Function DeleteRoleV2

api/handler/v2/role.go:149–186

@Id DeleteRoleV2 @Description delete Role. @Tags Role @accept application/x-www-form-urlencoded @Security ApiKeyAuth @Param tenant formData string true "tenant" @Param name formData string true "role name" @Success 200 {object} models.DeleteRoleRespV2 @Router /v2/role/delete [post]

(c echo.Context)

// @Success 200 {object} models.DeleteRoleRespV2
// @Router /v2/role/delete [post]
func DeleteRoleV2(c echo.Context) error {
	logger := handler.NewLogger().Named("DeleteRoleV2")
	reqParam := new(models.DeleteRoleReqV2)
	if err := handler.BindAndValidate(logger, c, reqParam); err != nil {
		return c.JSON(http.StatusInternalServerError, models.BuildBaseResp(err))
	}
	// cannot delete default supper role
	if reqParam.Tenant == common.DefaultAdminTenant && reqParam.Name == common.DefaultRole {
		return c.JSON(http.StatusForbidden, models.BuildBaseResp(fmt.Errorf("cannot delete tenant [ %v ] role [ %v ]", reqParam.Tenant, reqParam.Name)))
	}
	tenant, _ := GetUserName(c)
	if !roleAccess(tenant, reqParam.Tenant) {
		return c.JSON(http.StatusForbidden, models.BuildBaseResp(fmt.Errorf("cannot delete tenant [ %v ] role [ %v ]", reqParam.Tenant, reqParam.Name)))
	}
	storeManager, err := common.NewStoreManager([]string{handler.ConsulAddr}, logger)
	if err != nil {
		return c.JSON(http.StatusInternalServerError, models.BuildBaseResp(fmt.Errorf("get consul client failed: %v", err)))
	}
	// make sure there is no user in the current role
	users, err := storeManager.FindUserList(reqParam.Tenant)
	if err != nil {
		return c.JSON(http.StatusInternalServerError,
			models.BuildBaseResp(fmt.Errorf("find tenant [ %v ] user list from consul failed: %v", reqParam.Tenant, err)))
	}
	for _, user := range users {
		if user.Role == reqParam.Name {
			return c.JSON(http.StatusOK, models.BuildBaseResp(fmt.Errorf("there are users in the current tenant [ %v ] role [ %v ]", reqParam.Tenant, reqParam.Name)))
		}
	}
	if err := storeManager.DeleteRole(reqParam.Tenant, reqParam.Name); nil != err {
		return c.JSON(http.StatusInternalServerError,
			models.BuildBaseResp(fmt.Errorf("delete metadata of Role[RoleName=%v,RoleGroup=%v] from consul failed: %v", reqParam.Name, reqParam.Tenant, err)))
	}

	return c.JSON(http.StatusOK, &models.DeleteRoleRespV2{
		BaseResp: models.BuildBaseResp(nil),
	})
}

// The platform administrator can operate all roles
// the tenant administrator can only operate the roles under the current tenant