Method CreateProject

backend/store/project.go:202–272

CreateProject creates a project.

(ctx context.Context, create *ProjectMessage, creator *UserMessage)

// CreateProject creates a project.
func (s *Store) CreateProject(ctx context.Context, create *ProjectMessage, creator *UserMessage) (*ProjectMessage, error) {
	if creator == nil {
		return nil, errors.Errorf("creator cannot be nil")
	}
	if create.Setting == nil {
		create.Setting = &storepb.Project{}
	}
	payload, err := protojson.Marshal(create.Setting)
	if err != nil {
		return nil, err
	}

	tx, err := s.GetDB().BeginTx(ctx, nil)
	if err != nil {
		return nil, err
	}
	defer tx.Rollback()

	project := &ProjectMessage{
		ResourceID: create.ResourceID,
		Workspace:  create.Workspace,
		Title:      create.Title,
		Setting:    create.Setting,
	}
	q := qb.Q().Space("INSERT INTO project (resource_id, workspace, name, setting)")
	q.Space("VALUES (?, ?, ?, ?)", create.ResourceID, create.Workspace, create.Title, payload)
	sql, args, err := q.ToSQL()
	if err != nil {
		return nil, err
	}
	if _, err := tx.ExecContext(ctx, sql, args...); err != nil {
		return nil, err
	}

	iamPolicy := &storepb.IamPolicy{
		Bindings: []*storepb.Binding{
			{
				Role: common.FormatRole(ProjectOwnerRole),
				Members: []string{
					common.FormatUserEmail(creator.Email),
				},
				Condition: &expr.Expr{},
			},
		},
	}
	policyPayload, err := protojson.Marshal(iamPolicy)
	if err != nil {
		return nil, err
	}
	policyMessage, err := upsertPolicyImpl(ctx, tx, &PolicyMessage{
		Workspace:         create.Workspace,
		ResourceType:      storepb.Policy_PROJECT,
		Resource:          common.FormatProject(project.ResourceID),
		Payload:           string(policyPayload),
		Type:              storepb.Policy_IAM,
		InheritFromParent: false,
		// Enforce cannot be false while creating a policy.
		Enforce: true,