Function add_workspace_grant

atomic-teams/src/grant.rs:131–148

Add a permission grant to a workspace. Binds `subject_id` (a user or team identity) with the given `relation` on the workspace identified by `workspace_slug`. # Errors Returns [`TeamsError::AlreadyExists`](crate::error::TeamsError::AlreadyExists) if the grant already exists, or [`TeamsError::PermissionDenied`](crate::error::TeamsError::PermissionDenied) if the caller is not an admin/owner of th

(
    client: &StorageClient,
    workspace_slug: &str,
    subject_type: GrantSubjectType,
    subject_id: Option<Uuid>,
    relation: GrantRelation,
)

/// [`TeamsError::PermissionDenied`](crate::error::TeamsError::PermissionDenied)
/// if the caller is not an admin/owner of the workspace's parent organization.
pub async fn add_workspace_grant(
    client: &StorageClient,
    workspace_slug: &str,
    subject_type: GrantSubjectType,
    subject_id: Option<Uuid>,
    relation: GrantRelation,
) -> TeamsResult<GrantInfo> {
    let path = format!("/workspaces/{workspace_slug}/grants");
    let body = AddGrantRequest {
        subject_type,
        subject_id,
        relation,
    };
    client
        .post(&path, &body)
        .await
        .map_err(|e| map_remote_error(e, format!("workspace {workspace_slug}")))
}

/// Revoke a permission grant from a workspace.
///