Method deleteWorkspaceACL

coderd/workspaces.go:2589–2631

@Summary Completely clears the workspace's user and group ACLs. @ID completely-clears-the-workspaces-user-and-group-acls @Security CoderSessionToken @Tags Workspaces @Param workspace path string true "Workspace ID" format(uuid) @Success 204 @Router /api/v2/workspaces/{workspace}/acl [delete]

(rw http.ResponseWriter, r *http.Request)

// @Success 204
// @Router /api/v2/workspaces/{workspace}/acl [delete]
func (api *API) deleteWorkspaceACL(rw http.ResponseWriter, r *http.Request) {
	var (
		ctx                 = r.Context()
		workspace           = httpmw.WorkspaceParam(r)
		auditor             = api.Auditor.Load()
		aReq, commitAuditor = audit.InitRequest[database.WorkspaceTable](rw, &audit.RequestParams{
			Audit:          *auditor,
			Log:            api.Logger,
			Request:        r,
			Action:         database.AuditActionWrite,
			OrganizationID: workspace.OrganizationID,
		})
	)

	defer commitAuditor()
	aReq.Old = workspace.WorkspaceTable()

	if !api.allowWorkspaceSharing(ctx, rw, workspace.OrganizationID) {
		return
	}

	err := api.Database.InTx(func(tx database.Store) error {
		err := tx.DeleteWorkspaceACLByID(ctx, workspace.ID)
		if err != nil {
			return xerrors.Errorf("delete workspace by ID: %w", err)
		}

		workspace, err = tx.GetWorkspaceByID(ctx, workspace.ID)
		if err != nil {
			return xerrors.Errorf("get updated workspace by ID: %w", err)
		}

		return nil
	}, nil)
	if err != nil {
		httpapi.InternalServerError(rw, err)
		return
	}

	aReq.New = workspace.WorkspaceTable()

	httpapi.Write(ctx, rw, http.StatusNoContent, nil)
}

// allowWorkspaceSharing enforces the workspace-sharing gate for an
// organization. It writes an HTTP error response and returns false if