module Katello
  class PermissionCreator # rubocop:disable Metrics/ClassLength
    def initialize(plugin)
      @plugin = plugin
    end

    def define
      activation_keys_permissions
      capsule_content_permissions
      content_view_permissions
      content_credential_permissions
      host_collections_permissions
      lifecycle_environment_permissions
      organization_permissions
      product_permissions
      subscription_permissions
      sync_plan_permissions
      user_permissions
    end

    def activation_keys_permissions
      @plugin.permission :view_activation_keys,
                         {
                           'katello/activation_keys' => [:all, :index],
                           'katello/api/v2/activation_keys' => [:index, :show, :available_host_collections, :available_releases,
                                                                :product_content, :auto_complete_search],
                           'katello/api/v2/repository_sets' => [:index, :auto_complete_search]
                         },
                         :resource_type => 'Katello::ActivationKey',
                         :finder_scope => :readable
      @plugin.permission :create_activation_keys,
                         {
                           'katello/api/v2/activation_keys' => [:create, :copy]
                         },
                         :resource_type => 'Katello::ActivationKey'
      @plugin.permission :edit_activation_keys,
                         {
                           'katello/api/v2/activation_keys' => [:update, :content_override,
                                                                :add_subscriptions, :remove_subscriptions,
                                                                :add_host_collections, :remove_host_collections]
                         },
                         :resource_type => 'Katello::ActivationKey',
                         :finder_scope => :editable
      @plugin.permission :destroy_activation_keys,
                         {
                           'katello/api/v2/activation_keys' => [:destroy]
                         },
                         :resource_type => 'Katello::ActivationKey',
                         :finder_scope => :deletable
    end

    def capsule_content_permissions
      @plugin.permission :manage_capsule_content,
                         {
                           'katello/api/v2/capsule_content' => [:add_lifecycle_environment, :remove_lifecycle_environment,
                                                                :sync, :cancel_sync],
                           'katello/api/v2/capsules' => [:index, :show]
                         },
                         :resource_type => 'SmartProxy'

      @plugin.permission :view_capsule_content,
                         {
                           'katello/api/v2/capsule_content' => [:lifecycle_environments, :available_lifecycle_environments, :sync_status],
                           'smart_proxies' => [:pulp_storage, :pulp_status, :show_with_content]
                         },
                         :resource_type => "SmartProxy"
    end

    def content_view_permissions
      @plugin.permission :view_content_views,
                 {
                   'katello/api/v2/content_views' => [:index, :show, :auto_complete_search],
                   'katello/api/v2/content_view_filters' => [:index, :show, :auto_complete_search],
                   'katello/api/v2/content_view_filter_rules' => [:index, :show, :auto_complete_search],
                   'katello/api/v2/content_view_histories' => [:index, :auto_complete_search],
                   'katello/api/v2/content_view_repositories' => [:show_all],
                   'katello/api/v2/content_view_versions' => [:index, :show, :auto_complete_search],
                   'katello/api/v2/content_view_components' => [:index, :show, :show_all],
                   'katello/api/v2/debs' => [:index],
                   'katello/api/v2/packages' => [:index],
                   'katello/api/v2/package_groups' => [:index, :show, :auto_complete_search, :compare],
                   'katello/api/v2/errata' => [:index, :show, :auto_complete_search, :compare],
                   'katello/api/v2/module_streams' => [:index, :show, :auto_complete_search, :compare],
                   'katello/api/v2/ansible_collections' => [:index, :show, :auto_complete_search, :compare],
                   'katello/content_views' => [:auto_complete, :auto_complete_search],
                   'katello/errata' => [:short_details, :auto_complete],
                   'katello/packages' => [:details, :auto_complete],
                   'katello/products' => [:auto_complete],
                   'katello/repositories' => [:auto_complete_library],
                   'katello/content_search' => [:index,
                                                :products,
                                                :repos,
                                                :packages,
                                                :errata,
                                                :packages_items,
                                                :errata_items,
                                                :module_streams,
                                                :ansible_collections,
                                                :view_packages,
                                                :repo_packages,
                                                :repo_errata,
                                                :repo_compare_errata,
                                                :repo_compare_packages,
                                                :view_compare_errata,
                                                :view_compare_packages,
                                                :views]
                 },
                 :resource_type => 'Katello::ContentView',
                 :finder_scope => :readable
      @plugin.permission :create_content_views,
                         {
                           'katello/api/v2/content_views' => [:create, :copy]
                         },
                         :resource_type => 'Katello::ContentView'
      @plugin.permission :edit_content_views,
                         {
                           'katello/api/v2/content_views' => [:update, :remove_filters],
                           'katello/api/v2/content_view_versions' => [:update],
                           'katello/api/v2/content_view_filters' => [:create, :update, :destroy, :remove_filter_rules, :add_filter_rules],
                           'katello/api/v2/content_view_filter_rules' => [:create, :update, :destroy],
                           'katello/api/v2/content_view_components' => [:add_components, :remove_components, :update]
                         },
                         :resource_type => 'Katello::ContentView',
                         :finder_scope => :editable
      @plugin.permission :destroy_content_views,
                         {
                           'katello/api/v2/content_views' => [:destroy, :remove],
                           'katello/api/v2/content_view_versions' => [:destroy]
                         },
                         :resource_type => 'Katello::ContentView',
                         :finder_scope => :deletable
      @plugin.permission :publish_content_views,
                         {
                           'katello/api/v2/content_views' => [:publish],
                           'katello/api/v2/content_view_versions' => [:incremental_update, :republish_repositories],
                           'katello/api/v2/content_imports' => [:version, :index]
                         },
                         :resource_type => 'Katello::ContentView',
                         :finder_scope => :publishable
      @plugin.permission :promote_or_remove_content_views,
                         {
                           'katello/api/v2/content_view_versions' => [:promote],
                           'katello/api/v2/content_views' => [:remove_from_environment, :remove, :republish_repositories]
                         },
                         :resource_type => 'Katello::ContentView',
                         :finder_scope => :promotable_or_removable
    end

    def content_credential_permissions
      @plugin.permission :view_content_credentials,
                         {
                           'katello/api/v2/content_credentials' => [:index, :show, :content, :auto_complete_search],
                           'katello/api/v2/gpg_keys' => [:index, :show, :content, :auto_complete_search]
                         },
                         :resource_type => 'Katello::ContentCredential',
                         :finder_scope => :readable
      @plugin.permission :create_content_credentials,
                         {
                           'katello/api/v2/content_credentials' => [:create],
                           'katello/api/v2/gpg_keys' => [:create]
                         },
                         :resource_type => 'Katello::ContentCredential'
      @plugin.permission :edit_content_credentials,
                         {
                           'katello/api/v2/content_credentials' => [:update, :set_content],
                           'katello/api/v2/gpg_keys' => [:update, :set_content]
                         },
                         :resource_type => 'Katello::ContentCredential',
                         :finder_scope => :editable
      @plugin.permission :destroy_content_credentials,
                         {
                           'katello/api/v2/content_credentials' => [:destroy],
                           'katello/api/v2/gpg_keys' => [:destroy]
                         },
                         :resource_type => 'Katello::ContentCredential',
                         :finder_scope => :deletable
    end

    def host_collections_permissions
      @plugin.permission :view_host_collections,
                         {
                           'katello/api/v2/host_collections' => [:index, :show, :auto_complete_search]
                         },
                         :resource_type => 'Katello::HostCollection',
                         :finder_scope => :readable
      @plugin.permission :create_host_collections,
                         {
                           'katello/api/v2/host_collections' => [:create, :copy]
                         },
                         :resource_type => 'Katello::HostCollection',
                         :finder_scope => :creatable
      @plugin.permission :edit_host_collections,
                         {
                           'katello/api/v2/host_collections' => [:update, :add_hosts, :remove_hosts]
                         },
                         :resource_type => 'Katello::HostCollection',
                         :finder_scope => :editable
      @plugin.permission :destroy_host_collections,
                         {
                           'katello/api/v2/host_collections' => [:destroy]
                         },
                         :resource_type => 'Katello::HostCollection',
                         :finder_scope => :deletable
    end

    def lifecycle_environment_permissions
      @plugin.permission :view_lifecycle_environments,
                         {
                           'katello/api/v2/environments' => [:index, :show, :paths, :repositories, :auto_complete_search],
                           'katello/api/rhsm/candlepin_proxies' => [:rhsm_index]
                         },
                         :resource_type => 'Katello::KTEnvironment',
                         :finder_scope => :readable
      @plugin.permission :create_lifecycle_environments,
                         {
                           'katello/api/v2/environments' => [:create]
                         },
                         :resource_type => 'Katello::KTEnvironment',
                         :finder_scope => :creatable
      @plugin.permission :edit_lifecycle_environments,
                         {
                           'katello/api/v2/environments' => [:update]
                         },
                         :resource_type => 'Katello::KTEnvironment',
                         :finder_scope => :editable
      @plugin.permission :destroy_lifecycle_environments,
                         {
                           'katello/api/v2/environments' => [:destroy]
                         },
                         :resource_type => 'Katello::KTEnvironment',
                         :finder_scope => :deletable
      @plugin.permission :promote_or_remove_content_views_to_environments,
                         {},
                         :resource_type => 'Katello::KTEnvironment',
                         :finder_scope => :promotable
    end

    def product_permissions
      @plugin.permission :view_products,
                         {
                           'katello/products' => [:auto_complete, :auto_complete_search],
                           'katello/api/v2/products' => [:index, :show, :auto_complete_search],
                           'katello/api/v2/repositories' => [:index, :show, :repository_types, :content_types, :auto_complete_search, :cancel],
                           'katello/api/v2/packages' => [:index, :show, :auto_complete_search, :auto_complete_name, :auto_complete_arch, :compare],
                           'katello/api/v2/srpms' => [:index, :show, :auto_complete_search, :compare],
                           'katello/api/v2/debs' => [:index, :show, :auto_complete_search, :auto_complete_name, :auto_complete_arch, :compare],
                           'katello/api/v2/package_groups' => [:index, :show, :auto_complete_search, :compare],
                           'katello/api/v2/docker_manifests' => [:index, :show, :auto_complete_search, :compare],
                           'katello/api/v2/docker_manifest_lists' => [:index, :show, :auto_complete_search, :compare],
                           'katello/api/v2/docker_tags' => [:index,
                                                            :show,
                                                            :auto_complete_search,
                                                            :auto_complete_name,
                                                            :compare,
                                                            :repositories],
                           'katello/api/v2/file_units' => [:index, :show, :auto_complete_search, :compare],
                           'katello/api/v2/errata' => [:index, :show, :auto_complete_search, :compare],
                           'katello/api/v2/module_streams' => [:index, :show, :auto_complete_search, :compare, :auto_complete_name],
                           'katello/api/v2/ansible_collections' => [:index, :show, :auto_complete_search, :compare],
                           'katello/api/v2/generic_content_units' => [:index, :show, :auto_complete_search, :compare],
                           'katello/errata' => [:short_details, :auto_complete],
                           'katello/packages' => [:details, :auto_complete],
                           'katello/files' => [:auto_complete],
                           'katello/generic' => [:auto_complete],
                           'katello/repositories' => [:auto_complete_library, :repository_types],
                           'katello/content_search' => [:index,
                                                        :products,
                                                        :repos,
                                                        :packages,
                                                        :errata,
                                                        :packages_items,
                                                        :errata_items,
                                                        :module_streams,
                                                        :ansible_collections,
                                                        :repo_packages,
                                                        :repo_errata,
                                                        :repo_compare_errata,
                                                        :repo_compare_packages],
                           'katello/api/v2/repository_sets' => [:index, :show, :available_repositories, :auto_complete_search]
                         },
                         :resource_type => 'Katello::Product',
                         :finder_scope => :readable
      @plugin.permission :create_products,
                         {
                           'katello/api/v2/products' => [:create],
                           'katello/api/v2/package_groups' => [:create]
                         },
                         :resource_type => 'Katello::Product',
                         :finder_scope => :editable
      @plugin.permission :edit_products,
                         {
                           'katello/api/v2/products' => [:update],
                           'katello/api/v2/repositories' => [:create, :update, :remove_content, :import_uploads, :upload_content, :republish, :verify_checksum],
                           'katello/api/v2/products_bulk_actions' => [:update_sync_plans, :update_http_proxy, :verify_checksum_products],
                           'katello/api/v2/content_uploads' => [:create, :update, :destroy],
                           'katello/api/v2/organizations' => [:repo_discover, :cancel_repo_discover],
                           'katello/api/v2/repository_sets' => [:enable, :disable]
                         },
                         :resource_type => 'Katello::Product',
                         :finder_scope => :editable
      @plugin.permission :destroy_products,
                         {
                           'katello/api/v2/products' => [:destroy],
                           'katello/api/v2/repositories' => [:destroy],
                           'katello/api/v2/products_bulk_actions' => [:destroy_products],
                           'katello/api/v2/repositories_bulk_actions' => [:destroy_repositories],
                           'katello/api/v2/package_groups' => [:destroy]
                         },
                         :resource_type => 'Katello::Product',
                         :finder_scope => :deletable
      @plugin.permission :sync_products,
                         {
                           'katello/api/v2/products' => [:sync],
                           'katello/api/v2/repositories' => [:sync],
                           'katello/api/v2/products_bulk_actions' => [:sync_products],
                           'katello/api/v2/repositories_bulk_actions' => [:sync_repositories],
                           'katello/api/v2/sync' => [:index],
                           'katello/sync_management' => [:index, :sync_status, :product_status, :sync, :destroy]
                         },
                         :resource_type => 'Katello::Product',
                         :finder_scope => :syncable
    end

    def subscription_permissions
      @plugin.permission :view_subscriptions,
                         {
                           'katello/api/v2/subscriptions' => [:index, :show, :available, :manifest_history, :auto_complete_search]
                         },
                         :resource_type => 'Katello::Subscription'
      @plugin.permission :attach_subscriptions,
                         {
                           'katello/api/v2/subscriptions' => [:create]
                         },
                         :resource_type => 'Katello::Subscription'
      @plugin.permission :unattach_subscriptions,
                         {
                           'katello/api/v2/subscriptions' => [:destroy]
                         },
                         :resource_type => 'Katello::Subscription'
      @plugin.permission :import_manifest,
                         {
                           'katello/api/v2/subscriptions' => [:upload, :refresh_manifest]
                         },
                         :resource_type => 'Katello::Subscription'
      @plugin.permission :delete_manifest,
                         {
                           'katello/api/v2/subscriptions' => [:delete_manifest]
                         },
                         :resource_type => 'Katello::Subscription'
      @plugin.permission :manage_subscription_allocations,
                         {
                           'katello/api/v2/upstream_subscriptions' => [:index, :create, :destroy, :update, :ping, :enable_simple_content_access, :disable_simple_content_access, :simple_content_access_eligible],
                           'katello/api/v2/simple_content_access' => [:enable, :disable, :eligible]
                         },
                         :resource_type => 'Katello::Subscription'
    end

    def sync_plan_permissions
      @plugin.permission :view_sync_plans,
                         {
                           'katello/api/v2/sync_plans' => [:index, :show, :add_products, :remove_products, :available_products, :auto_complete_search]
                         },
                         :resource_type => 'Katello::SyncPlan',
                         :finder_scope => :readable
      @plugin.permission :create_sync_plans,
                         {
                           'katello/api/v2/sync_plans' => [:create]
                         },
                         :resource_type => 'Katello::SyncPlan',
                         :finder_scope => :editable
      @plugin.permission :edit_sync_plans,
                         {
                           'katello/api/v2/sync_plans' => [:update]
                         },
                         :resource_type => 'Katello::SyncPlan',
                         :finder_scope => :editable
      @plugin.permission :destroy_sync_plans,
                         {
                           'katello/api/v2/sync_plans' => [:destroy]
                         },
                         :resource_type => 'Katello::SyncPlan',
                         :finder_scope => :deletable
      @plugin.permission :sync_sync_plans,
                         {
                           'katello/api/v2/sync_plans' => [:sync]
                         },
                         :resource_type => 'Katello::SyncPlan',
                         :finder_scope => :syncable
    end

    def user_permissions
      @plugin.permission :my_organizations,
                         {
                           'katello/api/rhsm/candlepin_proxies' => [:list_owners]
                         },
                         :public => true
    end

    def organization_permissions
      @plugin.permission :import_content,
                         {
                           'katello/api/v2/content_imports' => [:library, :version, :index]
                         },
                         :resource_type => 'Organization'

      @plugin.permission :export_content,
                         {
                           'katello/api/v2/content_view_versions' => [:export],
                           'katello/api/v2/content_exports' => [:library, :version, :index],
                           'katello/api/v2/content_export_incrementals' => [:library, :version]
                         },
                         :resource_type => 'Organization'
    end
  end
end