API cleanup

internal/api/permissions.go

@@ -8,61 +8,6 @@ import (
 	"go.infratographer.com/permissions-api/internal/query"
 )
 
-func (r *Router) checkGlobalScope(c *gin.Context) {
-	scope := c.Param("scope")
-
-	ctx, span := tracer.Start(c.Request.Context(), "api.checkGlobalScope")
-	defer span.End()
-
-	actor, err := currentActor(c)
-	if err != nil {
-		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error(), "message": "failed to get the actor"})
-		return
-	}
-
-	actorResource, err := query.NewResourceFromURN(actor.urn)
-	if err != nil {
-		c.JSON(http.StatusBadRequest, gin.H{"message": "error processing actor URN", "error": err.Error()})
-		return
-	}
-
-	err = query.ActorHasGlobalPermission(ctx, r.authzedClient, actorResource, scope, "")
-	if err != nil {
-		if errors.Is(err, query.ErrScopeNotAssigned) {
-			c.JSON(http.StatusForbidden, gin.H{"message": "actor does not have requested scope"})
-			return
-		}
-
-		c.JSON(http.StatusInternalServerError, gin.H{"message": "an error occurred checking actor scopes", "error": err.Error()})
-
-		return
-	}
-
-	c.JSON(http.StatusOK, gin.H{})
-}
-
-func (r *Router) resourcesAvailable(c *gin.Context) {
-	ctx, span := tracer.Start(c.Request.Context(), "api.resourcesAvailable")
-	defer span.End()
-
-	resourceURN := c.Param("type")
-	scope := c.Param("scope")
-
-	actor, err := currentActor(c)
-	if err != nil {
-		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error(), "message": "failed to get the actor"})
-		return
-	}
-
-	resources, err := query.ActorResourceList(ctx, r.authzedClient, actor.urn, resourceURN, scope, "")
-	if err != nil {
-		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error(), "message": "failed to get the resources"})
-		return
-	}
-
-	c.JSON(http.StatusOK, gin.H{"ids": resources})
-}
-
 func (r *Router) checkScope(c *gin.Context) {
 	resourceURN := c.Param("urn")
 	scope := c.Param("scope")

internal/api/resources.go

@@ -47,15 +47,6 @@ func (r *Router) resourceCreate(c *gin.Context) {
 	c.JSON(http.StatusCreated, gin.H{"token": zedToken})
 }
 
-func (r *Router) resourceUpdate(c *gin.Context) {
-	resourceURN := c.Param("urn")
-
-	_, span := tracer.Start(c.Request.Context(), "api.resourceUpdate", trace.WithAttributes(attribute.String("urn", resourceURN)))
-	defer span.End()
-
-	c.JSON(http.StatusInternalServerError, gin.H{"message": "not implemented"})
-}
-
 func (r *Router) resourceDelete(c *gin.Context) {
 	resourceURN := c.Param("urn")
 

internal/api/router.go

@@ -32,13 +32,9 @@ func (r *Router) Routes(rg *gin.RouterGroup) {
 	{
 		// Creating an OU gets a special
 		v1.POST("/resources/:urn", r.resourceCreate)
-		v1.PUT("/resources/:urn", r.resourceUpdate)
 		v1.DELETE("/resources/:urn", r.resourceDelete)
 		// Check resource access
-		v1.GET("/available/:type/:scope", r.resourcesAvailable)
 		v1.GET("/has/:scope/on/:urn", r.checkScope)
-		// Check Global Scope
-		v1.GET("/global/check/:scope", r.checkGlobalScope)
 	}
 }
 

internal/query/errors.go

@@ -0,0 +1,9 @@
+package query
+
+import "errors"
+
+var (
+	// ErrScopeNotAssigned represents an error condition where the actor is not able to complete
+	// the given request.
+	ErrScopeNotAssigned = errors.New("the actor does not have permissions to complete this request")
+)

internal/query/stores.go

@@ -0,0 +1,9 @@
+package query
+
+import "github.com/authzed/authzed-go/v1"
+
+// Stores represents a SpiceDB store.
+type Stores struct {
+	SpiceDB       *authzed.Client
+	SpiceDBPrefix string
+}