require 'fog/openstack/models/model'

module Fog
  module OpenStack
    class Identity
      class V3
        class Group < Fog::OpenStack::Model
          identity :id

          attribute :description
          attribute :domain_id
          attribute :name
          attribute :links

          def to_s
            name
          end

          def destroy
            requires :id
            service.delete_group(id)
            true
          end

          def update(attr = nil)
            requires :id, :name
            merge_attributes(
              service.update_group(id, attr || attributes).body['group']
            )
            self
          end

          def create
            requires :name
            merge_attributes(
              service.create_group(attributes).body['group']
            )
            self
          end

          def add_user(user_id)
            requires :id
            service.add_user_to_group(id, user_id)
          end

          def remove_user(user_id)
            requires :id
            service.remove_user_from_group(id, user_id)
          end

          def contains_user?(user_id)
            requires :id
            begin
              service.group_user_check(id, user_id)
            rescue Fog::OpenStack::Identity::NotFound
              return false
            end
            true
          end

          def roles
            requires :id, :domain_id
            service.list_domain_group_roles(domain_id, id).body['roles']
          end

          def grant_role(role_id)
            requires :id, :domain_id
            service.grant_domain_group_role(domain_id, id, role_id)
          end

          def check_role(role_id)
            requires :id, :domain_id
            begin
              service.check_domain_group_role(domain_id, id, role_id)
            rescue Fog::OpenStack::Identity::NotFound
              return false
            end
            true
          end

          def revoke_role(role_id)
            requires :id, :domain_id
            service.revoke_domain_group_role(domain_id, id, role_id)
          end

          def users(attr = {})
            requires :id
            service.list_group_users(id, attr).body['users']
          end
        end
      end
    end
  end
end