718370f4c9
Allow plugin to take an etc_type keyword argument for using the TYPE_ETC ubid type, and remove the separate definitions in every model that uses the TYPE_ETC ubid type. This was the cleanest way to DRY things up. You cannot extend the models with a module to do this before including ResourceMethods, because then ResourceMethods::ClassMethods will override it, and you cannot extend the models with a module to do this after including ResourceMethods, because the inclusion will not work correctly due to the eager definition of @ubid_format. Best reviewed without whitespace differences.
71 lines
2.1 KiB
Ruby
71 lines
2.1 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
require_relative "../model"
|
|
|
|
class ObjectTag < Sequel::Model
|
|
plugin ResourceMethods
|
|
include AccessControlModelTag
|
|
|
|
module Cleanup
|
|
def before_destroy
|
|
AccessControlEntry.where(object_id: id).destroy
|
|
DB[:applied_object_tag].where(object_id: id).delete
|
|
super
|
|
end
|
|
end
|
|
|
|
def self.options_for_project(project)
|
|
{
|
|
{"label" => "Tag (grants access to objects contained in tag)", "id" => "object-tag-group"} => project.object_tags,
|
|
"Project" => [project],
|
|
"Vm" => project.vms,
|
|
"PostgresSQL Server" => project.postgres_resources,
|
|
"Private Subnet" => project.private_subnets,
|
|
"Firewall" => project.firewalls,
|
|
"LoadBalancer" => project.load_balancers,
|
|
"InferenceApiKey" => project.api_keys,
|
|
"InferenceEndpoint" => project.inference_endpoints,
|
|
"KubernetesCluster" => project.kubernetes_clusters,
|
|
"SubjectTag" => project.subject_tags,
|
|
"ActionTag" => project.action_tags,
|
|
{"label" => "ObjectTag (grants access to tag itself)", "id" => "object-metatag-group"} => project.object_tags.map(&:metatag)
|
|
}
|
|
end
|
|
|
|
def self.valid_member?(project_id, object)
|
|
case object
|
|
when ObjectTag, ObjectMetatag, SubjectTag, ActionTag, InferenceEndpoint, Vm, PrivateSubnet, PostgresResource, Firewall, LoadBalancer
|
|
object.project_id == project_id
|
|
when Project
|
|
object.id == project_id
|
|
when ApiKey
|
|
object.owner_table == "project" && object.owner_id == project_id
|
|
end
|
|
end
|
|
|
|
def metatag
|
|
ObjectMetatag.new(self)
|
|
end
|
|
|
|
def metatag_ubid
|
|
ObjectMetatag.to_meta(ubid)
|
|
end
|
|
|
|
def metatag_uuid
|
|
UBID.to_uuid(metatag_ubid)
|
|
end
|
|
end
|
|
|
|
# Table: object_tag
|
|
# Columns:
|
|
# id | uuid | PRIMARY KEY
|
|
# project_id | uuid | NOT NULL
|
|
# name | text | NOT NULL
|
|
# Indexes:
|
|
# object_tag_pkey | PRIMARY KEY btree (id)
|
|
# object_tag_project_id_name_index | UNIQUE btree (project_id, name)
|
|
# Foreign key constraints:
|
|
# object_tag_project_id_fkey | (project_id) REFERENCES project(id)
|
|
# Referenced By:
|
|
# applied_object_tag | applied_object_tag_tag_id_fkey | (tag_id) REFERENCES object_tag(id)
|