using GB5Shared.DTO.Framework.Login;
using SwDAL.DTO.UserResourceRole;

namespace SwDAL.CustomCode.UserResourceRole;

public interface IUserResourceRoleDAL
{
    Task<IEnumerable<UserResourceRoleDTO>> GetGrantsForUser(int userId, LoginDTO loginDTO, CancellationToken ct);
    Task<IEnumerable<UserResourceRoleDTO>> GetGranteesForServer(int dbServerId, LoginDTO loginDTO, CancellationToken ct);
    Task<IEnumerable<UserResourceRoleDTO>> GetGranteesForClientDb(int clientDbId, LoginDTO loginDTO, CancellationToken ct);

    /// <summary>Returns the raw granted role, or null if no grant row matches. Most-specific-
    /// wins (ClientDb over DbServer) is resolved by the query itself.</summary>
    Task<byte?> GetEffectiveRole(int userId, int? dbServerId, int? clientDbId, LoginDTO loginDTO, CancellationToken ct);

    Task UpsertGrant(UserResourceRoleDTO dto, LoginDTO loginDTO, CancellationToken ct);
    Task RevokeGrant(RevokeUserResourceRoleDTO dto, LoginDTO loginDTO, CancellationToken ct);
}