Method Valid

coderd/rbac/roles.go:770–798

Valid will check all it's permissions and ensure they are all correct according to the policy. This verifies every action specified make sense for the given resource.

()

// according to the policy. This verifies every action specified make sense
// for the given resource.
func (role Role) Valid() error {
	var errs []error
	for _, perm := range role.Site {
		if err := perm.Valid(); err != nil {
			errs = append(errs, xerrors.Errorf("site: %w", err))
		}
	}

	for orgID, orgPermissions := range role.ByOrgID {
		for _, perm := range orgPermissions.Org {
			if err := perm.Valid(); err != nil {
				errs = append(errs, xerrors.Errorf("org=%q: org %w", orgID, err))
			}
		}
		for _, perm := range orgPermissions.Member {
			if err := perm.Valid(); err != nil {
				errs = append(errs, xerrors.Errorf("org=%q: member: %w", orgID, err))
			}
		}
	}

	for _, perm := range role.User {
		if err := perm.Valid(); err != nil {
			errs = append(errs, xerrors.Errorf("user: %w", err))
		}
	}

	return errors.Join(errs...)
}

type Roles []Role