(ctx context.Context, req *adminv1.DeleteUsergroupRequest)
| 257 | } |
| 258 | |
| 259 | func (s *Server) DeleteUsergroup(ctx context.Context, req *adminv1.DeleteUsergroupRequest) (*adminv1.DeleteUsergroupResponse, error) { |
| 260 | observability.AddRequestAttributes(ctx, |
| 261 | attribute.String("args.org", req.Org), |
| 262 | attribute.String("args.usergroup", req.Usergroup), |
| 263 | ) |
| 264 | |
| 265 | usergroup, err := s.admin.DB.FindUsergroupByName(ctx, req.Org, req.Usergroup) |
| 266 | if err != nil { |
| 267 | return nil, err |
| 268 | } |
| 269 | |
| 270 | claims := auth.GetClaims(ctx) |
| 271 | if !claims.OrganizationPermissions(ctx, usergroup.OrgID).ManageOrgMembers { |
| 272 | return nil, status.Error(codes.PermissionDenied, "not allowed to delete org user group") |
| 273 | } |
| 274 | |
| 275 | if usergroup.Managed { |
| 276 | return nil, status.Error(codes.FailedPrecondition, "cannot edit managed user group") |
| 277 | } |
| 278 | |
| 279 | err = s.admin.DB.DeleteUsergroup(ctx, usergroup.ID) |
| 280 | if err != nil { |
| 281 | return nil, err |
| 282 | } |
| 283 | |
| 284 | return &adminv1.DeleteUsergroupResponse{}, nil |
| 285 | } |
| 286 | |
| 287 | func (s *Server) AddOrganizationMemberUsergroup(ctx context.Context, req *adminv1.AddOrganizationMemberUsergroupRequest) (*adminv1.AddOrganizationMemberUsergroupResponse, error) { |
| 288 | observability.AddRequestAttributes(ctx, |
nothing calls this directly
no test coverage detected