Method RemoveAuditScope

service/orchestrator/audit_scope.go:161–190

RemoveAuditScope implements method for removing a AuditScope

(ctx context.Context, req *orchestrator.RemoveAuditScopeRequest)

// RemoveAuditScope implements method for removing a AuditScope
func (svc *Service) RemoveAuditScope(ctx context.Context, req *orchestrator.RemoveAuditScopeRequest) (response *emptypb.Empty, err error) {
	// Validate request
	err = api.Validate(req)
	if err != nil {
		return nil, err
	}

	// Check, if this request has access to the certification target according to our authorization strategy.
	if !svc.authz.CheckAccess(ctx, service.AccessDelete, req) {
		return nil, service.ErrPermissionDenied
	}

	err = svc.storage.Delete(&orchestrator.AuditScope{}, "certification_target_id = ? AND catalog_id = ?", req.CertificationTargetId, req.CatalogId)
	if errors.Is(err, persistence.ErrRecordNotFound) {
		return nil, status.Errorf(codes.NotFound, "Audit Scope not found")
	} else if err != nil {
		return nil, status.Errorf(codes.Internal, "database error: %v", err)
	}

	// Since we don't have a AuditScope object, we create one to be able to inform the hook about the deleted AuditScope.
	auditScope := &orchestrator.AuditScope{
		CertificationTargetId: req.GetCertificationTargetId(),
		CatalogId:             req.GetCatalogId(),
	}
	go svc.informToeHooks(ctx, &orchestrator.AuditScopeChangeEvent{Type: orchestrator.AuditScopeChangeEvent_TYPE_AUDIT_SCOPE_REMOVED, AuditScope: auditScope}, nil)

	logging.LogRequest(log, logrus.DebugLevel, logging.Remove, req, fmt.Sprintf("and Catalog '%s'", req.GetCatalogId()))

	return &emptypb.Empty{}, nil
}

// informToeHooks informs the registered hook function either of a event change for the Audit Scope or Control Monitoring Status
func (s *Service) informToeHooks(ctx context.Context, event *orchestrator.AuditScopeChangeEvent, err error) {