Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Restrict non-admin user functions at cf level #2654

Merged
merged 12 commits into from
Jul 16, 2018
Merged

Restrict non-admin user functions at cf level #2654

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
12 commits
Select commit Hold shift + click to select a range
d279c44
WIP
richard-cox Jul 5, 2018
f52cde3
Merge remote-tracking branch 'origin/v2-master' into fix-non-admin-ma…
richard-cox Jul 5, 2018
8796fea
Merge remote-tracking branch 'origin/fix-many-roles' into fix-non-adm…
richard-cox Jul 5, 2018
c1e1cfa
WIP
richard-cox Jul 5, 2018
e6c8baa
Still WIP
richard-cox Jul 5, 2018
7f13a1c
Merge branch 'remove-partial-entity-2' into fix-non-admin-many-users-3
richard-cox Jul 6, 2018
5ca70fd
Fix dodgy merge, tidy ups, WIP
richard-cox Jul 6, 2018
6593665
More tidying up
richard-cox Jul 6, 2018
02ca242
Hide cf users card if no users
richard-cox Jul 6, 2018
0a2f508
Merge remote-tracking branch 'origin/v2-master' into fix-non-admin-ma…
richard-cox Jul 6, 2018
6a4c387
Minor tidy ups
KlapTrap Jul 16, 2018
5085f33
Merge branch 'v2-master' into fix-non-admin-many-users-3
KlapTrap Jul 16, 2018
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
WIP
  • Loading branch information
@richard-cox
richard-cox committed Jul 5, 2018
commit c1e1cfad0ecceb51dca3acd71bf1ecc8a830c780
14 changes: 11 additions & 3 deletions ...res/cloud-foundry/users/manage-users/manage-users-select/manage-users-select.component.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,7 @@ import {
CfSelectUsersListConfigService,
} from '../../../../../shared/components/list/list-types/cf-select-users/cf-select-users-list-config.service';
import { ListConfig } from '../../../../../shared/components/list/list.component.types';
import { CfUserService } from '../../../../../shared/data-services/cf-user.service';
import { PaginationMonitorFactory } from '../../../../../shared/monitors/pagination-monitor.factory';
import { UsersRolesSetUsers } from '../../../../../store/actions/users-roles.actions';
import { AppState } from '../../../../../store/app-state';
Expand All @@ -15,6 +16,7 @@ import { CfUser } from '../../../../../store/types/user.types';
import { ActiveRouteCfOrgSpace } from '../../../cf-page.types';
import { CfRolesService } from '../cf-roles.service';


@Component({
selector: 'app-manage-users-select',
templateUrl: './manage-users-select.component.html',
Expand All @@ -25,10 +27,16 @@ import { CfRolesService } from '../cf-roles.service';
useFactory: (
store: Store<AppState>,
activeRouteCfOrgSpace: ActiveRouteCfOrgSpace,
paginationMonitorFactory: PaginationMonitorFactory) => {
return new CfSelectUsersListConfigService(store, activeRouteCfOrgSpace.cfGuid, activeRouteCfOrgSpace, paginationMonitorFactory);
paginationMonitorFactory: PaginationMonitorFactory,
cfUserService: CfUserService) => {
return new CfSelectUsersListConfigService(
store,
activeRouteCfOrgSpace.cfGuid,
cfUserService,
activeRouteCfOrgSpace,
paginationMonitorFactory);
},
deps: [Store, ActiveRouteCfOrgSpace, PaginationMonitorFactory]
deps: [Store, ActiveRouteCfOrgSpace, PaginationMonitorFactory, CfUserService]
}
],
})
Expand Down
8 changes: 2 additions & 6 deletions .../shared/components/list/list-types/cf-select-users/cf-select-users-list-config.service.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -45,19 +45,15 @@ export class CfSelectUsersListConfigService implements IListConfig<APIResource<C
constructor(
private store: Store<AppState>,
private cfGuid: string,
private cfUserService: CfUserService,
private activeRouteCfOrgSpace: ActiveRouteCfOrgSpace,
private paginationMonitorFactory: PaginationMonitorFactory
) {
this.initialised = waitForCFPermissions(store, activeRouteCfOrgSpace.cfGuid).pipe(
switchMap(cf =>
combineLatest(
observableOf(cf),
CfUserService.createPaginationAction(
activeRouteCfOrgSpace.cfGuid,
cf.global.isAdmin,
this.activeRouteCfOrgSpace.orgGuid,
store,
paginationMonitorFactory)
cfUserService.createPaginationAction(cf.global.isAdmin)
)
),
tap(([cf, action]) => {
Expand Down
7 changes: 1 addition & 6 deletions src/frontend/app/shared/components/list/list-types/cf-users/cf-user-list-config.service.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -119,12 +119,7 @@ export class CfUserListConfigService extends ListConfig<APIResource<CfUser>> {
switchMap(cf =>
combineLatest(
observableOf(cf),
CfUserService.createPaginationAction(
activeRouteCfOrgSpace.cfGuid,
cf.global.isAdmin,
this.activeRouteCfOrgSpace.orgGuid,
store,
paginationMonitorFactory)
cfUserService.createPaginationAction(cf.global.isAdmin)
)
),
tap(([cf, action]) => {
Expand Down
218 changes: 145 additions & 73 deletions src/frontend/app/shared/data-services/cf-user.service.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
import { Injectable } from '@angular/core';
import { Store } from '@ngrx/store';
import { Observable, of as observableOf, } from 'rxjs';
import { Observable, of as observableOf, combineLatest as hmmm } from 'rxjs';
import { filter, first, map, publishReplay, refCount, switchMap, withLatestFrom, combineLatest } from 'rxjs/operators';

import { IOrganization, ISpace } from '../../core/cf-api.types';
Expand Down Expand Up @@ -44,60 +44,62 @@ import {
} from '../../store/types/user.types';
import { PaginationMonitorFactory } from '../monitors/pagination-monitor.factory';
import { ActiveRouteCfOrgSpace } from './../../features/cloud-foundry/cf-page.types';
import { selectEntity, selectRequestInfo } from '../../store/selectors/api.selectors';

@Injectable()
export class CfUserService {
private allUsers$: Observable<PaginationObservables<APIResource<CfUser>>>;

public static createPaginationAction(
endpointGuid: string,
isAdmin: boolean,
orgGuid?: string,
store?: Store<AppState>,
paginationMonitorFactory?: PaginationMonitorFactory
): Observable<PaginatedAction> {
if (isAdmin) {
return observableOf(new GetAllUsersAsAdmin(endpointGuid));
}
return CfUserService.canFetchAllUsers(store, paginationMonitorFactory, endpointGuid).pipe(
map(canFetchAllUsers => {
if (canFetchAllUsers) {
return new GetAllUsersAsNonAdmin(endpointGuid);
} else if (!orgGuid) {
// Danger! If there's no org guid and there's a ton of orgs this will be an expensive action.
console.log('DANGER');
return new GetAllUsersAsNonAdmin(endpointGuid);
} else {
const usersPaginationKey = createEntityRelationPaginationKey(organizationSchemaKey, orgGuid);
return new GetAllOrgUsers(orgGuid, usersPaginationKey, endpointGuid);
}
})
);
}
// public static createPaginationAction(
// endpointGuid: string,
// isAdmin: boolean,
// orgGuid?: string,
// store?: Store<AppState>,
// paginationMonitorFactory?: PaginationMonitorFactory
// ): Observable<PaginatedAction> {
// if (isAdmin) {
// return observableOf(new GetAllUsersAsAdmin(endpointGuid));
// }
// return CfUserService.canFetchAllUsers(store, paginationMonitorFactory, endpointGuid).pipe(
// map(canFetchAllUsers => {
// if (canFetchAllUsers) {
// return new GetAllUsersAsNonAdmin(endpointGuid);
// } else if (!orgGuid) {
// // Danger! If there's no org guid and there's a ton of orgs this will be an expensive action.
// console.log('DANGER');
// return new GetAllUsersAsNonAdmin(endpointGuid);
// } else {
// const usersPaginationKey = createEntityRelationPaginationKey(organizationSchemaKey, orgGuid);
// return new GetAllOrgUsers(orgGuid, usersPaginationKey, endpointGuid);
// }
// })
// );
// }

private static canFetchAllUsers = (
store: Store<AppState>,
paginationMonitorFactory: PaginationMonitorFactory,
endpointGuid: string): Observable<boolean> => {
// TODO: RC Comment
const getAllOrgsPaginationKey = createEntityRelationPaginationKey(endpointSchemaKey, endpointGuid);
const orgsObs = getPaginationObservables<APIResource<IOrganization>>({
store,
action: new GetAllOrganizations(getAllOrgsPaginationKey, endpointGuid),
paginationMonitor: paginationMonitorFactory.create(
getAllOrgsPaginationKey,
entityFactory(organizationSchemaKey)
)
});
// private static canFetchAllUsers = (
// store: Store<AppState>,
// paginationMonitorFactory: PaginationMonitorFactory,
// endpointGuid: string): Observable<boolean> => {
// // TODO: RC Comment
// const getAllOrgsPaginationKey = createEntityRelationPaginationKey(endpointSchemaKey, endpointGuid);
// const orgsObs = getPaginationObservables<APIResource<IOrganization>>({
// store,
// action: new GetAllOrganizations(getAllOrgsPaginationKey, endpointGuid),
// paginationMonitor: paginationMonitorFactory.create(
// getAllOrgsPaginationKey,
// entityFactory(organizationSchemaKey)
// )
// });



return orgsObs.entities$.pipe(
filter(entities => !!entities),
map(entities => entities.length < 20),
first()
);
}
// return orgsObs.entities$.pipe(
// filter(entities => !!entities),
// map(entities => entities.length < 20),
// first()
// );
// }
users: { [guid: string]: Observable<APIResource<CfUser>> } = {};

constructor(
private store: Store<AppState>,
Expand All @@ -122,17 +124,46 @@ export class CfUserService {
}),
)

getUser = (endpointGuid: string, userGuid: string): Observable<APIResource<CfUser>> => {
return this.entityServiceFactory.create<APIResource<CfUser>>(
cfUserSchemaKey,
entityFactory(cfUserSchemaKey),
userGuid,
new GetUser(endpointGuid, userGuid),
true
).entityObs$.pipe(
filter(entity => !!entity),
map(entity => entity.entity)
);
getUser = (endpointGuid: string, userGuid: string): Observable<any> => {
// hmmm(
// this.store.select(selectRequestInfo(cfUserSchemaKey, 'ec7c596c-1b75-4e66-aad8-2376e03dccce')),
// this.store.select(selectEntity(cfUserSchemaKey, 'ec7c596c-1b75-4e66-aad8-2376e03dccce'))
// ).subscribe(([ri, rd]) => {
// console.log(ri, rd);
// });
this.store.select(selectRequestInfo(cfUserSchemaKey, userGuid)).subscribe(ri => console.log(ri));
// const user$ = this.store.select(selectEntity(cfUserSchemaKey, userGuid)).pipe(
// filter(entity => !!entity && !!entity.metadata)
// );
// return user$;
// return observableOf({
// entity: {},
// metadata: {}
// });
if (!this.users[userGuid]) {
this.users[userGuid] = this.entityServiceFactory.create<APIResource<CfUser>>(
cfUserSchemaKey,
entityFactory(cfUserSchemaKey),
userGuid,
new GetUser(endpointGuid, userGuid),
true
).waitForEntity$.pipe(
filter(entity => !!entity),
map(entity => entity.entity)
);
}
return this.users[userGuid];
// return this.entityServiceFactory.create<APIResource<CfUser>>(
// cfUserSchemaKey,
// entityFactory(cfUserSchemaKey),
// userGuid,
// new GetUser(endpointGuid, userGuid),
// true
// ).waitForEntity$.pipe(
// filter(entity => !!entity && !!entity.entity && !!entity.entity.metadata),
// map(entity => entity.entity)
// );

}

private parseOrgRole(user: CfUser,
Expand Down Expand Up @@ -244,9 +275,14 @@ export class CfUserService {
orgGuid: string,
cfGuid: string
): Observable<UserRoleInOrg> => {

// return this.getUsers(cfGuid).pipe(
// this.getUserFromUsers(userGuid),

return this.getUser(cfGuid, userGuid).pipe(
filter(user => !!user && !!user.metadata),
map(user => {
console.log('user2 ', user);
return createUserRoleInOrg(
isOrgManager(user.entity, orgGuid),
isOrgBillingManager(user.entity, orgGuid),
Expand Down Expand Up @@ -292,24 +328,19 @@ export class CfUserService {
if (!this.allUsers$) {
this.allUsers$ = waitForCFPermissions(this.store, endpointGuid).pipe(
map(cf => cf.global.isAdmin),
combineLatest(CfUserService.canFetchAllUsers(this.store, this.paginationMonitorFactory, endpointGuid)),
combineLatest(this.canFetchAllUsers()),
switchMap(([isAdmin, canFetchAllUsers]) => {
if (isAdmin || canFetchAllUsers) {
return CfUserService.createPaginationAction(
endpointGuid,
isAdmin,
this.activeRouteCfOrgSpace.orgGuid,
this.store,
this.paginationMonitorFactory).pipe(
map(allUsersAction => getPaginationObservables<APIResource<CfUser>>({
store: this.store,
action: allUsersAction,
paginationMonitor: this.paginationMonitorFactory.create(
allUsersAction.paginationKey,
entityFactory(cfUserSchemaKey)
)
}))
);
return this.createPaginationAction(isAdmin).pipe(
map(allUsersAction => getPaginationObservables<APIResource<CfUser>>({
store: this.store,
action: allUsersAction,
paginationMonitor: this.paginationMonitorFactory.create(
allUsersAction.paginationKey,
entityFactory(cfUserSchemaKey)
)
}))
);
} else {
return observableOf({
pagination$: observableOf(null),
Expand All @@ -329,4 +360,45 @@ export class CfUserService {
return users.filter(o => o.metadata.guid === userGuid)[0];
});
}

public createPaginationAction(isAdmin: boolean): Observable<PaginatedAction> {
if (isAdmin) {
return observableOf(new GetAllUsersAsAdmin(this.activeRouteCfOrgSpace.cfGuid));
}
return this.canFetchAllUsers().pipe(
map(canFetchAllUsers => {
if (canFetchAllUsers) {
return new GetAllUsersAsNonAdmin(this.activeRouteCfOrgSpace.cfGuid);
} else if (!this.activeRouteCfOrgSpace.orgGuid) {
// Danger! If there's no org guid and there's a ton of orgs this will be an expensive action.
console.log('DANGER');
return new GetAllUsersAsNonAdmin(this.activeRouteCfOrgSpace.cfGuid);
} else {
const usersPaginationKey = createEntityRelationPaginationKey(organizationSchemaKey, this.activeRouteCfOrgSpace.orgGuid);
return new GetAllOrgUsers(this.activeRouteCfOrgSpace.orgGuid, usersPaginationKey, this.activeRouteCfOrgSpace.cfGuid);
}
})
);
}

private canFetchAllUsers = (): Observable<boolean> => {
// TODO: RC Comment
const getAllOrgsPaginationKey = createEntityRelationPaginationKey(endpointSchemaKey, this.activeRouteCfOrgSpace.cfGuid);
const orgsObs = getPaginationObservables<APIResource<IOrganization>>({
store: this.store,
action: new GetAllOrganizations(getAllOrgsPaginationKey, this.activeRouteCfOrgSpace.cfGuid),
paginationMonitor: this.paginationMonitorFactory.create(
getAllOrgsPaginationKey,
entityFactory(organizationSchemaKey)
)
});



return orgsObs.entities$.pipe(
filter(entities => !!entities),
map(entities => entities.length < 20),
first()
);
}
}