Function memberMapToRolesInProjectIAM

frontend/src/utils/v1/iam.ts:148–195

(
  iamPolicy: IamPolicy,
  targetRole?: string,
  getGroupByIdentifier?: (identifier: string) => Group | undefined
)

// memberMapToRolesInProjectIAM return the Map<users/{email}, Set<roles/{role}>>
// the user could includes users/ALL_USERS_USER_EMAIL
export const memberMapToRolesInProjectIAM = (
  iamPolicy: IamPolicy,
  targetRole?: string,
  getGroupByIdentifier?: (identifier: string) => Group | undefined
): Map<string, Set<string>> => {
  // Map<userfullname, Set<roles/{role}>>
  const rolesMapByName = new Map<string, Set<string>>();

  // Handle project level roles.
  for (const binding of iamPolicy.bindings) {
    if (targetRole && binding.role !== targetRole) {
      continue;
    }
    if (isBindingPolicyExpired(binding)) {
      continue;
    }

    const fullnames = getUserListInBinding({
      binding,
      ignoreGroup: false,
      getGroupByIdentifier,
    });
    for (const fullname of fullnames) {
      if (!rolesMapByName.has(fullname)) {
        rolesMapByName.set(fullname, new Set());
      }
      rolesMapByName.get(fullname)?.add(binding.role);
    }
  }

  // Handle workspace level project roles.
  const roleMapToUsers =
    appStoreUtilBridge()?.workspaceRoleMapToUsers() ??
    new Map<string, Set<string>>();
  for (const [role, userSet] of roleMapToUsers.entries()) {
    if (targetRole && role !== targetRole) {
      continue;
    }
    for (const user of userSet.values()) {
      if (!rolesMapByName.has(user)) {
        rolesMapByName.set(user, new Set());
      }
      rolesMapByName.get(user)?.add(role);
    }
  }

  return rolesMapByName;
};

export const filterBindingsByUserName = ({
  policy,