module Nephophobia
  class RoleData
    attr_reader :name

    attr_accessor :attributes

    def initialize attributes
      @attributes = attributes

      @name = attributes['role']
    end
  end

  class Role
    DEFAULT = "sysadmin"

    def initialize client
      @client = client
    end

    ##
    # Returns global roles for the given 'user_name', or for the given 'project_name'.
    #
    # +user_name+: A String representing a nova user_name.
    # +project_name+: An Optional String representing a nova project_name name.

    def all user_name, project_name = nil
      params = {
        "User" => user_name,
      }
      params.merge!("Project" => project_name) if project_name

      response = @client.action "DescribeUserRoles", params

      roles = response.body['DescribeUserRolesResponse']['roles']
      roles && Nephophobia.coerce(roles['item']).collect do |data|
        RoleData.new data
      end
    end

    ##
    # Adds the given 'user_name' to the global 'Role::DEFAULT', unless a
    # 'role_name' is provided.
    # Returns a response to the state change.
    #
    # +user_name+: A String representing a nova user_name.
    # +project_name+: An Optional String representing a nova project_name name.
    # +role_name+: An Optional String representing a nova role name.

    def create user_name, project_name = nil, role_name = nil
      modify_role user_name, "add", project_name, role_name
    end

    ##
    # Removes the given 'user_name' from the global 'Role::DEFAULT', unless a
    # 'role_name' is provided.
    #
    # +user_name+: A String representing a nova user_name.
    # +project_name+: An Optional String representing a nova project_name name.
    # +role_name+: An Optional String representing a nova role name.

    def destroy user_name, project_name = nil, role_name = nil
      modify_role user_name, "remove", project_name
    end

  private
    def modify_role user_name, operation, project_name = nil, role_name = nil
      params = {
        "User"      => user_name,
        "Role"      => role_name || DEFAULT,
        "Operation" => operation
      }
      params.merge!("Project" => project_name) if project_name

      response = @client.action "ModifyUserRole", params

      ResponseData.new response.body['ModifyUserRoleResponse']
    end
  end
end