Skip to content

Commit

Permalink
refactor policy removal
Browse files Browse the repository at this point in the history
Signed-off-by: WashingtonKK <[email protected]>
  • Loading branch information
WashingtonKK committed Apr 19, 2024
1 parent f374c4d commit be3c0e1
Showing 1 changed file with 12 additions and 27 deletions.
39 changes: 12 additions & 27 deletions auth/service.go
Original file line number Diff line number Diff line change
Expand Up @@ -759,36 +759,21 @@ func (svc service) UnassignUsers(ctx context.Context, token, id string, userIds
}
}

// Remove only non-admins.
if err := svc.removeDomainPolicies(ctx, id, MemberRelation, ids...); err != nil {
return errors.Wrap(errRemovePolicies, err)
}

if err := svc.removeDomainPolicies(ctx, id, ViewerRelation, ids...); err != nil {
return errors.Wrap(errRemovePolicies, err)
}

if err := svc.removeDomainPolicies(ctx, id, EditorRelation, ids...); err != nil {
return errors.Wrap(errRemovePolicies, err)
}
for _, rel := range []string{MemberRelation, ViewerRelation, EditorRelation} {
// Remove only non-admins.
if err := svc.removeDomainPolicies(ctx, id, rel, ids...); err != nil {
return errors.Wrap(errRemovePolicies, err)
}
}
}

// If user is admin, remove all policies from all users.
if err := svc.removeDomainPolicies(ctx, id, MemberRelation, userIds...); err != nil {
return errors.Wrap(errRemovePolicies, err)
}

if err := svc.removeDomainPolicies(ctx, id, ViewerRelation, userIds...); err != nil {
return errors.Wrap(errRemovePolicies, err)
}

if err := svc.removeDomainPolicies(ctx, id, EditorRelation, userIds...); err != nil {
return errors.Wrap(errRemovePolicies, err)
}

if err := svc.removeDomainPolicies(ctx, id, AdministratorRelation, userIds...); err != nil {
return errors.Wrap(errRemovePolicies, err)
}
for _, rel := range []string{MemberRelation, ViewerRelation, EditorRelation} {
// Remove only non-admins.
if err := svc.removeDomainPolicies(ctx, id, rel, ids...); err != nil {

Check failure on line 773 in auth/service.go

View workflow job for this annotation

GitHub Actions / api-test

undefined: ids

Check failure on line 773 in auth/service.go

View workflow job for this annotation

GitHub Actions / api-test

undefined: ids

Check failure on line 773 in auth/service.go

View workflow job for this annotation

GitHub Actions / api-test

undefined: ids

Check failure on line 773 in auth/service.go

View workflow job for this annotation

GitHub Actions / api-test

undefined: ids
return errors.Wrap(errRemovePolicies, err)
}
}

return nil
}
Expand Down

0 comments on commit be3c0e1

Please sign in to comment.