Method assert_user_access

core/control-panel/impl/src/services/user.rs:196–205

Checks if the caller has access to the given user. Admins and controllers have access to all users.

(&self, user: &User, ctx: &CallContext)

    ///
    /// Admins and controllers have access to all users.
    fn assert_user_access(&self, user: &User, ctx: &CallContext) -> ServiceResult<()> {
        let is_user_owner = user.identity == ctx.caller();
        if !is_user_owner && !ctx.is_admin() && !ctx.is_controller() {
            Err(UserError::Forbidden {
                user: user.identity.to_text(),
            })?
        }

        Ok(())
    }

    /// Validates that the given identity has no associated user.
    ///