feat: [UIE-8128] - add new account api with (#11181)

packages/api-v4/.changeset/pr-11181-added-1730207508835.md

@@ -0,0 +1,5 @@
+---
+"@linode/api-v4": Added
+---
+
+New IAM endpoints and types ([#11181](https://github.com/linode/manager/pull/11181))

packages/api-v4/src/iam/iam.ts

@@ -1,6 +1,6 @@
 import { BETA_API_ROOT } from '../constants';
 import Request, { setData, setMethod, setURL } from '../request';
-import { IamUserPermissions } from './types';
+import { IamUserPermissions, IamAccountPermissions } from './types';
 
 /**
  * getUserPermissions
@@ -42,3 +42,16 @@ export const updateUserPermissions = (
     setMethod('PUT'),
     setData(data)
   );
+
+/**
+ * getAccountPermissions
+ *
+ * Return all permissions for account.
+ *
+ */
+export const getAccountPermissions = () => {
+  return Request<IamAccountPermissions>(
+    setURL(`${BETA_API_ROOT}/iam/role-permissions`),
+    setMethod('GET')
+  );
+};

packages/api-v4/src/iam/types.ts

@@ -28,3 +28,26 @@ export interface ResourceAccess {
   resource_type: ResourceType;
   roles: RoleType[];
 }
+
+export interface IamAccountPermissions {
+  account_access: Access[];
+  resource_access: Access[];
+}
+
+type PermissionType =
+  | 'create_linode'
+  | 'update_linode'
+  | 'update_firewall'
+  | 'delete_linode'
+  | 'view_linode';
+
+interface Access {
+  resource_type: ResourceType;
+  roles: Roles[];
+}
+
+export interface Roles {
+  name: string;
+  description: string;
+  permissions?: PermissionType[];
+}

packages/api-v4/src/index.ts

@@ -52,6 +52,8 @@ export * from './betas';
 
 export * from './iam';
 
+export * from './resources';
+
 export {
   baseRequest,
   setToken,

packages/api-v4/src/resources/index.ts

@@ -0,0 +1,3 @@
+export * from './resources';
+
+export * from './types';

packages/api-v4/src/resources/resources.ts

@@ -0,0 +1,16 @@
+import { BETA_API_ROOT } from '../constants';
+import Request, { setMethod, setURL } from '../request';
+import { IamAccountResource } from './types';
+
+/**
+ * getAccountResources
+ *
+ * Return all resources for account.
+ *
+ */
+export const getAccountResources = () => {
+  return Request<IamAccountResource>(
+    setURL(`${BETA_API_ROOT}/resources`),
+    setMethod('GET')
+  );
+};

packages/api-v4/src/resources/types.ts

@@ -0,0 +1,21 @@
+type ResourceType =
+  | 'linode'
+  | 'firewall'
+  | 'nodebalancer'
+  | 'longview'
+  | 'domain'
+  | 'stackscript'
+  | 'image'
+  | 'volume'
+  | 'database'
+  | 'vpc';
+
+export type IamAccountResource = {
+  resource_type: ResourceType;
+  resources: Resource[];
+}[];
+
+export interface Resource {
+  name: string;
+  id: number;
+}

packages/manager/.changeset/pr-11181-added-1730207569813.md

@@ -0,0 +1,5 @@
+---
+"@linode/manager": Added
+---
+
+mock data and query for new account api  ([#11181](https://github.com/linode/manager/pull/11181))

packages/manager/src/factories/accountPermissions.ts

@@ -0,0 +1,66 @@
+import { IamAccountPermissions } from '@linode/api-v4';
+import Factory from 'src/factories/factoryProxy';
+
+export const accountPermissionsFactory = Factory.Sync.makeFactory<IamAccountPermissions>(
+  {
+    account_access: [
+      {
+        resource_type: 'account',
+        roles: [
+          {
+            name: 'account_admin',
+            description:
+              'Access to perform any supported action on all resources in the account',
+            permissions: ['create_linode', 'update_linode', 'update_firewall'],
+          },
+        ],
+      },
+      {
+        resource_type: 'linode',
+        roles: [
+          {
+            name: 'account_linode_admin',
+            description:
+              'Access to perform any supported action on all linode instances in the account',
+            permissions: ['create_linode', 'update_linode', 'delete_linode'],
+          },
+        ],
+      },
+      {
+        resource_type: 'firewall',
+        roles: [
+          {
+            name: 'firewall_creator',
+            description: 'Access to create a firewall instance',
+          },
+        ],
+      },
+    ],
+    resource_access: [
+      {
+        resource_type: 'linode',
+        roles: [
+          {
+            name: 'linode_contributor',
+            description: 'Access to update a linode instance',
+            permissions: ['update_linode', 'view_linode'],
+          },
+        ],
+      },
+      {
+        resource_type: 'firewall',
+        roles: [
+          {
+            name: 'firewall_viewer',
+            description: 'Access to view a firewall instance',
+          },
+          {
+            name: 'firewall_admin',
+            description:
+              'Access to perform any supported action on a firewall instance',
+          },
+        ],
+      },
+    ],
+  }
+);

packages/manager/src/factories/accountResources.ts

@@ -0,0 +1,29 @@
+import { IamAccountResource } from '@linode/api-v4';
+import Factory from 'src/factories/factoryProxy';
+
+export const accountResourcesFactory = Factory.Sync.makeFactory<IamAccountResource>(
+  [
+    {
+      resource_type: 'linode',
+      resources: [
+        {
+          name: 'debian-us-123',
+          id: 12345678,
+        },
+        {
+          name: 'linode-uk-123',
+          id: 23456789,
+        },
+      ],
+    },
+    {
+      resource_type: 'firewall',
+      resources: [
+        {
+          name: 'firewall-us-123',
+          id: 45678901,
+        },
+      ],
+    },
+  ]
+);

packages/manager/src/queries/iam/iam.ts

@@ -1,9 +1,26 @@
-import { APIError, IamUserPermissions } from '@linode/api-v4';
+import {
+  APIError,
+  IamUserPermissions,
+  IamAccountPermissions,
+} from '@linode/api-v4';
 import { iamQueries } from './queries';
 import { useQuery } from '@tanstack/react-query';
+import { useProfile } from 'src/queries/profile/profile';
+import { queryPresets } from '../base';
 
 export const useAccountUserPermissions = (username: string) => {
   return useQuery<IamUserPermissions, APIError[]>(
     iamQueries.user(username)._ctx.permissions
   );
 };
+
+export const useAccountPermissions = () => {
+  const { data: profile } = useProfile();
+
+  return useQuery<IamAccountPermissions, APIError[]>({
+    ...iamQueries.permissions,
+    ...queryPresets.oneTimeFetch,
+    ...queryPresets.noRetry,
+    enabled: !profile?.restricted,
+  });
+};

packages/manager/src/queries/iam/queries.ts

@@ -1,4 +1,4 @@
-import { getUserPermissions } from '@linode/api-v4';
+import { getUserPermissions, getAccountPermissions } from '@linode/api-v4';
 import { createQueryKeys } from '@lukemorales/query-key-factory';
 
 export const iamQueries = createQueryKeys('iam', {
@@ -11,4 +11,8 @@ export const iamQueries = createQueryKeys('iam', {
     },
     queryKey: [username],
   }),
+  permissions: {
+    queryFn: getAccountPermissions,
+    queryKey: null,
+  },
 });

packages/manager/src/queries/resources/queries.ts

@@ -0,0 +1,9 @@
+import { getAccountResources } from '@linode/api-v4';
+import { createQueryKeys } from '@lukemorales/query-key-factory';
+
+export const resourcesQueries = createQueryKeys('resources', {
+  resources: {
+    queryFn: getAccountResources,
+    queryKey: null,
+  },
+});

packages/manager/src/queries/resources/resources.ts

@@ -0,0 +1,16 @@
+import { IamAccountResource, APIError } from '@linode/api-v4';
+import { useQuery } from '@tanstack/react-query';
+import { useProfile } from 'src/queries/profile/profile';
+import { queryPresets } from '../base';
+import { resourcesQueries } from './queries';
+
+export const useAccountResources = () => {
+  const { data: profile } = useProfile();
+
+  return useQuery<IamAccountResource, APIError[]>({
+    ...resourcesQueries.resources,
+    ...queryPresets.oneTimeFetch,
+    ...queryPresets.noRetry,
+    enabled: !profile?.restricted,
+  });
+};