ui/lib/global-admin/addon/components/new-edit-role/component.js

import { alias } from '@ember/object/computed';
import { inject as service } from '@ember/service';
import Component from '@ember/component';
import NewOrEdit from 'ui/mixins/new-or-edit';
import C from 'ui/utils/constants';

const ruleVerbs = C.RULE_VERBS.map(verb => `rolesPage.new.form.allow.${verb}`);

export default Component.extend(NewOrEdit, {
  intl: service(),
  router: service(),
  model: null,

  primaryResource: alias('model.role'),
  ruleArray: null,
  roleArray: null,
  policyArray: null,
  ruleVerbs,

  init: function () {
    this._super(...arguments);

    const ruleArray = [];
    const policyArray = [];

    this.get('primaryResource.rules').forEach((rule) => {
      if ( (rule.verbs||[]).map(verb => verb.toLowerCase()).includes('use') ) {
        // PSP-ish, close enough for now
        if (rule.resourceNames && rule.resourceNames.length > 0) {
          policyArray.push({
            policyId: rule.resourceNames[0]
          });
        }
      } else {
        ruleArray.push(rule);
      }
    });

    const roleArray = (this.get('primaryResource.projectRoleTemplateIds')||[]).map((id) => {
      return { roleId: id };
    });


    this.setProperties({
      ruleArray,
      roleArray,
      policyArray
    });
  },

  actions: {
    cancel() {
      this.goBack();
    },

    addRule() {
      this.get('ruleArray').pushObject({
        apiGroups: ['*'],
        type: 'policyRule',
        resource: null,
        resources: [],
        verbs: [],
      });
    },

    removeRule(obj) {
      this.get('ruleArray').removeObject(obj);
    },

    addOtherRole() {
      this.get('roleArray').pushObject({
        roleId: null,
      });
    },

    removeOtherRole(obj) {
      this.get('roleArray').removeObject(obj);
    },

    addPolicy() {
      this.get('policyArray').pushObject({
        policyId: null,
      });
    },

    removePolicy(obj) {
      this.get('policyArray').removeObject(obj);
    },
  },

  goBack() {
    this.get('router').transitionTo('global-admin.security.roles.index');
  },

  otherRoles: function () {
    return this.get('model.roles').filter(role => this.get('model.role.id') !== role.id);
  }.property('model.role.id','model.roles.@each.id'),

  willSave() {
    const role = this.get('model.role');
    const actualRules = [];

    // Create the actual rules
    const rules = this.get('ruleArray');
    let obj;
    for ( let i = rules.length - 1; i >= 0 ; i-- ) {
      obj = rules[i];
      if ( obj.resources.length && obj.verbs.length ) {
        actualRules.push({
          type: obj.type,
          apiGroups: obj.apiGroups.slice(),
          verbs: obj.verbs.slice(),
          resources: obj.resources.slice(),
        });
      } else {
        rules.removeObject(obj);
      }
    }

    // Add rules for pod security policies
    const policies = this.get('policyArray');
    for ( let i = policies.length - 1; i >= 0 ; i-- ) {
      obj = policies[i];
      if ( obj.policyId ) {
        actualRules.push({
          type: 'policyRule',
          apiGroups: ['*'],
          verbs: ['use'],
          resources: ['PodSecurityPolicies'],
          resourceNames: [obj.policyId]
        });
      } else {
        policies.removeObject(obj);
      }
    }

    role.set('rules', actualRules);

    // Add roles
    const roles = this.get('roleArray')
    for ( let i = roles.length - 1; i >= 0 ; i-- ) {
      obj = roles[i];
      if ( !obj.roleId ) {
        roles.removeObject(obj);
      }
    }

    role.set('projectRoleTemplateIds', roles.map(obj => obj.roleId));

    return this._super(...arguments);
  },

  doneSaving() {
    this.goBack();
  },
});