Examples with IAMGroup org.apache.cloudstack.iam.api.IAMGroup used on opensource projects

Example 16 with IAMGroup

use of org.apache.cloudstack.iam.api.IAMGroup in project cloudstack by apache.

the class AttachIAMPolicyToIAMGroupCmd method execute.

@Override
public void execute() throws ResourceUnavailableException, InsufficientCapacityException, ServerApiException {
    CallContext.current().setEventDetails("IAM group Id: " + getId());
    IAMGroup result = _iamApiSrv.attachIAMPoliciesToGroup(policyIdList, id);
    if (result != null) {
        IAMGroupResponse response = _iamApiSrv.createIAMGroupResponse(result);
        response.setResponseName(getCommandName());
        setResponseObject(response);
    } else {
        throw new ServerApiException(ApiErrorCode.INTERNAL_ERROR, "Failed to add roles to iam group");
    }
}

Example 17 with IAMGroup

use of org.apache.cloudstack.iam.api.IAMGroup in project cloudstack by apache.

the class CreateIAMGroupCmd method execute.

@Override
public void execute() {
    IAMGroup grp = _entityMgr.findById(IAMGroup.class, getEntityId());
    if (grp != null) {
        IAMGroupResponse response = _iamApiSrv.createIAMGroupResponse(grp);
        response.setResponseName(getCommandName());
        setResponseObject(response);
    } else {
        throw new ServerApiException(ApiErrorCode.INTERNAL_ERROR, "Failed to create iam group:" + name);
    }
}

Example 18 with IAMGroup

use of org.apache.cloudstack.iam.api.IAMGroup in project cloudstack by apache.

the class RemoveIAMPolicyFromIAMGroupCmd method execute.

@Override
public void execute() throws ResourceUnavailableException, InsufficientCapacityException, ServerApiException {
    CallContext.current().setEventDetails("IAM group Id: " + getId());
    IAMGroup result = _iamApiSrv.removeIAMPoliciesFromGroup(policyIdList, id);
    if (result != null) {
        IAMGroupResponse response = _iamApiSrv.createIAMGroupResponse(result);
        response.setResponseName(getCommandName());
        setResponseObject(response);
    } else {
        throw new ServerApiException(ApiErrorCode.INTERNAL_ERROR, "Failed to add roles to iam group");
    }
}

Example 19 with IAMGroup

use of org.apache.cloudstack.iam.api.IAMGroup in project cloudstack by apache.

the class IAMApiServiceImpl method createPolicyAndAddToDomainGroup.

private void createPolicyAndAddToDomainGroup(String policyName, String description, String entityType, Long entityId, String action, AccessType accessType, Long domainId, Boolean recursive) {
    Domain domain = _domainDao.findById(domainId);
    if (domain != null) {
        IAMPolicy policy = _iamSrv.createIAMPolicy(policyName, description, null, domain.getPath());
        _iamSrv.addIAMPermissionToIAMPolicy(policy.getId(), entityType, PermissionScope.RESOURCE.toString(), entityId, action, accessType.toString(), Permission.Allow, recursive);
        List<Long> policyList = new ArrayList<Long>();
        policyList.add(new Long(policy.getId()));
        List<IAMGroup> domainGroups = listDomainGroup(domain);
        if (domainGroups != null) {
            for (IAMGroup group : domainGroups) {
                _iamSrv.attachIAMPoliciesToGroup(policyList, group.getId());
            }
        }
    }
}

Example 20 with IAMGroup

use of org.apache.cloudstack.iam.api.IAMGroup in project cloudstack by apache.

the class IAMServiceImpl method createIAMGroup.

@DB
@Override
public IAMGroup createIAMGroup(String iamGroupName, String description, String path) {
    // check if the group is already existing
    IAMGroup grp = _aclGroupDao.findByName(path, iamGroupName);
    if (grp != null) {
        throw new InvalidParameterValueException("Unable to create acl group with name " + iamGroupName + " already exists for path " + path);
    }
    IAMGroupVO rvo = new IAMGroupVO(iamGroupName, description);
    rvo.setPath(path);
    return _aclGroupDao.persist(rvo);
}