Function ExtractOrganizationMember

coderd/httpmw/organizationparam.go:168–211

ExtractOrganizationMember extracts all user memberships from the "user" URL parameter. If orgID is uuid.Nil, then it will return all memberships for the user, otherwise it will only return memberships to the org. If `user` is returned, that means the caller can use the data. This is returned becaus

(ctx context.Context, auth func(r *http.Request, action policy.Action, object rbac.Objecter) bool, rw http.ResponseWriter, r *http.Request, db database.Store, orgID uuid.UUID)

// If `user` is returned, that means the caller can use the data. This is returned because
// it is possible to have a user with 0 organizations. So the user != nil, with 0 memberships.
func ExtractOrganizationMember(ctx context.Context, auth func(r *http.Request, action policy.Action, object rbac.Objecter) bool, rw http.ResponseWriter, r *http.Request, db database.Store, orgID uuid.UUID) (*database.User, []database.OrganizationMembersRow, bool) {
	// We need to resolve the `{user}` URL parameter so that we can get the userID and
	// username.  We do this as SystemRestricted since the caller might have permission
	// to access the OrganizationMember object, but *not* the User object.  So, it is
	// very important that we do not add the User object to the request context or otherwise
	// leak it to the API handler.
	// nolint:gocritic
	user, ok := ExtractUserContext(dbauthz.AsSystemRestricted(ctx), db, rw, r)
	if !ok {
		return nil, nil, true
	}

	organizationMembers, err := db.OrganizationMembers(ctx, database.OrganizationMembersParams{
		OrganizationID: orgID,
		UserID:         user.ID,
		IncludeSystem:  true,
		GithubUserID:   0,
	})
	if httpapi.Is404Error(err) {
		httpapi.ResourceNotFound(rw)
		return nil, nil, true
	}
	if err != nil {
		httpapi.Write(ctx, rw, http.StatusInternalServerError, codersdk.Response{
			Message: "Internal error fetching organization member.",
			Detail:  err.Error(),
		})
		return nil, nil, true
	}

	// Only return the user data if the caller can read the user object.
	if auth != nil && auth(r, policy.ActionRead, user) {
		return &user, organizationMembers, false
	}

	// If the user cannot be read and 0 memberships exist, throw a 404 to not
	// leak the user existence.
	if len(organizationMembers) == 0 {
		httpapi.ResourceNotFound(rw)
		return nil, nil, true
	}

	return nil, organizationMembers, false
}

type OrganizationMembers struct {
	// User is `nil` if the caller is not allowed access to the site wide