Method authorizeConv

server/handler_hub.go:51–63

authorizeConv ensures principal owns convID (admins bypass). Returns a gRPC status error suitable to return directly.

(ctx context.Context, convID, principal string)

// authorizeConv ensures principal owns convID (admins bypass). Returns a
// gRPC status error suitable to return directly.
func (h *Handler) authorizeConv(ctx context.Context, convID, principal string) error {
	owner, err := h.hub.OwnerOf(ctx, convID)
	if err != nil {
		return status.Errorf(codes.NotFound, "%s", i18n.T("server.hub.conv_not_found"))
	}
	if owner == principal {
		return nil
	}
	if u := UserFromContext(ctx); u != nil && u.HasRole(RoleAdmin) {
		return nil
	}
	return status.Errorf(codes.PermissionDenied, "%s", i18n.T("server.hub.conv_forbidden"))
}

func (h *Handler) hubReady() error {
	if h.hub == nil {