memorymanager.go

// Copyright 2016 IBM Corporation
//
//   Licensed under the Apache License, Version 2.0 (the "License");
//   you may not use this file except in compliance with the License.
//   You may obtain a copy of the License at
//
//       http://www.apache.org/licenses/LICENSE-2.0
//
//   Unless required by applicable law or agreed to in writing, software
//   distributed under the License is distributed on an "AS IS" BASIS,
//   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
//   See the License for the specific language governing permissions and
//   limitations under the License.

package rules

import (
	"errors"

	"sync"

	"github.com/amalgam8/amalgam8/pkg/api"
	"github.com/pborman/uuid"
)

// NewMemoryManager constructs a new in memory manager.
func NewMemoryManager(validator api.Validator) Manager {
	return &memory{
		rules:     make(map[string]map[string]api.Rule),
		revision:  make(map[string]int64),
		validator: validator,
		mutex:     &sync.Mutex{},
	}
}

type memory struct {
	rules     map[string]map[string]api.Rule
	revision  map[string]int64
	validator api.Validator
	mutex     *sync.Mutex
}

func (m *memory) AddRules(namespace string, rules []api.Rule) (NewRules, error) {
	if len(rules) == 0 {
		return NewRules{}, errors.New("rules: no rules provided")
	}

	// Validate rules
	if err := m.validateRules(rules); err != nil {
		return NewRules{}, err
	}

	// Generate IDs
	m.generateRuleIDs(rules)

	// Add the rules
	m.mutex.Lock()
	m.addRules(namespace, rules)
	m.mutex.Unlock()

	// Get the new IDs
	ids := make([]string, len(rules))
	for i, rule := range rules {
		ids[i] = rule.ID
	}

	return NewRules{
		IDs: ids,
	}, nil
}

func (m *memory) addRules(namespace string, rules []api.Rule) {
	_, exists := m.rules[namespace]
	if !exists {
		m.rules[namespace] = make(map[string]api.Rule)
	}

	for _, rule := range rules {
		m.rules[namespace][rule.ID] = rule
	}

	m.revision[namespace]++
}

func (m *memory) GetRules(namespace string, filter api.RuleFilter) (RetrievedRules, error) {
	m.mutex.Lock()

	revision := m.revision[namespace]

	rules, exists := m.rules[namespace]
	if !exists {
		m.mutex.Unlock()
		return RetrievedRules{
			Rules:    []api.Rule{},
			Revision: revision,
		}, nil
	}

	var results []api.Rule
	if len(filter.IDs) == 0 {
		results = make([]api.Rule, len(m.rules[namespace]))

		index := 0
		for _, rule := range rules {
			results[index] = rule
			index++
		}
	} else {
		results = make([]api.Rule, 0, len(filter.IDs))
		for _, id := range filter.IDs {
			rule, exists := m.rules[namespace][id]
			if !exists {
				m.mutex.Unlock()
				return RetrievedRules{}, errors.New("rule not found")
			}

			results = append(results, rule)
		}
	}

	m.mutex.Unlock()

	results = filter.Apply(results)

	return RetrievedRules{
		Rules:    results,
		Revision: revision,
	}, nil
}

func (m *memory) UpdateRules(namespace string, rules []api.Rule) error {
	if len(rules) == 0 {
		return errors.New("rules: no rules provided")
	}

	// Validate rules
	if err := m.validateRules(rules); err != nil {
		return err
	}

	m.mutex.Lock()
	defer m.mutex.Unlock()

	// Make sure the IDs exist
	_, exists := m.rules[namespace]
	if !exists {
		return errors.New("rules: ID not found")
	}

	for _, rule := range rules {
		_, exists := m.rules[namespace][rule.ID]
		if !exists {
			return errors.New("rules: ID not found")
		}
	}

	// Update the rules
	for _, rule := range rules {
		m.rules[namespace][rule.ID] = rule
	}

	// Update the revision
	m.revision[namespace]++

	return nil
}

func (m *memory) DeleteRules(namespace string, filter api.RuleFilter) error {
	m.mutex.Lock()
	defer m.mutex.Unlock()

	m.revision[namespace]++
	return m.deleteRulesByFilter(namespace, filter)
}

func (m *memory) deleteRulesByFilter(namespace string, filter api.RuleFilter) error {
	ruleMap, exists := m.rules[namespace]
	if !exists {
		return nil
	}

	rules := make([]api.Rule, len(m.rules[namespace]))
	i := 0
	for _, rule := range ruleMap {
		rules[i] = rule
		i++
	}

	rules = filter.Apply(rules)

	for _, rule := range rules {
		delete(m.rules[namespace], rule.ID)
	}

	return nil
}

func (m *memory) generateRuleIDs(rules []api.Rule) {
	for i := range rules {
		if rules[i].ID == "" {
			rules[i].ID = uuid.New() // Generate an ID for each rule
		}
	}
}

func (m *memory) validateRules(rules []api.Rule) error {
	for _, rule := range rules {
		if err := m.validator.Validate(rule); err != nil {
			return err
		}
	}
	return nil
}