Function rbacEnabled

app/controlplane/internal/service/service.go:392–402

RBAC feature is enabled if we are using a project scoped token or it is a user with org role member

(ctx context.Context)

// RBAC feature is enabled if we are using a project scoped token or
// it is a user with org role member
func rbacEnabled(ctx context.Context) bool {
	// it's an API token
	token := entities.CurrentAPIToken(ctx)
	if token != nil {
		return token.ProjectID != nil
	}

	// we have an user
	currentSubject := usercontext.CurrentAuthzSubject(ctx)
	return authz.Role(currentSubject).RBACEnabled()
}

// NOTE: some of these http errors get automatically translated to gRPC status codes
// because they implement the gRPC status error interface