Function revoke_org_grant

atomic-teams/src/grant.rs:112–125

Revoke all grants for a subject on an organization. Calls `DELETE /orgs/{slug}/grants/{subject_type}/{subject_id}`. The server removes **all** relations (read, write, admin, owner) for that subject in a single call. # Errors Returns [`TeamsError::OrgNotFound`] if the org does not exist, or [`TeamsError::PermissionDenied`] if the caller is not an org owner. Returns [`TeamsError::InvalidInput`] w

(
    client: &StorageClient,
    org_slug: &str,
    subject_type: GrantSubjectType,
    subject_id: Uuid,
)

/// [`TeamsError::InvalidInput`] when
/// `subject_type` is [`GrantSubjectType::Everyone`].
pub async fn revoke_org_grant(
    client: &StorageClient,
    org_slug: &str,
    subject_type: GrantSubjectType,
    subject_id: Uuid,
) -> TeamsResult<()> {
    validate_mutation_subject(subject_type)?;
    let st = subject_type.to_string();
    let path = format!("/orgs/{org_slug}/grants/{st}/{subject_id}");
    client
        .delete(&path)
        .await
        .map_err(|e| map_remote_error(e, format!("org {org_slug}")))
}

// ---------------------------------------------------------------------------
// Workspace grants