Method LeaveOrganization

admin/server/organizations.go:728–772

(ctx context.Context, req *adminv1.LeaveOrganizationRequest)

}

func (s *Server) LeaveOrganization(ctx context.Context, req *adminv1.LeaveOrganizationRequest) (*adminv1.LeaveOrganizationResponse, error) {
	observability.AddRequestAttributes(ctx,
		attribute.String("args.org", req.Org),
	)

	// Check the request is made by an authenticated user
	claims := auth.GetClaims(ctx)
	if claims.OwnerType() != auth.OwnerTypeUser {
		return nil, status.Error(codes.Unauthenticated, "not authenticated as a user")
	}

	org, err := s.admin.DB.FindOrganizationByName(ctx, req.Org)
	if err != nil {
		return nil, err
	}

	if !claims.OrganizationPermissions(ctx, org.ID).ManageOrgMembers {
		return nil, status.Error(codes.PermissionDenied, "not allowed to remove org members")
	}

	user, err := s.admin.DB.FindUser(ctx, claims.OwnerID())
	if err != nil {
		return nil, err
	}

	if org.BillingEmail == user.Email {
		return nil, status.Error(codes.FailedPrecondition, "this user is the billing email for the organization, please update the billing email before leaving")
	}

	// check if the user is the last admin
	_, isLastAdmin, err := s.admin.DB.FindOrganizationMemberUserAdminStatus(ctx, org.ID, user.ID)
	if err != nil {
		return nil, err
	}
	if isLastAdmin {
		return nil, status.Error(codes.FailedPrecondition, "cannot leave because you are the last admin")
	}

	err = s.admin.DeleteOrganizationMemberUser(ctx, org.ID, user.ID)
	if err != nil {
		return nil, err
	}

	return &adminv1.LeaveOrganizationResponse{}, nil
}

func (s *Server) CreateWhitelistedDomain(ctx context.Context, req *adminv1.CreateWhitelistedDomainRequest) (*adminv1.CreateWhitelistedDomainResponse, error) {
	observability.AddRequestAttributes(ctx,