{-# LANGUAGE DataKinds                   #-}
{-# LANGUAGE DeriveGeneric               #-}
{-# LANGUAGE FlexibleInstances           #-}
{-# LANGUAGE GeneralizedNewtypeDeriving  #-}
{-# LANGUAGE LambdaCase                  #-}
{-# LANGUAGE NoImplicitPrelude           #-}
{-# LANGUAGE OverloadedStrings           #-}
{-# LANGUAGE RecordWildCards             #-}
{-# LANGUAGE TypeFamilies                #-}

{-# OPTIONS_GHC -fno-warn-unused-imports #-}

-- Module      : Network.AWS.OpsWorks.SetPermission
-- Copyright   : (c) 2013-2014 Brendan Hay <brendan.g.hay@gmail.com>
-- License     : This Source Code Form is subject to the terms of
--               the Mozilla Public License, v. 2.0.
--               A copy of the MPL can be found in the LICENSE file or
--               you can obtain it at http://mozilla.org/MPL/2.0/.
-- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>
-- Stability   : experimental
-- Portability : non-portable (GHC extensions)
--
-- Derived from AWS service descriptions, licensed under Apache 2.0.

-- | Specifies a user's permissions. For more information, see <http://docs.aws.amazon.com/opsworks/latest/userguide/workingsecurity.html Security andPermissions>.
--
-- Required Permissions: To use this action, an IAM user must have a Manage
-- permissions level for the stack, or an attached policy that explicitly grants
-- permissions. For more information on user permissions, see <http://docs.aws.amazon.com/opsworks/latest/userguide/opsworks-security-users.html Managing UserPermissions>.
--
-- <http://docs.aws.amazon.com/opsworks/latest/APIReference/API_SetPermission.html>
module Network.AWS.OpsWorks.SetPermission
    (
    -- * Request
      SetPermission
    -- ** Request constructor
    , setPermission
    -- ** Request lenses
    , spAllowSsh
    , spAllowSudo
    , spIamUserArn
    , spLevel
    , spStackId

    -- * Response
    , SetPermissionResponse
    -- ** Response constructor
    , setPermissionResponse
    ) where

import Network.AWS.Prelude
import Network.AWS.Request.JSON
import Network.AWS.OpsWorks.Types
import qualified GHC.Exts

data SetPermission = SetPermission
    { _spAllowSsh   :: Maybe Bool
    , _spAllowSudo  :: Maybe Bool
    , _spIamUserArn :: Text
    , _spLevel      :: Maybe Text
    , _spStackId    :: Text
    } deriving (Eq, Ord, Show)

-- | 'SetPermission' constructor.
--
-- The fields accessible through corresponding lenses are:
--
-- * 'spAllowSsh' @::@ 'Maybe' 'Bool'
--
-- * 'spAllowSudo' @::@ 'Maybe' 'Bool'
--
-- * 'spIamUserArn' @::@ 'Text'
--
-- * 'spLevel' @::@ 'Maybe' 'Text'
--
-- * 'spStackId' @::@ 'Text'
--
setPermission :: Text -- ^ 'spStackId'
              -> Text -- ^ 'spIamUserArn'
              -> SetPermission
setPermission p1 p2 = SetPermission
    { _spStackId    = p1
    , _spIamUserArn = p2
    , _spAllowSsh   = Nothing
    , _spAllowSudo  = Nothing
    , _spLevel      = Nothing
    }

-- | The user is allowed to use SSH to communicate with the instance.
spAllowSsh :: Lens' SetPermission (Maybe Bool)
spAllowSsh = lens _spAllowSsh (\s a -> s { _spAllowSsh = a })

-- | The user is allowed to use sudo to elevate privileges.
spAllowSudo :: Lens' SetPermission (Maybe Bool)
spAllowSudo = lens _spAllowSudo (\s a -> s { _spAllowSudo = a })

-- | The user's IAM ARN.
spIamUserArn :: Lens' SetPermission Text
spIamUserArn = lens _spIamUserArn (\s a -> s { _spIamUserArn = a })

-- | The user's permission level, which must be set to one of the following
-- strings. You cannot set your own permissions level.
--
-- 'deny' 'show' 'deploy' 'manage' 'iam_only'  For more information on the permissions
-- associated with these levels, see <http://docs.aws.amazon.com/opsworks/latest/userguide/opsworks-security-users.html Managing User Permissions>
spLevel :: Lens' SetPermission (Maybe Text)
spLevel = lens _spLevel (\s a -> s { _spLevel = a })

-- | The stack ID.
spStackId :: Lens' SetPermission Text
spStackId = lens _spStackId (\s a -> s { _spStackId = a })

data SetPermissionResponse = SetPermissionResponse
    deriving (Eq, Ord, Show, Generic)

-- | 'SetPermissionResponse' constructor.
setPermissionResponse :: SetPermissionResponse
setPermissionResponse = SetPermissionResponse

instance ToPath SetPermission where
    toPath = const "/"

instance ToQuery SetPermission where
    toQuery = const mempty

instance ToHeaders SetPermission

instance ToJSON SetPermission where
    toJSON SetPermission{..} = object
        [ "StackId"    .= _spStackId
        , "IamUserArn" .= _spIamUserArn
        , "AllowSsh"   .= _spAllowSsh
        , "AllowSudo"  .= _spAllowSudo
        , "Level"      .= _spLevel
        ]

instance AWSRequest SetPermission where
    type Sv SetPermission = OpsWorks
    type Rs SetPermission = SetPermissionResponse

    request  = post "SetPermission"
    response = nullResponse SetPermissionResponse