Method FgaListUsers

internal/service/admin_fga.go:211–234

FgaListUsers returns the fully-qualified user ids of user_type that have relation on object ("who can access this object?"). This is an introspection surface that reveals the access graph, so it is super-admin gated. Requires super-admin auth. Fail-closed: a nil engine returns ErrFgaNotEnabled. Read

(ctx context.Context, meta RequestMetadata, params *model.FgaListUsersInput)

// Read-only: no audit. Logic migrated from internal/graphql/fga_list_users.go.
// Permission: authorizer:admin.
func (p *provider) FgaListUsers(ctx context.Context, meta RequestMetadata, params *model.FgaListUsersInput) (*model.FgaListUsersResponse, *ResponseSideEffects, error) {
	log := p.Log.With().Str("func", "FgaListUsers").Logger()
	if err := p.requireSuperAdmin(ctx, meta); err != nil {
		return nil, nil, err
	}
	if p.AuthzEngine == nil {
		return nil, nil, ErrFgaNotEnabled
	}
	if params == nil || strings.TrimSpace(params.Object) == "" || strings.TrimSpace(params.Relation) == "" || strings.TrimSpace(params.UserType) == "" {
		return nil, nil, InvalidArgument("object, relation and user_type are required")
	}
	users, err := p.AuthzEngine.ListUsers(ctx, params.Object, params.Relation, params.UserType)
	if err != nil {
		metrics.RecordFgaOperation(metrics.FgaOpListUsers, metrics.FgaResultError)
		log.Debug().Err(err).Msg("Failed to list users")
		return nil, nil, err
	}
	metrics.RecordFgaOperation(metrics.FgaOpListUsers, metrics.FgaResultSuccess)
	// Cap the result set; ListUsers is an expensive enumeration surface.
	if len(users) > maxFgaListResults {
		users = users[:maxFgaListResults]
	}
	return &model.FgaListUsersResponse{Users: users}, nil, nil
}

// FgaExpand returns the OpenFGA relationship/userset tree for (relation, object)
// as a JSON string (the explainability/"why" primitive). It reveals the access