update

Signed-off-by: hongming <talonwan@yunify.com>

pkg/models/iam/am/am.go

@@ -18,7 +18,6 @@
 package am
 
 import (
-	rbacv1 "k8s.io/api/rbac/v1"
 	"k8s.io/client-go/informers"
 	"k8s.io/client-go/kubernetes"
 	"kubesphere.io/kubesphere/pkg/models/resources/v1alpha2"
@@ -38,7 +37,6 @@ type AccessManagementInterface interface {
 	GetClusterRole(cluster, username string) (Role, error)
 	GetWorkspaceRole(workspace, username string) (Role, error)
 	GetNamespaceRole(namespace, username string) (Role, error)
-	GetDevOpsRole(project, username string) (Role, error)
 }
 
 type Role interface {
@@ -52,26 +50,6 @@ type amOperator struct {
 	kubeClient kubernetes.Interface
 }
 
-func (am *amOperator) ListClusterRoleBindings(clusterRole string) ([]*rbacv1.ClusterRoleBinding, error) {
-	panic("implement me")
-}
-
-func (am *amOperator) GetRoles(namespace, username string) ([]*rbacv1.Role, error) {
-	panic("implement me")
-}
-
-func (am *amOperator) GetClusterPolicyRules(username string) ([]rbacv1.PolicyRule, error) {
-	panic("implement me")
-}
-
-func (am *amOperator) GetPolicyRules(namespace, username string) ([]rbacv1.PolicyRule, error) {
-	panic("implement me")
-}
-
-func (am *amOperator) GetWorkspaceRole(workspace, username string) (Role, error) {
-	panic("implement me")
-}
-
 func NewAMOperator(kubeClient kubernetes.Interface, informers informers.SharedInformerFactory) AccessManagementInterface {
 	resourceGetter := resource.ResourceGetter{}
 	resourceGetter.Add(v1alpha2.Role, role.NewRoleSearcher(informers))
@@ -91,6 +69,10 @@ func (am *amOperator) GetClusterRole(cluster, username string) (Role, error) {
 	panic("implement me")
 }
 
+func (am *amOperator) GetWorkspaceRole(workspace, username string) (Role, error) {
+	panic("implement me")
+}
+
 func (am *amOperator) GetNamespaceRole(namespace, username string) (Role, error) {
 	panic("implement me")
 }

pkg/models/iam/am/fake_operator.go

@@ -0,0 +1,73 @@
+/*
+ *
+ * Copyright 2020 The KubeSphere Authors.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ * /
+ */
+
+package am
+
+import (
+	"k8s.io/apiserver/pkg/authentication/user"
+	"kubesphere.io/kubesphere/pkg/simple/client/cache"
+)
+
+type fakeRole struct {
+	Name string
+	Rego string
+}
+type fakeOperator struct {
+	cache cache.Interface
+}
+
+func newFakeRole(username string) Role {
+	if username == user.Anonymous {
+		return &fakeRole{
+			Name: "anonymous",
+			Rego: "package authz\ndefault allow = false",
+		}
+	}
+	return &fakeRole{
+		Name: "admin",
+		Rego: "package authz\ndefault allow = true",
+	}
+}
+
+func (f fakeOperator) GetPlatformRole(username string) (Role, error) {
+	return newFakeRole(username), nil
+}
+
+func (f fakeOperator) GetClusterRole(cluster, username string) (Role, error) {
+	return newFakeRole(username), nil
+}
+
+func (f fakeOperator) GetWorkspaceRole(workspace, username string) (Role, error) {
+	return newFakeRole(username), nil
+}
+
+func (f fakeOperator) GetNamespaceRole(namespace, username string) (Role, error) {
+	return newFakeRole(username), nil
+}
+
+func (f fakeRole) GetName() string {
+	return f.Name
+}
+
+func (f fakeRole) GetRego() string {
+	return f.Rego
+}
+
+func NewFakeAMOperator(cache cache.Interface) AccessManagementInterface {
+	return &fakeOperator{cache: cache}
+}