1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
|
package repository
import (
"context"
"database/sql"
"fmt"
"codeberg.org/snonux/player/internal/model"
)
// GrantPermission inserts or replaces a set permission.
func (s *SQLite) GrantPermission(ctx context.Context, perm *model.SetPermission) error {
_, err := s.db.ExecContext(ctx,
`INSERT OR REPLACE INTO set_permissions (set_id, user_id, role, created_at) VALUES (?, ?, ?, ?)`,
perm.SetID, perm.UserID, string(perm.Role), perm.CreatedAt,
)
if err != nil {
return fmt.Errorf("grant permission: %w", err)
}
return nil
}
// RevokePermission deletes a set permission.
func (s *SQLite) RevokePermission(ctx context.Context, setID, userID int64) error {
_, err := s.db.ExecContext(ctx,
`DELETE FROM set_permissions WHERE set_id = ? AND user_id = ?`, setID, userID,
)
if err != nil {
return fmt.Errorf("revoke permission: %w", err)
}
return nil
}
func scanPermission(row sqlScanner) (*model.SetPermission, error) {
var p model.SetPermission
err := row.Scan(&p.SetID, &p.UserID, &p.Role, &p.CreatedAt)
if err == sql.ErrNoRows {
return nil, nil
}
if err != nil {
return nil, err
}
return &p, nil
}
// GetPermission retrieves a single permission for a set and user.
func (s *SQLite) GetPermission(ctx context.Context, setID, userID int64) (*model.SetPermission, error) {
row := s.db.QueryRowContext(ctx,
`SELECT set_id, user_id, role, created_at FROM set_permissions WHERE set_id = ? AND user_id = ?`,
setID, userID,
)
return scanPermission(row)
}
// ListPermissionsBySet returns all permissions for a set.
func (s *SQLite) ListPermissionsBySet(ctx context.Context, setID int64) ([]model.SetPermission, error) {
rows, err := s.db.QueryContext(ctx,
`SELECT set_id, user_id, role, created_at FROM set_permissions WHERE set_id = ?`, setID)
if err != nil {
return nil, fmt.Errorf("list permissions by set: %w", err)
}
defer rows.Close()
return scanPermissions(rows)
}
// ListPermissionsByUser returns all permissions for a user.
func (s *SQLite) ListPermissionsByUser(ctx context.Context, userID int64) ([]model.SetPermission, error) {
rows, err := s.db.QueryContext(ctx,
`SELECT set_id, user_id, role, created_at FROM set_permissions WHERE user_id = ?`, userID)
if err != nil {
return nil, fmt.Errorf("list permissions by user: %w", err)
}
defer rows.Close()
return scanPermissions(rows)
}
func scanPermissions(rows *sql.Rows) ([]model.SetPermission, error) {
var perms []model.SetPermission
for rows.Next() {
p, err := scanPermission(rows)
if err != nil {
return nil, err
}
perms = append(perms, *p)
}
return perms, rows.Err()
}
|
