Method preUndeleteUserGuard

backend/api/v1/user_service.go:960–969

preUndeleteUserGuard checks seat limits before reactivating a principal. A soft-deleted principal does not occupy a seat, so undeleting one that is already referenced by workspace IAM (via allUsers, a direct binding, or a group) re-occupies a seat and must respect the limit. When the principal is no

(ctx context.Context, workspaceID string, user *store.UserMessage)

// group) re-occupies a seat and must respect the limit. When the principal is
// not referenced, undeleting adds no seat and is always allowed.
func (s *UserService) preUndeleteUserGuard(ctx context.Context, workspaceID string, user *store.UserMessage) error {
	p, err := s.store.GetWorkspaceIamPolicy(ctx, workspaceID)
	if err != nil {
		return connect.NewError(connect.CodeInternal, errors.Wrap(err, "failed to get workspace IAM policy"))
	}
	if len(utils.GetUserIAMPolicyBindings(ctx, s.store, workspaceID, user, p.Policy)) == 0 {
		return nil
	}
	return userCountGuard(ctx, s.store, s.licenseService, workspaceID, p.Policy, s.profile.SaaS)
}

func policyContainsAllUsers(policy *storepb.IamPolicy) bool {
	for _, binding := range policy.Bindings {