Method UpdateRole

backend/api/v1/role_service.go:123–189

UpdateRole updates an existing role.

(ctx context.Context, req *connect.Request[v1pb.UpdateRoleRequest])

// UpdateRole updates an existing role.
func (s *RoleService) UpdateRole(ctx context.Context, req *connect.Request[v1pb.UpdateRoleRequest]) (*connect.Response[v1pb.Role], error) {
	workspaceID := common.GetWorkspaceIDFromContext(ctx)
	if err := s.licenseService.IsFeatureEnabled(ctx, workspaceID, v1pb.PlanFeature_FEATURE_CUSTOM_ROLES); err != nil {
		return nil, connect.NewError(connect.CodePermissionDenied, err)
	}
	if req.Msg.UpdateMask == nil {
		return nil, connect.NewError(connect.CodeInvalidArgument, errors.New("update_mask must be set"))
	}
	roleID, err := common.GetRoleID(req.Msg.Role.Name)
	if err != nil {
		return nil, connect.NewError(connect.CodeInvalidArgument, err)
	}
	if predefinedRole := s.getBuildinRole(roleID); predefinedRole != nil {
		return nil, connect.NewError(connect.CodeInvalidArgument, errors.Errorf("cannot change the build-in role %s", req.Msg.Role.Name))
	}
	role, err := s.store.GetRole(ctx, &store.FindRoleMessage{Workspace: workspaceID, ResourceID: &roleID})
	if err != nil {
		return nil, connect.NewError(connect.CodeInternal, errors.Wrap(err, "failed to get role"))
	}
	if role == nil {
		if req.Msg.AllowMissing {
			return s.CreateRole(ctx, connect.NewRequest(&v1pb.CreateRoleRequest{
				Role:   req.Msg.Role,
				RoleId: roleID,
			}))
		}
		return nil, connect.NewError(connect.CodeNotFound, errors.Errorf("role not found: %s", roleID))
	}
	patch := &store.UpdateRoleMessage{
		ResourceID: roleID,
		Workspace:  workspaceID,
	}
	for _, path := range req.Msg.UpdateMask.Paths {
		switch path {
		case "title":
			patch.Name = &req.Msg.Role.Title
		case "description":
			patch.Description = &req.Msg.Role.Description
		case "permissions":
			permissions := make(map[permission.Permission]bool)
			for _, v := range req.Msg.GetRole().GetPermissions() {
				permissions[permission.Permission(v)] = true
			}
			patch.Permissions = &permissions
			if ok := permission.Exists(req.Msg.Role.Permissions...); !ok {
				invalidPerms := []string{}
				for _, p := range req.Msg.Role.Permissions {
					if !permission.Exist(p) {
						invalidPerms = append(invalidPerms, p)
					}
				}
				return nil, connect.NewError(connect.CodeInvalidArgument, errors.Errorf("invalid permissions: %v", invalidPerms))
			}
		default:
			return nil, connect.NewError(connect.CodeInvalidArgument, errors.Errorf("invalid update mask path: %s", path))
		}
	}