Function CreateSystemRole

coderd/rbac/rolestore/rolestore.go:347–374

CreateSystemRole inserts a new system role into the database with permissions produced by permsFunc based on the organization's current settings.

(
	ctx context.Context,
	tx database.Store,
	org database.Organization,
	roleName string,
)

// permissions produced by permsFunc based on the organization's current
// settings.
func CreateSystemRole(
	ctx context.Context,
	tx database.Store,
	org database.Organization,
	roleName string,
) error {
	permsFunc, ok := systemRoles[roleName]
	if !ok {
		panic("dev error: no permissions function exists for role " + roleName)
	}
	perms := permsFunc(orgSettings(org))

	_, err := tx.InsertCustomRole(ctx, database.InsertCustomRoleParams{
		Name:              roleName,
		DisplayName:       "",
		OrganizationID:    uuid.NullUUID{UUID: org.ID, Valid: true},
		SitePermissions:   database.CustomRolePermissions{},
		OrgPermissions:    ConvertPermissionsToDB(perms.Org),
		UserPermissions:   database.CustomRolePermissions{},
		MemberPermissions: ConvertPermissionsToDB(perms.Member),
		IsSystem:          true,
	})
	if err != nil {
		return xerrors.Errorf("insert %s role: %w", roleName, err)
	}

	return nil
}