Method checkMetadataPermissions

backend/api/lsp/handler.go:205–253

(ctx context.Context, metadata SetMetadataCommandArguments)

}

func (h *Handler) checkMetadataPermissions(ctx context.Context, metadata SetMetadataCommandArguments) error {
	user, ok := ctx.Value(common.UserContextKey).(*store.UserMessage)
	if !ok || user == nil {
		return errors.New("user not authenticated")
	}

	workspaceID := common.GetWorkspaceIDFromContext(ctx)

	// If database is specified, check database schema permission
	if metadata.DatabaseName != "" && metadata.InstanceID != "" {
		// Need to get database to find its project
		instanceID, err := common.GetInstanceID(metadata.InstanceID)
		if err != nil {
			return err
		}

		database, err := h.store.GetDatabase(ctx, &store.FindDatabaseMessage{
			Workspace:    workspaceID,
			InstanceID:   &instanceID,
			DatabaseName: &metadata.DatabaseName,
		})
		if err != nil {
			return errors.Wrap(err, "failed to get database")
		}
		if database == nil {
			return errors.Errorf("database %q not found", metadata.DatabaseName)
		}

		// Check bb.databases.getSchema permission
		ok, err := h.iamManager.CheckPermission(ctx, permission.DatabasesGetSchema, user, workspaceID, database.ProjectID)
		if err != nil {
			return errors.Wrap(err, "failed to check permission")
		}
		if !ok {
			return errors.Errorf("no permission to access database %q", metadata.DatabaseName)
		}
	} else if metadata.InstanceID != "" && metadata.DatabaseName == "" {
		// If only instance is specified, check instance get permission
		ok, err := h.iamManager.CheckPermission(ctx, permission.InstancesGet, user, workspaceID)
		if err != nil {
			return errors.Wrap(err, "failed to check permission")
		}
		if !ok {
			return errors.Errorf("no permission to access instance %q", metadata.InstanceID)
		}
	}

	return nil
}

func (h *Handler) reset(params *lsp.InitializeParams) error {
	h.mu.Lock()