Method patchTemplateACL

enterprise/coderd/templates.go:217–294

@Summary Update template ACL @ID update-template-acl @Security CoderSessionToken @Accept json @Produce json @Tags Enterprise @Param template path string true "Template ID" format(uuid) @Param request body codersdk.UpdateTemplateACL true "Update template ACL request" @Success 200 {object} codersdk.Re

(rw http.ResponseWriter, r *http.Request)

// @Success 200 {object} codersdk.Response
// @Router /api/v2/templates/{template}/acl [patch]
func (api *API) patchTemplateACL(rw http.ResponseWriter, r *http.Request) {
	var (
		ctx               = r.Context()
		template          = httpmw.TemplateParam(r)
		auditor           = api.AGPL.Auditor.Load()
		aReq, commitAudit = audit.InitRequest[database.Template](rw, &audit.RequestParams{
			Audit:          *auditor,
			Log:            api.Logger,
			Request:        r,
			Action:         database.AuditActionWrite,
			OrganizationID: template.OrganizationID,
		})
	)
	defer commitAudit()
	aReq.Old = template

	var req codersdk.UpdateTemplateACL
	if !httpapi.Read(ctx, rw, r, &req) {
		return
	}

	validErrs := acl.Validate(ctx, api.Database, TemplateACLUpdateValidator(req))
	if len(validErrs) > 0 {
		httpapi.Write(ctx, rw, http.StatusBadRequest, codersdk.Response{
			Message:     "Invalid request to update template ACL",
			Validations: validErrs,
		})
		return
	}

	err := api.Database.InTx(func(tx database.Store) error {
		var err error
		template, err = tx.GetTemplateByID(ctx, template.ID)
		if err != nil {
			return xerrors.Errorf("get template by ID: %w", err)
		}

		for id, role := range req.UserPerms {
			if role == codersdk.TemplateRoleDeleted {
				delete(template.UserACL, id)
				continue
			}
			template.UserACL[id] = db2sdk.TemplateRoleActions(role)
		}

		for id, role := range req.GroupPerms {
			if role == codersdk.TemplateRoleDeleted {
				delete(template.GroupACL, id)
				continue
			}
			template.GroupACL[id] = db2sdk.TemplateRoleActions(role)
		}

		err = tx.UpdateTemplateACLByID(ctx, database.UpdateTemplateACLByIDParams{
			ID:       template.ID,
			UserACL:  template.UserACL,
			GroupACL: template.GroupACL,
		})