ahmido
bda1d90fc4
Implements spec 094 (assignment fetch/restore observability hardening): - Adds OperationRun tracking for assignment fetch (during backup) and assignment restore (during restore execution) - Normalizes failure codes/reason_code and sanitizes failure messages - Ensures exactly one audit log entry per assignment restore execution - Enforces correct guard/membership vs capability semantics on affected admin surfaces - Switches assignment Graph services to depend on GraphClientInterface Also includes Postgres-only FK defense-in-depth check and a discoverable `composer test:pgsql` runner (scoped to the FK constraint test). Tests: - `vendor/bin/sail artisan test --compact` (passed) - `vendor/bin/sail composer test:pgsql` (passed) Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de> Reviewed-on: #113
102 lines
2.9 KiB
PHP
102 lines
2.9 KiB
PHP
<?php
|
|
|
|
namespace App\Jobs;
|
|
|
|
use App\Jobs\Middleware\TrackOperationRun;
|
|
use App\Models\OperationRun;
|
|
use App\Models\RestoreRun;
|
|
use App\Models\Tenant;
|
|
use App\Services\AssignmentRestoreService;
|
|
use Illuminate\Bus\Queueable;
|
|
use Illuminate\Contracts\Queue\ShouldQueue;
|
|
use Illuminate\Foundation\Bus\Dispatchable;
|
|
use Illuminate\Queue\InteractsWithQueue;
|
|
use Illuminate\Queue\SerializesModels;
|
|
use Illuminate\Support\Facades\Log;
|
|
|
|
class RestoreAssignmentsJob implements ShouldQueue
|
|
{
|
|
use Dispatchable, InteractsWithQueue, Queueable, SerializesModels;
|
|
|
|
public ?OperationRun $operationRun = null;
|
|
|
|
public int $tries = 1;
|
|
|
|
public int $backoff = 0;
|
|
|
|
/**
|
|
* Create a new job instance.
|
|
*/
|
|
public function __construct(
|
|
public int $restoreRunId,
|
|
public int $tenantId,
|
|
public string $policyType,
|
|
public string $policyId,
|
|
public array $assignments,
|
|
public array $groupMapping,
|
|
public array $foundationMapping = [],
|
|
public ?string $actorEmail = null,
|
|
public ?string $actorName = null,
|
|
?OperationRun $operationRun = null,
|
|
) {
|
|
$this->operationRun = $operationRun;
|
|
}
|
|
|
|
/**
|
|
* @return array<int, object>
|
|
*/
|
|
public function middleware(): array
|
|
{
|
|
return [new TrackOperationRun];
|
|
}
|
|
|
|
/**
|
|
* Execute the job.
|
|
*/
|
|
public function handle(AssignmentRestoreService $assignmentRestoreService): array
|
|
{
|
|
$restoreRun = RestoreRun::find($this->restoreRunId);
|
|
$tenant = Tenant::find($this->tenantId);
|
|
|
|
if (! $restoreRun || ! $tenant) {
|
|
Log::warning('RestoreAssignmentsJob missing context', [
|
|
'restore_run_id' => $this->restoreRunId,
|
|
'tenant_id' => $this->tenantId,
|
|
]);
|
|
|
|
return [
|
|
'outcomes' => [],
|
|
'summary' => ['success' => 0, 'failed' => 0, 'skipped' => 0],
|
|
];
|
|
}
|
|
|
|
try {
|
|
return $assignmentRestoreService->restore(
|
|
tenant: $tenant,
|
|
policyType: $this->policyType,
|
|
policyId: $this->policyId,
|
|
assignments: $this->assignments,
|
|
groupMapping: $this->groupMapping,
|
|
foundationMapping: $this->foundationMapping,
|
|
restoreRun: $restoreRun,
|
|
actorEmail: $this->actorEmail,
|
|
actorName: $this->actorName,
|
|
);
|
|
} catch (\Throwable $e) {
|
|
Log::error('RestoreAssignmentsJob failed', [
|
|
'restore_run_id' => $this->restoreRunId,
|
|
'policy_id' => $this->policyId,
|
|
'error' => $e->getMessage(),
|
|
]);
|
|
|
|
return [
|
|
'outcomes' => [[
|
|
'status' => 'failed',
|
|
'reason' => $e->getMessage(),
|
|
]],
|
|
'summary' => ['success' => 0, 'failed' => 1, 'skipped' => 0],
|
|
];
|
|
}
|
|
}
|
|
}
|