floraachy
/
console
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

move rbac to framework

This commit is contained in:
liugq 2022-05-09 15:26:16 +08:00
parent e5d119885e
commit 412b5ae9a8
12 changed files with 68 additions and 176 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

42
internal/biz/account.go
View File

@ -16,29 +16,17 @@ import (
type UserClaims struct { type UserClaims struct {
*jwt.RegisteredClaims *jwt.RegisteredClaims
*User *ShortUser
} }
type User struct { type ShortUser struct {
Username string `json:"username"` Username string `json:"username"`
UserId string `json:"user_id"` UserId string `json:"user_id"`
Roles []string `json:"roles"` Roles []string `json:"roles"`
} }
type Account struct {
ID string `json:"id,omitempty" `
Created string `json:"created,omitempty" `
Updated string `json:"updated,omitempty" `
Username string `json:"username" elastic_mapping:"username:{type:keyword}"`
Password string `json:"password" elastic_mapping:"password:{type:text}"`
Name string `json:"name" elastic_mapping:"name:{type:keyword}"`
Phone string `json:"phone" elastic_mapping:"phone:{type:keyword}"`
Email string `json:"email" elastic_mapping:"email:{type:keyword}"`
Tags []string `json:"tags" elastic_mapping:"tags:{type:text}"`
Roles []rbac.UserRole `json:"roles"`
}
const Secret = "console" const Secret = "console"
func authenticateUser(username string, password string) (user Account, err error) { func authenticateUser(username string, password string) (user rbac.User, err error) {
err, result := orm.GetBy("name", username, rbac.User{}) err, result := orm.GetBy("name", username, rbac.User{})
if err != nil { if err != nil {
@ -49,6 +37,10 @@ func authenticateUser(username string, password string) (user Account, err error
err = errors.New("user not found") err = errors.New("user not found")
return return
} }
if row, ok := result.Result[0].(map[string]interface{}); ok {
delete(row, "created")
delete(row, "updated")
}
err = mapstructure.Decode(result.Result[0], &user) err = mapstructure.Decode(result.Result[0], &user)
if err != nil { if err != nil {
@ -62,7 +54,7 @@ func authenticateUser(username string, password string) (user Account, err error
return return
} }
func authenticateAdmin(username string, password string) (user Account, err error) { func authenticateAdmin(username string, password string) (user rbac.User, err error) {
u, _ := global.Env().GetConfig("bootstrap.username", "admin") u, _ := global.Env().GetConfig("bootstrap.username", "admin")
p, _ := global.Env().GetConfig("bootstrap.password", "admin") p, _ := global.Env().GetConfig("bootstrap.password", "admin")
@ -72,13 +64,13 @@ func authenticateAdmin(username string, password string) (user Account, err erro
return return
} }
user.ID = username user.ID = username
user.Username = username user.Name = username
user.Roles = []rbac.UserRole{{ user.Roles = []rbac.UserRole{{
ID: "admin", Name: "admin", ID: "admin", Name: "admin",
}} }}
return user, nil return user, nil
} }
func authorize(user Account) (m map[string]interface{}, err error) { func authorize(user rbac.User) (m map[string]interface{}, err error) {
var roles, privilege []string var roles, privilege []string
for _, v := range user.Roles { for _, v := range user.Roles {
@ -87,8 +79,8 @@ func authorize(user Account) (m map[string]interface{}, err error) {
privilege = append(privilege, role.Privilege.Platform...) privilege = append(privilege, role.Privilege.Platform...)
} }
token := jwt.NewWithClaims(jwt.SigningMethodHS256, UserClaims{ token := jwt.NewWithClaims(jwt.SigningMethodHS256, UserClaims{
User: &User{ ShortUser: &ShortUser{
Username: user.Username, Username: user.Name,
UserId: user.ID, UserId: user.ID,
Roles: roles, Roles: roles,
}, },
@ -104,7 +96,7 @@ func authorize(user Account) (m map[string]interface{}, err error) {
m = util.MapStr{ m = util.MapStr{
"access_token": tokenString, "access_token": tokenString,
"username": user.Username, "username": user.Name,
"id": user.ID, "id": user.ID,
"expire_in": 86400, "expire_in": 86400,
"roles": roles, "roles": roles,
@ -113,7 +105,7 @@ func authorize(user Account) (m map[string]interface{}, err error) {
return return
} }
func Login(username string, password string) (m map[string]interface{}, err error) { func Login(username string, password string) (m map[string]interface{}, err error) {
var user Account var user rbac.User
if username == "admin" { if username == "admin" {
user, err = authenticateAdmin(username, password) user, err = authenticateAdmin(username, password)
if err != nil { if err != nil {
@ -143,12 +135,12 @@ func Login(username string, password string) (m map[string]interface{}, err erro
}, },
User: util.MapStr{ User: util.MapStr{
"id": user.ID, "id": user.ID,
"name": user.Username, "name": user.Name,
}, },
}, nil, nil)) }, nil, nil))
return return
} }
func UpdatePassword(localUser *User, req dto.UpdatePassword) (err error) { func UpdatePassword(localUser *ShortUser, req dto.UpdatePassword) (err error) {
user := rbac.User{} user := rbac.User{}
user.ID = localUser.UserId user.ID = localUser.UserId
_, err = orm.Get(&user) _, err = orm.Get(&user)
@ -186,7 +178,7 @@ func UpdatePassword(localUser *User, req dto.UpdatePassword) (err error) {
}, nil, nil)) }, nil, nil))
return return
} }
func UpdateProfile(localUser *User, req dto.UpdateProfile) (err error) { func UpdateProfile(localUser *ShortUser, req dto.UpdateProfile) (err error) {
user := rbac.User{} user := rbac.User{}
user.ID = localUser.UserId user.ID = localUser.UserId
_, err = orm.Get(&user) _, err = orm.Get(&user)

4
internal/biz/context.go
View File

@ -10,7 +10,7 @@ const ctxUserKey = "user"
func NewUserContext(ctx context.Context, clam *UserClaims) context.Context { func NewUserContext(ctx context.Context, clam *UserClaims) context.Context {
return context.WithValue(ctx, ctxUserKey, clam) return context.WithValue(ctx, ctxUserKey, clam)
} }
func FromUserContext(ctx context.Context) (*User, error) { func FromUserContext(ctx context.Context) (*ShortUser, error) {
ctxUser := ctx.Value(ctxUserKey) ctxUser := ctx.Value(ctxUserKey)
if ctxUser == nil { if ctxUser == nil {
return nil, errors.New("user not found") return nil, errors.New("user not found")
@ -19,5 +19,5 @@ func FromUserContext(ctx context.Context) (*User, error) {
if !ok { if !ok {
return nil, errors.New("invalid context user") return nil, errors.New("invalid context user")
} }
return reqUser.User, nil return reqUser.ShortUser, nil
} }

34
internal/biz/role.go
View File

@ -17,46 +17,22 @@ type RoleType = string
const ( const (
Platform RoleType = "platform" Platform RoleType = "platform"
Elastisearch RoleType = "elasticsearch" Elasticsearch RoleType = "elasticsearch"
) )
func UpdateRole(localUser *User, role *rbac.Role) (err error) { func UpdateRole(role *rbac.Role) (err error) {
model, err := GetRole(role.ID) model, err := GetRole(role.ID)
if err != nil { if err != nil {
return err return err
} }
role.Type = model.Type role.Type = model.Type
role.Created = model.Created role.Created = model.Created
changeLog, _ := util.DiffTwoObject(model, role)
role.Updated = time.Now() role.Updated = time.Now()
err = orm.Save(role) err = orm.Save(role)
if err != nil {
return return
} }
RoleMap[model.Name] = model func CreateRole(localUser *ShortUser, role *rbac.Role) (id string, err error) {
err = orm.Save(GenerateEvent(event.ActivityMetadata{
Category: "platform",
Group: "rbac",
Name: "role",
Type: "update",
Labels: util.MapStr{
"id": model.ID,
"description": model.Description,
"privilege": role.Privilege,
"updated": model.Updated,
},
User: util.MapStr{
"userid": localUser.UserId,
"username": localUser.Username,
},
}, nil, changeLog))
return
}
func CreateRole(localUser *User, role *rbac.Role) (id string, err error) {
if role.Name == "" { if role.Name == "" {
err = errors.New("role name is require") err = errors.New("role name is require")
return return
@ -110,7 +86,7 @@ func CreateRole(localUser *User, role *rbac.Role) (id string, err error) {
return return
} }
func DeleteRole(localUser *User, id string) (err error) { func DeleteRole(localUser *ShortUser, id string) (err error) {
role := rbac.Role{} role := rbac.Role{}
role.ID = id role.ID = id
roleName := role.Name roleName := role.Name
@ -178,7 +154,7 @@ func SearchRole(keyword string, from, size int) (roles orm.Result, err error) {
return return
} }
func IsAllowRoleType(roleType string) (err error) { func IsAllowRoleType(roleType string) (err error) {
if roleType != Platform && roleType != Elastisearch { if roleType != Platform && roleType != Elasticsearch {
err = fmt.Errorf("invalid role type %s ", roleType) err = fmt.Errorf("invalid role type %s ", roleType)
return return
} }

10
internal/biz/user.go
View File

@ -15,7 +15,7 @@ import (
var ErrNotFound = fmt.Errorf("not found") var ErrNotFound = fmt.Errorf("not found")
func DeleteUser(localUser *User, id string) (err error) { func DeleteUser(localUser *ShortUser, id string) (err error) {
user := rbac.User{} user := rbac.User{}
user.ID = id user.ID = id
@ -55,7 +55,7 @@ func DeleteUser(localUser *User, id string) (err error) {
}, nil)) }, nil))
return return
} }
func CreateUser(localUser *User, req dto.CreateUser) (id string, password string, err error) { func CreateUser(localUser *ShortUser, req dto.CreateUser) (id string, password string, err error) {
q := orm.Query{Size: 1000} q := orm.Query{Size: 1000}
q.Conds = orm.And(orm.Eq("name", req.Name)) q.Conds = orm.And(orm.Eq("name", req.Name))
@ -123,7 +123,7 @@ func CreateUser(localUser *User, req dto.CreateUser) (id string, password string
}, nil, nil)) }, nil, nil))
return return
} }
func UpdateUser(localUser *User, id string, req dto.UpdateUser) (err error) { func UpdateUser(localUser *ShortUser, id string, req dto.UpdateUser) (err error) {
user := rbac.User{} user := rbac.User{}
user.ID = id user.ID = id
_, err = orm.Get(&user) _, err = orm.Get(&user)
@ -171,7 +171,7 @@ func UpdateUser(localUser *User, id string, req dto.UpdateUser) (err error) {
}, nil, changeLog)) }, nil, changeLog))
return return
} }
func UpdateUserRole(localUser *User, id string, req dto.UpdateUserRole) (err error) { func UpdateUserRole(localUser *ShortUser, id string, req dto.UpdateUserRole) (err error) {
user := rbac.User{} user := rbac.User{}
user.ID = id user.ID = id
_, err = orm.Get(&user) _, err = orm.Get(&user)
@ -239,7 +239,7 @@ func SearchUser(keyword string, from, size int) (users orm.Result, err error) {
return return
} }
func UpdateUserPassword(localUser *User, id string, password string) (err error) { func UpdateUserPassword(localUser *ShortUser, id string, password string) (err error) {
user := rbac.User{} user := rbac.User{}
user.ID = id user.ID = id
_, err = orm.Get(&user) _, err = orm.Get(&user)

2
internal/biz/validate.go
View File

@ -234,7 +234,7 @@ func ValidateLogin(authorizationHeader string) (clams *UserClaims, err error) {
} }
func ValidatePermission(claims *UserClaims, permissions []string) (err error) { func ValidatePermission(claims *UserClaims, permissions []string) (err error) {
user := claims.User user := claims.ShortUser
if user.UserId == "" { if user.UserId == "" {
err = errors.New("user id is empty") err = errors.New("user id is empty")

8
main.go
View File

@ -7,9 +7,7 @@ import (
"infini.sh/console/model" "infini.sh/console/model"
"infini.sh/console/model/alerting" "infini.sh/console/model/alerting"
"infini.sh/console/model/gateway" "infini.sh/console/model/gateway"
"infini.sh/console/model/rbac"
_ "infini.sh/console/plugin" _ "infini.sh/console/plugin"
rbacApi "infini.sh/console/plugin/api/rbac"
alerting2 "infini.sh/console/service/alerting" alerting2 "infini.sh/console/service/alerting"
"infini.sh/framework" "infini.sh/framework"
"infini.sh/framework/core/elastic" "infini.sh/framework/core/elastic"
@ -24,6 +22,7 @@ import (
"infini.sh/framework/modules/pipeline" "infini.sh/framework/modules/pipeline"
queue2 "infini.sh/framework/modules/queue/disk_queue" queue2 "infini.sh/framework/modules/queue/disk_queue"
"infini.sh/framework/modules/redis" "infini.sh/framework/modules/redis"
"infini.sh/framework/modules/security"
"infini.sh/framework/modules/stats" "infini.sh/framework/modules/stats"
"infini.sh/framework/modules/task" "infini.sh/framework/modules/task"
"infini.sh/framework/modules/ui" "infini.sh/framework/modules/ui"
@ -77,6 +76,7 @@ func main() {
module.RegisterSystemModule(&task.TaskModule{}) module.RegisterSystemModule(&task.TaskModule{})
module.RegisterUserPlugin(&metrics.MetricsModule{}) module.RegisterUserPlugin(&metrics.MetricsModule{})
module.RegisterUserPlugin(&security.SecurityModule{})
api.RegisterAPI("") api.RegisterAPI("")
appConfig = &config.AppConfig{ appConfig = &config.AppConfig{
@ -129,8 +129,6 @@ func main() {
orm.RegisterSchemaWithIndexName(gateway.Instance{}, "gateway-instance") orm.RegisterSchemaWithIndexName(gateway.Instance{}, "gateway-instance")
orm.RegisterSchemaWithIndexName(alerting.Rule{}, "alert-rule") orm.RegisterSchemaWithIndexName(alerting.Rule{}, "alert-rule")
orm.RegisterSchemaWithIndexName(alerting.Alert{}, "alert-history") orm.RegisterSchemaWithIndexName(alerting.Alert{}, "alert-history")
orm.RegisterSchemaWithIndexName(rbac.Role{}, "rbac-role")
orm.RegisterSchemaWithIndexName(rbac.User{}, "rbac-user")
api.RegisterSchema() api.RegisterSchema()
go func() { go func() {
@ -139,7 +137,7 @@ func main() {
log.Errorf("init alerting task error: %v", err) log.Errorf("init alerting task error: %v", err)
} }
}() }()
go rbacApi.Init() //go rbacApi.Init()
}, nil) { }, nil) {
app.Run() app.Run()

17
plugin/api/account/account.go
View File

@ -4,7 +4,6 @@ import (
"infini.sh/console/internal/biz" "infini.sh/console/internal/biz"
"infini.sh/console/internal/core" "infini.sh/console/internal/core"
"infini.sh/console/internal/dto" "infini.sh/console/internal/dto"
m "infini.sh/console/internal/middleware"
"infini.sh/framework/core/api" "infini.sh/framework/core/api"
"infini.sh/framework/core/api/router" "infini.sh/framework/core/api/router"
"infini.sh/framework/core/util" "infini.sh/framework/core/util"
@ -16,14 +15,14 @@ type Account struct {
} }
func init() { func init() {
account := Account{} //account := Account{}
api.HandleAPIMethod(api.POST, "/account/login", account.Login) //api.HandleAPIMethod(api.POST, "/account/login", account.Login)
//
api.HandleAPIMethod(api.GET, "/account/current_user", account.CurrentUser) //api.HandleAPIMethod(api.GET, "/account/current_user", account.CurrentUser)
//
api.HandleAPIMethod(api.DELETE, "/account/logout", account.Logout) //api.HandleAPIMethod(api.DELETE, "/account/logout", account.Logout)
api.HandleAPIMethod(api.GET, "/account/profile", m.LoginRequired(account.Profile)) //api.HandleAPIMethod(api.GET, "/account/profile", m.LoginRequired(account.Profile))
api.HandleAPIMethod(api.PUT, "/account/password", m.LoginRequired(account.UpdatePassword)) //api.HandleAPIMethod(api.PUT, "/account/password", m.LoginRequired(account.UpdatePassword))
} }
const userInSession = "user_session:" const userInSession = "user_session:"

72
plugin/api/index_management/index.go
View File

@ -1,8 +1,6 @@
package index_management package index_management
import ( import (
"fmt"
"infini.sh/framework/core/elastic"
"net/http" "net/http"
"strconv" "strconv"
"strings" "strings"
@ -118,73 +116,3 @@ func (handler APIHandler) UpdateDictItemAction(w http.ResponseWriter, req *http.
handler.WriteJSON(w, resp, http.StatusOK) handler.WriteJSON(w, resp, http.StatusOK)
} }
func (h APIHandler) ListIndex(w http.ResponseWriter, req *http.Request, ps httprouter.Params) {
clusterIds := h.GetParameterOrDefault(req, "ids", "")
keyword := h.GetParameterOrDefault(req, "keyword", "")
ids := strings.Split(clusterIds, ",")
for i := range ids {
if i < len(ids)-1 {
ids[i] = `"` + ids[i] + `",`
} else {
ids[i] = `"` + ids[i] + `"`
}
}
if len(ids) == 0 {
h.Error400(w, "id is required")
return
}
var dsl = `{
"_source": ["metadata.index_name"],
"collapse": {
"field": "metadata.index_name"
},
"size": 100,
"query": {
"bool": {
"must": [
{
"terms": {
"metadata.cluster_id": %s
}
}%s
],
"must_not": [
{
"term": {
"metadata.labels.state": {
"value": "delete"
}
}
}
]
}
}
}`
str := &strings.Builder{}
if keyword != "" {
str.WriteString(fmt.Sprintf(`,{"wildcard":{"metadata.index_name":{"value":"*%s*"}}}`, keyword))
}
dsl = fmt.Sprintf(dsl, ids, str)
esClient := elastic.GetClient(h.Config.Elasticsearch)
resp, err := esClient.SearchWithRawQueryDSL(".infini_index", []byte(dsl))
if err != nil {
return
}
list := resp.Hits.Hits
var indexNames []string
for _, v := range list {
m := v.Source["metadata"].(map[string]interface{})
indexNames = append(indexNames, m["index_name"].(string))
}
m := make(map[string]interface{})
m["indexnames"] = indexNames
h.WriteOKJSON(w, m)
return
}

1
plugin/api/init.go
View File

@ -46,7 +46,6 @@ func Init(cfg *config.AppConfig) {
api.HandleAPIMethod(api.PUT, path.Join(pathPrefix, "elasticsearch/command/:cid"), handler.HandleSaveCommonCommandAction) api.HandleAPIMethod(api.PUT, path.Join(pathPrefix, "elasticsearch/command/:cid"), handler.HandleSaveCommonCommandAction)
api.HandleAPIMethod(api.GET, path.Join(pathPrefix, "elasticsearch/command"), handler.HandleQueryCommonCommandAction) api.HandleAPIMethod(api.GET, path.Join(pathPrefix, "elasticsearch/command"), handler.HandleQueryCommonCommandAction)
api.HandleAPIMethod(api.DELETE, path.Join(pathPrefix, "elasticsearch/command/:cid"), handler.HandleDeleteCommonCommandAction) api.HandleAPIMethod(api.DELETE, path.Join(pathPrefix, "elasticsearch/command/:cid"), handler.HandleDeleteCommonCommandAction)
api.HandleAPIMethod(api.GET, path.Join(pathPrefix, "elasticsearch/indices"), handler.ListIndex)
//task.RegisterScheduleTask(task.ScheduleTask{ //task.RegisterScheduleTask(task.ScheduleTask{
// Description: "sync reindex task result", // Description: "sync reindex task result",
// Task: func() { // Task: func() {

31
plugin/api/rbac/api.go
View File

@ -5,7 +5,6 @@ import (
"github.com/mitchellh/mapstructure" "github.com/mitchellh/mapstructure"
"infini.sh/console/internal/biz" "infini.sh/console/internal/biz"
"infini.sh/console/internal/biz/enum" "infini.sh/console/internal/biz/enum"
m "infini.sh/console/internal/middleware"
"infini.sh/console/model/rbac" "infini.sh/console/model/rbac"
"infini.sh/framework/core/api" "infini.sh/framework/core/api"
"infini.sh/framework/core/elastic" "infini.sh/framework/core/elastic"
@ -21,21 +20,21 @@ type Rbac struct {
func init() { func init() {
r := Rbac{} //r := Rbac{}
api.HandleAPIMethod(api.GET, "/permission/:type", r.ListPermission) //api.HandleAPIMethod(api.GET, "/permission/:type", r.ListPermission)
api.HandleAPIMethod(api.POST, "/role/:type", m.PermissionRequired(r.CreateRole, enum.RoleAllPermission...)) //api.HandleAPIMethod(api.POST, "/role/:type", m.PermissionRequired(r.CreateRole, enum.RoleAllPermission...))
api.HandleAPIMethod(api.GET, "/role/:id", m.PermissionRequired(r.GetRole, enum.RoleReadPermission...)) //api.HandleAPIMethod(api.GET, "/role/:id", m.PermissionRequired(r.GetRole, enum.RoleReadPermission...))
api.HandleAPIMethod(api.DELETE, "/role/:id", m.PermissionRequired(r.DeleteRole, enum.RoleAllPermission...)) //api.HandleAPIMethod(api.DELETE, "/role/:id", m.PermissionRequired(r.DeleteRole, enum.RoleAllPermission...))
api.HandleAPIMethod(api.PUT, "/role/:id", m.PermissionRequired(r.UpdateRole, enum.RoleAllPermission...)) //api.HandleAPIMethod(api.PUT, "/role/:id", m.PermissionRequired(r.UpdateRole, enum.RoleAllPermission...))
api.HandleAPIMethod(api.GET, "/role/_search", m.PermissionRequired(r.SearchRole, enum.RoleReadPermission...)) //api.HandleAPIMethod(api.GET, "/role/_search", m.PermissionRequired(r.SearchRole, enum.RoleReadPermission...))
//
api.HandleAPIMethod(api.POST, "/user", m.PermissionRequired(r.CreateUser, enum.UserAllPermission...)) //api.HandleAPIMethod(api.POST, "/user", m.PermissionRequired(r.CreateUser, enum.UserAllPermission...))
api.HandleAPIMethod(api.GET, "/user/:id", m.PermissionRequired(r.GetUser, enum.UserReadPermission...)) //api.HandleAPIMethod(api.GET, "/user/:id", m.PermissionRequired(r.GetUser, enum.UserReadPermission...))
api.HandleAPIMethod(api.DELETE, "/user/:id", m.PermissionRequired(r.DeleteUser, enum.UserAllPermission...)) //api.HandleAPIMethod(api.DELETE, "/user/:id", m.PermissionRequired(r.DeleteUser, enum.UserAllPermission...))
api.HandleAPIMethod(api.PUT, "/user/:id", m.PermissionRequired(r.UpdateUser, enum.UserAllPermission...)) //api.HandleAPIMethod(api.PUT, "/user/:id", m.PermissionRequired(r.UpdateUser, enum.UserAllPermission...))
api.HandleAPIMethod(api.PUT, "/user/:id/role", m.PermissionRequired(r.UpdateUserRole, enum.UserAllPermission...)) //api.HandleAPIMethod(api.PUT, "/user/:id/role", m.PermissionRequired(r.UpdateUserRole, enum.UserAllPermission...))
api.HandleAPIMethod(api.GET, "/user/_search", m.PermissionRequired(r.SearchUser, enum.UserReadPermission...)) //api.HandleAPIMethod(api.GET, "/user/_search", m.PermissionRequired(r.SearchUser, enum.UserReadPermission...))
api.HandleAPIMethod(api.PUT, "/user/:id/password", m.PermissionRequired(r.UpdateUserPassword, enum.UserAllPermission...)) //api.HandleAPIMethod(api.PUT, "/user/:id/password", m.PermissionRequired(r.UpdateUserPassword, enum.UserAllPermission...))
} }
func loadJsonConfig() { func loadJsonConfig() {

2
plugin/api/rbac/permission.go
View File

@ -16,7 +16,7 @@ func (h Rbac) ListPermission(w http.ResponseWriter, r *http.Request, ps httprout
return return
} }
var permissions interface{} var permissions interface{}
if typ == biz.Elastisearch { if typ == biz.Elasticsearch {
permissions = biz.ListElasticsearchPermission() permissions = biz.ListElasticsearchPermission()
} }
h.WriteOKJSON(w, permissions) h.WriteOKJSON(w, permissions)

17
plugin/api/rbac/role.go
View File

@ -125,20 +125,21 @@ func (h Rbac) DeleteRole(w http.ResponseWriter, r *http.Request, ps httprouter.P
func (h Rbac) UpdateRole(w http.ResponseWriter, r *http.Request, ps httprouter.Params) { func (h Rbac) UpdateRole(w http.ResponseWriter, r *http.Request, ps httprouter.Params) {
id := ps.MustGetParameter("id") id := ps.MustGetParameter("id")
localUser, err := biz.FromUserContext(r.Context()) //localUser, err := biz.FromUserContext(r.Context())
if err != nil { //if err != nil {
log.Error(err.Error()) // log.Error(err.Error())
h.ErrorInternalServer(w, err.Error()) // h.ErrorInternalServer(w, err.Error())
return // return
} //}
role := &rbac.Role{} role := &rbac.Role{}
err = h.DecodeJSON(r, role) err := h.DecodeJSON(r, role)
if err != nil { if err != nil {
h.Error400(w, err.Error()) h.Error400(w, err.Error())
return return
} }
role.ID = id role.ID = id
err = biz.UpdateRole(localUser, role) err = biz.UpdateRole(role)
biz.RoleMap[role.Name] = *role
if err != nil { if err != nil {
_ = log.Error(err.Error()) _ = log.Error(err.Error())