Function getCBUserRolesForAudit

rest/handler.go:706–725

(db *db.DatabaseContext, authScope string, ctx context.Context, httpClient *http.Client, managementEndpoints []string, username, password string)

}

func getCBUserRolesForAudit(db *db.DatabaseContext, authScope string, ctx context.Context, httpClient *http.Client, managementEndpoints []string, username, password string) []string {
	if !needRolesForAudit(db, base.UserDomainCBServer) {
		return nil
	}

	whoAmIResponse, whoAmIStatus, whoAmIErr := cbRBACWhoAmI(ctx, httpClient, managementEndpoints, username, password)
	if whoAmIErr != nil || whoAmIStatus != http.StatusOK {
		base.WarnfCtx(ctx, "An error occurred whilst fetching the user's roles for audit filtering - will not filter: %v", whoAmIErr)
		return nil
	}

	var auditRoleNames []string
	for _, role := range whoAmIResponse.Roles {
		// only filter roles applied to this bucket or cluster-scope
		if role.BucketName == "" || role.BucketName == authScope {
			auditRoleNames = append(auditRoleNames, role.RoleName)
		}
	}
	return auditRoleNames
}

// removeCorruptConfigIfExists will remove the config from the bucket and remove it from the map if it exists on the invalid database config map
func (h *handler) removeCorruptConfigIfExists(ctx context.Context, bucket, configGroupID, dbName string) error {