Method authorizeAIBridgeInterceptionAction

coderd/database/dbauthz/dbauthz.go:192–204

authorizeAIBridgeInterceptionAction validates that the context's actor matches the initiator of the AIBridgeInterception. This is used by all of the sub-resources which fall under the [ResourceAibridgeInterception] umbrella.

(ctx context.Context, action policy.Action, interceptionID uuid.UUID)

// authorizeAIBridgeInterceptionAction validates that the context's actor matches the initiator of the AIBridgeInterception.
// This is used by all of the sub-resources which fall under the [ResourceAibridgeInterception] umbrella.
func (q *querier) authorizeAIBridgeInterceptionAction(ctx context.Context, action policy.Action, interceptionID uuid.UUID) error {
	inter, err := q.db.GetAIBridgeInterceptionByID(ctx, interceptionID)
	if err != nil {
		return xerrors.Errorf("fetch aibridge interception %q: %w", interceptionID, err)
	}

	err = q.authorizeContext(ctx, action, inter.RBACObject())
	if err != nil {
		return err
	}

	return nil
}

type authContextKey struct{}