From 37ac26378feca009f3398ba6160581524ec17cbe Mon Sep 17 00:00:00 2001
From: LittleSheep <littlesheep.code@hotmail.com>
Date: Tue, 6 Feb 2024 11:05:40 +0800
Subject: [PATCH] :recycle: Use power level permission management

---
 pkg/models/accounts.go   | 32 +++++++++++++++-----------------
 pkg/server/auth.go       |  1 -
 pkg/services/accounts.go |  4 ++--
 3 files changed, 17 insertions(+), 20 deletions(-)

diff --git a/pkg/models/accounts.go b/pkg/models/accounts.go
index 26663f6..a6db7c0 100644
--- a/pkg/models/accounts.go
+++ b/pkg/models/accounts.go
@@ -5,8 +5,6 @@ import (
 	"github.com/spf13/viper"
 	"path/filepath"
 	"time"
-
-	"gorm.io/datatypes"
 )
 
 type AccountState = int8
@@ -19,21 +17,21 @@ const (
 type Account struct {
 	BaseModel
 
-	Name          string                       `json:"name" gorm:"uniqueIndex"`
-	Nick          string                       `json:"nick"`
-	Avatar        string                       `json:"avatar"`
-	State         AccountState                 `json:"state"`
-	Profile       AccountProfile               `json:"profile"`
-	Sessions      []AuthSession                `json:"sessions"`
-	Challenges    []AuthChallenge              `json:"challenges"`
-	Factors       []AuthFactor                 `json:"factors"`
-	Contacts      []AccountContact             `json:"contacts"`
-	Events        []ActionEvent                `json:"events"`
-	MagicTokens   []MagicToken                 `json:"-" gorm:"foreignKey:AssignTo"`
-	ThirdClients  []ThirdClient                `json:"clients"`
-	Notifications []Notification               `json:"notifications" gorm:"foreignKey:RecipientID"`
-	ConfirmedAt   *time.Time                   `json:"confirmed_at"`
-	Permissions   datatypes.JSONType[[]string] `json:"permissions"`
+	Name          string           `json:"name" gorm:"uniqueIndex"`
+	Nick          string           `json:"nick"`
+	Avatar        string           `json:"avatar"`
+	State         AccountState     `json:"state"`
+	Profile       AccountProfile   `json:"profile"`
+	Sessions      []AuthSession    `json:"sessions"`
+	Challenges    []AuthChallenge  `json:"challenges"`
+	Factors       []AuthFactor     `json:"factors"`
+	Contacts      []AccountContact `json:"contacts"`
+	Events        []ActionEvent    `json:"events"`
+	MagicTokens   []MagicToken     `json:"-" gorm:"foreignKey:AssignTo"`
+	ThirdClients  []ThirdClient    `json:"clients"`
+	Notifications []Notification   `json:"notifications" gorm:"foreignKey:RecipientID"`
+	ConfirmedAt   *time.Time       `json:"confirmed_at"`
+	PowerLevel    int              `json:"power_level"`
 }
 
 func (v Account) GetPrimaryEmail() AccountContact {
diff --git a/pkg/server/auth.go b/pkg/server/auth.go
index 84d97b7..8a57e2f 100644
--- a/pkg/server/auth.go
+++ b/pkg/server/auth.go
@@ -29,7 +29,6 @@ var auth = keyauth.New(keyauth.Config{
 		}
 
 		c.Locals("principal", user)
-		c.Locals("permissions", user.Permissions.Data())
 
 		return true, nil
 	},
diff --git a/pkg/services/accounts.go b/pkg/services/accounts.go
index 90c7406..cc5b74d 100644
--- a/pkg/services/accounts.go
+++ b/pkg/services/accounts.go
@@ -7,7 +7,6 @@ import (
 	"fmt"
 	"github.com/google/uuid"
 	"github.com/samber/lo"
-	"gorm.io/datatypes"
 	"gorm.io/gorm"
 	"time"
 )
@@ -68,7 +67,7 @@ func CreateAccount(name, nick, email, password string) (models.Account, error) {
 				VerifiedAt: nil,
 			},
 		},
-		Permissions: datatypes.NewJSONType(make([]string, 0)),
+		PowerLevel:  0,
 		ConfirmedAt: nil,
 	}
 
@@ -100,6 +99,7 @@ func ConfirmAccount(code string) error {
 
 	return database.C.Transaction(func(tx *gorm.DB) error {
 		user.ConfirmedAt = lo.ToPtr(time.Now())
+		user.PowerLevel += 5
 
 		if err := database.C.Delete(&token).Error; err != nil {
 			return err