Method RemoveMemberFromGroup

app/controlplane/pkg/data/group.go:532–593

RemoveMemberFromGroup removes a user from a group.

(ctx context.Context, orgID uuid.UUID, groupID uuid.UUID, userID uuid.UUID)

// RemoveMemberFromGroup removes a user from a group.
func (g GroupRepo) RemoveMemberFromGroup(ctx context.Context, orgID uuid.UUID, groupID uuid.UUID, userID uuid.UUID) error {
	ctx, span := otelx.Start(ctx, groupRepoTracer, "GroupRepo.RemoveMemberFromGroup")
	defer span.End()

	err := WithTx(ctx, g.data.DB, func(tx *ent.Tx) error {
		// Check if the user is a member of this group
		existingMembership, err := tx.GroupMembership.Query().
			Where(groupmembership.UserIDEQ(userID), groupmembership.GroupIDEQ(groupID), groupmembership.DeletedAtIsNil()).
			Only(ctx)
		if err != nil {
			if ent.IsNotFound(err) {
				return biz.NewErrNotFound("group membership")
			}
			return fmt.Errorf("failed to check existing group membership: %w", err)
		}

		now := time.Now()

		// Mark the membership as deleted
		_, err = tx.GroupMembership.UpdateOne(existingMembership).
			SetDeletedAt(now).
			SetUpdatedAt(now).
			Save(ctx)
		if err != nil {
			return fmt.Errorf("failed to remove user from group: %w", err)
		}

		// Update the group's updated_at timestamp
		if _, err := tx.Group.UpdateOneID(groupID).
			SetUpdatedAt(now).
			Save(ctx); err != nil {
			return fmt.Errorf("failed to update group timestamp: %w", err)
		}

		if existingMembership.Maintainer {
			// Also remove the user membership if it exists
			if _, err := tx.Membership.Delete().Where(
				membership.MemberID(userID),
				membership.ResourceID(groupID),
				membership.ResourceTypeEQ(authz.ResourceTypeGroup),
				membership.HasOrganizationWith(
					organization.ID(orgID),
				),
			).Exec(ctx); err != nil {
				return fmt.Errorf("failed to remove user from group: %w", err)
			}
		}

		return nil
	})

	if err != nil {
		return err
	}

	// Update the member count based on actual query after transaction
	if err := g.UpdateGroupMemberCount(ctx, groupID); err != nil {
		g.log.Warnf("failed to update member count after removing member from group %s: %v", groupID, err)