authzquery: fix InsertAgentStat

johnstcn · johnstcn · commit 467646d43ca4 · 2023-01-31T17:55:38.000Z
diff --git a/coderd/authzquery/workspace.go b/coderd/authzquery/workspace.go
@@ -343,11 +343,8 @@ func (q *AuthzQuerier) UpdateWorkspaceAgentConnectionByID(ctx context.Context, a
 
 func (q *AuthzQuerier) InsertAgentStat(ctx context.Context, arg database.InsertAgentStatParams) (database.AgentStat, error) {
 	// TODO: This is a workspace agent operation. Should users be able to query this?
-	workspace, err := q.database.GetWorkspaceByAgentID(ctx, arg.ID)
-	if err != nil {
-		return database.AgentStat{}, err
-	}
-	err = q.authorizeContext(ctx, rbac.ActionUpdate, workspace)
+	resource := rbac.ResourceWorkspace.WithID(arg.WorkspaceID).WithOwner(arg.UserID.String())
+	err := q.authorizeContext(ctx, rbac.ActionUpdate, resource)
 	if err != nil {
 		return database.AgentStat{}, err
 	}
