Skip to content

Group sync API + CLI CRUD #14626

Closed
Closed
@Emyrk

Description

@Emyrk

Implement api interface for group sync settings crud. Group sync settings are now configured in the database and mutable at runtime.

Requires api endpoint to set and read the group sync runtime settings.

The code to interact with the settings from an api handler:

	settings := api.IDPSync.GroupSyncSettings()
	rlv := api.Options.RuntimeConfig.OrganizationResolver(db, org.ID)
	err := settings.SetRuntimeValue(ctx, rlv, &idpsync.GroupSyncSettings{
		// Values
	})

The problem we currently have is the RBAC story is not fully fleshed out. The current authz call is ResourceSystem:

func (q *querier) UpsertRuntimeConfig(ctx context.Context, arg database.UpsertRuntimeConfigParams) error {
if err := q.authorizeContext(ctx, policy.ActionCreate, rbac.ResourceSystem); err != nil {
return err
}
return q.db.UpsertRuntimeConfig(ctx, arg)
}

Metadata

Metadata

Assignees

Labels

multi-orgtemporary label for multiple organizations related workneed-backendIssues that need backend work

Type

No type

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions