Implement resolvers

Signed-off-by: Émile Ré <emile@getprobo.com>

pkg/iam/account_service.go

@@ -843,3 +843,56 @@ func (s AccountService) CountSAMLConfigurationsForEmail(
 
 	return count, nil
 }
+
+func (s *AccountService) ListProfilesForIdentity(
+	ctx context.Context,
+	identityID gid.GID,
+	cursor *page.Cursor[coredata.MembershipProfileOrderField],
+	filter *coredata.MembershipProfileFilter,
+) (*page.Page[*coredata.MembershipProfile, coredata.MembershipProfileOrderField], error) {
+	var (
+		profiles = coredata.MembershipProfiles{}
+	)
+
+	err := s.pg.WithConn(
+		ctx,
+		func(conn pg.Conn) error {
+			if err := profiles.LoadByIdentityID(ctx, conn, coredata.NewNoScope(), identityID, cursor, filter); err != nil {
+				return fmt.Errorf("cannot load profiles: %w", err)
+			}
+
+			return nil
+		},
+	)
+
+	if err != nil {
+		return nil, err
+	}
+
+	return page.NewPage(profiles, cursor), nil
+}
+
+func (s AccountService) CountProfiles(
+	ctx context.Context,
+	identityID gid.GID,
+	filter *coredata.MembershipProfileFilter,
+) (int, error) {
+	var (
+		count int
+	)
+
+	err := s.pg.WithConn(
+		ctx,
+		func(conn pg.Conn) (err error) {
+			profiles := coredata.MembershipProfiles{}
+			count, err = profiles.CountByIdentityID(ctx, conn, identityID, filter)
+			if err != nil {
+				return fmt.Errorf("cannot count profiles: %w", err)
+			}
+
+			return nil
+		},
+	)
+
+	return count, err
+}

pkg/iam/iam_policies.go

@@ -90,7 +90,10 @@ var IAMSelfManageProfilePolicy = policy.NewPolicy(
 	"Self-Manage Profiles",
 
 	// Users can view their own profiles
-	policy.Allow(ActionMembershipProfileGet).
+	policy.Allow(
+		ActionMembershipProfileGet,
+		ActionMembershipProfileList,
+	).
 		WithSID("view-own-profiles").
 		When(policy.Equals("principal.id", "resource.identity_id")),
 ).

pkg/iam/organization_service.go

@@ -1002,6 +1002,41 @@ func (s *OrganizationService) GetProfile(ctx context.Context, profileID gid.GID)
 		ctx,
 		func(conn pg.Conn) error {
 			if err := profile.LoadByID(ctx, conn, coredata.NewScopeFromObjectID(profileID), profileID); err != nil {
+				if errors.Is(err, coredata.ErrResourceNotFound) {
+					return NewProfileNotFoundError(profileID)
+				}
+
+				return fmt.Errorf("cannot load profile: %w", err)
+			}
+
+			return nil
+		},
+	)
+
+	if err != nil {
+		return nil, err
+	}
+
+	return profile, nil
+}
+
+func (s *OrganizationService) GetProfileForIdentityAndOrganization(ctx context.Context, identityID gid.GID, organizationID gid.GID) (*coredata.MembershipProfile, error) {
+	profile := &coredata.MembershipProfile{}
+
+	err := s.pg.WithConn(
+		ctx,
+		func(conn pg.Conn) error {
+			if err := profile.LoadByIdentityIDAndOrganizationID(
+				ctx,
+				conn,
+				coredata.NewScopeFromObjectID(organizationID),
+				identityID,
+				organizationID,
+			); err != nil {
+				if errors.Is(err, coredata.ErrResourceNotFound) {
+					return NewProfileNotFoundError(gid.Nil)
+				}
+
 				return fmt.Errorf("cannot load profile: %w", err)
 			}