(ctx context.Context, arg database.InsertOrganizationMemberParams)
| 5689 | } |
| 5690 | |
| 5691 | func (q *querier) InsertOrganizationMember(ctx context.Context, arg database.InsertOrganizationMemberParams) (database.OrganizationMember, error) { |
| 5692 | orgRoles, err := q.convertToOrganizationRoles(arg.OrganizationID, arg.Roles) |
| 5693 | if err != nil { |
| 5694 | return database.OrganizationMember{}, xerrors.Errorf("converting to organization roles: %w", err) |
| 5695 | } |
| 5696 | |
| 5697 | // All roles are added roles. Org member is always implied. |
| 5698 | //nolint:gocritic |
| 5699 | addedRoles := append(orgRoles, rbac.ScopedRoleOrgMember(arg.OrganizationID)) |
| 5700 | err = q.canAssignRoles(ctx, arg.OrganizationID, addedRoles, []rbac.RoleIdentifier{}) |
| 5701 | if err != nil { |
| 5702 | return database.OrganizationMember{}, err |
| 5703 | } |
| 5704 | |
| 5705 | obj := rbac.ResourceOrganizationMember.InOrg(arg.OrganizationID).WithID(arg.UserID) |
| 5706 | return insert(q.log, q.auth, obj, q.db.InsertOrganizationMember)(ctx, arg) |
| 5707 | } |
| 5708 | |
| 5709 | func (q *querier) InsertPreset(ctx context.Context, arg database.InsertPresetParams) (database.TemplateVersionPreset, error) { |
| 5710 | err := q.authorizeContext(ctx, policy.ActionUpdate, rbac.ResourceTemplate) |
nothing calls this directly
no test coverage detected