Function orgMemberRole

coderd/rbac/authz_internal_test.go:1406–1421

orgMemberRole returns an organization-member role for RBAC-only tests. organization-member is now a DB-backed system role (not a built-in role), so RoleByName won't resolve it here. Assume the default behavior: workspace sharing enabled.

(orgID uuid.UUID)

// RoleByName won't resolve it here. Assume the default behavior: workspace
// sharing enabled.
func orgMemberRole(orgID uuid.UUID) Role {
	settings := OrgSettings{ShareableWorkspaceOwners: ShareableWorkspaceOwnersEveryone}
	perms := OrgMemberPermissions(settings)
	return Role{
		Identifier:  ScopedRoleOrgMember(orgID),
		DisplayName: "",
		Site:        []Permission{},
		User:        []Permission{},
		ByOrgID: map[string]OrgPermissions{
			orgID.String(): {
				Org:    perms.Org,
				Member: perms.Member,
			},
		},
	}
}

func must[T any](value T, err error) T {
	if err != nil {