content: /*
   * Licensed to the Apache Software Foundation (ASF) under one
   * or more contributor license agreements.  See the NOTICE file
   * distributed with this work for additional information
   * regarding copyright ownership.  The ASF licenses this file
   * to you under the Apache License, Version 2.0 (the
   * "License"); you may not use this file except in compliance
   * with the License.  You may obtain a copy of the License at
   *
   *     http://www.apache.org/licenses/LICENSE-2.0
   *
   * Unless required by applicable law or agreed to in writing, software
   * distributed under the License is distributed on an "AS IS" BASIS,
   * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   * See the License for the specific language governing permissions and
   * limitations under the License.
   */
  
  package org.apache.ambari.server.api.services;
  
  import java.util.HashMap;
  import java.util.Map;
  
  import jakarta.ws.rs.GET;
  import jakarta.ws.rs.Path;
  import jakarta.ws.rs.PathParam;
  import jakarta.ws.rs.Produces;
  import jakarta.ws.rs.core.Context;
  import jakarta.ws.rs.core.HttpHeaders;
  import jakarta.ws.rs.core.Response;
  import jakarta.ws.rs.core.UriInfo;
  
  import org.apache.ambari.annotations.ApiIgnore;
  import org.apache.ambari.server.api.resources.ResourceInstance;
  import org.apache.ambari.server.controller.spi.Resource;
  
  /**
   * RoleAuthorizationService is a read-only service responsible for role authorization resource requests.
   * <p/>
   * The result sets returned by this service are either the full set of available authorizations or
   * those related to a particular permission.
   */
  @Path("/authorizations/")
  public class RoleAuthorizationService extends BaseService {
    private String permissionId;
  
    /**
     * Constructs a new RoleAuthorizationService that is not linked to any role (or permission)
     */
    public RoleAuthorizationService() {
      this(null);
    }
  
    /**
     * Constructs a new RoleAuthorizationService that is linked to the specified permission
     *
     * @param permissionId the permission id of a permission (or role)
     */
    public RoleAuthorizationService(String permissionId) {
      this.permissionId = permissionId;
    }
  
    /**
     * Handles: GET  /permissions/{permission_id}/authorizations
     * Get all authorizations for the relative permission, or all if this RoleAuthorizationService is
     * not linked to a particular permission.
     *
     * @param headers http headers
     * @param ui      uri info
     * @return authorizations collection resource representation
     */
    @GET @ApiIgnore // until documented
    @Produces("text/plain")
    public Response getAuthorizations(@Context HttpHeaders headers, @Context UriInfo ui) {
      return handleRequest(headers, null, ui, Request.Type.GET, createAuthorizationResource(null));
    }
  
    /**
     * Handles: GET  /permissions/{permission_id}/authorizations/{authorization_id}
     * Get a specific authorization, potentially limited to the set of authorizations for a permission
     * if this RoleAuthorizationService is linked ot a particular permission.
     *
     * @param headers         http headers
     * @param ui              uri info
     * @param authorizationId authorization ID
     * @return authorization instance representation
     */
    @GET @ApiIgnore // until documented
    @Path("{authorization_id}")
    @Produces("text/plain")
    public Response getAuthorization(@Context HttpHeaders headers, @Context UriInfo ui,
                                     @PathParam("authorization_id") String authorizationId) {
      return handleRequest(headers, null, ui, Request.Type.GET, createAuthorizationResource(authorizationId));
    }
  
    /**
     * Create an authorization resource.
     *
     * @param authorizationId authorization id
     * @return an authorization resource instance
     */
    protected ResourceInstance createAuthorizationResource(String authorizationId) {
      Map<Resource.Type, String> mapIds = new HashMap<>();
      mapIds.put(Resource.Type.Permission, permissionId);
      mapIds.put(Resource.Type.RoleAuthorization, authorizationId);
      return createResource(Resource.Type.RoleAuthorization, mapIds);
    }
  }
  