Function OpenAPIListRoles

pkg/microservice/user/core/handler/permission/role.go:315–355

(c *gin.Context)

}

func OpenAPIListRoles(c *gin.Context) {
	ctx := internalhandler.NewContext(c)
	defer func() { internalhandler.JSONResponse(c, ctx) }()

	err := userhandler.GenerateUserAuthInfo(ctx)
	if err != nil {
		ctx.UnAuthorized = true
		ctx.RespErr = fmt.Errorf("failed to generate user authorization info, error: %s", err)
		return
	}

	projectName := c.Query("namespace")
	if projectName == "" {
		ctx.RespErr = e.ErrInvalidParam.AddDesc("args namespace can't be empty")
		return
	}

	if !ctx.Resources.IsSystemAdmin {
		if projectName == "*" {
			ctx.UnAuthorized = true
			return
		}

		if _, ok := ctx.Resources.ProjectAuthInfo[projectName]; !ok {
			ctx.UnAuthorized = true
			return
		}

		if !ctx.Resources.ProjectAuthInfo[projectName].IsProjectAdmin {
			ctx.UnAuthorized = true
			return
		}
	}

	uid := c.Query("uid")
	if uid == "" {
		ctx.Resp, ctx.RespErr = permission.ListRolesByNamespace(projectName, ctx.Logger)
	} else {
		ctx.Resp, ctx.RespErr = permission.ListRolesByNamespaceAndUserID(projectName, uid, ctx.Logger)
	}
}

func ListRoles(c *gin.Context) {
	ctx := internalhandler.NewContext(c)