Method DeletePolicy

backend/api/v1/org_policy_service.go:279–303

DeletePolicy deletes a policy for a specific resource.

(ctx context.Context, req *connect.Request[v1pb.DeletePolicyRequest])

// DeletePolicy deletes a policy for a specific resource.
func (s *OrgPolicyService) DeletePolicy(ctx context.Context, req *connect.Request[v1pb.DeletePolicyRequest]) (*connect.Response[emptypb.Empty], error) {
	policy, _, err := s.findPolicyMessage(ctx, req.Msg.Name)
	if err != nil {
		return nil, err
	}

	var perm permission.Permission
	switch policy.Type {
	case storepb.Policy_MASKING_EXEMPTION:
		perm = permission.PoliciesDeleteMaskingExemptionPolicy
	case storepb.Policy_MASKING_RULE:
		perm = permission.PoliciesDeleteMaskingRulePolicy
	default:
		perm = permission.PoliciesDelete
	}
	if err := s.checkPolicyPermission(ctx, req, perm, policy); err != nil {
		return nil, err
	}

	if err := s.store.DeletePolicy(ctx, policy); err != nil {
		return nil, connect.NewError(connect.CodeInternal, err)
	}

	return connect.NewResponse(&emptypb.Empty{}), nil
}

// extractPolicyTypeFromName extracts the policy type from a policy name.
func extractPolicyTypeFromName(policyName string) (storepb.Policy_Type, error) {