Method AssignableSiteRoles

coderd/roles.go:26–50

AssignableSiteRoles returns all site wide roles that can be assigned. @Summary Get site member roles @ID get-site-member-roles @Security CoderSessionToken @Produce json @Tags Members @Success 200 {array} codersdk.AssignableRoles @Router /api/v2/users/roles [get]

(rw http.ResponseWriter, r *http.Request)

// @Success 200 {array} codersdk.AssignableRoles
// @Router /api/v2/users/roles [get]
func (api *API) AssignableSiteRoles(rw http.ResponseWriter, r *http.Request) {
	ctx := r.Context()
	actorRoles := httpmw.UserAuthorization(r.Context())
	if !api.Authorize(r, policy.ActionRead, rbac.ResourceAssignRole) {
		httpapi.Forbidden(rw)
		return
	}

	dbCustomRoles, err := api.Database.CustomRoles(ctx, database.CustomRolesParams{
		LookupRoles: nil,
		// Only site wide custom roles to be included
		ExcludeOrgRoles:    true,
		OrganizationID:     uuid.Nil,
		IncludeSystemRoles: false,
	})
	if err != nil {
		httpapi.InternalServerError(rw, err)
		return
	}

	siteRoles := rbac.SiteBuiltInRoles()

	httpapi.Write(ctx, rw, http.StatusOK,
		assignableRoles(actorRoles.Roles, siteRoles, dbCustomRoles))
}

// assignableOrgRoles returns all org wide roles that can be assigned.
//