Method checkSettingPermission

backend/api/v1/setting_service.go:804–825

(ctx context.Context, req connect.AnyRequest, perm permission.Permission)

}

func (s *SettingService) checkSettingPermission(ctx context.Context, req connect.AnyRequest, perm permission.Permission) error {
	user, ok := GetUserFromContext(ctx)
	if !ok {
		return connect.NewError(connect.CodeInternal, errors.Errorf("user not found"))
	}

	ok, err := s.iamManager.CheckPermission(ctx, perm, user, common.GetWorkspaceIDFromContext(ctx))
	if err != nil {
		return connect.NewError(connect.CodeInternal, errors.Errorf("failed to check permission with error: %v", err.Error()))
	}
	if !ok {
		err := connect.NewError(connect.CodePermissionDenied, errors.Errorf("user does not have permission %q", perm))
		if detail, detailErr := connect.NewErrorDetail(&v1pb.PermissionDeniedDetail{
			Method:              req.Spec().Procedure,
			RequiredPermissions: []string{string(perm)},
		}); detailErr == nil {
			err.AddDetail(detail)
		}
		return err
	}
	return nil
}

var domainRegexp = regexp.MustCompile(`^(?i:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z]{2,}$`)
var disallowedDomains = map[string]bool{