[Workspace] Capabilities service add dashboard admin flag (#7103) (#7151

)

* Capabilities service add dashboard admin flag



* Capabilities service add dashboard admin flag



* Changeset file for PR #7103 created/updated

* optimize the code



* optimize the code



* if groups/users are not configured or [], login defaults to OSD Admin



* optimize the code



---------



(cherry picked from commit bb9eeef)

Signed-off-by: yubonluo <yubonluo@amazon.com>
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: opensearch-changeset-bot[bot] <154024398+opensearch-changeset-bot[bot]@users.noreply.github.com>

changelogs/fragments/7103.yml

@@ -0,0 +1,2 @@
+feat:
+- [Workspace] Capabilities service add dashboard admin flag ([#7103](https://github.com/opensearch-project/OpenSearch-Dashboards/pull/7103))

src/plugins/workspace/server/plugin.test.ts

@@ -6,28 +6,55 @@
 import { OnPostAuthHandler, OnPreRoutingHandler } from 'src/core/server';
 import { coreMock, httpServerMock } from '../../../core/server/mocks';
 import { WorkspacePlugin } from './plugin';
-import { getWorkspaceState } from '../../../core/server/utils';
+import { getWorkspaceState, updateWorkspaceState } from '../../../core/server/utils';
 import * as utilsExports from './utils';
 
 describe('Workspace server plugin', () => {
   it('#setup', async () => {
     let value;
+    const capabilities = {} as any;
     const setupMock = coreMock.createSetup();
     const initializerContextConfigMock = coreMock.createPluginInitializerContext({
       enabled: true,
     });
+    const request = httpServerMock.createOpenSearchDashboardsRequest();
+
     setupMock.capabilities.registerProvider.mockImplementationOnce((fn) => (value = fn()));
+    setupMock.capabilities.registerSwitcher.mockImplementationOnce((fn) => {
+      return fn(request, capabilities);
+    });
+
     const workspacePlugin = new WorkspacePlugin(initializerContextConfigMock);
     await workspacePlugin.setup(setupMock);
     expect(value).toMatchInlineSnapshot(`
       Object {
+        "dashboards": Object {
+          "isDashboardAdmin": false,
+        },
         "workspaces": Object {
           "enabled": true,
           "permissionEnabled": true,
         },
       }
     `);
     expect(setupMock.savedObjects.addClientWrapper).toBeCalledTimes(4);
+
+    let registerSwitcher;
+    let result;
+    updateWorkspaceState(request, { isDashboardAdmin: false });
+    registerSwitcher = setupMock.capabilities.registerSwitcher.mock.calls[0][0];
+    result = registerSwitcher(request, capabilities);
+    expect(result).toEqual({ dashboards: { isDashboardAdmin: false } });
+
+    updateWorkspaceState(request, { isDashboardAdmin: true });
+    registerSwitcher = setupMock.capabilities.registerSwitcher.mock.calls[0][0];
+    result = registerSwitcher(request, capabilities);
+    expect(result).toEqual({ dashboards: { isDashboardAdmin: true } });
+
+    updateWorkspaceState(request, { isDashboardAdmin: undefined });
+    registerSwitcher = setupMock.capabilities.registerSwitcher.mock.calls[0][0];
+    result = registerSwitcher(request, capabilities);
+    expect(result).toEqual({ dashboards: { isDashboardAdmin: true } });
   });
 
   it('#proxyWorkspaceTrafficToRealHandler', async () => {

src/plugins/workspace/server/plugin.ts

@@ -30,6 +30,7 @@ import { WorkspaceSavedObjectsClientWrapper } from './saved_objects';
 import {
   cleanWorkspaceId,
   getWorkspaceIdFromUrl,
+  getWorkspaceState,
   updateWorkspaceState,
 } from '../../../core/server/utils';
 import { WorkspaceConflictSavedObjectsClientWrapper } from './saved_objects/saved_objects_wrapper_for_check_workspace_conflict';
@@ -157,7 +158,14 @@ export class WorkspacePlugin implements Plugin<WorkspacePluginSetup, WorkspacePl
         enabled: true,
         permissionEnabled: isPermissionControlEnabled,
       },
+      dashboards: { isDashboardAdmin: false },
     }));
+    // Dynamically update capabilities based on the auth information from request.
+    core.capabilities.registerSwitcher((request) => {
+      // If the value is undefined/true, the user is dashboard admin.
+      const isDashboardAdmin = getWorkspaceState(request).isDashboardAdmin !== false;
+      return { dashboards: { isDashboardAdmin } };
+    });
 
     return {
       client: this.client,

src/plugins/workspace/server/utils.test.ts

@@ -128,7 +128,7 @@ describe('workspace utils', () => {
     const configGroups: string[] = [];
     const configUsers: string[] = [];
     updateDashboardAdminStateForRequest(mockRequest, groups, users, configGroups, configUsers);
-    expect(getWorkspaceState(mockRequest)?.isDashboardAdmin).toBe(false);
+    expect(getWorkspaceState(mockRequest)?.isDashboardAdmin).toBe(true);
   });
 
   it('should get correct admin config when admin config is enabled ', async () => {

src/plugins/workspace/server/utils.ts

@@ -67,9 +67,9 @@ export const updateDashboardAdminStateForRequest = (
     updateWorkspaceState(request, { isDashboardAdmin: true });
     return;
   }
-
+  // If groups/users are not configured or [], login defaults to OSD Admin
   if (!configGroups.length && !configUsers.length) {
-    updateWorkspaceState(request, { isDashboardAdmin: false });
+    updateWorkspaceState(request, { isDashboardAdmin: true });
     return;
   }
   const groupMatchAny = groups.some((group) => configGroups.includes(group));