Function revoke_workspace_grant

atomic-teams/src/grant.rs:171–183

Revoke all grants for a subject on a workspace. Calls `DELETE /workspaces/{slug}/grants/{subject_type}/{subject_id}`. The server removes **all** relations (read, write, admin) for that subject in a single call — no need to specify which relation to revoke. # Errors Returns [`TeamsError::PermissionDenied`](crate::error::TeamsError::PermissionDenied) if the caller is not a workspace admin, or a n

(
    client: &StorageClient,
    workspace_slug: &str,
    subject_type: GrantSubjectType,
    subject_id: Uuid,
)

/// if the caller is not a workspace admin, or a not-found error if the
/// workspace doesn't exist.
pub async fn revoke_workspace_grant(
    client: &StorageClient,
    workspace_slug: &str,
    subject_type: GrantSubjectType,
    subject_id: Uuid,
) -> TeamsResult<()> {
    let st = subject_type.to_string();
    let path = format!("/workspaces/{workspace_slug}/grants/{st}/{subject_id}");
    client
        .delete(&path)
        .await
        .map_err(|e| map_remote_error(e, format!("workspace {workspace_slug}")))
}

// ---------------------------------------------------------------------------
// Tests