abp-next-admin2/aspnet-core/services/LY.MicroService.LocalizationManagement.HttpApi.Host/Overrides/MergePermissionDefinitionManager.cs

using System.Collections.Generic;
using System.Collections.Immutable;
using System.Linq;
using System.Threading.Tasks;
using Volo.Abp.DependencyInjection;
using Volo.Abp.MultiTenancy;

namespace Volo.Abp.Authorization.Permissions;

#nullable enable

[Dependency(ReplaceServices = true)]
public class MergePermissionDefinitionManager : PermissionDefinitionManager
{
    private readonly IStaticPermissionDefinitionStore _staticStore;
    private readonly IDynamicPermissionDefinitionStore _dynamicStore;

    public MergePermissionDefinitionManager(
        IStaticPermissionDefinitionStore staticStore,
        IDynamicPermissionDefinitionStore dynamicStore) : base(staticStore, dynamicStore)
    {
        _staticStore = staticStore;
        _dynamicStore = dynamicStore;
    }

    public async override Task<PermissionDefinition?> GetOrNullAsync(string name)
    {
        Check.NotNull(name, nameof(name));

        var staticDefinition = await _staticStore.GetOrNullAsync(name);
        var dynamicDefinition = await _dynamicStore.GetOrNullAsync(name);

        if (staticDefinition != null && dynamicDefinition != null)
        {
            MergePermissionMetadata(staticDefinition, dynamicDefinition);

            foreach (var grandchild in dynamicDefinition.Children)
            {
                MergeChildPermissions(staticDefinition, grandchild);
            }
        }

        return staticDefinition ?? dynamicDefinition;
    }

    public async override Task<PermissionDefinition?> GetResourcePermissionOrNullAsync(string resourceName, string name)
    {
        Check.NotNull(name, nameof(name));

        var staticDefinition = await _staticStore.GetResourcePermissionOrNullAsync(resourceName, name);
        var dynamicDefinition = await _dynamicStore.GetResourcePermissionOrNullAsync(resourceName, name);

        if (staticDefinition != null && dynamicDefinition != null)
        {
            MergePermissionMetadata(staticDefinition, dynamicDefinition);

            foreach (var grandchild in dynamicDefinition.Children)
            {
                MergeChildPermissions(staticDefinition, grandchild);
            }
        }

        return staticDefinition ?? dynamicDefinition;
    }

    public async override Task<IReadOnlyList<PermissionDefinition>> GetPermissionsAsync()
    {
        var staticPermissions = await _staticStore.GetPermissionsAsync();
        var dynamicPermissions = await _dynamicStore.GetPermissionsAsync();

        return MergePermissions(staticPermissions, dynamicPermissions);
    }

    public async override Task<IReadOnlyList<PermissionDefinition>> GetResourcePermissionsAsync()
    {
        var staticPermissions = await _staticStore.GetResourcePermissionsAsync();
        var dynamicPermissions = await _dynamicStore.GetResourcePermissionsAsync();

        return MergePermissions(staticPermissions, dynamicPermissions);
    }

    public async override Task<IReadOnlyList<PermissionGroupDefinition>> GetGroupsAsync()
    {
        var staticGroups = await _staticStore.GetGroupsAsync();
        var dynamicGroups = await _dynamicStore.GetGroupsAsync();

        var mergedGroups = new Dictionary<string, PermissionGroupDefinition>();

        foreach (var staticGroup in staticGroups)
        {
            mergedGroups[staticGroup.Name] = staticGroup;
        }

        foreach (var dynamicGroup in dynamicGroups)
        {
            if (mergedGroups.TryGetValue(dynamicGroup.Name, out var existingGroup))
            {
                MergeGroupPermissions(existingGroup, dynamicGroup);
            }
            else
            {
                mergedGroups[dynamicGroup.Name] = dynamicGroup;
            }
        }

        return mergedGroups.Values.ToImmutableList();
    }

    private static void MergeGroupPermissions(PermissionGroupDefinition target, PermissionGroupDefinition source)
    {
        foreach (var sourcePermission in source.Permissions)
        {
            var existingPermission = target.GetPermissionOrNull(sourcePermission.Name);

            if (existingPermission == null)
            {
                var newPermission = target.AddPermission(
                    sourcePermission.Name,
                    sourcePermission.DisplayName,
                    sourcePermission.MultiTenancySide,
                    sourcePermission.IsEnabled
                );

                CopyPermissionDetails(sourcePermission, newPermission);

                foreach (var child in sourcePermission.Children)
                {
                    AddChildPermissionRecursively(newPermission, child);
                }
            }
            else
            {
                MergePermissionMetadata(existingPermission, sourcePermission);

                foreach (var sourceChild in sourcePermission.Children)
                {
                    MergeChildPermissions(existingPermission, sourceChild);
                }
            }
        }
    }

    private static void AddChildPermissionRecursively(PermissionDefinition parent, PermissionDefinition sourceChild)
    {
        var newChild = parent.AddChild(
            sourceChild.Name,
            sourceChild.DisplayName,
            sourceChild.MultiTenancySide,
            sourceChild.IsEnabled
        );

        CopyPermissionDetails(sourceChild, newChild);

        foreach (var grandchild in sourceChild.Children)
        {
            AddChildPermissionRecursively(newChild, grandchild);
        }
    }

    private static IReadOnlyList<PermissionDefinition> MergePermissions(IReadOnlyList<PermissionDefinition> staticPermissions, IReadOnlyList<PermissionDefinition> dynamicPermissions)
    {
        var mergedPermissions = new Dictionary<string, PermissionDefinition>();

        foreach (var staticFeature in staticPermissions)
        {
            mergedPermissions[staticFeature.Name] = staticFeature;
        }

        foreach (var dynamicPermission in dynamicPermissions)
        {
            if (mergedPermissions.TryGetValue(dynamicPermission.Name, out var existingPermission))
            {
                MergePermissionMetadata(existingPermission, dynamicPermission);

                foreach (var sourceChild in dynamicPermission.Children)
                {
                    MergeChildPermissions(existingPermission, sourceChild);
                }
            }
            else
            {
                mergedPermissions[dynamicPermission.Name] = dynamicPermission;
            }
        }

        return mergedPermissions.Values.ToImmutableList();
    }

    private static void MergeChildPermissions(PermissionDefinition parent, PermissionDefinition sourceChild)
    {
        var existingChild = parent.Children.FirstOrDefault(c => c.Name == sourceChild.Name);

        if (existingChild == null)
        {
            var newChild = parent.AddChild(
                sourceChild.Name,
                sourceChild.DisplayName,
                sourceChild.MultiTenancySide,
                sourceChild.IsEnabled
            );
            CopyPermissionDetails(sourceChild, newChild);

            foreach (var grandchild in sourceChild.Children)
            {
                AddChildPermissionRecursively(newChild, grandchild);
            }
        }
        else
        {
            MergePermissionMetadata(existingChild, sourceChild);

            foreach (var grandchild in sourceChild.Children)
            {
                MergeChildPermissions(existingChild, grandchild);
            }
        }
    }

    private static void CopyPermissionDetails(PermissionDefinition source, PermissionDefinition target)
    {
        foreach (var property in source.Properties)
        {
            target.Properties[property.Key] = property.Value;
        }

        foreach (var provider in source.Providers)
        {
            if (!target.Providers.Contains(provider))
            {
                target.Providers.Add(provider);
            }
        }

        foreach (var checker in source.StateCheckers)
        {
            if (!target.StateCheckers.Contains(checker))
            {
                target.StateCheckers.Add(checker);
            }
        }
    }

    private static void MergePermissionMetadata(PermissionDefinition target, PermissionDefinition source)
    {
        target.DisplayName = source.DisplayName;

        foreach (var property in source.Properties)
        {
            target.Properties[property.Key] = property.Value;
        }

        foreach (var provider in source.Providers)
        {
            if (!target.Providers.Contains(provider))
            {
                target.Providers.Add(provider);
            }
        }

        foreach (var checker in source.StateCheckers)
        {
            if (!target.StateCheckers.Contains(checker))
            {
                target.StateCheckers.Add(checker);
            }
        }

        if (source.MultiTenancySide != MultiTenancySides.Both)
        {
            target.MultiTenancySide |= source.MultiTenancySide;
        }

        target.IsEnabled = target.IsEnabled || source.IsEnabled;
    }
}
#nullable disable