Method GetPolicy

backend/api/v1/org_policy_service.go:57–102

GetPolicy gets a policy in a specific resource.

(ctx context.Context, req *connect.Request[v1pb.GetPolicyRequest])

// GetPolicy gets a policy in a specific resource.
func (s *OrgPolicyService) GetPolicy(ctx context.Context, req *connect.Request[v1pb.GetPolicyRequest]) (*connect.Response[v1pb.Policy], error) {
	policy, parent, err := s.findPolicyMessage(ctx, req.Msg.Name)
	if err != nil {
		connectErr := connect.CodeOf(err)
		// For ROLLOUT_POLICY, return default policy if not found
		if connectErr == connect.CodeNotFound {
			policyType, extractErr := extractPolicyTypeFromName(req.Msg.Name)
			if extractErr == nil && policyType == storepb.Policy_ROLLOUT {
				defaultPolicy, defaultErr := s.getDefaultRolloutPolicy(parent)
				if defaultErr != nil {
					return nil, defaultErr
				}
				policy = defaultPolicy
			}
		} else {
			return nil, err
		}
	}
	if policy == nil {
		return nil, connect.NewError(connect.CodeNotFound, errors.Errorf("cannot found the policy %v", req.Msg.Name))
	}

	if err := validatePolicyType(policy.Type, policy.ResourceType); err != nil {
		return nil, connect.NewError(connect.CodeInvalidArgument, err)
	}

	var perm permission.Permission
	switch policy.Type {
	case storepb.Policy_MASKING_EXEMPTION:
		perm = permission.PoliciesGetMaskingExemptionPolicy
	case storepb.Policy_MASKING_RULE:
		perm = permission.PoliciesGetMaskingRulePolicy
	default:
		perm = permission.PoliciesGet
	}
	if err := s.checkPolicyPermission(ctx, req, perm, policy); err != nil {
		return nil, err
	}

	response, err := convertToPolicy(policy)
	if err != nil {
		return nil, connect.NewError(connect.CodeInternal, err)
	}

	return connect.NewResponse(response), nil
}

// ListPolicies lists policies in a specific resource.
func (s *OrgPolicyService) ListPolicies(ctx context.Context, req *connect.Request[v1pb.ListPoliciesRequest]) (*connect.Response[v1pb.ListPoliciesResponse], error) {