feat: create middleware to check if user has permission

1 files changed, 24 insertions, 0 deletions

diff --git a/app/middleware/permission.go b/app/middleware/permission.go
new file mode 100644
index 0000000..03e7cf9
--- /dev/null
+++ b/app/middleware/permission.go
@@ -0,0 +1,24 @@
+package middleware
+
+import (
+	"gitlab.com/gitlab-org/software-supply-chain-security/authorization/authzd.git/pkg/rpc"
+	"gitlab.com/gitlab-org/software-supply-chain-security/authorization/sparkled/app/domain"
+)
+
+type Permission string
+
+func (p Permission) ToGID() string {
+	return "gid://sparkle/Permission/" + p.String()
+}
+
+func (p Permission) RequestFor(user domain.Identifiable, resource domain.Identifiable) *rpc.AllowRequest {
+	return &rpc.AllowRequest{
+		Subject:    user.ToGID(),
+		Permission: p.ToGID(),
+		Resource:   resource.ToGID(),
+	}
+}
+
+func (p Permission) String() string {
+	return string(p)
+}