Method UpdatePolicy

backend/api/v1/org_policy_service.go:168–259

UpdatePolicy updates a policy in a specific resource.

(ctx context.Context, req *connect.Request[v1pb.UpdatePolicyRequest])

// UpdatePolicy updates a policy in a specific resource.
func (s *OrgPolicyService) UpdatePolicy(ctx context.Context, req *connect.Request[v1pb.UpdatePolicyRequest]) (*connect.Response[v1pb.Policy], error) {
	if req.Msg.Policy == nil {
		return nil, connect.NewError(connect.CodeInvalidArgument, errors.New("policy must be set"))
	}

	if err := s.checkPolicyFeatureGuard(ctx, req.Msg.Policy.Type); err != nil {
		return nil, err
	}

	policy, parent, err := s.findPolicyMessage(ctx, req.Msg.Policy.Name)
	if err != nil {
		connectErr := connect.CodeOf(err)
		if connectErr == connect.CodeNotFound && req.Msg.AllowMissing {
			response, err := s.CreatePolicy(ctx, connect.NewRequest(&v1pb.CreatePolicyRequest{
				Parent: parent,
				Policy: req.Msg.Policy,
			}))
			if err != nil {
				return nil, err
			}
			return response, nil
		}
		return nil, err
	}

	var perm permission.Permission
	switch policy.Type {
	case storepb.Policy_MASKING_EXEMPTION:
		perm = permission.PoliciesUpdateMaskingExemptionPolicy
	case storepb.Policy_MASKING_RULE:
		perm = permission.PoliciesUpdateMaskingRulePolicy
	default:
		perm = permission.PoliciesUpdate
	}
	if err := s.checkPolicyPermission(ctx, req, perm, policy); err != nil {
		return nil, err
	}

	if req.Msg.UpdateMask == nil {
		return nil, connect.NewError(connect.CodeInvalidArgument, errors.New("update_mask must be set"))
	}

	patch := &store.UpdatePolicyMessage{
		ResourceType: policy.ResourceType,
		Type:         policy.Type,
		Resource:     policy.Resource,
		Workspace:    policy.Workspace,
	}
	for _, path := range req.Msg.UpdateMask.Paths {
		switch path {
		case "inherit_from_parent":
			patch.InheritFromParent = &req.Msg.Policy.InheritFromParent
		case
			"rollout_policy",
			"disable_copy_data_policy",
			"masking_rule_policy",
			"masking_exemption_policy",
			"restrict_issue_creation_for_sql_review_policy",