Struct Role

coderd/rbac/roles.go:746–760

Role is a set of permissions at multiple levels: - Site permissions apply EVERYWHERE - Org permissions apply to EVERYTHING in a given ORG - User permissions apply to all resources the user owns - OrgMember permissions apply to resources in the given org that the user owns This is the type passed int

// Users of this package should instead **only** use the role names, and
// this package will expand the role names into their json payloads.
type Role struct {
	Identifier RoleIdentifier `json:"name"`
	// DisplayName is used for UI purposes. If the role has no display name,
	// that means the UI should never display it.
	DisplayName string       `json:"display_name"`
	Site        []Permission `json:"site"`
	User        []Permission `json:"user"`
	// ByOrgID is a map of organization IDs to permissions. Grouping by
	// organization makes roles easy to combine.
	ByOrgID map[string]OrgPermissions `json:"by_org_id"`

	// cachedRegoValue can be used to cache the rego value for this role.
	// This is helpful for static roles that never change.
	cachedRegoValue ast.Value
}

type OrgPermissions struct {
	Org    []Permission `json:"org"`