grant project querier

adela-bytebase · adela-bytebase · commit ce4e2aae73aa · 2024-10-23T18:12:20.000+08:00
diff --git a/sql-editor/src/app/api/create-user/route.ts b/sql-editor/src/app/api/create-user/route.ts
@@ -1,4 +1,4 @@
-import { createBBIssueWorkflow, generateBBToken } from "../utils";
+import { createBBIssueWorkflow, generateBBToken, grantUserRole } from "../utils";
 
 function generateRandomString(length: number): string {
   const characters = 'abcdefghijklmnopqrstuvwxyz';
@@ -45,7 +45,7 @@ export async function GET(request: Request) {
       console.error('Failed to create user', await createUserResponse.text());
       throw new Error('Failed to create user');
     }
-    console.log('User created successfully in Bytebase');
+    console.log('User created successfully in Bytebase', createUserResponse);
 
     // Create project using the username
     console.log(`Creating project for user: ${username}`);
@@ -70,11 +70,14 @@ export async function GET(request: Request) {
 
     console.log('User creation process completed successfully');
 
-    console.log('now create db');
+    //console.log('now create db');
+    //const result = await createBBIssueWorkflow(username)
+    //console.log("after creating db", result)
 
-    const result = await createBBIssueWorkflow(username)
-    console.log("after creating db", result)
 
+    // Grant the user project querier role
+    const result = await grantUserRole(username);
+    console.log("after grantUserRole", result)
 
     // Return the credentials and created project
     return new Response(JSON.stringify({
diff --git a/sql-editor/src/app/api/utils.ts b/sql-editor/src/app/api/utils.ts
@@ -1,3 +1,4 @@
+import exp from 'constants';
 import { v4 } from 'uuid';
 
 export interface BytebaseDatabase {
@@ -48,6 +49,46 @@ export async function generateBBToken() {
     return token.token;
 }
 
+export async function grantUserRole(project: string) {
+    const username = project;
+    const token = await generateBBToken();
+    const response = await fetchData(`${process.env.NEXT_PUBLIC_BB_HOST}/v1/projects/${project}:getIamPolicy`, token, {
+        method: 'GET'
+    });
+
+    console.log("=============getIamPolicy", JSON.stringify(response));
+
+    response.bindings.push({
+        "role": "roles/projectQuerier",
+        "members": [`user:${username}@example.com`],
+        "condition": {
+          "expression": "",
+          "title": "",
+          "description": "",
+          "location": ""
+        },
+        "parsedExpr": null
+      });
+
+    const newResponse = {
+        "resource":`projects/${project}`,
+        "policy": {bindings: response.bindings},
+        "etag": response.etag
+    }
+
+
+    console.log("=============after push", JSON.stringify(newResponse));
+
+    const setResponse = await fetchData(`${process.env.NEXT_PUBLIC_BB_HOST}/v1/projects/${project}:setIamPolicy`, token, {
+        method: 'POST',
+        body: JSON.stringify(newResponse)
+    });
+
+    console.log("=============grantUserRole", setResponse);
+
+    return setResponse;
+}
+
 /*async function createSheet(project: string) {
 //    const SQL = `CREATE DATABASE "${project}" WITH TEMPLATE "hr_prod" OWNER "bbsample"`;
    // console.log("========sql=======in createSheet", SQL);
