Function validate_parent

nodedb/src/control/security/role.rs:382–393

Validate that `parent_name` refers to an existing role (built-in or custom) and that adopting it as `child_name`'s parent does not create a cycle or exceed `MAX_ROLE_INHERITANCE_DEPTH`. Shared by `prepare_role` and `create_role` so both catalog mutation paths enforce the same rules.

(
    child_name: &str,
    parent_name: &str,
    roles: &HashMap<String, CustomRole>,
)

/// cycle or exceed `MAX_ROLE_INHERITANCE_DEPTH`. Shared by `prepare_role`
/// and `create_role` so both catalog mutation paths enforce the same rules.
fn validate_parent(
    child_name: &str,
    parent_name: &str,
    roles: &HashMap<String, CustomRole>,
) -> crate::Result<()> {
    if !is_builtin(parent_name) && !roles.contains_key(parent_name) {
        return Err(crate::Error::BadRequest {
            detail: format!("parent role '{parent_name}' does not exist"),
        });
    }
    check_inheritance_chain(child_name, parent_name, roles)
}

fn is_builtin(name: &str) -> bool {
    matches!(