Update RBAC on console

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
This commit is contained in:
Bryan Frimin
2025-12-23 09:04:26 +01:00
parent 72831d4c2b
commit e9ac50d91c
26 changed files with 2123 additions and 1444 deletions

View File

@@ -316,16 +316,23 @@ func GetTenantService(ctx context.Context, proboSvc *probo.Service, tenantID gid
return proboSvc.WithTenant(tenantID)
}
func (r *Resolver) MustBeAuthorized(ctx context.Context, entityID gid.GID, action iam.Action) {
func (r *Resolver) MustAuthorize(ctx context.Context, entityID gid.GID, action iam.Action) {
user := connect_v1.IdentityFromContext(ctx)
apiKey := connect_v1.APIKeyFromContext(ctx)
// apiKey := connect_v1.APIKeyFromContext(ctx)
var credentialID *gid.GID
if apiKey != nil {
credentialID = &apiKey.ID
}
// var credentialID *gid.GID
// if apiKey != nil {
// credentialID = &apiKey.ID
// }
err := r.iam.LegacyAccessManagementService.Authorize(ctx, user.ID, credentialID, entityID, action)
err := r.iam.Authorizer.Authorize(
ctx,
iam.AuthorizeParams{
Principal: user.ID,
Resource: entityID,
Action: action,
},
)
if err != nil {
panic(err)
}