Function CanGenerateFull

support/support.go:1003–1030

CanGenerateFull checks if the user can generate a 'full' support bundle or only has permissions to generate a 'partial' bundle.

(ctx context.Context, client *codersdk.Client)

// CanGenerateFull checks if the user can generate a 'full' support bundle or
// only has permissions to generate a 'partial' bundle.
func CanGenerateFull(ctx context.Context, client *codersdk.Client) (bool, error) {
	if client == nil {
		return false, xerrors.Errorf("developer error: missing client!")
	}

	authChecks := map[string]codersdk.AuthorizationCheck{
		"Read DeploymentValues": {
			Object: codersdk.AuthorizationObject{
				ResourceType: codersdk.ResourceDeploymentConfig,
			},
			Action: codersdk.ActionRead,
		},
	}

	authResp, err := client.AuthCheck(ctx, codersdk.AuthorizationRequest{Checks: authChecks})
	if err != nil {
		// If the auth check itself fails (e.g., 401 Unauthorized
		// because there is no valid session), this is a hard error.
		return false, xerrors.Errorf("check authorization: %w", err)
	}
	for _, v := range authResp {
		if !v { // all checks must pass
			return false, nil
		}
	}

	return true, nil
}

// Run generates a support bundle with the given dependencies.
func Run(ctx context.Context, d *Deps) (*Bundle, error) {