Method EnableAccess

internal/service/admin_access.go:69–107

EnableAccess re-enables a previously revoked user by clearing the revoked timestamp and fires the access-enabled webhook. Requires super-admin auth. Logic migrated from internal/graphql/enable_access.go.

(ctx context.Context, meta RequestMetadata, params *model.UpdateAccessRequest)

// timestamp and fires the access-enabled webhook. Requires super-admin auth.
// Logic migrated from internal/graphql/enable_access.go.
func (p *provider) EnableAccess(ctx context.Context, meta RequestMetadata, params *model.UpdateAccessRequest) (*model.Response, *ResponseSideEffects, error) {
	log := p.Log.With().Str("func", "EnableAccess").Logger()
	if err := p.requireSuperAdmin(ctx, meta); err != nil {
		return nil, nil, err
	}

	if params.UserID == "" {
		return nil, nil, fmt.Errorf("user ID is missing")
	}

	log = log.With().Str("user_id", params.UserID).Logger()

	user, err := p.StorageProvider.GetUserByID(ctx, params.UserID)
	if err != nil {
		log.Debug().Err(err).Msg("Failed to get user by ID")
		return nil, nil, err
	}

	user.RevokedTimestamp = nil

	user, err = p.StorageProvider.UpdateUser(ctx, user)
	if err != nil {
		log.Debug().Err(err).Msg("Failed to update user")
		return nil, nil, err
	}
	go func() { _ = p.EventsProvider.RegisterEvent(ctx, constants.UserAccessEnabledWebhookEvent, "", user) }()
	p.AuditProvider.LogEvent(audit.Event{
		Action:   constants.AuditAdminAccessEnabledEvent,
		Protocol: meta.Protocol, ActorType: constants.AuditActorTypeAdmin,
		ResourceType: constants.AuditResourceTypeUser,
		ResourceID:   user.ID,
		IPAddress:    meta.IPAddress,
		UserAgent:    meta.UserAgent,
	})

	return &model.Response{
		Message: `user access enabled successfully`,
	}, nil, nil
}

// InviteMembers creates accounts for the supplied emails that do not yet exist
// and sends each an invite (magic-link or setup-password) email. Requires