-
Notifications
You must be signed in to change notification settings - Fork 1.5k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Add granular permissions and role management to backend and admin UI.
- Loading branch information
Showing
21 changed files
with
681 additions
and
11 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,113 @@ | ||
| package main | ||
|
|
||
| import ( | ||
| "net/http" | ||
| "strconv" | ||
| "strings" | ||
|
|
||
| "github.com/knadh/listmonk/models" | ||
| "github.com/labstack/echo/v4" | ||
| ) | ||
|
|
||
| // handleGetRoles retrieves roles. | ||
| func handleGetRoles(c echo.Context) error { | ||
| var ( | ||
| app = c.Get("app").(*App) | ||
| ) | ||
|
|
||
| // Get all roles. | ||
| out, err := app.core.GetRoles() | ||
| if err != nil { | ||
| return err | ||
| } | ||
|
|
||
| return c.JSON(http.StatusOK, okResp{out}) | ||
| } | ||
|
|
||
| // handleCreateRole handles role creation. | ||
| func handleCreateRole(c echo.Context) error { | ||
| var ( | ||
| app = c.Get("app").(*App) | ||
| r = models.Role{} | ||
| ) | ||
|
|
||
| if err := c.Bind(&r); err != nil { | ||
| return err | ||
| } | ||
|
|
||
| if err := validatePerms(r, app); err != nil { | ||
| return err | ||
| } | ||
|
|
||
| out, err := app.core.CreateRole(r) | ||
| if err != nil { | ||
| return err | ||
| } | ||
|
|
||
| return c.JSON(http.StatusOK, okResp{out}) | ||
| } | ||
|
|
||
| // handleUpdateRole handles role modification. | ||
| func handleUpdateRole(c echo.Context) error { | ||
| var ( | ||
| app = c.Get("app").(*App) | ||
| id, _ = strconv.Atoi(c.Param("id")) | ||
| ) | ||
|
|
||
| if id < 1 { | ||
| return echo.NewHTTPError(http.StatusBadRequest, app.i18n.T("globals.messages.invalidID")) | ||
| } | ||
|
|
||
| // Incoming params. | ||
| var r models.Role | ||
| if err := c.Bind(&r); err != nil { | ||
| return err | ||
| } | ||
|
|
||
| if err := validatePerms(r, app); err != nil { | ||
| return err | ||
| } | ||
|
|
||
| // Validate. | ||
| r.Name = strings.TrimSpace(r.Name) | ||
|
|
||
| // Validate fields. | ||
| if !strHasLen(r.Name, 3, stdInputMaxLen) { | ||
| return echo.NewHTTPError(http.StatusBadRequest, app.i18n.Ts("globals.messages.invalidFields", "name", "username")) | ||
| } | ||
|
|
||
| out, err := app.core.UpdateRole(id, r) | ||
| if err != nil { | ||
| return err | ||
| } | ||
|
|
||
| return c.JSON(http.StatusOK, okResp{out}) | ||
| } | ||
|
|
||
| // handleDeleteRole handles role deletion. | ||
| func handleDeleteRole(c echo.Context) error { | ||
| var ( | ||
| app = c.Get("app").(*App) | ||
| id, _ = strconv.ParseInt(c.Param("id"), 10, 64) | ||
| ) | ||
|
|
||
| if id < 1 { | ||
| return echo.NewHTTPError(http.StatusBadRequest, app.i18n.T("globals.messages.invalidID")) | ||
| } | ||
|
|
||
| if err := app.core.DeleteRole(int(id)); err != nil { | ||
| return err | ||
| } | ||
|
|
||
| return c.JSON(http.StatusOK, okResp{true}) | ||
| } | ||
|
|
||
| func validatePerms(r models.Role, app *App) error { | ||
| for _, p := range r.Permissions { | ||
| if _, ok := app.constants.Permissions[p]; !ok { | ||
| return echo.NewHTTPError(http.StatusBadRequest, app.i18n.Ts("globals.messages.invalidFields", "name", "permission")) | ||
| } | ||
| } | ||
|
|
||
| return nil | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.