(ctx context.Context, req *adminv1.SetOrganizationMemberServiceRoleRequest)
| 260 | } |
| 261 | |
| 262 | func (s *Server) SetOrganizationMemberServiceRole(ctx context.Context, req *adminv1.SetOrganizationMemberServiceRoleRequest) (*adminv1.SetOrganizationMemberServiceRoleResponse, error) { |
| 263 | observability.AddRequestAttributes(ctx, |
| 264 | attribute.String("args.name", req.Name), |
| 265 | attribute.String("args.organization", req.Org), |
| 266 | attribute.String("args.role", req.Role), |
| 267 | ) |
| 268 | |
| 269 | org, err := s.admin.DB.FindOrganizationByName(ctx, req.Org) |
| 270 | if err != nil { |
| 271 | return nil, err |
| 272 | } |
| 273 | |
| 274 | claims := auth.GetClaims(ctx) |
| 275 | if !claims.OrganizationPermissions(ctx, org.ID).ManageOrg { |
| 276 | return nil, status.Error(codes.PermissionDenied, "not allowed to update org") |
| 277 | } |
| 278 | |
| 279 | service, err := s.admin.DB.FindServiceByName(ctx, org.ID, req.Name) |
| 280 | if err != nil { |
| 281 | return nil, err |
| 282 | } |
| 283 | |
| 284 | orgRole, err := s.admin.DB.FindOrganizationRole(ctx, req.Role) |
| 285 | if err != nil { |
| 286 | return nil, err |
| 287 | } |
| 288 | |
| 289 | err = s.admin.DB.UpdateOrganizationMemberServiceRole(ctx, service.ID, org.ID, orgRole.ID) |
| 290 | if err != nil { |
| 291 | return nil, err |
| 292 | } |
| 293 | |
| 294 | return &adminv1.SetOrganizationMemberServiceRoleResponse{}, nil |
| 295 | } |
| 296 | |
| 297 | func (s *Server) RemoveOrganizationMemberService(ctx context.Context, req *adminv1.RemoveOrganizationMemberServiceRequest) (*adminv1.RemoveOrganizationMemberServiceResponse, error) { |
| 298 | observability.AddRequestAttributes(ctx, |
nothing calls this directly
no test coverage detected