Merge pull request #2 from muskansoninmh/ft_CLI_permission_pca_10325

Ft cli permission pca 10325

Author: muskansoninmh

api/account.go

@@ -18,8 +18,14 @@ type SitesToken struct {
 	XToken        string `json:"xtoken"`
 }
 
-func SetSites(appid int64) (*SitesToken, error) {
-	switchapp := conf.AdminConsoleAPIDomain + "/account/switchapp?appid=" + strconv.FormatInt(appid, 10)
+func SetSites(appid int64, owned bool) (*SitesToken, error) {
+	var api string
+	if (owned){
+		api = "/account/switchapp?appid="
+	} else {
+		api = "/account/switchsharedsite?appid="
+	}
+	switchapp := conf.AdminConsoleAPIDomain + api + strconv.FormatInt(appid, 10)
 	switchResp, err := request.Rest(http.MethodGet, switchapp, nil, "")
 	var switchRespObj SitesToken
 	err = json.Unmarshal(switchResp, &switchRespObj)

api/auth.go

@@ -6,6 +6,7 @@ import (
 	"io/ioutil"
 	"net/http"
 	"time"
+	"reflect"
 
 	"github.com/loginradius/lr-cli/cmdutil"
 	"github.com/loginradius/lr-cli/config"
@@ -20,7 +21,7 @@ type LoginResponse struct {
 	AppName       string      `json:"app_name"`
 	Authenticated bool        `json:"authenticated"`
 	NoOfLogins    int32       `json:"no_of_logins"`
-	PlanDetails   interface{} `json"plan_detail"`
+	PlanDetails   interface{} `json:"plan_detail"`
 	XSign         string      `json:"xsign"`
 	XToken        string      `json:"xtoken"`
 }
@@ -44,6 +45,28 @@ type Feature struct {
 	Status  bool   `json:"status"`
 }
 
+type PermissionResponse struct {
+	Permissions Permission `json:"permissions"`
+}
+
+type Permission struct {
+	API_AdminConfiguration         		bool		`json:"API_AdminConfiguration"`
+	API_EditConfiguration       		bool		`json:"API_EditConfiguration"`
+	API_EditCredentials 				bool        `json:"API_EditCredentials"`
+	API_EditThirdPartyCredentials    	bool		`json:"API_EditThirdPartyCredentials"`
+	API_ViewCredentials   				bool		`json:"API_ViewCredentials"`
+	UserManagement_Admin		       	bool		`json:"UserManagement_Admin"`
+	API_ViewConfiguration        		bool		`json:"API_ViewConfiguration"`
+	API_ViewThirdPartyCredentials  		bool		`json:"API_ViewThirdPartyCredentials"`
+	ThirdPartyIntegration_View		    bool		`json:"ThirdPartyIntegration_View"`
+	UserManagement_View				    bool		`json:"UserManagement_View"`
+	SecurityPolicy_View				    bool		`json:"SecurityPolicy_View"`
+	API_AdminThirdPartyCredentials	    bool		`json:"API_AdminThirdPartyCredentials"`
+	ThirdPartyIntegration_Admin		    bool		`json:"ThirdPartyIntegration_Admin"`
+	SecurityPolicy_Admin			    bool		`json:"SecurityPolicy_Admin"`
+	SecurityPolicy_Edit				    bool		`json:"SecurityPolicy_Edit"`
+}
+
 func AuthLogin(params LoginOpts) (*LoginResponse, error) {
 
 	var resObj LoginResponse
@@ -228,9 +251,15 @@ func storeSiteInfo(data CoreAppData) (map[int64]SitesReponse, map[int64]SharedSi
 	currentId, err := CurrentID()
 	if err == nil {
 		site, ok := siteInfo[currentId]
+		sharedsite, sharedok := sharedsiteInfo[currentId]
 		if ok {
-			obj, _ := json.Marshal(site)
-			cmdutil.WriteFile("currentSite.json", obj)
+
+				obj, _ := json.Marshal(site)
+				cmdutil.WriteFile("currentSite.json", obj)
+			
+		} else if sharedok {
+			obj, _ := json.Marshal(sharedsite)
+				cmdutil.WriteFile("currentSite.json", obj)
 		}
 	}
 	return siteInfo,sharedsiteInfo
@@ -259,3 +288,58 @@ func UpdatePhoneLogin(feature string, status bool) (*FeatureSchema, error) {
 	}
 	return &resultResp, err
 }
+
+
+func GetPermissionsfromAPI() ( error) {
+	
+	coreAppData := conf.AdminConsoleAPIDomain + "/auth/permissions?"
+	data, err := request.Rest(http.MethodGet, coreAppData, nil, "")
+	var  permissionsResp PermissionResponse
+	var permission Permission
+	if err != nil {
+		return err
+	}
+	err = json.Unmarshal(data, &permissionsResp)
+	permission = permissionsResp.Permissions
+	err = storePermissionData(permission)
+	if err != nil {
+		return err
+	}
+	return nil
+}
+
+
+func storePermissionData(data Permission) (error) {
+	var permissionobj = cmdutil.PermissionCommands
+	permission := make(map[string]bool, len(permissionobj))
+	for key, val := range permissionobj {
+		v := reflect.ValueOf(&data).Elem().FieldByName(val)
+		if v.IsValid() {
+			permission[key] = v.Bool()
+		} 
+	}
+	obj, err := json.Marshal(permission)
+	if err != nil {
+		return nil
+	}
+	cmdutil.WriteFile("permission.json", obj)
+	return nil
+}
+
+func GetPermission(str string) (bool, error) { 
+	data, err := cmdutil.ReadFile("permission.json")
+	if err != nil {
+	return false, err
+	}
+	permission := make(map[string]bool)
+	err = json.Unmarshal(data, &permission)
+	if err != nil {
+		return false, err
+		}
+	if permission[str] == false {
+		fmt.Println("You don't have access to proceed, request access from the site owner. If you've already been granted access, log out and log back in. If the issue persists, contact LoginRadius support at ")
+		fmt.Println( conf.DashboardDomain + "/support/tickets")
+		return false , nil
+	}
+	return true , nil
+}

api/deployment.go

@@ -131,7 +131,6 @@ type VerifySmtpConfigSchema struct {
 type VerifySmtpConfigError struct {
 	Description 		string		`json:"description"`
 	Message 		string		`json:"message"`
-
 }
 
 func GetSites() (*SitesReponse, error) {

cmd/add/accessRestriction/accessRestriction.go

@@ -46,6 +46,10 @@ func NewaccessRestrictionCmd() *cobra.Command {
 		
 		`),
 		RunE: func(cmd *cobra.Command, args []string) error {
+			isPermission, err := api.GetPermission("lr_add_access-restriction")
+			if(!isPermission || err != nil) {
+				return nil
+			}
 			return addAccessRestriction(opts)
 		},
 	}
@@ -236,4 +240,4 @@ func addIpOrIpRange(allowedip string, deniedip string) error {
 
 
 	return nil
-}
+}

cmd/add/account/account.go

@@ -10,6 +10,7 @@ import (
 
 	"github.com/loginradius/lr-cli/cmdutil"
 	"github.com/loginradius/lr-cli/request"
+	"github.com/loginradius/lr-cli/api"
 
 	"github.com/spf13/cobra"
 )
@@ -51,6 +52,11 @@ func NewaccountCmd() *cobra.Command {
 		ID:  <id>
 		`),
 		RunE: func(cmd *cobra.Command, args []string) error {
+			isPermission, errr := api.GetPermission("lr_add_account")
+			if(!isPermission || errr != nil) {
+				return nil
+			}
+
 			if opts.Email[0].Value == "" {
 				return &cmdutil.FlagError{Err: errors.New("`email`  required argument")}
 			}

cmd/add/customField/customFields.go

@@ -27,6 +27,10 @@ func NewAddCFCmd() *cobra.Command {
 		You can now add the custom field in your registration schema using "lr set schema" command
 		`),
 		RunE: func(cmd *cobra.Command, args []string) error {
+			isPermission, errr := api.GetPermission("lr_add_custom-field")
+			if(!isPermission || errr != nil) {
+				return nil
+			}
 			if fieldName == "" {
 				return &cmdutil.FlagError{Err: errors.New("`fieldName` is required argument")}
 			}

cmd/add/domain/domain.go

@@ -32,6 +32,10 @@ func NewdomainCmd() *cobra.Command {
 		Your Domain  <newDomain>  is now whitelisted
 		`),
 		RunE: func(cmd *cobra.Command, args []string) error {
+			isPermission, errr := api.GetPermission("lr_add_domain")
+			if(!isPermission || errr != nil) {
+				return nil
+			}
 			if opts.Domain == "" {
 				return &cmdutil.FlagError{Err: errors.New("`domain` is required argument")}
 			}

cmd/add/hooks/hooks.go

@@ -68,6 +68,11 @@ func addHooks() error {
 	// 	}
 	// }
 
+	isPermission, errr := api.GetPermission("lr_add_hooks")
+			if(!isPermission || errr != nil) {
+				return nil
+			}
+
 	checkInput,err := input()
 	if !checkInput {
 		return err

cmd/add/loginMethod/loginMethod.go

@@ -34,6 +34,11 @@ func NewloginMethodCmd() *cobra.Command {
 }
 
 func addloginMethod() error {
+	isPermission, errr := api.GetPermission("lr_add_login-method")
+		if(!isPermission || errr != nil) {
+			return nil
+		}
+
 	err := api.CheckLoginMethod()
 	if err != nil {
 		return err

cmd/add/site/site.go

@@ -109,7 +109,7 @@ func add() error {
 	if err != nil {
 		return err
 	}
-	switchRespObj, err := api.SetSites(App.AppId)
+	switchRespObj, err := api.SetSites(App.AppId, true)
 	if err != nil {
 		return err
 	}