added skelleton for databrikcs permission resource

Author: Tanchwa

internal/providers/pluginfw/pluginfw_rollout_utils.go

@@ -24,6 +24,7 @@ import (
 	"github.com/databricks/terraform-provider-databricks/internal/providers/pluginfw/products/serving"
 	"github.com/databricks/terraform-provider-databricks/internal/providers/pluginfw/products/sharing"
 	"github.com/databricks/terraform-provider-databricks/internal/providers/pluginfw/products/volume"
+	"github.com/databricks/terraform-provider-databricks/permission"
 	"github.com/hashicorp/terraform-plugin-framework/datasource"
 	"github.com/hashicorp/terraform-plugin-framework/resource"
 )
@@ -46,6 +47,7 @@ var migratedDataSources = []func() datasource.DataSource{
 var pluginFwOnlyResources = append(
 	[]func() resource.Resource{
 		app.ResourceApp,
+    permission.ResourcePermission,
 		sharing.ResourceShare,
 	},
 	autoGeneratedResources...,
@@ -60,6 +62,7 @@ var pluginFwOnlyDataSources = append(
 		catalog.DataSourceFunctions,
 		dashboards.DataSourceDashboards,
 		notificationdestinations.DataSourceNotificationDestinations,
+    permission.DataSourcePermission,
 		registered_model.DataSourceRegisteredModel,
 		registered_model.DataSourceRegisteredModelVersions,
 		serving.DataSourceServingEndpoints,

internal/providers/pluginfw/products/permission/resource_permission.go

@@ -0,0 +1,144 @@
+package permission
+
+import (
+	"context"
+	"errors"
+	"fmt"
+	"path"
+	"strings"
+
+	"github.com/databricks/databricks-sdk-go/apierr"
+	"github.com/databricks/databricks-sdk-go/service/iam"
+	"github.com/databricks/terraform-provider-databricks/common"
+  pluginfwcommon "github.com/databricks/terraform-provider-databricks/internal/providers/pluginfw/common"
+	"github.com/databricks/terraform-provider-databricks/internal/providers/pluginfw/tfschema"
+	"github.com/databricks/terraform-provider-databricks/permissions/entity"
+
+	"github.com/hashicorp/terraform-plugin-framework/resource"
+  "github.com/hashicorp/terraform-plugin-framework/resource/schema"
+  "github.com/hashicorp/terraform-plugin-framework/types"
+)
+
+const resourceName = "permission"
+
+var (
+        _ resource.Resource = &permissionResource{}
+        _ resource.ResourceWithConfigure = &permissionResource{}
+)
+
+func NewPermissionResource() resource.Resource {
+    return &permissionResource{}
+}
+
+type permissionResource struct {
+        client *common.DatabricksClient
+        context context.Context
+}
+
+func (r *permissionResource) Configure(ctx context.Context, req resource.ConfigureRequest, resp *resource.ConfigureResponse) {
+        if req.ProviderData == nil {
+                return
+        }
+
+        client, ok := req.ProviderData.(*common.DatabricksClient)
+
+        if !ok {
+                resp.Diagnostics.AddError(
+                        //TODO ADD ERROR MESSAGE IN LINE WITH PROVIDER
+                        "Unable to configure the Databricks client",
+                        fmt.Sprintf("Expected *common.DatabricksClient, got %T", req.ProviderData),
+                )
+
+                return
+        }
+
+        r.client = client
+}
+
+func (r *permissionResource) Metadata(ctx context.Context, req resource.MetadataRequest, resp *resource.MetadataResponse) {
+        resp.TypeName = pluginfwcommon.GetDatabrikcsProductionName(resourceName)
+}
+
+
+type permissionResourceModel struct {
+        ObjectID types.String `tfsdk:"object_id"`
+        ObjectType types.String `tfsdk:"object_type"`
+        AccessControlList []accessControlListModel `tfsdk:"access_control_list"`
+        LastUpdated types.String `tfsdk:"last_updated"`
+}
+
+type accessControlListModel struct {
+        ServicePrincipalName types.String `tfsdk:"service_principal_name"`
+        GroupName types.String `tfsdk:"group_name"`
+        UserName types.String `tfsdk:"user_name"`
+        PermissionLevel types.String `tfsdk:"permission_level"`
+}
+
+
+//TODO set some attributes as optional, required
+func (r *permissionResource) Schema(ctx context.Context, req resource.SchemaRequest, resp *resource.SchemaResponse) {
+        attrs, blocks := tfschema.ResourceStructToSchemaMap(ctx, permissionResourceModel{}, nil)
+        resp.Schema = schema.Schema{
+                Attributes: attrs,
+                Blocks: blocks,
+        }
+}
+
+
+func (r *permissionResource) Create(ctx context.Context, req resource.CreateRequest, resp *resource.CreateResponse) {
+        ctx := pluginfwcontext.SetUserAgentInResourceContext(ctx, resourceName)
+        w, diags := r.client.WorkspaceClient()
+        resp.Diagnostics.Append(diags...)
+}
+
+func (r *permissionResource) Read(ctx context.Context, req resource.ReadRequest, resp *resource.ReadResponse) {
+        ctx := pluginfwcontext.SetUserAgentInResourceContext(ctx, resourceName)
+}
+
+func (r *permissionResource) Update(ctx context.Context, req resource.UpdateRequest, resp *resource.UpdateResponse) {
+        ctx := pluginfwcontext.SetUserAgentInResourceContext(ctx, resourceName)
+}
+
+func (r *permissionResource) Delete(ctx context.Context, req resource.DeleteRequest, resp *resource.DeleteResponse) {
+        ctx := pluginfwcontext.SetUserAgentInResourceContext(ctx, resourceName)
+}
+
+
+// safePutWithOwner is a workaround for the limitation where warehouse without owners cannot have IS_OWNER set
+func (r *permissionResource) safePutWithOwner(ctx context.Context, objectID string, objectACL []iam.AccessControlRequest, mapping resourcePermissions, ownerOpt string) error {
+	w, err := r.client.WorkspaceClient()
+	if err != nil {
+		return err
+	}
+	idParts := strings.Split(objectID, "/")
+	id := idParts[len(idParts)-1]
+	withOwner := mapping.addOwnerPermissionIfNeeded(objectACL, ownerOpt)
+	_, err = w.Permissions.Set(ctx, iam.PermissionsRequest{
+		RequestObjectId:   id,
+		RequestObjectType: mapping.requestObjectType,
+		AccessControlList: withOwner,
+	})
+	if err != nil {
+		if strings.Contains(err.Error(), "with no existing owner must provide a new owner") {
+			_, err = w.Permissions.Set(ctx, iam.PermissionsRequest{
+				RequestObjectId:   id,
+				RequestObjectType: mapping.requestObjectType,
+				AccessControlList: objectACL,
+			})
+		}
+		return err
+	}
+	return nil
+}
+
+func (r *permissionResource) getCurrentUser(ctx context.Context) (string, error) {
+	w, err := r.client.WorkspaceClient()
+	if err != nil {
+		return "", err
+	}
+	me, err := w.CurrentUser.Me(ctx)
+	if err != nil {
+		return "", err
+	}
+	return me.UserName, nil
+}