(ctx context.Context, arg database.InsertUserParams)
| 5855 | } |
| 5856 | |
| 5857 | func (q *querier) InsertUser(ctx context.Context, arg database.InsertUserParams) (database.User, error) { |
| 5858 | // Always check if the assigned roles can actually be assigned by this actor. |
| 5859 | impliedRoles := append([]rbac.RoleIdentifier{rbac.RoleMember()}, q.convertToDeploymentRoles(arg.RBACRoles)...) |
| 5860 | err := q.canAssignRoles(ctx, uuid.Nil, impliedRoles, []rbac.RoleIdentifier{}) |
| 5861 | if err != nil { |
| 5862 | return database.User{}, err |
| 5863 | } |
| 5864 | obj := rbac.ResourceUser |
| 5865 | return insert(q.log, q.auth, obj, q.db.InsertUser)(ctx, arg) |
| 5866 | } |
| 5867 | |
| 5868 | func (q *querier) InsertUserGroupsByID(ctx context.Context, arg database.InsertUserGroupsByIDParams) ([]uuid.UUID, error) { |
| 5869 | // This is used by OIDC sync. So only used by a system user. |
nothing calls this directly
no test coverage detected