Method GetOrganization

admin/server/organizations.go:54–92

(ctx context.Context, req *adminv1.GetOrganizationRequest)

}

func (s *Server) GetOrganization(ctx context.Context, req *adminv1.GetOrganizationRequest) (*adminv1.GetOrganizationResponse, error) {
	observability.AddRequestAttributes(ctx, attribute.String("args.org", req.Org))

	org, err := s.admin.DB.FindOrganizationByName(ctx, req.Org)
	if err != nil {
		return nil, err
	}

	claims := auth.GetClaims(ctx)
	perms := claims.OrganizationPermissions(ctx, org.ID)
	forceAccess := claims.Superuser(ctx) && req.SuperuserForceAccess
	if !perms.ReadOrg && !forceAccess {
		ok, err := s.admin.DB.CheckOrganizationHasPublicProjects(ctx, org.ID)
		if err != nil {
			return nil, err
		}
		if !ok {
			return nil, status.Error(codes.PermissionDenied, "not allowed to read org")
		}

		perms.Guest = true
		perms.ReadOrg = true
		perms.ReadProjects = true
	}

	// TODO: This is used to update plan name cache and can be removed a few months after Feb 2025 when plans have been cached for most orgs.
	// after that we can return nil plan name for uncached orgs, discussion - https://github.com/rilldata/rill/pull/6338#discussion_r1952713404
	if org.BillingPlanName == nil && org.BillingCustomerID != "" {
		_, org, err = s.getSubscriptionAndUpdateOrg(ctx, org)
		if err != nil {
			return nil, err
		}
	}

	return &adminv1.GetOrganizationResponse{
		Organization: s.organizationToDTO(org, perms.ManageOrg || forceAccess),
		Permissions:  perms,
	}, nil
}

func (s *Server) GetOrganizationNameForDomain(ctx context.Context, req *adminv1.GetOrganizationNameForDomainRequest) (*adminv1.GetOrganizationNameForDomainResponse, error) {
	observability.AddRequestAttributes(ctx, attribute.String("args.domain", req.Domain))