Add granular trust center access

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>

pkg/server/api/console/v1/schema.graphql

@@ -1103,6 +1103,14 @@ enum TrustCenterAccessOrderField
     )
 }
 
+enum TrustCenterDocumentAccessOrderField
+  @goModel(model: "github.com/getprobo/probo/pkg/coredata.TrustCenterDocumentAccessOrderField") {
+  CREATED_AT
+    @goEnum(
+      value: "github.com/getprobo/probo/pkg/coredata.TrustCenterDocumentAccessOrderFieldCreatedAt"
+    )
+}
+
 enum TrustCenterReferenceOrderField
   @goModel(model: "github.com/getprobo/probo/pkg/coredata.TrustCenterReferenceOrderField") {
   NAME
@@ -1292,6 +1300,14 @@ input TrustCenterAccessOrder
   field: TrustCenterAccessOrderField!
 }
 
+input TrustCenterDocumentAccessOrder
+  @goModel(
+    model: "github.com/getprobo/probo/pkg/server/api/console/v1/types.TrustCenterDocumentAccessOrderBy"
+  ) {
+  direction: OrderDirection!
+  field: TrustCenterDocumentAccessOrderField!
+}
+
 input TrustCenterReferenceOrder
   @goModel(
     model: "github.com/getprobo/probo/pkg/server/api/console/v1/types.TrustCenterReferenceOrderBy"
@@ -2143,6 +2159,7 @@ type Report implements Node {
   downloadUrl: String @goField(forceResolver: true)
   createdAt: Datetime!
   updatedAt: Datetime!
+  audit: Audit @goField(forceResolver: true)
 }
 
 type Session {
@@ -2193,6 +2210,38 @@ type TrustCenterAccess implements Node {
   hasAcceptedNonDisclosureAgreement: Boolean!
   createdAt: Datetime!
   updatedAt: Datetime!
+
+  documentAccesses(
+    first: Int
+    after: CursorKey
+    last: Int
+    before: CursorKey
+    orderBy: TrustCenterDocumentAccessOrder
+  ): TrustCenterDocumentAccessConnection! @goField(forceResolver: true)
+}
+
+type TrustCenterDocumentAccess implements Node {
+  id: ID!
+  active: Boolean!
+  createdAt: Datetime!
+  updatedAt: Datetime!
+  trustCenterAccess: TrustCenterAccess! @goField(forceResolver: true)
+  document: Document @goField(forceResolver: true)
+  report: Report @goField(forceResolver: true)
+}
+
+type TrustCenterDocumentAccessConnection
+  @goModel(
+    model: "github.com/getprobo/probo/pkg/server/api/console/v1/types.TrustCenterDocumentAccessConnection"
+  ) {
+  totalCount: Int! @goField(forceResolver: true)
+  edges: [TrustCenterDocumentAccessEdge!]!
+  pageInfo: PageInfo!
+}
+
+type TrustCenterDocumentAccessEdge {
+  cursor: CursorKey!
+  node: TrustCenterDocumentAccess!
 }
 
 type TrustCenterAccessConnection {
@@ -2887,6 +2936,8 @@ input UpdateTrustCenterAccessInput {
   id: ID!
   name: String
   active: Boolean
+  documentIds: [ID!]
+  reportIds: [ID!]
 }
 
 input DeleteTrustCenterAccessInput {

pkg/server/api/console/v1/types/trust_center_document_access.go

@@ -0,0 +1,80 @@
+// Copyright (c) 2025 Probo Inc <hello@getprobo.com>.
+//
+// Permission to use, copy, modify, and/or distribute this software for any
+// purpose with or without fee is hereby granted, provided that the above
+// copyright notice and this permission notice appear in all copies.
+//
+// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+// PERFORMANCE OF THIS SOFTWARE.
+
+package types
+
+import (
+	"github.com/getprobo/probo/pkg/coredata"
+	"github.com/getprobo/probo/pkg/gid"
+	"github.com/getprobo/probo/pkg/page"
+)
+
+type (
+	TrustCenterDocumentAccessOrderBy = OrderBy[coredata.TrustCenterDocumentAccessOrderField]
+
+	TrustCenterDocumentAccessConnection struct {
+		TotalCount int
+		Edges      []*TrustCenterDocumentAccessEdge
+		PageInfo   PageInfo
+
+		Resolver any
+		ParentID gid.GID
+	}
+)
+
+func NewTrustCenterDocumentAccess(tcda *coredata.TrustCenterDocumentAccess) *TrustCenterDocumentAccess {
+	return &TrustCenterDocumentAccess{
+		ID:        tcda.ID,
+		Active:    tcda.Active,
+		CreatedAt: tcda.CreatedAt,
+		UpdatedAt: tcda.UpdatedAt,
+	}
+}
+
+func NewTrustCenterDocumentAccessConnection(
+	p *page.Page[*coredata.TrustCenterDocumentAccess, coredata.TrustCenterDocumentAccessOrderField],
+	parentType any,
+	parentID gid.GID,
+) *TrustCenterDocumentAccessConnection {
+	var edges = make([]*TrustCenterDocumentAccessEdge, len(p.Data))
+
+	for i := range edges {
+		edges[i] = NewTrustCenterDocumentAccessEdge(p.Data[i], p.Cursor.OrderBy.Field)
+	}
+
+	return &TrustCenterDocumentAccessConnection{
+		Edges:    edges,
+		PageInfo: *NewPageInfo(p),
+
+		Resolver: parentType,
+		ParentID: parentID,
+	}
+}
+
+func NewTrustCenterDocumentAccessEdges(accesses []*coredata.TrustCenterDocumentAccess, orderBy coredata.TrustCenterDocumentAccessOrderField) []*TrustCenterDocumentAccessEdge {
+	edges := make([]*TrustCenterDocumentAccessEdge, len(accesses))
+
+	for i := range edges {
+		edges[i] = NewTrustCenterDocumentAccessEdge(accesses[i], orderBy)
+	}
+
+	return edges
+}
+
+func NewTrustCenterDocumentAccessEdge(access *coredata.TrustCenterDocumentAccess, orderBy coredata.TrustCenterDocumentAccessOrderField) *TrustCenterDocumentAccessEdge {
+	return &TrustCenterDocumentAccessEdge{
+		Cursor: access.CursorKey(orderBy),
+		Node:   NewTrustCenterDocumentAccess(access),
+	}
+}

pkg/server/api/console/v1/types/types.go

@@ -1388,6 +1388,7 @@ type Report struct {
 	DownloadURL *string   `json:"downloadUrl,omitempty"`
 	CreatedAt   time.Time `json:"createdAt"`
 	UpdatedAt   time.Time `json:"updatedAt"`
+	Audit       *Audit    `json:"audit,omitempty"`
 }
 
 func (Report) IsNode()             {}
@@ -1521,13 +1522,14 @@ func (TrustCenter) IsNode()             {}
 func (this TrustCenter) GetID() gid.GID { return this.ID }
 
 type TrustCenterAccess struct {
-	ID                                gid.GID   `json:"id"`
-	Email                             string    `json:"email"`
-	Name                              string    `json:"name"`
-	Active                            bool      `json:"active"`
-	HasAcceptedNonDisclosureAgreement bool      `json:"hasAcceptedNonDisclosureAgreement"`
-	CreatedAt                         time.Time `json:"createdAt"`
-	UpdatedAt                         time.Time `json:"updatedAt"`
+	ID                                gid.GID                              `json:"id"`
+	Email                             string                               `json:"email"`
+	Name                              string                               `json:"name"`
+	Active                            bool                                 `json:"active"`
+	HasAcceptedNonDisclosureAgreement bool                                 `json:"hasAcceptedNonDisclosureAgreement"`
+	CreatedAt                         time.Time                            `json:"createdAt"`
+	UpdatedAt                         time.Time                            `json:"updatedAt"`
+	DocumentAccesses                  *TrustCenterDocumentAccessConnection `json:"documentAccesses"`
 }
 
 func (TrustCenterAccess) IsNode()             {}
@@ -1548,6 +1550,24 @@ type TrustCenterConnection struct {
 	PageInfo *PageInfo          `json:"pageInfo"`
 }
 
+type TrustCenterDocumentAccess struct {
+	ID                gid.GID            `json:"id"`
+	Active            bool               `json:"active"`
+	CreatedAt         time.Time          `json:"createdAt"`
+	UpdatedAt         time.Time          `json:"updatedAt"`
+	TrustCenterAccess *TrustCenterAccess `json:"trustCenterAccess"`
+	Document          *Document          `json:"document,omitempty"`
+	Report            *Report            `json:"report,omitempty"`
+}
+
+func (TrustCenterDocumentAccess) IsNode()             {}
+func (this TrustCenterDocumentAccess) GetID() gid.GID { return this.ID }
+
+type TrustCenterDocumentAccessEdge struct {
+	Cursor page.CursorKey             `json:"cursor"`
+	Node   *TrustCenterDocumentAccess `json:"node"`
+}
+
 type TrustCenterEdge struct {
 	Cursor page.CursorKey `json:"cursor"`
 	Node   *TrustCenter   `json:"node"`
@@ -1810,9 +1830,11 @@ type UpdateTaskPayload struct {
 }
 
 type UpdateTrustCenterAccessInput struct {
-	ID     gid.GID `json:"id"`
-	Name   *string `json:"name,omitempty"`
-	Active *bool   `json:"active,omitempty"`
+	ID          gid.GID   `json:"id"`
+	Name        *string   `json:"name,omitempty"`
+	Active      *bool     `json:"active,omitempty"`
+	DocumentIds []gid.GID `json:"documentIds,omitempty"`
+	ReportIds   []gid.GID `json:"reportIds,omitempty"`
 }
 
 type UpdateTrustCenterAccessPayload struct {

pkg/server/api/console/v1/v1_resolver.go

@@ -1167,7 +1167,6 @@ func (r *mutationResolver) CreateTrustCenterAccess(ctx context.Context, input ty
 		TrustCenterID: input.TrustCenterID,
 		Email:         input.Email,
 		Name:          input.Name,
-		Active:        input.Active,
 	})
 	if err != nil {
 		return nil, fmt.Errorf("cannot create trust center access: %w", err)
@@ -1183,9 +1182,11 @@ func (r *mutationResolver) UpdateTrustCenterAccess(ctx context.Context, input ty
 	prb := r.ProboService(ctx, input.ID.TenantID())
 
 	access, err := prb.TrustCenterAccesses.Update(ctx, &probo.UpdateTrustCenterAccessRequest{
-		ID:     input.ID,
-		Name:   input.Name,
-		Active: input.Active,
+		ID:          input.ID,
+		Name:        input.Name,
+		Active:      input.Active,
+		DocumentIDs: input.DocumentIds,
+		ReportIDs:   input.ReportIds,
 	})
 	if err != nil {
 		panic(fmt.Errorf("cannot update trust center access: %w", err))
@@ -4279,6 +4280,18 @@ func (r *reportResolver) DownloadURL(ctx context.Context, obj *types.Report) (*s
 	return url, nil
 }
 
+// Audit is the resolver for the audit field.
+func (r *reportResolver) Audit(ctx context.Context, obj *types.Report) (*types.Audit, error) {
+	prb := r.ProboService(ctx, obj.ID.TenantID())
+
+	audit, err := prb.Audits.GetByReportID(ctx, obj.ID)
+	if err != nil {
+		return nil, fmt.Errorf("cannot load audit for report: %w", err)
+	}
+
+	return types.NewAudit(audit), nil
+}
+
 // Owner is the resolver for the owner field.
 func (r *riskResolver) Owner(ctx context.Context, obj *types.Risk) (*types.People, error) {
 	prb := r.ProboService(ctx, obj.ID.TenantID())
@@ -4696,6 +4709,91 @@ func (r *trustCenterResolver) References(ctx context.Context, obj *types.TrustCe
 	return types.NewTrustCenterReferenceConnection(result, obj.ID), nil
 }
 
+// DocumentAccesses is the resolver for the documentAccesses field.
+func (r *trustCenterAccessResolver) DocumentAccesses(ctx context.Context, obj *types.TrustCenterAccess, first *int, after *page.CursorKey, last *int, before *page.CursorKey, orderBy *types.OrderBy[coredata.TrustCenterDocumentAccessOrderField]) (*types.TrustCenterDocumentAccessConnection, error) {
+	prb := r.ProboService(ctx, obj.ID.TenantID())
+
+	pageOrderBy := page.OrderBy[coredata.TrustCenterDocumentAccessOrderField]{
+		Field:     coredata.TrustCenterDocumentAccessOrderFieldCreatedAt,
+		Direction: page.OrderDirectionDesc,
+	}
+	if orderBy != nil {
+		pageOrderBy = page.OrderBy[coredata.TrustCenterDocumentAccessOrderField]{
+			Field:     orderBy.Field,
+			Direction: orderBy.Direction,
+		}
+	}
+
+	cursor := types.NewCursor(first, after, last, before, pageOrderBy)
+
+	result, err := prb.TrustCenterAccesses.ListDocumentAccesses(ctx, obj.ID, cursor)
+	if err != nil {
+		panic(fmt.Errorf("cannot list trust center document accesses: %w", err))
+	}
+
+	return types.NewTrustCenterDocumentAccessConnection(result, obj, obj.ID), nil
+}
+
+// TrustCenterAccess is the resolver for the trustCenterAccess field.
+func (r *trustCenterDocumentAccessResolver) TrustCenterAccess(ctx context.Context, obj *types.TrustCenterDocumentAccess) (*types.TrustCenterAccess, error) {
+	// The TrustCenterAccess is already loaded from the connection resolver
+	return obj.TrustCenterAccess, nil
+}
+
+// Document is the resolver for the document field.
+func (r *trustCenterDocumentAccessResolver) Document(ctx context.Context, obj *types.TrustCenterDocumentAccess) (*types.Document, error) {
+	prb := r.ProboService(ctx, obj.ID.TenantID())
+
+	documentAccess, err := prb.TrustCenterAccesses.GetDocumentAccess(ctx, obj.ID)
+	if err != nil {
+		return nil, fmt.Errorf("cannot load trust center document access: %w", err)
+	}
+
+	if documentAccess.DocumentID == nil {
+		return nil, nil
+	}
+
+	document, err := prb.Documents.Get(ctx, *documentAccess.DocumentID)
+	if err != nil {
+		return nil, fmt.Errorf("cannot load document: %w", err)
+	}
+
+	return types.NewDocument(document), nil
+}
+
+// Report is the resolver for the report field.
+func (r *trustCenterDocumentAccessResolver) Report(ctx context.Context, obj *types.TrustCenterDocumentAccess) (*types.Report, error) {
+	prb := r.ProboService(ctx, obj.ID.TenantID())
+
+	documentAccess, err := prb.TrustCenterAccesses.GetDocumentAccess(ctx, obj.ID)
+	if err != nil {
+		return nil, fmt.Errorf("cannot load trust center document access: %w", err)
+	}
+
+	if documentAccess.ReportID == nil {
+		return nil, nil
+	}
+
+	report, err := prb.Reports.Get(ctx, *documentAccess.ReportID)
+	if err != nil {
+		return nil, fmt.Errorf("cannot load report: %w", err)
+	}
+
+	return types.NewReport(report), nil
+}
+
+// TotalCount is the resolver for the totalCount field.
+func (r *trustCenterDocumentAccessConnectionResolver) TotalCount(ctx context.Context, obj *types.TrustCenterDocumentAccessConnection) (int, error) {
+	prb := r.ProboService(ctx, obj.ParentID.TenantID())
+
+	count, err := prb.TrustCenterAccesses.CountDocumentAccesses(ctx, obj.ParentID)
+	if err != nil {
+		return 0, fmt.Errorf("cannot count trust center document accesses: %w", err)
+	}
+
+	return count, nil
+}
+
 // LogoURL is the resolver for the logoUrl field.
 func (r *trustCenterReferenceResolver) LogoURL(ctx context.Context, obj *types.TrustCenterReference) (string, error) {
 	prb := r.ProboService(ctx, obj.ID.TenantID())
@@ -5249,6 +5347,21 @@ func (r *Resolver) TaskConnection() schema.TaskConnectionResolver { return &task
 // TrustCenter returns schema.TrustCenterResolver implementation.
 func (r *Resolver) TrustCenter() schema.TrustCenterResolver { return &trustCenterResolver{r} }
 
+// TrustCenterAccess returns schema.TrustCenterAccessResolver implementation.
+func (r *Resolver) TrustCenterAccess() schema.TrustCenterAccessResolver {
+	return &trustCenterAccessResolver{r}
+}
+
+// TrustCenterDocumentAccess returns schema.TrustCenterDocumentAccessResolver implementation.
+func (r *Resolver) TrustCenterDocumentAccess() schema.TrustCenterDocumentAccessResolver {
+	return &trustCenterDocumentAccessResolver{r}
+}
+
+// TrustCenterDocumentAccessConnection returns schema.TrustCenterDocumentAccessConnectionResolver implementation.
+func (r *Resolver) TrustCenterDocumentAccessConnection() schema.TrustCenterDocumentAccessConnectionResolver {
+	return &trustCenterDocumentAccessConnectionResolver{r}
+}
+
 // TrustCenterReference returns schema.TrustCenterReferenceResolver implementation.
 func (r *Resolver) TrustCenterReference() schema.TrustCenterReferenceResolver {
 	return &trustCenterReferenceResolver{r}
@@ -5337,6 +5450,9 @@ type snapshotConnectionResolver struct{ *Resolver }
 type taskResolver struct{ *Resolver }
 type taskConnectionResolver struct{ *Resolver }
 type trustCenterResolver struct{ *Resolver }
+type trustCenterAccessResolver struct{ *Resolver }
+type trustCenterDocumentAccessResolver struct{ *Resolver }
+type trustCenterDocumentAccessConnectionResolver struct{ *Resolver }
 type trustCenterReferenceResolver struct{ *Resolver }
 type trustCenterReferenceConnectionResolver struct{ *Resolver }
 type userResolver struct{ *Resolver }