// Licensed to the Apache Software Foundation (ASF) under one // or more contributor license agreements. See the NOTICE file // distributed with this work for additional information // regarding copyright ownership. The ASF licenses this file // to you under the Apache License, Version 2.0 (the // "License"); you may not use this file except in compliance // with the License. You may obtain a copy of the License at // // http://www.apache.org/licenses/LICENSE-2.0 // // Unless required by applicable law or agreed to in writing, // software distributed under the License is distributed on an // "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY // KIND, either express or implied. See the License for the // specific language governing permissions and limitations // under the License. package org.apache.cloudstack.api.command.iam; import javax.inject.Inject; import org.apache.log4j.Logger; import org.apache.cloudstack.iam.IAMApiService; import org.apache.cloudstack.api.APICommand; import org.apache.cloudstack.api.ApiCommandJobType; import org.apache.cloudstack.api.ApiConstants; import org.apache.cloudstack.api.ApiErrorCode; import org.apache.cloudstack.api.BaseAsyncCreateCmd; import org.apache.cloudstack.api.Parameter; import org.apache.cloudstack.api.ServerApiException; import org.apache.cloudstack.api.response.DomainResponse; import org.apache.cloudstack.api.response.iam.IAMGroupResponse; import org.apache.cloudstack.context.CallContext; import org.apache.cloudstack.iam.api.IAMGroup; import com.cloud.event.EventTypes; import com.cloud.exception.ResourceAllocationException; import com.cloud.user.Account; @APICommand(name = "createIAMGroup", responseObject = IAMGroupResponse.class, description = "Creates an IAM group") public class CreateIAMGroupCmd extends BaseAsyncCreateCmd { public static final Logger s_logger = Logger.getLogger(CreateIAMGroupCmd.class.getName()); private static final String s_name = "createiamgroupresponse"; @Inject public IAMApiService _iamApiSrv; // /////////////////////////////////////////////////// // ////////////// API parameters ///////////////////// // /////////////////////////////////////////////////// @Parameter(name = ApiConstants.ACCOUNT, type = CommandType.STRING, description = "an account for the iam group. Must be used with domainId.") private String accountName; @Parameter(name = ApiConstants.DOMAIN_ID, type = CommandType.UUID, description = "domainId of the account owning the iam group", entityType = DomainResponse.class) private Long domainId; @Parameter(name = ApiConstants.DESCRIPTION, type = CommandType.STRING, description = "optional description of the iam group") private String description; @Parameter(name = ApiConstants.NAME, type = CommandType.STRING, required = true, description = "name of the iam group") private String name; // /////////////////////////////////////////////////// // ///////////////// Accessors /////////////////////// // /////////////////////////////////////////////////// public String getAccountName() { return accountName; } public String getDescription() { return description; } public Long getDomainId() { return domainId; } public String getName() { return name; } // /////////////////////////////////////////////////// // ///////////// API Implementation/////////////////// // /////////////////////////////////////////////////// @Override public String getCommandName() { return s_name; } @Override public long getEntityOwnerId() { Account account = CallContext.current().getCallingAccount(); if ((account == null) || _accountService.isAdmin(account.getId())) { if ((domainId != null) && (accountName != null)) { Account userAccount = _responseGenerator.findAccountByNameDomain(accountName, domainId); if (userAccount != null) { return userAccount.getId(); } } } if (account != null) { return account.getId(); } return Account.ACCOUNT_ID_SYSTEM; // no account info given, parent this // command to SYSTEM so ERROR events // are tracked } @Override public void execute() { IAMGroup grp = _entityMgr.findById(IAMGroup.class, getEntityId()); if (grp != null) { IAMGroupResponse response = _iamApiSrv.createIAMGroupResponse(grp); response.setResponseName(getCommandName()); setResponseObject(response); } else { throw new ServerApiException(ApiErrorCode.INTERNAL_ERROR, "Failed to create iam group:" + name); } } @Override public void create() throws ResourceAllocationException { Account account = CallContext.current().getCallingAccount(); IAMGroup result = _iamApiSrv.createIAMGroup(account, name, description); if (result != null) { setEntityId(result.getId()); setEntityUuid(result.getUuid()); } else { throw new ServerApiException(ApiErrorCode.INTERNAL_ERROR, "Failed to create iam group entity" + name); } } @Override public String getEventType() { return EventTypes.EVENT_IAM_GROUP_CREATE; } @Override public String getEventDescription() { return "creating IAM group"; } @Override public String getCreateEventType() { return EventTypes.EVENT_IAM_GROUP_CREATE; } @Override public String getCreateEventDescription() { return "creating IAM group"; } @Override public ApiCommandJobType getInstanceType() { return ApiCommandJobType.IAMGroup; } }