Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Feat: add API to list groups and users without permissions #1804

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jun 24, 2025
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -15,6 +15,7 @@
import reactor.core.publisher.Flux;
import reactor.core.publisher.Mono;

import java.util.List;
import java.util.Set;

public interface ApplicationApiService {
Expand Down Expand Up @@ -66,4 +67,6 @@ Mono<Boolean> grantPermission(String applicationId,
Mono<Boolean> setApplicationAsAgencyProfile(String applicationId, boolean agencyProfile);

Mono<Application> updateSlug(String applicationId, String slug);

Mono<List<Object>> getGroupsOrMembersWithoutPermissions(String appId);
}
Original file line number Diff line number Diff line change
Expand Up @@ -22,15 +22,22 @@
import org.lowcoder.api.home.UserHomeApiService;
import org.lowcoder.api.permission.PermissionHelper;
import org.lowcoder.api.permission.view.PermissionItemView;
import org.lowcoder.api.usermanagement.GroupApiService;
import org.lowcoder.api.usermanagement.OrgApiService;
import org.lowcoder.api.usermanagement.OrgDevChecker;
import org.lowcoder.api.usermanagement.view.GroupView;
import org.lowcoder.api.usermanagement.view.OrgMemberListView;
import org.lowcoder.domain.application.model.*;
import org.lowcoder.domain.application.service.ApplicationHistorySnapshotService;
import org.lowcoder.domain.application.service.ApplicationRecordService;
import org.lowcoder.domain.application.service.ApplicationService;
import org.lowcoder.domain.datasource.model.Datasource;
import org.lowcoder.domain.datasource.service.DatasourceService;
import org.lowcoder.domain.folder.service.FolderElementRelationService;
import org.lowcoder.domain.group.model.Group;
import org.lowcoder.domain.group.model.GroupMember;
import org.lowcoder.domain.interaction.UserApplicationInteractionService;
import org.lowcoder.domain.organization.model.OrgMember;
import org.lowcoder.domain.organization.model.Organization;
import org.lowcoder.domain.organization.service.OrgMemberService;
import org.lowcoder.domain.organization.service.OrganizationService;
Expand All @@ -54,13 +61,11 @@
import reactor.core.publisher.Flux;
import reactor.core.publisher.Mono;
import reactor.core.scheduler.Schedulers;
import reactor.util.function.Tuple2;

import java.time.Duration;
import java.time.Instant;
import java.util.HashSet;
import java.util.List;
import java.util.Map;
import java.util.Set;
import java.util.*;
import java.util.stream.Collectors;

import static org.lowcoder.domain.application.model.ApplicationStatus.NORMAL;
Expand Down Expand Up @@ -99,6 +104,8 @@ public class ApplicationApiServiceImpl implements ApplicationApiService {
private final ApplicationHistorySnapshotService applicationHistorySnapshotService;
private final ApplicationRecordService applicationRecordService;
private final FolderElementRelationService folderElementRelationService;
private final GroupApiService groupApiService;
private final OrgApiService orgApiService;

@Override
public Mono<ApplicationView> create(CreateApplicationRequest createApplicationRequest) {
Expand Down Expand Up @@ -743,4 +750,62 @@ private Mono<Void> checkDatasourcePermissions(Application application) {
});
});
}

@Override
public Mono<List<Object>> getGroupsOrMembersWithoutPermissions(String appId) {
return applicationService.findById(appId)
.flatMap(application -> {
String orgId = application.getOrganizationId();
Mono<List<ResourcePermission>> applicationPermissions = resourcePermissionService.getByApplicationId(application.getId()).cache();

Mono<List<PermissionItemView>> groupPermissionPairsMono = applicationPermissions
.flatMap(permissionHelper::getGroupPermissions);

Mono<List<PermissionItemView>> userPermissionPairsMono = applicationPermissions
.flatMap(permissionHelper::getUserPermissions);
Mono<OrgMemberListView> orgMemberListViewMono = orgApiService.getOrganizationMembers(orgId, 1, 0);
Mono<List<GroupView>> groupsViewMono = groupApiService.getGroups();

return Mono.zip(groupPermissionPairsMono, userPermissionPairsMono, orgMemberListViewMono, groupsViewMono)
.map(tuple -> {
List<PermissionItemView> groupPermissionPairs = tuple.getT1();
List<PermissionItemView> userPermissionPairs = tuple.getT2();
OrgMemberListView orgMemberListViews = tuple.getT3();
List<GroupView> groupListViews = tuple.getT4();

Set<String> groupIdsWithPerm = groupPermissionPairs.stream()
.map(PermissionItemView::getId)
.collect(Collectors.toSet());

List<Map<String, Object>> filteredGroups = groupListViews.stream()
.filter(group -> !groupIdsWithPerm.contains(group.getGroupId()))
.map(group -> {
Map<String, Object> map = new HashMap<>();
map.put("type", "Group");
map.put("data", group);
return map;
})
.toList();

Set<String> userIdsWithPerm = userPermissionPairs.stream()
.map(PermissionItemView::getId)
.collect(Collectors.toSet());

List<Map<String, Object>> filteredMembers = orgMemberListViews.getMembers().stream()
.filter(member -> !userIdsWithPerm.contains(member.getUserId()))
.map(member -> {
Map<String, Object> map = new HashMap<>();
map.put("type", "User");
map.put("data", member);
return map;
})
.toList();

List<Object> result = new ArrayList<>();
result.addAll(filteredGroups);
result.addAll(filteredMembers);
return result;
});
});
}
}
Original file line number Diff line number Diff line change
Expand Up @@ -27,6 +27,8 @@
import static org.lowcoder.plugin.api.event.LowcoderEvent.EventType.*;
import static org.lowcoder.sdk.exception.BizError.INVALID_PARAMETER;
import static org.lowcoder.sdk.util.ExceptionUtils.ofError;
import reactor.core.publisher.Flux;
import java.util.Map;

@RequiredArgsConstructor
@RestController
Expand Down Expand Up @@ -298,5 +300,36 @@ public Mono<ResponseView<Boolean>> setApplicationAsAgencyProfile(@PathVariable S
.map(ResponseView::success));
}


@Override
public Mono<ResponseView<List<Object>>> getGroupsOrMembersWithoutPermissions(
@PathVariable String applicationId,
@RequestParam(required = false) String search,
@RequestParam(required = false, defaultValue = "1") Integer pageNum,
@RequestParam(required = false, defaultValue = "1000") Integer pageSize) {

return gidService.convertLibraryQueryIdToObjectId(applicationId).flatMap(appId -> {
var flx = applicationApiService.getGroupsOrMembersWithoutPermissions(appId)
.flatMapMany(Flux::fromIterable)
.filter(item -> {
if (search == null || search.isBlank()) return true;
if (!(item instanceof Map map)) return false;
Object type = map.get("type");
Object data = map.get("data");
if ("Group".equals(type) && data instanceof org.lowcoder.api.usermanagement.view.GroupView group) {
return group.getGroupName() != null && group.getGroupName().toLowerCase().contains(search.toLowerCase());
}
if ("User".equals(type) && data instanceof org.lowcoder.api.usermanagement.view.OrgMemberListView.OrgMemberView user) {
return user.getName() != null && user.getName().toLowerCase().contains(search.toLowerCase());
}
return false;
})
.cache();
var countMono = flx.count();
var flux1 = flx.skip((long) (pageNum - 1) * pageSize);
if (pageSize > 0) flux1 = flux1.take(pageSize);
return flux1.collectList()
.zipWith(countMono)
.map(tuple -> PageResponseView.success(tuple.getT1(), pageNum, pageSize, Math.toIntExact(tuple.getT2())));
});
}
}
Original file line number Diff line number Diff line change
Expand Up @@ -245,6 +245,20 @@ public Mono<ResponseView<Boolean>> grantPermission(
@GetMapping("/{applicationId}/permissions")
public Mono<ResponseView<ApplicationPermissionView>> getApplicationPermissions(@PathVariable String applicationId);

@Operation(
tags = ApplicationEndpoints.TAG_APPLICATION_PERMISSIONS,
operationId = "listGroupsOrMembersWithoutPermissions",
summary = "Get groups or members without permissions",
description = "Retrieve the groups or members of a specific Lowcoder Application identified by its ID that do not have permissions."
)
@GetMapping("/{applicationId}/get_groups_or_members_without_permissions")
public Mono<ResponseView<List<Object>>> getGroupsOrMembersWithoutPermissions(
@PathVariable String applicationId,
@RequestParam(required = false) String search,
@RequestParam(required = false, defaultValue = "1") Integer pageNum,
@RequestParam(required = false, defaultValue = "1000") Integer pageSize
);

@Operation(
tags = TAG_APPLICATION_MANAGEMENT,
operationId = "setApplicationAsPublic",
Expand Down
Loading