populate search personas from ACL index

Author: seanstory

example-apps/internal-knowledge-search/app-ui/README.md

@@ -117,6 +117,7 @@ You need to set `REACT_APP_SEARCH_APP_NAME`, `REACT_APP_SEARCH_APP_API_KEY` and
 6. define mappings, as above in this README
 7. create search application
 8. enable cors: https://www.elastic.co/guide/en/elasticsearch/reference/master/search-application-security.html#search-application-security-cors-elasticsearch
+9. create an API key that has read access to `.search-acl-filter-search-sharepoint` and the search application (`sharepoint`)
 
 
 ### Make it go

example-apps/internal-knowledge-search/app-ui/src/components/SearchApplicationSettings.tsx

@@ -1,21 +1,37 @@
-import React, {useState} from 'react';
+import React, {useEffect, useState} from 'react';
 import {useDispatch, useSelector} from "react-redux";
 import {updateSettings} from "../store/slices/searchApplicationSettingsSlice";
 import {useToast} from "../contexts/ToastContext";
 import {MessageType} from "./Toast";
 import {RootState} from "../store/store";
 import {FontAwesomeIcon} from "@fortawesome/react-fontawesome";
 import {faAngleDown, faAngleUp} from "@fortawesome/free-solid-svg-icons";
+import {json} from "react-router-dom";
 
 
 const SearchApplicationSettings: React.FC = () => {
     const dispatch = useDispatch();
     const {appName, apiKey, searchEndpoint, searchPersona} = useSelector((state: RootState) => state.searchApplicationSettings);
     const {showToast} = useToast();
-    const searchPersonaOptions = [
-        "admin",
-        "user"
-    ]
+
+    const fetchPersonaOptions = async () => {
+        const identitiesIndex = ".search-acl-filter-search-sharepoint" //TODO fix hardcoded
+        const identitiesPath = searchEndpoint+"/"+identitiesIndex+"/_search"
+        const response = await fetch(identitiesPath, {headers: {"Authorization": "ApiKey "+apiKey}});
+        const jsonData = await response.json();
+        const ids = jsonData.hits.hits.map((hit) => hit._id)
+        return ids
+    }
+
+    const [searchPersonaOptions, setSearchPersonaOptions] = useState(["admin", "user"]);
+
+    useEffect(()=>{
+        (async()=>{
+            const fetched = await fetchPersonaOptions()
+            setSearchPersonaOptions(fetched)
+        })()
+    },[])
+
     const [isOpen, setIsOpen] = useState(false);
 
     const toggleDropdown = () => {

example-apps/internal-knowledge-search/app-ui/src/pages/SearchPage.tsx

@@ -13,7 +13,6 @@ import dataSourceToLogoPathLookup from '../config/dataSourceToLogoPathLookup.jso
 import documentsToSearchResultsMappings from '../config/documentsToSearchResultMappings.json';
 import {RootState} from "../store/store";
 
-
 const mapHitToSearchResult = (hit) => {
     const doc = hit._source;
     const dataSource = hit._index;
@@ -38,20 +37,82 @@ export default function SearchPage() {
     //TODO: simplify query state and move it to one place
     const [query, setQuery] = useState<string>("");
 
-    const {appName, apiKey, searchEndpoint} = useSelector((state: RootState) => state.searchApplicationSettings);
+    const {appName, apiKey: adminApiKey, searchEndpoint, searchPersona} = useSelector((state: RootState) => state.searchApplicationSettings);
     const {sorts} = useSelector((state: RootState) => state.sort);
     const indexFilter = useSelector((state: RootState) => state.filter)["filters"]["Data sources"].values;
 
 
     useEffect(() => {
         const fetchData = async () => await handleSearchSubmit();
         fetchData();
-    }, [indexFilter, sorts, appName, apiKey, searchEndpoint]);
+    }, [indexFilter, sorts, appName, adminApiKey, searchEndpoint]);
+
+    const getOrCreateApiKey = async () => {
+        if (searchPersona == "admin"){
+            return adminApiKey
+        }
+        else {
+            const permissions = ['foo'] // todo
+            const apiKeyRoleDescriptor = {
+                name: searchPersona,
+                role_descriptors: {
+                    "dls-role": {
+                        "cluster": ["all"],
+                        "indices": [
+                            {
+                                "names": ["search-sharepoint"],
+                                "privileges": ["read"],
+                                "query": {
+                                    "template": {
+                                        "params": {
+                                            "permissions": permissions
+                                        },
+                                        'source': `
+                                        {
+                                          "bool": {
+                                            "filter": {
+                                              "bool": {
+                                                "should": [
+                                                  {
+                                                    "bool": {
+                                                      "must_not": {
+                                                        "exists": {
+                                                          "field": "_allow_access_control"
+                                                        }
+                                                      }
+                                                    }
+                                                  },
+                                                  {
+                                                    "terms": {
+                                                      "_allow_access_control": {{#toJson}}permissions{{/toJson}}
+                                                    }
+                                                  }
+                                                ]
+                                              }
+                                            }
+                                          }
+                                        }
+                                        `
+                                    }
+                                }
+                            }
+                        ]
+                    }
+                }
+            }
+
+            // TODO Use fetch: https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API
+            return "missing"
+        }
+    }
 
     const handleSearchSubmit = async () => {
         try {
             setLoading(true);
 
+            const apiKey = await getOrCreateApiKey()
+            showToast("API key is: "+apiKey)
+
             const client = SearchApplicationClient(appName, searchEndpoint, apiKey, {
                 "facets": {
                     description: {