src/store/groups-panel/groups-panel-actions.ts

   1 // Copyright (C) The Arvados Authors. All rights reserved.
   2 //
   3 // SPDX-License-Identifier: AGPL-3.0
   4
   5 import { Dispatch } from 'redux';
   6 import { reset, startSubmit, stopSubmit, FormErrors, initialize } from 'redux-form';
   7 import { bindDataExplorerActions } from "store/data-explorer/data-explorer-action";
   8 import { dialogActions } from 'store/dialog/dialog-actions';
   9 import { Participant } from 'views-components/sharing-dialog/participant-select';
  10 import { RootState } from 'store/store';
  11 import { ServiceRepository } from 'services/services';
  12 import { getResource } from 'store/resources/resources';
  13 import { GroupResource, GroupClass } from 'models/group';
  14 import { getCommonResourceServiceError, CommonResourceServiceError } from 'services/common-service/common-resource-service';
  15 import { snackbarActions, SnackbarKind } from 'store/snackbar/snackbar-actions';
  16 import { PermissionLevel } from 'models/permission';
  17 import { PermissionService } from 'services/permission-service/permission-service';
  18 import { FilterBuilder } from 'services/api/filter-builder';
  19 import { ProjectUpdateFormDialogData, PROJECT_UPDATE_FORM_NAME } from 'store/projects/project-update-actions';
  20
  21 export const GROUPS_PANEL_ID = "groupsPanel";
  22
  23 // Create group dialog
  24 export const CREATE_GROUP_DIALOG = "createGroupDialog";
  25 export const CREATE_GROUP_FORM = "createGroupForm";
  26 export const CREATE_GROUP_NAME_FIELD_NAME = 'name';
  27 export const CREATE_GROUP_USERS_FIELD_NAME = 'users';
  28
  29 export const GROUP_ATTRIBUTES_DIALOG = 'groupAttributesDialog';
  30 export const GROUP_REMOVE_DIALOG = 'groupRemoveDialog';
  31
  32 export const GroupsPanelActions = bindDataExplorerActions(GROUPS_PANEL_ID);
  33
  34 export const loadGroupsPanel = () => GroupsPanelActions.REQUEST_ITEMS();
  35
  36 export const openCreateGroupDialog = () =>
  37     (dispatch: Dispatch) => {
  38         dispatch(dialogActions.OPEN_DIALOG({ id: CREATE_GROUP_DIALOG, data: {} }));
  39         dispatch(reset(CREATE_GROUP_FORM));
  40     };
  41
  42 export const openGroupAttributes = (uuid: string) =>
  43     (dispatch: Dispatch, getState: () => RootState, services: ServiceRepository) => {
  44         const { resources } = getState();
  45         const data = getResource<GroupResource>(uuid)(resources);
  46         dispatch(dialogActions.OPEN_DIALOG({ id: GROUP_ATTRIBUTES_DIALOG, data }));
  47     };
  48
  49 export const removeGroup = (uuid: string) =>
  50     async (dispatch: Dispatch, getState: () => RootState, services: ServiceRepository) => {
  51         dispatch(snackbarActions.OPEN_SNACKBAR({ message: 'Removing ...', kind: SnackbarKind.INFO }));
  52         await services.groupsService.delete(uuid);
  53         dispatch(snackbarActions.OPEN_SNACKBAR({ message: 'Removed.', hideDuration: 2000, kind: SnackbarKind.SUCCESS }));
  54         dispatch<any>(loadGroupsPanel());
  55     };
  56
  57 export const openRemoveGroupDialog = (uuid: string) =>
  58     (dispatch: Dispatch, getState: () => RootState, services: ServiceRepository) => {
  59         dispatch(dialogActions.OPEN_DIALOG({
  60             id: GROUP_REMOVE_DIALOG,
  61             data: {
  62                 title: 'Remove group',
  63                 text: 'Are you sure you want to remove this group?',
  64                 confirmButtonLabel: 'Remove',
  65                 uuid
  66             }
  67         }));
  68     };
  69
  70 // Group edit dialog uses project update dialog with sourcePanel set to reload the appropriate parts
  71 export const openGroupUpdateDialog = (resource: ProjectUpdateFormDialogData) =>
  72     (dispatch: Dispatch, getState: () => RootState) => {
  73         dispatch(initialize(PROJECT_UPDATE_FORM_NAME, resource));
  74         dispatch(dialogActions.OPEN_DIALOG({ id: PROJECT_UPDATE_FORM_NAME, data: {sourcePanel: GroupClass.ROLE} }));
  75     };
  76
  77 export const updateGroup = (project: ProjectUpdateFormDialogData) =>
  78     async (dispatch: Dispatch, getState: () => RootState, services: ServiceRepository) => {
  79         const uuid = project.uuid || '';
  80         dispatch(startSubmit(PROJECT_UPDATE_FORM_NAME));
  81         try {
  82             const updatedGroup = await services.groupsService.update(uuid, { name: project.name, description: project.description });
  83             dispatch(GroupsPanelActions.REQUEST_ITEMS());
  84             dispatch(reset(PROJECT_UPDATE_FORM_NAME));
  85             dispatch(dialogActions.CLOSE_DIALOG({ id: PROJECT_UPDATE_FORM_NAME }));
  86             return updatedGroup;
  87         } catch (e) {
  88             dispatch(stopSubmit(PROJECT_UPDATE_FORM_NAME));
  89             const error = getCommonResourceServiceError(e);
  90             if (error === CommonResourceServiceError.UNIQUE_NAME_VIOLATION) {
  91                 dispatch(stopSubmit(PROJECT_UPDATE_FORM_NAME, { name: 'Group with the same name already exists.' } as FormErrors));
  92             }
  93             return ;
  94         }
  95     };
  96
  97 export interface CreateGroupFormData {
  98     [CREATE_GROUP_NAME_FIELD_NAME]: string;
  99     [CREATE_GROUP_USERS_FIELD_NAME]?: Participant[];
 100 }
 101
 102 export const createGroup = ({ name, users = [] }: CreateGroupFormData) =>
 103     async (dispatch: Dispatch, _: {}, { groupsService, permissionService }: ServiceRepository) => {
 104         dispatch(startSubmit(CREATE_GROUP_FORM));
 105         try {
 106             const newGroup = await groupsService.create({ name, groupClass: GroupClass.ROLE });
 107             for (const user of users) {
 108                 await addGroupMember({
 109                     user,
 110                     group: newGroup,
 111                     dispatch,
 112                     permissionService,
 113                 });
 114             }
 115             dispatch(dialogActions.CLOSE_DIALOG({ id: CREATE_GROUP_DIALOG }));
 116             dispatch(reset(CREATE_GROUP_FORM));
 117             dispatch(loadGroupsPanel());
 118             dispatch(snackbarActions.OPEN_SNACKBAR({
 119                 message: `${newGroup.name} group has been created`,
 120                 kind: SnackbarKind.SUCCESS
 121             }));
 122             return newGroup;
 123         } catch (e) {
 124             const error = getCommonResourceServiceError(e);
 125             if (error === CommonResourceServiceError.UNIQUE_NAME_VIOLATION) {
 126                 dispatch(stopSubmit(CREATE_GROUP_FORM, { name: 'Group with the same name already exists.' } as FormErrors));
 127             }
 128             return;
 129         }
 130     };
 131
 132 interface AddGroupMemberArgs {
 133     user: { uuid: string, name: string };
 134     group: { uuid: string, name: string };
 135     dispatch: Dispatch;
 136     permissionService: PermissionService;
 137 }
 138
 139 /**
 140  * Group membership is determined by whether the group has can_read permission on an object.
 141  * If a group G can_read an object A, then we say A is a member of G.
 142  *
 143  * [Permission model docs](https://doc.arvados.org/api/permission-model.html)
 144  */
 145 export const addGroupMember = async ({ user, group, ...args }: AddGroupMemberArgs) => {
 146     await createPermission({
 147         head: { ...group },
 148         tail: { ...user },
 149         permissionLevel: PermissionLevel.CAN_READ,
 150         ...args,
 151     });
 152 };
 153
 154 interface CreatePermissionLinkArgs {
 155     head: { uuid: string, name: string };
 156     tail: { uuid: string, name: string };
 157     permissionLevel: PermissionLevel;
 158     dispatch: Dispatch;
 159     permissionService: PermissionService;
 160 }
 161
 162 const createPermission = async ({ head, tail, permissionLevel, dispatch, permissionService }: CreatePermissionLinkArgs) => {
 163     try {
 164         await permissionService.create({
 165             tailUuid: tail.uuid,
 166             headUuid: head.uuid,
 167             name: permissionLevel,
 168         });
 169     } catch (e) {
 170         dispatch(snackbarActions.OPEN_SNACKBAR({
 171             message: `Could not add ${tail.name} -> ${head.name} relation`,
 172             kind: SnackbarKind.ERROR,
 173         }));
 174     }
 175 };
 176
 177 interface DeleteGroupMemberArgs {
 178     link: { uuid: string };
 179     dispatch: Dispatch;
 180     permissionService: PermissionService;
 181 }
 182
 183 export const deleteGroupMember = async ({ link, ...args }: DeleteGroupMemberArgs) => {
 184     await deletePermission({
 185         uuid: link.uuid,
 186         ...args,
 187     });
 188 };
 189
 190 interface DeletePermissionLinkArgs {
 191     uuid: string;
 192     dispatch: Dispatch;
 193     permissionService: PermissionService;
 194 }
 195
 196 export const deletePermission = async ({ uuid, dispatch, permissionService }: DeletePermissionLinkArgs) => {
 197     try {
 198         const permissionsResponse = await permissionService.list({
 199             filters: new FilterBuilder()
 200                 .addEqual('uuid', uuid)
 201                 .getFilters()
 202         });
 203         const [permission] = permissionsResponse.items;
 204         if (permission) {
 205             await permissionService.delete(permission.uuid);
 206         } else {
 207             throw new Error('Permission not found');
 208         }
 209     } catch (e) {
 210         dispatch(snackbarActions.OPEN_SNACKBAR({
 211             message: `Could not delete ${uuid} permission`,
 212             kind: SnackbarKind.ERROR,
 213         }));
 214     }
 215 };