Karl Persson
11a4a366c6
* Restructure check code so we only check namespace access once for each GroupResource during for batch
48 lines
1.2 KiB
Go
48 lines
1.2 KiB
Go
package server
|
|
|
|
import (
|
|
"context"
|
|
|
|
openfgav1 "github.com/openfga/api/proto/openfga/v1"
|
|
|
|
authzextv1 "github.com/grafana/grafana/pkg/services/authz/proto/v1"
|
|
"github.com/grafana/grafana/pkg/services/authz/zanzana/common"
|
|
)
|
|
|
|
func (s *Server) Read(ctx context.Context, req *authzextv1.ReadRequest) (*authzextv1.ReadResponse, error) {
|
|
ctx, span := tracer.Start(ctx, "authzServer.Read")
|
|
defer span.End()
|
|
|
|
storeInf, err := s.getStoreInfo(ctx, req.Namespace)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
res, err := s.openfga.Read(ctx, &openfgav1.ReadRequest{
|
|
StoreId: storeInf.ID,
|
|
TupleKey: &openfgav1.ReadRequestTupleKey{
|
|
User: req.GetTupleKey().GetUser(),
|
|
Relation: req.GetTupleKey().GetRelation(),
|
|
Object: req.GetTupleKey().GetObject(),
|
|
},
|
|
PageSize: req.GetPageSize(),
|
|
ContinuationToken: req.GetContinuationToken(),
|
|
})
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
tuples := make([]*authzextv1.Tuple, 0)
|
|
for _, t := range res.GetTuples() {
|
|
tuples = append(tuples, &authzextv1.Tuple{
|
|
Key: common.ToAuthzExtTupleKey(t.GetKey()),
|
|
Timestamp: t.GetTimestamp(),
|
|
})
|
|
}
|
|
|
|
return &authzextv1.ReadResponse{
|
|
Tuples: tuples,
|
|
ContinuationToken: res.GetContinuationToken(),
|
|
}, nil
|
|
}
|