Function RequireRole

server/security_context.go:71–80

RequireRole checks that the context has a user with at least the given role. Returns the UserInfo on success or an error suitable for gRPC status responses.

(ctx context.Context, required UserRole)

// RequireRole checks that the context has a user with at least the given role.
// Returns the UserInfo on success or an error suitable for gRPC status responses.
func RequireRole(ctx context.Context, required UserRole) (*UserInfo, error) {
	u := UserFromContext(ctx)
	if u == nil {
		return nil, fmt.Errorf("no authenticated user in context")
	}
	if !u.HasRole(required) {
		return nil, fmt.Errorf("role %q required, user has %q", required, u.Role)
	}
	return u, nil
}

// ParseRole converts a string to UserRole, defaulting to RoleUser for unknown values.
func ParseRole(s string) UserRole {