57 lines
1.4 KiB
Go
57 lines
1.4 KiB
Go
package server
|
|
|
|
import (
|
|
"context"
|
|
|
|
openfgav1 "github.com/openfga/api/proto/openfga/v1"
|
|
|
|
authzextv1 "github.com/grafana/grafana/pkg/services/authz/proto/v1"
|
|
"github.com/grafana/grafana/pkg/services/authz/zanzana/common"
|
|
)
|
|
|
|
func (s *Server) Write(ctx context.Context, req *authzextv1.WriteRequest) (*authzextv1.WriteResponse, error) {
|
|
ctx, span := s.tracer.Start(ctx, "server.Write")
|
|
defer span.End()
|
|
|
|
if err := authorize(ctx, req.GetNamespace()); err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
storeInf, err := s.getStoreInfo(ctx, req.Namespace)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
writeTuples := make([]*openfgav1.TupleKey, 0)
|
|
for _, t := range req.GetWrites().GetTupleKeys() {
|
|
writeTuples = append(writeTuples, common.ToOpenFGATupleKey(t))
|
|
}
|
|
|
|
deleteTuples := make([]*openfgav1.TupleKeyWithoutCondition, 0)
|
|
for _, t := range req.GetDeletes().GetTupleKeys() {
|
|
deleteTuples = append(deleteTuples, common.ToOpenFGATupleKeyWithoutCondition(t))
|
|
}
|
|
|
|
writeReq := &openfgav1.WriteRequest{
|
|
StoreId: storeInf.ID,
|
|
AuthorizationModelId: storeInf.ModelID,
|
|
}
|
|
if len(writeTuples) > 0 {
|
|
writeReq.Writes = &openfgav1.WriteRequestWrites{
|
|
TupleKeys: writeTuples,
|
|
}
|
|
}
|
|
if len(deleteTuples) > 0 {
|
|
writeReq.Deletes = &openfgav1.WriteRequestDeletes{
|
|
TupleKeys: deleteTuples,
|
|
}
|
|
}
|
|
|
|
_, err = s.openfga.Write(ctx, writeReq)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
return &authzextv1.WriteResponse{}, nil
|
|
}
|