Merge pull request #373 from SumoLogic/ayiu_SUMO-164539_fgp_provider_pt_01

SUMO-164539: adding optional FGP "obj_permissions" feature to Monitor Folder TF Provider

Author: ayiusumo

sumologic/resource_sumologic_monitors_library_folder.go

@@ -92,18 +92,24 @@ func resourceSumologicMonitorsLibraryFolder() *schema.Resource {
 				Type:     schema.TypeString,
 				Required: true,
 			},
+
 			"post_request_map": {
 				Type:     schema.TypeMap,
 				Optional: true,
 				Elem: &schema.Schema{
 					Type: schema.TypeString,
 				},
 			},
+
+			"obj_permission": GetCmfFgpObjPermSetSchema(),
 		},
 	}
 }
 
+const fgpTargetType = "monitors"
+
 func resourceSumologicMonitorsLibraryFolderCreate(d *schema.ResourceData, meta interface{}) error {
+
 	c := meta.(*Client)
 	if d.Id() == "" {
 		folder := resourceToMonitorsLibraryFolder(d)
@@ -122,12 +128,24 @@ func resourceSumologicMonitorsLibraryFolderCreate(d *schema.ResourceData, meta i
 			return err
 		}
 
+		permStmts, convErr := ResourceToCmfFgpPermStmts(d, monitorDefinitionID)
+		if convErr != nil {
+			return convErr
+		}
+		_, fgpErr := c.SetCmfFgp(fgpTargetType, CmfFgpRequest{
+			PermissionStatements: permStmts,
+		})
+		if fgpErr != nil {
+			return fgpErr
+		}
+
 		d.SetId(monitorDefinitionID)
 	}
 	return resourceSumologicMonitorsLibraryFolderRead(d, meta)
 }
 
 func resourceSumologicMonitorsLibraryFolderRead(d *schema.ResourceData, meta interface{}) error {
+
 	c := meta.(*Client)
 
 	folder, err := c.GetMonitorsLibraryFolder(d.Id())
@@ -141,6 +159,18 @@ func resourceSumologicMonitorsLibraryFolderRead(d *schema.ResourceData, meta int
 		return nil
 	}
 
+	fgpResponse, fgpErr := c.GetCmfFgp(fgpTargetType, folder.ID)
+	if fgpErr != nil {
+		// if FGP endpoint is not enabled (not implemented), we should suppress this error
+		if !HasErrorCode(fgpErr.Error(), "not_implemented_yet") {
+			return fgpErr
+		} else {
+			log.Printf("[WARN] FGP Feature has not been enabled yet. Suppressing \"not_implemented_yet\" error under GetCmfFgp operation.")
+		}
+	} else {
+		CmfFgpPermStmtsSetToResource(d, fgpResponse.PermissionStatements)
+	}
+
 	d.Set("created_by", folder.CreatedBy)
 	d.Set("created_at", folder.CreatedAt)
 	d.Set("modified_by", folder.ModifiedBy)
@@ -158,13 +188,44 @@ func resourceSumologicMonitorsLibraryFolderRead(d *schema.ResourceData, meta int
 }
 
 func resourceSumologicMonitorsLibraryFolderUpdate(d *schema.ResourceData, meta interface{}) error {
+
 	c := meta.(*Client)
-	monitor := resourceToMonitorsLibraryFolder(d)
-	monitor.Type = "MonitorsLibraryFolderUpdate"
-	err := c.UpdateMonitorsLibraryFolder(monitor)
+	monitorFolder := resourceToMonitorsLibraryFolder(d)
+	monitorFolder.Type = "MonitorsLibraryFolderUpdate"
+	err := c.UpdateMonitorsLibraryFolder(monitorFolder)
 	if err != nil {
 		return err
 	}
+
+	// converting Reource FGP to Struct
+	permStmts, convErr := ResourceToCmfFgpPermStmts(d, monitorFolder.ID)
+	if convErr != nil {
+		return convErr
+	}
+
+	// reading FGP from Backend to reconcille
+	fgpGetResponse, fgpGetErr := c.GetCmfFgp(fgpTargetType, monitorFolder.ID)
+	if fgpGetErr != nil {
+		// if FGP endpoint is not enabled (not implemented) and FGP feature is not used,
+		// we should suppress this error
+		if !HasErrorCode(fgpGetErr.Error(), "not_implemented_yet") && len(permStmts) == 0 {
+			return fgpGetErr
+		} else {
+			log.Printf("[WARN] FGP Feature has not been enabled yet. Suppressing \"not_implemented_yet\" error under GetCmfFgp operation.")
+		}
+	}
+
+	if len(permStmts) > 0 || fgpGetResponse != nil {
+		_, fgpSetErr := c.SetCmfFgp(fgpTargetType, CmfFgpRequest{
+			PermissionStatements: ReconcileFgpPermStmtsWithEmptyPerms(
+				permStmts, fgpGetResponse.PermissionStatements,
+			),
+		})
+		if fgpSetErr != nil {
+			return fgpSetErr
+		}
+	}
+
 	return resourceSumologicMonitorsLibraryFolderRead(d, meta)
 }