permify.go

package permify_gorm

import (
	"errors"

	"gorm.io/gorm"

	"github.com/Permify/go-role/collections"
	"github.com/Permify/go-role/helpers"
	"github.com/Permify/go-role/models"
	"github.com/Permify/go-role/options"
	"github.com/Permify/go-role/repositories"
	"github.com/Permify/go-role/repositories/scopes"
)

var errUnsupportedValueType = errors.New("err unsupported value type")

// Options has the options for initiating the Permify
type Options struct {
	Migrate bool
	DB      *gorm.DB
}

// New initializer for Permify
// If migration is true, it generate all tables in the database if they don't exist.
func New(opts Options) (p *Permify, err error) {
	roleRepository := &repositories.RoleRepository{Database: opts.DB}
	permissionRepository := &repositories.PermissionRepository{Database: opts.DB}
	userRepository := &repositories.UserRepository{Database: opts.DB}

	if opts.Migrate {
		err = repositories.Migrates(roleRepository, permissionRepository)
		if err != nil {
			return nil, err
		}
	}

	p = &Permify{
		RoleRepository:       roleRepository,
		PermissionRepository: permissionRepository,
		UserRepository:       userRepository,
	}

	return
}

// Permify is main struct of this package.
type Permify struct {
	RoleRepository       repositories.IRoleRepository
	PermissionRepository repositories.IPermissionRepository
	UserRepository       repositories.IUserRepository
}

// ROLE

// GetRole fetch role according to the role name or id.
// If withPermissions is true, it will preload the permissions to the role.
// First parameter is can be role name or id, second parameter is boolean.
// If the given variable is an array, the first element of the given array is returned.
// @param interface{}
// @param bool
// @return models.Role, error
func (s *Permify) GetRole(r interface{}, withPermissions bool) (role models.Role, err error) {
	if helpers.IsArray(r) {
		var roles []models.Role
		roles, err = s.GetRoles(r, withPermissions)
		if err != nil {
			return models.Role{}, err
		}
		if len(roles) > 0 {
			role = roles[0]
		}
		return
	}

	if helpers.IsString(r) {
		if withPermissions {
			return s.RoleRepository.GetRoleByGuardNameWithPermissions(helpers.Guard(r.(string)))
		}
		return s.RoleRepository.GetRoleByGuardName(helpers.Guard(r.(string)))
	}

	if helpers.IsInt(r) {
		if withPermissions {
			return s.RoleRepository.GetRoleByIDWithPermissions(uint(r.(int)))
		}
		return s.RoleRepository.GetRoleByID(uint(r.(int)))
	}

	if helpers.IsUInt(r) {
		if withPermissions {
			return s.RoleRepository.GetRoleByIDWithPermissions(r.(uint))
		}
		return s.RoleRepository.GetRoleByID(r.(uint))
	}

	return models.Role{}, errUnsupportedValueType
}

// GetRoles fetch roles according to the role names or ids.
// First parameter is can be role name(s) or id(s), second parameter is boolean.
// If withPermissions is true, it will preload the permissions to the roles.
// @param interface{}
// @param bool
// @return collections.Role, error
func (s *Permify) GetRoles(r interface{}, withPermissions bool) (roles collections.Role, err error) {
	if !helpers.IsArray(r) {
		var role models.Role
		role, err = s.GetRole(r, withPermissions)
		if err != nil {
			return collections.Role{}, err
		}
		roles = collections.Role{role}
		return
	}

	if helpers.IsStringArray(r) {
		if withPermissions {
			return s.RoleRepository.GetRolesByGuardNamesWithPermissions(helpers.GuardArray(r.([]string)))
		}
		return s.RoleRepository.GetRolesByGuardNames(helpers.GuardArray(r.([]string)))
	}

	if helpers.IsUIntArray(r) {
		if withPermissions {
			return s.RoleRepository.GetRolesWithPermissions(r.([]uint))
		}
		return s.RoleRepository.GetRoles(r.([]uint))
	}

	return collections.Role{}, errUnsupportedValueType
}

// GetAllRoles fetch all the roles. (with pagination option).
// If withPermissions is true, it will preload the permissions to the role.
// First parameter is role option.
// @param options.RoleOption
// @return collections.Role, int64, error
func (s *Permify) GetAllRoles(option options.RoleOption) (roles collections.Role, totalCount int64, err error) {
	var roleIDs []uint
	if option.Pagination == nil {
		roleIDs, totalCount, err = s.RoleRepository.GetRoleIDs(nil)
	} else {
		roleIDs, totalCount, err = s.RoleRepository.GetRoleIDs(&scopes.GormPagination{Pagination: option.Pagination.Get()})
	}

	roles, err = s.GetRoles(roleIDs, option.WithPermissions)
	return
}

// GetRolesOfUser fetch all the roles of the user. (with pagination option).
// If withPermissions is true, it will preload the permissions to the role.
// First parameter is user id, second parameter is role option.
// @param uint
// @param options.RoleOption
// @return collections.Role, int64, error
func (s *Permify) GetRolesOfUser(userID uint, option options.RoleOption) (roles collections.Role, totalCount int64, err error) {
	var roleIDs []uint
	if option.Pagination == nil {
		roleIDs, totalCount, err = s.RoleRepository.GetRoleIDsOfUser(userID, nil)
	} else {
		roleIDs, totalCount, err = s.RoleRepository.GetRoleIDsOfUser(userID, &scopes.GormPagination{Pagination: option.Pagination.Get()})
	}

	roles, err = s.GetRoles(roleIDs, option.WithPermissions)
	return
}

// CreateRole create new role.
// Name parameter is converted to guard name. example: senior $#% associate -> senior-associate.
// If a role with the same name has been created before, it will not create it again. (FirstOrCreate)
// First parameter is role name, second parameter is role description.
// @param string
// @param string
// @return error
func (s *Permify) CreateRole(name string, description string) (err error) {
	return s.RoleRepository.FirstOrCreate(&models.Role{
		Name:        name,
		GuardName:   helpers.Guard(name),
		Description: description,
	})
}

// DeleteRole delete role.
// If the role is in use, its relations from the pivot tables are deleted.
// First parameter can be role name or id.
// @param interface{}
// @return error
func (s *Permify) DeleteRole(r interface{}) (err error) {
	var role models.Role
	role, err = s.GetRole(r, false)
	if err != nil {
		return err
	}
	return s.RoleRepository.Delete(&role)
}

// AddPermissionsToRole add permission to role.
// First parameter can be role name or id, second parameter can be permission name(s) or id(s).
// If the first parameter is an array, the first element of the first parameter is used.
// @param interface{}
// @param interface{}
// @return error
func (s *Permify) AddPermissionsToRole(r interface{}, p interface{}) (err error) {
	var role models.Role
	role, err = s.GetRole(r, false)
	if err != nil {
		return err
	}

	var permissions collections.Permission
	permissions, err = s.GetPermissions(p)
	if err != nil {
		return err
	}

	if permissions.Len() > 0 {
		err = s.RoleRepository.AddPermissions(&role, permissions)
	}

	return
}

// ReplacePermissionsToRole overwrites the permissions of the role according to the permission names or ids.
// First parameter can be role name or id, second parameter can be permission name(s) or id(s).
// If the first parameter is an array, the first element of the first parameter is used.
// @param interface{}
// @param interface{}
// @return error
func (s *Permify) ReplacePermissionsToRole(r interface{}, p interface{}) (err error) {
	var role models.Role
	role, err = s.GetRole(r, false)
	if err != nil {
		return err
	}

	var permissions collections.Permission
	permissions, err = s.GetPermissions(p)
	if err != nil {
		return err
	}

	if permissions.Len() > 0 {
		return s.RoleRepository.ReplacePermissions(&role, permissions)
	}

	return s.RoleRepository.ClearPermissions(&role)
}

// RemovePermissionsFromRole remove permissions from role according to the permission names or ids.
// First parameter can be role name or id, second parameter can be permission name(s) or id(s).
// If the first parameter is an array, the first element of the first parameter is used.
// @param interface{}
// @param interface{}
// @return error
func (s *Permify) RemovePermissionsFromRole(r interface{}, p interface{}) (err error) {
	var role models.Role
	role, err = s.GetRole(r, false)
	if err != nil {
		return err
	}

	var permissions collections.Permission
	permissions, err = s.GetPermissions(p)
	if err != nil {
		return err
	}

	if permissions.Len() > 0 {
		err = s.RoleRepository.RemovePermissions(&role, permissions)
	}

	return
}

// PERMISSION

// GetPermission fetch permission according to the permission name or id.
// First parameter can be permission name or id.
// If the first parameter is an array, the first element of the given array is returned.
// @param interface{}
// @return error
func (s *Permify) GetPermission(p interface{}) (permission models.Permission, err error) {
	if helpers.IsArray(p) {
		var permissions []models.Permission
		permissions, err = s.GetPermissions(p)
		if err != nil {
			return models.Permission{}, err
		}
		if len(permissions) > 0 {
			permission = permissions[0]
		}
		return
	}

	if helpers.IsString(p) {
		return s.PermissionRepository.GetPermissionByGuardName(helpers.Guard(p.(string)))
	}

	if helpers.IsInt(p) {
		return s.PermissionRepository.GetPermissionByID(uint(p.(int)))
	}

	if helpers.IsUInt(p) {
		return s.PermissionRepository.GetPermissionByID(p.(uint))
	}

	return models.Permission{}, errUnsupportedValueType
}

// GetPermissions fetch permissions according to the permission names or ids.
// First parameter is can be permission name(s) or id(s).
// @param interface{}
// @return collections.Permission, error
func (s *Permify) GetPermissions(p interface{}) (permissions collections.Permission, err error) {
	if !helpers.IsArray(p) {
		var permission models.Permission
		permission, err = s.GetPermission(p)
		if err != nil {
			return collections.Permission{}, err
		}
		permissions = collections.Permission{permission}
		return
	}

	if helpers.IsStringArray(p) {
		return s.PermissionRepository.GetPermissionsByGuardNames(helpers.GuardArray(p.([]string)))
	}

	if helpers.IsUIntArray(p) {
		return s.PermissionRepository.GetPermissions(p.([]uint))
	}

	return collections.Permission{}, errUnsupportedValueType
}

// GetAllPermissions fetch all the permissions. (with pagination option).
// First parameter is permission option.
// @param options.PermissionOption
// @return collections.Permission, int64, error
func (s *Permify) GetAllPermissions(option options.PermissionOption) (permissions collections.Permission, totalCount int64, err error) {
	var permissionIDs []uint
	if option.Pagination == nil {
		permissionIDs, totalCount, err = s.PermissionRepository.GetPermissionIDs(nil)
	} else {
		permissionIDs, totalCount, err = s.PermissionRepository.GetPermissionIDs(&scopes.GormPagination{Pagination: option.Pagination.Get()})
	}
	permissions, err = s.GetPermissions(permissionIDs)
	return
}

// GetDirectPermissionsOfUser fetch all direct permissions of the user. (with pagination option)
// First parameter is user id, second parameter is permission option.
// @param uint
// @param options.PermissionOption
// @return collections.Permission, int64, error
func (s *Permify) GetDirectPermissionsOfUser(userID uint, option options.PermissionOption) (permissions collections.Permission, totalCount int64, err error) {
	var permissionIDs []uint
	if option.Pagination == nil {
		permissionIDs, totalCount, err = s.PermissionRepository.GetDirectPermissionIDsOfUserByID(userID, nil)
	} else {
		permissionIDs, totalCount, err = s.PermissionRepository.GetDirectPermissionIDsOfUserByID(userID, &scopes.GormPagination{Pagination: option.Pagination.Get()})
	}
	permissions, err = s.GetPermissions(permissionIDs)
	return
}

// GetPermissionsOfRoles fetch all permissions of the roles. (with pagination option)
// First parameter can be role name(s) or id(s), second parameter is permission option.
// @param interface{}
// @param options.PermissionOption
// @return collections.Permission, int64, error
func (s *Permify) GetPermissionsOfRoles(r interface{}, option options.PermissionOption) (permissions collections.Permission, totalCount int64, err error) {
	var roles collections.Role
	roles, err = s.GetRoles(r, false)
	if err != nil {
		return collections.Permission{}, 0, err
	}

	var permissionIDs []uint
	if option.Pagination == nil {
		permissionIDs, totalCount, err = s.PermissionRepository.GetPermissionIDsOfRolesByIDs(roles.IDs(), nil)
	} else {
		permissionIDs, totalCount, err = s.PermissionRepository.GetPermissionIDsOfRolesByIDs(roles.IDs(), &scopes.GormPagination{Pagination: option.Pagination.Get()})
	}

	permissions, err = s.GetPermissions(permissionIDs)
	return
}

// GetAllPermissionsOfUser fetch all permissions of the user that come with direct and roles.
// First parameter is user id.
// @param uint
// @return collections.Permission, error
func (s *Permify) GetAllPermissionsOfUser(userID uint) (permissions collections.Permission, err error) {
	var userRoleIDs []uint
	userRoleIDs, _, err = s.RoleRepository.GetRoleIDsOfUser(userID, nil)
	if err != nil {
		return collections.Permission{}, err
	}

	var rolePermissionIDs []uint
	rolePermissionIDs, _, err = s.PermissionRepository.GetPermissionIDsOfRolesByIDs(userRoleIDs, nil)
	if err != nil {
		return collections.Permission{}, err
	}

	var userDirectPermissionIDs []uint
	userDirectPermissionIDs, _, err = s.PermissionRepository.GetDirectPermissionIDsOfUserByID(userID, nil)
	if err != nil {
		return collections.Permission{}, err
	}

	return s.GetPermissions(helpers.RemoveDuplicateValues(helpers.JoinUintArrays(rolePermissionIDs, userDirectPermissionIDs)))
}

// CreatePermission create new permission.
// Name parameter is converted to guard name. example: create $#% contact -> create-contact.
// If a permission with the same name has been created before, it will not create it again. (FirstOrCreate)
// @param string
// @param string
// @return error
func (s *Permify) CreatePermission(name string, description string) (err error) {
	return s.PermissionRepository.FirstOrCreate(&models.Permission{
		Name:        name,
		GuardName:   helpers.Guard(name),
		Description: description,
	})
}

// DeletePermission delete permission.
// If the permission is in use, its relations from the pivot tables are deleted.
// First parameter can be permission name or id.
// If the first parameter is an array, the first element of the given array is used.
// @param interface{}
// @return error
func (s *Permify) DeletePermission(p interface{}) (err error) {
	var permission models.Permission
	permission, err = s.GetPermission(p)
	if err != nil {
		return err
	}
	return s.PermissionRepository.Delete(&permission)
}

// USER

// AddPermissionsToUser add direct permission or permissions to user according to the permission names or ids.
// First parameter is the user id, second parameter is can be permission name(s) or id(s).
// @param uint
// @param interface{}
// @return error
func (s *Permify) AddPermissionsToUser(userID uint, p interface{}) (err error) {
	var permissions collections.Permission
	permissions, err = s.GetPermissions(p)
	if err != nil {
		return err
	}

	if permissions.Len() > 0 {
		err = s.UserRepository.AddPermissions(userID, permissions)
	}

	return
}

// ReplacePermissionsToUser overwrites the direct permissions of the user according to the permission names or ids.
// First parameter is the user id, second parameter is can be permission name(s) or id(s).
// @param uint
// @param interface{}
// @return error
func (s *Permify) ReplacePermissionsToUser(userID uint, p interface{}) (err error) {
	var permissions collections.Permission
	permissions, err = s.GetPermissions(p)
	if err != nil {
		return err
	}

	if permissions.Len() > 0 {
		return s.UserRepository.ReplacePermissions(userID, permissions)
	}

	return s.UserRepository.ClearPermissions(userID)
}

// RemovePermissionsFromUser remove direct permissions from user according to the permission names or ids.
// First parameter is the user id, second parameter is can be permission name(s) or id(s).
// @param uint
// @param interface{}
// @return error
func (s *Permify) RemovePermissionsFromUser(userID uint, p interface{}) (err error) {
	var permissions collections.Permission
	permissions, err = s.GetPermissions(p)
	if err != nil {
		return err
	}

	if permissions.Len() > 0 {
		err = s.UserRepository.RemovePermissions(userID, permissions)
	}

	return
}

// AddRolesToUser add role or roles to user according to the role names or ids.
// First parameter is the user id, second parameter is can be role name(s) or id(s).
// @param uint
// @param interface{}
// @return error
func (s *Permify) AddRolesToUser(userID uint, r interface{}) (err error) {
	var roles collections.Role
	roles, err = s.GetRoles(r, false)
	if err != nil {
		return err
	}

	if roles.Len() > 0 {
		err = s.UserRepository.AddRoles(userID, roles)
	}

	return
}

// ReplaceRolesToUser overwrites the roles of the user according to the role names or ids.
// First parameter is the user id, second parameter is can be role name(s) or id(s).
// @param uint
// @param interface{}
// @return error
func (s *Permify) ReplaceRolesToUser(userID uint, r interface{}) (err error) {
	var roles collections.Role
	roles, err = s.GetRoles(r, false)
	if err != nil {
		return err
	}

	if roles.Len() > 0 {
		return s.UserRepository.ReplaceRoles(userID, roles)
	}

	return s.UserRepository.ClearRoles(userID)
}

// RemoveRolesFromUser remove roles from user according to the role names or ids.
// First parameter is the user id, second parameter is can be role name(s) or id(s).
// @param uint
// @param interface{}
// @return error
func (s *Permify) RemoveRolesFromUser(userID uint, r interface{}) (err error) {
	var roles collections.Role
	roles, err = s.GetRoles(r, false)
	if err != nil {
		return err
	}

	if roles.Len() > 0 {
		err = s.UserRepository.RemoveRoles(userID, roles)
	}

	return
}

// CONTROLS

// ROLE

// RoleHasPermission does the role or any of the roles have given permission?
// First parameter is can be role name(s) or id(s), second parameter is can be permission name or id.
// If the second parameter is an array, the first element of the given array is used.
// @param interface{}
// @param interface{}
// @return error
func (s *Permify) RoleHasPermission(r interface{}, p interface{}) (b bool, err error) {
	var roles collections.Role
	roles, err = s.GetRoles(r, false)
	if err != nil {
		return false, err
	}

	var permission models.Permission
	permission, err = s.GetPermission(p)
	if err != nil {
		return false, err
	}

	return s.RoleRepository.HasPermission(roles, permission)
}

// RoleHasAllPermissions does the role or roles have all the given permissions?
// First parameter is can be role name(s) or id(s), second parameter is can be permission name(s) or id(s).
// @param interface{}
// @param interface{}
// @return error
func (s *Permify) RoleHasAllPermissions(r interface{}, p interface{}) (b bool, err error) {
	var roles collections.Role
	roles, err = s.GetRoles(r, false)
	if err != nil {
		return false, err
	}

	var permissions collections.Permission
	permissions, err = s.GetPermissions(p)
	if err != nil {
		return false, err
	}

	return s.RoleRepository.HasAllPermissions(roles, permissions)
}

// RoleHasAnyPermissions does the role or roles have any of the given permissions?
// First parameter is can be role name(s) or id(s), second parameter is can be permission name(s) or id(s).
// @param interface{}
// @param interface{}
// @return error
func (s *Permify) RoleHasAnyPermissions(r interface{}, p interface{}) (b bool, err error) {
	var roles collections.Role
	roles, err = s.GetRoles(r, false)
	if err != nil {
		return false, err
	}

	var permissions collections.Permission
	permissions, err = s.GetPermissions(p)
	if err != nil {
		return false, err
	}

	return s.RoleRepository.HasAnyPermissions(roles, permissions)
}

// USER

// UserHasRole does the user have the given role?
// First parameter is the user id, second parameter is can be role name or id.
// If the second parameter is an array, the first element of the given array is used.
// @param uint
// @param interface{}
// @return bool, error
func (s *Permify) UserHasRole(userID uint, r interface{}) (b bool, err error) {
	var role models.Role
	role, err = s.GetRole(r, false)
	if err != nil {
		return false, err
	}
	return s.UserRepository.HasRole(userID, role)
}

// UserHasAllRoles does the user have all the given roles?
// First parameter is the user id, second parameter is can be role name(s) or id(s).
// @param uint
// @param interface{}
// @return bool, error
func (s *Permify) UserHasAllRoles(userID uint, r interface{}) (b bool, err error) {
	var roles collections.Role
	roles, err = s.GetRoles(r, false)
	if err != nil {
		return false, err
	}
	return s.UserRepository.HasAllRoles(userID, roles)
}

// UserHasAnyRoles does the user have any of the given roles?
// First parameter is the user id, second parameter is can be role name(s) or id(s).
// @param uint
// @param interface{}
// @return bool, error
func (s *Permify) UserHasAnyRoles(userID uint, r interface{}) (b bool, err error) {
	var roles collections.Role
	roles, err = s.GetRoles(r, false)
	if err != nil {
		return false, err
	}
	return s.UserRepository.HasAnyRoles(userID, roles)
}

// UserHasDirectPermission does the user have the given permission? (not including the permissions of the roles)
// First parameter is the user id, second parameter is can be permission name or id.
// If the second parameter is an array, the first element of the given array is used.
// @param uint
// @param interface{}
// @return bool, error
func (s *Permify) UserHasDirectPermission(userID uint, p interface{}) (b bool, err error) {
	var permission models.Permission
	permission, err = s.GetPermission(p)
	if err != nil {
		return false, err
	}
	return s.UserRepository.HasDirectPermission(userID, permission)
}

// UserHasAllDirectPermissions does the user have all the given permissions? (not including the permissions of the roles)
// First parameter is the user id, second parameter is can be permission name(s) or id(s).
// @param uint
// @param interface{}
// @return bool, error
func (s *Permify) UserHasAllDirectPermissions(userID uint, p interface{}) (b bool, err error) {
	var permissions collections.Permission
	permissions, err = s.GetPermissions(p)
	if err != nil {
		return false, err
	}
	return s.UserRepository.HasAllDirectPermissions(userID, permissions)
}

// UserHasAnyDirectPermissions does the user have any of the given permissions? (not including the permissions of the roles)
// First parameter is the user id, second parameter is can be permission name(s) or id(s).
// @param uint
// @param interface{}
// @return bool, error
func (s *Permify) UserHasAnyDirectPermissions(userID uint, p interface{}) (b bool, err error) {
	var permissions collections.Permission
	permissions, err = s.GetPermissions(p)
	if err != nil {
		return false, err
	}
	return s.UserRepository.HasAnyDirectPermissions(userID, permissions)
}

// UserHasPermission does the user have the given permission? (including the permissions of the roles)
// First parameter is the user id, second parameter is can be permission name or id.
// If the second parameter is an array, the first element of the given array is used.
// @param uint
// @param interface{}
// @return bool, error
func (s *Permify) UserHasPermission(userID uint, p interface{}) (b bool, err error) {
	var permission models.Permission
	permission, err = s.GetPermission(p)
	if err != nil {
		return false, err
	}

	var directPermissionIDs []uint
	directPermissionIDs, _, err = s.PermissionRepository.GetDirectPermissionIDsOfUserByID(userID, nil)
	if err != nil {
		return false, err
	}

	if helpers.InArray(permission.ID, directPermissionIDs) {
		return true, err
	}

	var roleIDs []uint
	roleIDs, _, err = s.RoleRepository.GetRoleIDsOfUser(userID, nil)
	if err != nil {
		return false, err
	}

	var permissionIDs []uint
	permissionIDs, _, err = s.PermissionRepository.GetPermissionIDsOfRolesByIDs(roleIDs, nil)
	if err != nil {
		return false, err
	}

	if helpers.InArray(permission.ID, permissionIDs) {
		return true, err
	}

	return false, err
}

// UserHasAllPermissions does the user have all the given permissions? (including the permissions of the roles).
// First parameter is the user id, second parameter is can be permission name(s) or id(s).
// @param uint
// @param interface{}
// @return bool, error
func (s *Permify) UserHasAllPermissions(userID uint, p interface{}) (b bool, err error) {
	var permissions collections.Permission
	permissions, err = s.GetPermissions(p)
	if err != nil {
		return false, err
	}

	var userPermissionIDs []uint
	userPermissionIDs, _, err = s.PermissionRepository.GetDirectPermissionIDsOfUserByID(userID, nil)
	if err != nil {
		return false, err
	}

	var roleIDs []uint
	roleIDs, _, err = s.RoleRepository.GetRoleIDsOfUser(userID, nil)
	if err != nil {
		return false, err
	}

	var rolePermissionIDs []uint
	rolePermissionIDs, _, err = s.PermissionRepository.GetPermissionIDsOfRolesByIDs(roleIDs, nil)
	if err != nil {
		return false, err
	}

	allPermissionIDsOfUser := helpers.RemoveDuplicateValues(helpers.JoinUintArrays(userPermissionIDs, rolePermissionIDs))

	for _, permissionID := range permissions.IDs() {
		if !helpers.InArray(permissionID, allPermissionIDsOfUser) {
			return false, err
		}
	}

	return true, err
}

// UserHasAnyPermissions does the user have any of the given permissions? (including the permissions of the roles).
// First parameter is the user id, second parameter is can be permission name(s) or id(s).
// @param uint
// @param interface{}
// @return bool, error
func (s *Permify) UserHasAnyPermissions(userID uint, p interface{}) (b bool, err error) {
	var permissions collections.Permission
	permissions, err = s.GetPermissions(p)
	if err != nil {
		return false, err
	}

	var directPermissionIDs []uint
	directPermissionIDs, _, err = s.PermissionRepository.GetDirectPermissionIDsOfUserByID(userID, nil)
	if err != nil {
		return false, err
	}

	for _, permissionID := range permissions.IDs() {
		if helpers.InArray(permissionID, directPermissionIDs) {
			return true, err
		}
	}

	var roleIDs []uint
	roleIDs, _, err = s.RoleRepository.GetRoleIDsOfUser(userID, nil)
	if err != nil {
		return false, err
	}

	var permissionIDs []uint
	permissionIDs, _, err = s.PermissionRepository.GetPermissionIDsOfRolesByIDs(roleIDs, nil)
	if err != nil {
		return false, err
	}

	for _, permissionID := range permissions.IDs() {
		if helpers.InArray(permissionID, permissionIDs) {
			return true, err
		}
	}

	return false, err
}