Function add_org_grant

atomic-teams/src/grant.rs:78–96

Add a permission grant to an organization. Binds `subject_id` (a user or team UUID) with the given `relation` on the organization identified by `org_slug`. # Errors Returns [`TeamsError::AlreadyExists`] if the grant already exists, or [`TeamsError::PermissionDenied`] if the caller is not an org owner. Returns [`TeamsError::InvalidInput`] when `subject_type` is [`GrantSubjectType::Everyone`].

(
    client: &StorageClient,
    org_slug: &str,
    subject_type: GrantSubjectType,
    subject_id: Uuid,
    relation: GrantRelation,
)

/// [`TeamsError::InvalidInput`] when
/// `subject_type` is [`GrantSubjectType::Everyone`].
pub async fn add_org_grant(
    client: &StorageClient,
    org_slug: &str,
    subject_type: GrantSubjectType,
    subject_id: Uuid,
    relation: GrantRelation,
) -> TeamsResult<GrantInfo> {
    validate_mutation_subject(subject_type)?;
    let path = format!("/orgs/{org_slug}/grants");
    let body = AddGrantRequest {
        subject_type,
        subject_id,
        relation,
    };
    client
        .post(&path, &body)
        .await
        .map_err(|e| map_remote_error(e, format!("org {org_slug}")))
}

/// Revoke all grants for a subject on an organization.
///