Method GetIamPolicy

backend/api/v1/project_service.go:551–578

GetIamPolicy returns the IAM policy for a project.

(ctx context.Context, req *connect.Request[v1pb.GetIamPolicyRequest])

// GetIamPolicy returns the IAM policy for a project.
func (s *ProjectService) GetIamPolicy(ctx context.Context, req *connect.Request[v1pb.GetIamPolicyRequest]) (*connect.Response[v1pb.IamPolicy], error) {
	projectID, err := common.GetProjectID(req.Msg.Resource)
	if err != nil {
		return nil, connect.NewError(connect.CodeInvalidArgument, err)
	}
	workspaceID := common.GetWorkspaceIDFromContext(ctx)
	project, err := s.store.GetProject(ctx, &store.FindProjectMessage{
		Workspace:  workspaceID,
		ResourceID: &projectID,
	})
	if err != nil {
		return nil, connect.NewError(connect.CodeInternal, err)
	}
	if project == nil {
		return nil, connect.NewError(connect.CodeNotFound, errors.Errorf("cannot found project %s", projectID))
	}

	policy, err := s.store.GetProjectIamPolicy(ctx, workspaceID, project.ResourceID)
	if err != nil {
		return nil, connect.NewError(connect.CodeInternal, err)
	}

	iamPolicy, err := convertToV1IamPolicy(policy)
	if err != nil {
		return nil, err
	}
	return connect.NewResponse(iamPolicy), nil
}

// SetIamPolicy sets the IAM policy for a project.
func (s *ProjectService) SetIamPolicy(ctx context.Context, req *connect.Request[v1pb.SetIamPolicyRequest]) (*connect.Response[v1pb.IamPolicy], error) {