Add permission query

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-12-23 19:29:50 +01:00
parent 092c9aa97c
commit 2615a1eed5
6 changed files with 172 additions and 1 deletions
--- a/pkg/iam/authorizer.go
+++ b/pkg/iam/authorizer.go
@@ -109,7 +109,7 @@ func (a *Authorizer) loadRolePolicies(ctx context.Context, principalID gid.GID,
 	var roleName string

 	err := a.pg.WithConn(ctx, func(conn pg.Conn) error {
-		scope := coredata.NewScope(resourceID.TenantID())
+		scope := coredata.NewScopeFromObjectID(resourceID)

 		var m coredata.Membership
 		if err := m.LoadRoleByIdentityAndEntityID(ctx, conn, scope, principalID, resourceID); err != nil {