Method UpdatePolicy

backend/store/policy.go:577–620

UpdatePolicy updates the policy.

(ctx context.Context, patch *UpdatePolicyMessage)

// UpdatePolicy updates the policy.
func (s *Store) UpdatePolicy(ctx context.Context, patch *UpdatePolicyMessage) (*PolicyMessage, error) {
	set := qb.Q()
	set.Comma("updated_at = ?", time.Now())
	if v := patch.InheritFromParent; v != nil {
		set.Comma("inherit_from_parent = ?", *v)
	}
	if v := patch.Payload; v != nil {
		set.Comma("payload = ?", *v)
	}
	if v := patch.Enforce; v != nil {
		set.Comma("enforce = ?", *v)
	}

	query, args, err := qb.Q().Space("UPDATE policy SET ? WHERE resource_type = ? AND resource = ? AND type = ? AND workspace = ? RETURNING payload, inherit_from_parent, enforce, updated_at", set, patch.ResourceType, patch.Resource, patch.Type.String(), patch.Workspace).ToSQL()
	if err != nil {
		return nil, errors.Wrapf(err, "failed to build sql")
	}

	policy := &PolicyMessage{
		Workspace:    patch.Workspace,
		Resource:     patch.Resource,
		ResourceType: patch.ResourceType,
		Type:         patch.Type,
	}

	if err := s.GetDB().QueryRowContext(ctx, query, args...).Scan(
		&policy.Payload,
		&policy.InheritFromParent,
		&policy.Enforce,
		&policy.UpdatedAt,
	); err != nil {
		if err == sql.ErrNoRows {
			return nil, nil
		}
		return nil, err
	}

	s.policyCache.Add(getPolicyCacheKey(patch.Workspace, patch.ResourceType, patch.Resource, patch.Type), policy)
	if patch.Type == storepb.Policy_IAM {
		s.iamPolicyCache.Remove(getIamPolicyCacheKey(patch.Workspace, patch.ResourceType, patch.Resource))
	}

	return policy, nil
}

// DeletePolicy deletes the policy.
func (s *Store) DeletePolicy(ctx context.Context, policy *PolicyMessage) error {