compass/backend/services/resource.py

from fastapi import Depends
from ..database import db_session
from sqlalchemy.orm import Session
from sqlalchemy import select
from ..models.resource_model import Resource
from ..entities.resource_entity import ResourceEntity
from ..models.user_model import User

from .exceptions import ResourceNotFoundException

class ResourceService:

    def __init__(self, session: Session = Depends(db_session)):
        self._session = session

    def all(self, user: User) -> list[Resource]:
        """
        Retrieves all Resources that the user has access to based on their role and group.

        Parameters:
            user: a valid User model representing the currently logged in User

        Returns:
            list[Resource]: list of accessible `Resource` for the user
        """
        # Filter resources based on user's role and group
        query = select(ResourceEntity).where(
            ResourceEntity.role == user.role,
            ResourceEntity.group == user.group
        )
        entities = self._session.scalars(query).all()

        return [entity.to_model() for entity in entities]

    def create(self, user: User, resource: Resource) -> Resource:
        """
        Creates a resource based on the input object and adds it to the table if the user has the right permissions.

        Parameters:
            user: a valid User model representing the currently logged in User
            resource: Resource object to add to table

        Returns:
            Resource: Object added to table
        """
        if resource.role != user.role or resource.group != user.group:
            raise PermissionError("User does not have permission to add resources in this role or group.")

        resource_entity = ResourceEntity.from_model(resource)
        self._session.add(resource_entity)
        self._session.commit()

        return resource_entity.to_model()

    def get_by_id(self, user: User, id: int) -> Resource:
        """
        Gets a resource based on the resource id that the user has access to

        Parameters:
            user: a valid User model representing the currently logged in User
            id: int, the id of the resource

        Returns:
            Resource

        Raises:
            ResourceNotFoundException: If no resource is found with id
        """
        resource = (
            self._session.query(ResourceEntity)
            .filter(ResourceEntity.id == id, ResourceEntity.role == user.role, ResourceEntity.group == user.group)
            .one_or_none()
        )

        if resource is None:
            raise ResourceNotFoundException(f"No resource found with id: {id}")

        return resource.to_model()

    def update(self, user: User, resource: ResourceEntity) -> Resource:
        """
        Update the resource if the user has access

        Parameters:
            user: a valid User model representing the currently logged in User
            resource (ResourceEntity): Resource to update

        Returns:
            Resource: Updated resource object

        Raises:
            ResourceNotFoundException: If no resource is found with the corresponding ID
        """
        if resource.role != user.role or resource.group != user.group:
            raise PermissionError("User does not have permission to update this resource.")

        obj = self._session.get(ResourceEntity, resource.id) if resource.id else None

        if obj is None:
            raise ResourceNotFoundException(f"No resource found with matching id: {resource.id}")

        obj.update_from_model(resource)  # Assuming an update method exists
        self._session.commit()

        return obj.to_model()

    def delete(self, user: User, id: int) -> None:
        """
        Delete resource based on id that the user has access to

        Parameters:
            user: a valid User model representing the currently logged in User
            id: int, a unique resource id

        Raises:
            ResourceNotFoundException: If no resource is found with the corresponding id
        """
        resource = (
            self._session.query(ResourceEntity)
            .filter(ResourceEntity.id == id, ResourceEntity.role == user.role, ResourceEntity.group == user.group)
            .one_or_none()
        )

        if resource is None:
            raise ResourceNotFoundException(f"No resource found with matching id: {id}")

        self._session.delete(resource)
        self._session.commit()

    def get_by_slug(self, user: User, search_string: str) -> list[Resource]:
        """
        Get a list of resources given a search string that the user has access to

        Parameters:
            user: a valid User model representing the currently logged in User
            search_string: a string to search resources by

        Returns:
            list[Resource]: list of resources relating to the string

        Raises:
            ResourceNotFoundException if no resource is found with the corresponding slug
        """
        query = select(ResourceEntity).where(
            ResourceEntity.title.ilike(f"%{search_string}%"),
            ResourceEntity.role == user.role,
            ResourceEntity.group == user.group
        )
        entities = self._session.scalars(query).all()

        return [entity.to_model() for entity in entities]