Merge pull request #48 from bugout-dev/resource-permissions

Resource holder permissions handlers

Author: kompotkot

bugout/__init__.py

@@ -7,7 +7,7 @@
 
 __email__ = "engineering@bugout.dev"
 __license__ = "MIT"
-__version__ = "0.2.6"
+__version__ = "0.2.7"
 
 __all__ = (
     "__author__",

bugout/app.py

@@ -411,6 +411,39 @@ def delete_resource(
         self.resource.timeout = timeout
         return self.resource.delete_resource(token=token, resource_id=resource_id)
 
+    def get_resource_holders(
+        self,
+        token: Union[str, uuid.UUID],
+        resource_id: Union[str, uuid.UUID],
+        timeout: float = REQUESTS_TIMEOUT,
+    ) -> data.BugoutResourceHolders:
+        self.resource.timeout = timeout
+        return self.resource.get_resource_holders(token=token, resource_id=resource_id)
+
+    def add_resource_holder_permissions(
+        self,
+        token: Union[str, uuid.UUID],
+        resource_id: Union[str, uuid.UUID],
+        holder_permissions: data.BugoutResourceHolder,
+        timeout: float = REQUESTS_TIMEOUT,
+    ) -> data.BugoutResourceHolders:
+        self.resource.timeout = timeout
+        return self.resource.add_resource_holder_permissions(
+            token=token, resource_id=resource_id, holder_permissions=holder_permissions
+        )
+
+    def delete_resource_holder_permissions(
+        self,
+        token: Union[str, uuid.UUID],
+        resource_id: Union[str, uuid.UUID],
+        holder_permissions: data.BugoutResourceHolder,
+        timeout: float = REQUESTS_TIMEOUT,
+    ) -> data.BugoutResourceHolders:
+        self.resource.timeout = timeout
+        return self.resource.delete_resource_holder_permissions(
+            token=token, resource_id=resource_id, holder_permissions=holder_permissions
+        )
+
     # Journal scopes handlers
     def list_scopes(
         self, token: Union[str, uuid.UUID], api: str, timeout: float = REQUESTS_TIMEOUT

bugout/data.py

@@ -33,6 +33,14 @@ class HolderType(Enum):
     group = "group"
 
 
+class ResourcePermissions(Enum):
+    ADMIN = "admin"
+    CREATE = "create"
+    READ = "read"
+    UPDATE = "update"
+    DELETE = "delete"
+
+
 class AuthType(Enum):
     bearer = "Bearer"
     web3 = "Web3"
@@ -127,6 +135,22 @@ class BugoutResources(BaseModel):
     resources: List[BugoutResource]
 
 
+class BugoutResourceHolder(BaseModel):
+    id: uuid.UUID = Field(alias="holder_id")
+    holder_type: HolderType
+    permissions: List[ResourcePermissions] = Field(default_factory=list)
+
+    class Config:
+        # Required configuration because in Brood we use "holder_id" instead of "id"
+        # during creation and deletion of new permissions for holder
+        allow_population_by_field_name = True
+
+
+class BugoutResourceHolders(BaseModel):
+    resource_id: uuid.UUID
+    holders: List[BugoutResourceHolder] = Field(default_factory=list)
+
+
 class BugoutJournalPermission(BaseModel):
     holder_type: HolderType
     holder_id: str

bugout/resource.py

@@ -2,7 +2,13 @@
 from typing import Any, Dict, Optional, Union
 
 from .calls import make_request
-from .data import BugoutResource, BugoutResources, Method
+from .data import (
+    BugoutResource,
+    BugoutResources,
+    Method,
+    BugoutResourceHolder,
+    BugoutResourceHolders,
+)
 from .exceptions import InvalidUrlSpec
 from .settings import REQUESTS_TIMEOUT
 
@@ -99,3 +105,45 @@ def delete_resource(
         }
         result = self._call(method=Method.delete, path=resources_path, headers=headers)
         return BugoutResource(**result)
+
+    def get_resource_holders(
+        self,
+        token: Union[str, uuid.UUID],
+        resource_id: Union[str, uuid.UUID],
+    ) -> BugoutResourceHolders:
+        path = f"resources/{resource_id}/holders"
+        headers = {
+            "Authorization": f"Bearer {token}",
+        }
+        result = self._call(method=Method.get, path=path, headers=headers)
+        return BugoutResourceHolders(**result)
+
+    def add_resource_holder_permissions(
+        self,
+        token: Union[str, uuid.UUID],
+        resource_id: Union[str, uuid.UUID],
+        holder_permissions: BugoutResourceHolder,
+    ) -> BugoutResourceHolders:
+        path = f"resources/{resource_id}/holders"
+        headers = {
+            "Authorization": f"Bearer {token}",
+        }
+        result = self._call(
+            method=Method.post, path=path, headers=headers, json=holder_permissions
+        )
+        return BugoutResourceHolders(**result)
+
+    def delete_resource_holder_permissions(
+        self,
+        token: Union[str, uuid.UUID],
+        resource_id: Union[str, uuid.UUID],
+        holder_permissions: BugoutResourceHolder,
+    ) -> BugoutResourceHolders:
+        path = f"resources/{resource_id}/holders"
+        headers = {
+            "Authorization": f"Bearer {token}",
+        }
+        result = self._call(
+            method=Method.delete, path=path, headers=headers, json=holder_permissions
+        )
+        return BugoutResourceHolders(**result)