rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Remove unused iam policy

Browse Source 
Signed-off-by: Émile Ré <emile@getprobo.com>
This commit is contained in:
Émile Ré
2026-03-11 17:39:45 +04:00
parent 68faaf9d53
commit 15bcfeb4bf
2 changed files with 9 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files

27
pkg/coredata/identity.go
View File

@@ -225,27 +225,19 @@ LIMIT 1;
func (i *Identity) AuthorizationAttributes(ctx context.Context, conn pg.Conn) (map[string]string, error) { func (i *Identity) AuthorizationAttributes(ctx context.Context, conn pg.Conn) (map[string]string, error) {
q := ` q := `
SELECT SELECT
ident.id, id,
ident.email_address, email_address
COALESCE(string_agg(inv.organization_id::text, ','), '') AS pending_invitation_organization_ids
FROM FROM
identities ident identities
LEFT JOIN
iam_invitations inv ON inv.email = ident.email_address
AND inv.accepted_at IS NULL
AND inv.expires_at > NOW()
WHERE WHERE
ident.id = $1 id = $1
GROUP BY
ident.id, ident.email_address
` `
var ( var (
id gid.GID id gid.GID
emailAddress string emailAddress string
pendingInvitationOrgIDs string
) )
if err := conn.QueryRow(ctx, q, i.ID).Scan(&id, &emailAddress, &pendingInvitationOrgIDs); err != nil { if err := conn.QueryRow(ctx, q, i.ID).Scan(&id, &emailAddress); err != nil {
if errors.Is(err, pgx.ErrNoRows) { if errors.Is(err, pgx.ErrNoRows) {
return nil, ErrResourceNotFound return nil, ErrResourceNotFound
} }
@@ -253,9 +245,8 @@ GROUP BY
} }
return map[string]string{ return map[string]string{
"identity_id": id.String(), "identity_id": id.String(),
"email": emailAddress, "email": emailAddress,
"pending_invitation_organization_ids": pendingInvitationOrgIDs,
}, nil }, nil
} }

5
pkg/iam/iam_policies.go
View File

@@ -76,11 +76,6 @@ var IAMSelfManageInvitationPolicy = policy.NewPolicy(
). ).
WithSID("manage-own-invitations"). WithSID("manage-own-invitations").
When(policy.Equals("principal.email", "resource.email")), When(policy.Equals("principal.email", "resource.email")),
// Users can view organization details for organizations they have pending invitations to
policy.Allow(ActionOrganizationGet).
WithSID("view-org-for-pending-invitation").
When(policy.In("resource.organization_id", "principal.pending_invitation_organization_ids")),
). ).
WithDescription("Allows users to view and accept invitations sent to them") WithDescription("Allows users to view and accept invitations sent to them")