Method checkPermission

backend/api/v1/group_service.go:267–281

(ctx context.Context, group *store.GroupMessage, user *store.UserMessage, permission string)

}

func (s *GroupService) checkPermission(ctx context.Context, group *store.GroupMessage, user *store.UserMessage, permission string) error {
	member := getMemberInGroup(user, group)
	if member != nil && member.Role == storepb.GroupMember_OWNER {
		return nil
	}

	ok, err := s.iamManager.CheckPermission(ctx, permission, user, common.GetWorkspaceIDFromContext(ctx))
	if err != nil {
		return connect.NewError(connect.CodeInternal, errors.Wrap(err, "failed to check permission"))
	}
	if !ok {
		return connect.NewError(connect.CodePermissionDenied, errors.Errorf("user does not have permission %q", permission))
	}
	return nil
}

func convertToGroupPayload(group *v1pb.Group) (*storepb.GroupPayload, error) {
	payload := &storepb.GroupPayload{}