(ctx context.Context, req *adminv1.CreateUsergroupRequest)
| 58 | } |
| 59 | |
| 60 | func (s *Server) CreateUsergroup(ctx context.Context, req *adminv1.CreateUsergroupRequest) (*adminv1.CreateUsergroupResponse, error) { |
| 61 | observability.AddRequestAttributes(ctx, |
| 62 | attribute.String("args.org", req.Org), |
| 63 | attribute.String("args.name", req.Name), |
| 64 | ) |
| 65 | |
| 66 | org, err := s.admin.DB.FindOrganizationByName(ctx, req.Org) |
| 67 | if err != nil { |
| 68 | return nil, err |
| 69 | } |
| 70 | |
| 71 | claims := auth.GetClaims(ctx) |
| 72 | if !claims.OrganizationPermissions(ctx, org.ID).ManageOrgMembers { |
| 73 | return nil, status.Error(codes.PermissionDenied, "not allowed to add org user group") |
| 74 | } |
| 75 | |
| 76 | grp, err := s.admin.DB.InsertUsergroup(ctx, &database.InsertUsergroupOptions{ |
| 77 | Name: req.Name, |
| 78 | OrgID: org.ID, |
| 79 | Managed: false, |
| 80 | }) |
| 81 | if err != nil { |
| 82 | return nil, err |
| 83 | } |
| 84 | |
| 85 | return &adminv1.CreateUsergroupResponse{ |
| 86 | Usergroup: usergroupToPB(grp), |
| 87 | }, nil |
| 88 | } |
| 89 | |
| 90 | func (s *Server) GetUsergroup(ctx context.Context, req *adminv1.GetUsergroupRequest) (*adminv1.GetUsergroupResponse, error) { |
| 91 | observability.AddRequestAttributes(ctx, |
nothing calls this directly
no test coverage detected