Moving admin endpoints to production

circle.yml

@@ -24,7 +24,7 @@ dependencies:
 
 deployment:
   development:
-    branch: dev
+    branch: [dev, 'feature/admin-endpoints']
     commands:
       - ./ebs_deploy.sh tc-project-service DEV $CIRCLE_BUILD_NUM
 

config/custom-environment-variables.json

@@ -11,6 +11,8 @@
     "docType": "projectV4"
   },
   "rabbitmqURL": "RABBITMQ_URL",
+  "pubsubQueueName": "PUBSUB_QUEUE_NAME",
+  "pubsubExchangeName": "PUBSUB_EXCHANGE_NAME",
   "directProjectServiceEndpoint": "DIRECT_PROJECT_SERVICE_ENDPOINT",
   "directProjectServiceTimeout": "DIRECT_PROJECT_SERVICE_TIMEOUt",
   "fileServiceEndpoint": "FILE_SERVICE_ENDPOINT",

src/models/project.js

@@ -155,6 +155,13 @@ module.exports = function defineProject(sequelize, DataTypes) {
               .then(projects => ({ rows: projects, count }));
           });
       },
+      findProjectRange(startId, endId, fields) {
+        return this.findAll({
+          where: { id: { $between: [startId, endId] } },
+          attributes: _.get(fields, 'projects', null),
+          raw: true,
+        });
+      },
     },
   });
 

src/permissions/admin.ops.js

@@ -0,0 +1,19 @@
+import util from '../util';
+
+/**
+ * Only super admin are allowed to perform admin operations
+ * @param {Object}    freq        the express request instance
+ * @return {Promise}              Returns a promise
+ */
+module.exports = freq => new Promise((resolve, reject) => {
+  const req = freq;
+  req.context = req.context || {};
+  // check if auth user has acecss to this project
+  const hasAccess = util.hasAdminRole(req);
+
+  if (!hasAccess) {
+    // user is not an admin nor is a registered project member
+    return reject(new Error('You do not have permissions to perform this action'));
+  }
+  return resolve(true);
+});

src/permissions/index.js

@@ -5,6 +5,7 @@ const projectView = require('./project.view');
 const projectEdit = require('./project.edit');
 const projectDelete = require('./project.delete');
 const projectMemberDelete = require('./projectMember.delete');
+const projectAdmin = require('./admin.ops');
 
 module.exports = () => {
   Authorizer.setDeniedStatusCode(403);
@@ -21,4 +22,5 @@ module.exports = () => {
   Authorizer.setPolicy('project.removeAttachment', projectEdit);
   Authorizer.setPolicy('project.downloadAttachment', projectView);
   Authorizer.setPolicy('project.updateMember', projectEdit);
+  Authorizer.setPolicy('project.admin', projectAdmin);
 };

src/routes/admin/project-create-index.js

@@ -0,0 +1,327 @@
+
+/* globals Promise */
+
+import _ from 'lodash';
+import config from 'config';
+import { middleware as tcMiddleware } from 'tc-core-library-js';
+import util from '../../util';
+
+/**
+/**
+ * API to handle retrieving a single project by id
+ *
+ * Permissions:
+ * Only users that have access to the project can retrieve it.
+ *
+ */
+
+// var permissions = require('tc-core-library-js').middleware.permissions
+const permissions = tcMiddleware.permissions;
+const ES_PROJECT_INDEX = config.get('elasticsearchConfig.indexName');
+const ES_PROJECT_TYPE = config.get('elasticsearchConfig.docType');
+
+/**
+ * Get the request body for the specified index name
+ * @private
+ *
+ * @param  {String}       indexName         the index name
+ * @param  {String}       docType         document type
+ * @return {Object}                         the request body for the specified index name
+ */
+function getRequestBody(indexName, docType) {
+  const projectMapping = {
+    _all: { enabled: false },
+    properties: {
+      actualPrice: {
+        type: 'double',
+      },
+      attachments: {
+        type: 'nested',
+        properties: {
+          category: {
+            type: 'string',
+            index: 'not_analyzed',
+          },
+          contentType: {
+            type: 'string',
+            index: 'not_analyzed',
+          },
+          createdAt: {
+            type: 'date',
+            format: 'strict_date_optional_time||epoch_millis',
+          },
+          createdBy: {
+            type: 'integer',
+          },
+          description: {
+            type: 'string',
+          },
+          filePath: {
+            type: 'string',
+          },
+          id: {
+            type: 'long',
+          },
+          projectId: {
+            type: 'long',
+          },
+          size: {
+            type: 'double',
+          },
+          title: {
+            type: 'string',
+          },
+          updatedAt: {
+            type: 'date',
+            format: 'strict_date_optional_time||epoch_millis',
+          },
+          updatedBy: {
+            type: 'integer',
+          },
+        },
+      },
+      billingAccountId: {
+        type: 'long',
+      },
+      bookmarks: {
+        type: 'nested',
+        properties: {
+          address: {
+            type: 'string',
+          },
+          title: {
+            type: 'string',
+          },
+        },
+      },
+      cancelReason: {
+        type: 'string',
+      },
+      challengeEligibility: {
+        type: 'nested',
+        properties: {
+          groups: {
+            type: 'long',
+          },
+          role: {
+            type: 'string',
+            index: 'not_analyzed',
+          },
+          users: {
+            type: 'long',
+          },
+        },
+      },
+      createdAt: {
+        type: 'date',
+        format: 'strict_date_optional_time||epoch_millis',
+      },
+      createdBy: {
+        type: 'integer',
+      },
+      description: {
+        type: 'string',
+      },
+      details: {
+        type: 'nested',
+        properties: {
+          TBD_features: {
+            type: 'nested',
+            properties: {
+              description: {
+                type: 'string',
+              },
+              id: {
+                type: 'integer',
+              },
+              isCustom: {
+                type: 'boolean',
+              },
+              title: {
+                type: 'string',
+              },
+            },
+          },
+          TBD_usageDescription: {
+            type: 'string',
+          },
+          appDefinition: {
+            properties: {
+              goal: {
+                properties: {
+                  value: {
+                    type: 'string',
+                  },
+                },
+              },
+              primaryTarget: {
+                type: 'string',
+              },
+              users: {
+                properties: {
+                  value: {
+                    type: 'string',
+                  },
+                },
+              },
+            },
+          },
+          hideDiscussions: {
+            type: 'boolean',
+          },
+          products: {
+            type: 'string',
+          },
+          summary: {
+            type: 'string',
+          },
+          utm: {
+            type: 'nested',
+            properties: {
+              code: {
+                type: 'string',
+              },
+            },
+          },
+        },
+      },
+      directProjectId: {
+        type: 'long',
+      },
+      estimatedPrice: {
+        type: 'double',
+      },
+      external: {
+        properties: {
+          data: {
+            type: 'string',
+          },
+          id: {
+            type: 'string',
+            index: 'not_analyzed',
+          },
+          type: {
+            type: 'string',
+            index: 'not_analyzed',
+          },
+        },
+      },
+      id: {
+        type: 'long',
+      },
+      members: {
+        type: 'nested',
+        properties: {
+          createdAt: {
+            type: 'date',
+            format: 'strict_date_optional_time||epoch_millis',
+          },
+          createdBy: {
+            type: 'integer',
+          },
+          email: {
+            type: 'string',
+            index: 'not_analyzed',
+          },
+          firstName: {
+            type: 'string',
+          },
+          handle: {
+            type: 'string',
+            index: 'not_analyzed',
+          },
+          id: {
+            type: 'long',
+          },
+          isPrimary: {
+            type: 'boolean',
+          },
+          lastName: {
+            type: 'string',
+          },
+          projectId: {
+            type: 'long',
+          },
+          role: {
+            type: 'string',
+            index: 'not_analyzed',
+          },
+          updatedAt: {
+            type: 'date',
+            format: 'strict_date_optional_time||epoch_millis',
+          },
+          updatedBy: {
+            type: 'integer',
+          },
+          userId: {
+            type: 'long',
+          },
+        },
+      },
+      name: {
+        type: 'string',
+      },
+      status: {
+        type: 'string',
+        index: 'not_analyzed',
+      },
+      terms: {
+        type: 'integer',
+      },
+      type: {
+        type: 'string',
+        index: 'not_analyzed',
+      },
+      updatedAt: {
+        type: 'date',
+        format: 'strict_date_optional_time||epoch_millis',
+      },
+      updatedBy: {
+        type: 'integer',
+      },
+      utm: {
+        properties: {
+          campaign: {
+            type: 'string',
+          },
+          medium: {
+            type: 'string',
+          },
+          source: {
+            type: 'string',
+          },
+        },
+      },
+    },
+  };
+  const result = {
+    index: indexName,
+    updateAllTypes: true,
+    body: {
+      mappings: { },
+    },
+  };
+  result.body.mappings[docType] = projectMapping;
+  return result;
+}
+
+
+module.exports = [
+  permissions('project.admin'),
+  /**
+   * GET projects/{projectId}
+   * Get a project by id
+   */
+  (req, res, next) => { // eslint-disable-line no-unused-vars
+    const logger = req.log;
+    logger.debug('Entered Admin#createIndex');
+    const indexName = _.get(req, 'body.param.indexName', ES_PROJECT_INDEX);
+    const docType = _.get(req, 'body.param.docType', ES_PROJECT_TYPE);
+    logger.debug('indexName', indexName);
+    logger.debug('docType', docType);
+
+    const esClient = util.getElasticSearchClient();
+    esClient.indices.create(getRequestBody(indexName, docType));
+    res.status(200).json(util.wrapResponse(req.id, { message: 'Create index request successfully submitted' }));
+  },
+];