54 lines
1.2 KiB
Go
54 lines
1.2 KiB
Go
package manager
|
|
|
|
import (
|
|
"context"
|
|
|
|
"github.com/grafana/grafana/pkg/services/dashboards"
|
|
"github.com/grafana/grafana/pkg/services/org"
|
|
"github.com/grafana/grafana/pkg/services/team"
|
|
"github.com/grafana/grafana/pkg/services/teamguardian"
|
|
"github.com/grafana/grafana/pkg/services/user"
|
|
)
|
|
|
|
type Service struct {
|
|
store teamguardian.Store
|
|
}
|
|
|
|
func ProvideService(store teamguardian.Store) teamguardian.TeamGuardian {
|
|
return &Service{store: store}
|
|
}
|
|
|
|
func (s *Service) CanAdmin(ctx context.Context, orgId int64, teamId int64, user *user.SignedInUser) error {
|
|
if user.OrgRole == org.RoleAdmin {
|
|
return nil
|
|
}
|
|
|
|
if user.OrgID != orgId {
|
|
return team.ErrNotAllowedToUpdateTeamInDifferentOrg
|
|
}
|
|
|
|
cmd := team.GetTeamMembersQuery{
|
|
OrgID: orgId,
|
|
TeamID: teamId,
|
|
UserID: user.UserID,
|
|
SignedInUser: user,
|
|
}
|
|
|
|
results, err := s.store.GetTeamMembers(ctx, cmd)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
for _, member := range results {
|
|
if member.UserID == user.UserID && member.Permission == dashboards.PERMISSION_ADMIN {
|
|
return nil
|
|
}
|
|
}
|
|
|
|
return team.ErrNotAllowedToUpdateTeam
|
|
}
|
|
|
|
func (s *Service) DeleteByUser(ctx context.Context, userID int64) error {
|
|
return s.store.DeleteByUser(ctx, userID)
|
|
}
|