feat: Adds permissions to API Keys

alpine-infra/src/main/java/alpine/persistence/AlpineQueryManager.java

@@ -932,18 +932,11 @@ public boolean hasPermission(final Team team, String permissionName) {
      * @since 1.1.1
      */
     public boolean hasPermission(final ApiKey apiKey, String permissionName) {
-        if (apiKey.getTeams() == null) {
-            return false;
-        }
-        for (final Team team: apiKey.getTeams()) {
-            final List<Permission> teamPermissions = getObjectById(Team.class, team.getId()).getPermissions();
-            for (final Permission permission: teamPermissions) {
-                if (permission.getName().equals(permissionName)) {
-                    return true;
-                }
-            }
-        }
-        return false;
+        final Query<Permission> query = pm.newQuery(Permission.class, "name == :permissionName && apiKey.contains(apiKey) && apiKey.id == :apiKeyId");
+        query.declareVariables("alpine.model.ApiKey apiKey");
+        query.setParameters(permissionName, apiKey.getId());
+        query.setResult("count(id)");
+        return executeAndCloseResultUnique(query, Long.class) > 0;
     }
 
     /**

alpine-model/src/main/java/alpine/model/ApiKey.java

@@ -102,6 +102,12 @@ public class ApiKey implements Serializable, Principal {
     @JsonIgnore
     private List<Team> teams;
 
+    @Persistent(table = "APIKEYS_PERMISSIONS", defaultFetchGroup = "true")
+    @Join(column = "APIKEY_ID")
+    @Element(column = "PERMISSION_ID")
+    @Order(extensions = @Extension(vendorName = "datanucleus", key = "list-ordering", value = "name ASC"))
+    private List<Permission> permissions;
+
     @Persistent
     @Unique(name = "APIKEY_PUBLIC_IDX")
     @Size(min = LEGACY_PUBLIC_ID_LENGTH, max = PUBLIC_ID_LENGTH)
@@ -197,6 +203,14 @@ public void setTeams(List<Team> teams) {
         this.teams = teams;
     }
 
+    public List<Permission> getPermissions() {
+        return permissions;
+    }
+
+    public void setPermissions(List<Permission> permissions) {
+        this.permissions = permissions;
+    }
+
     public String getPublicId() {
         return publicId;
     }

alpine-model/src/main/java/alpine/model/Permission.java

@@ -85,6 +85,10 @@ public class Permission implements Serializable {
     @JsonIgnore
     private List<ManagedUser> managedUsers;
 
+    @Persistent(mappedBy = "permissions")
+    @JsonIgnore
+    private List<ApiKey> apiKeys;
+
     public long getId() {
         return id;
     }
@@ -140,5 +144,12 @@ public List<ManagedUser> getManagedUsers() {
     public void setManagedUsers(List<ManagedUser> managedUsers) {
         this.managedUsers = managedUsers;
     }
-}
 
+    public List<ApiKey> getApiKeys() {
+        return apiKeys;
+    }
+
+    public void setApiKeys(List<ApiKey> apiKeys) {
+        this.apiKeys = apiKeys;
+    }
+}

alpine-model/src/test/java/alpine/model/ApiKeyTest.java

@@ -18,10 +18,14 @@
  */
 package alpine.model;
 
+import org.junit.jupiter.api.Assertions;
 import org.junit.jupiter.api.Test;
 
 import static org.assertj.core.api.Assertions.assertThat;
 
+import java.util.ArrayList;
+import java.util.List;
+
 public class ApiKeyTest {
 
     @Test
@@ -31,4 +35,23 @@ public void maskTest() {
         assertThat(apiKey.getMaskedKey()).isEqualTo("alpine_TL1xa********************************");
     }
 
+    @Test
+    public void teamsTest() {
+        List<Team> teams = new ArrayList<>();
+        teams.add(new Team());
+        ApiKey key = new ApiKey();
+        key.setTeams(teams);
+        Assertions.assertEquals(teams, key.getTeams());
+        Assertions.assertEquals(1, key.getTeams().size());
+    }
+
+    @Test
+    public void permissionsTest() {
+        List<Permission> permissions = new ArrayList<>();
+        permissions.add(new Permission());
+        ApiKey user = new ApiKey();
+        user.setPermissions(permissions);
+        Assertions.assertEquals(permissions, user.getPermissions());
+        Assertions.assertEquals(1, user.getPermissions().size());
+    }
 }