set up an authorization context for OrganizationSyncEnabled

hugodutka · hugodutka · commit 5aa6149a04de · 2025-01-28T15:20:41.000Z
diff --git a/cli/server.go b/cli/server.go
@@ -851,7 +851,14 @@ func (r *RootCmd) Server(newAPI func(context.Context, *coderd.Options) (*coderd.
 						lic.Trial = &trial
 						return nil
 					},
-					OrganizationSyncEnabled: coderAPI.IDPSync.OrganizationSyncEnabled,
+					OrganizationSyncEnabled: func() bool {
+						if coderAPI == nil || coderAPI.IDPSync == nil {
+							return false
+						}
+						// AsSystemRestricted is fine here because it's a read-only operation
+						// used for telemetry reporting.
+						return coderAPI.IDPSync.OrganizationSyncEnabled(dbauthz.AsSystemRestricted(ctx), options.Database)
+					},
 				})
 				if err != nil {
 					return xerrors.Errorf("create telemetry reporter: %w", err)
diff --git a/coderd/telemetry/telemetry.go b/coderd/telemetry/telemetry.go
@@ -56,7 +56,7 @@ type Options struct {
 	// We pass this function instead of the IDPSync interface because it creates
 	// a circular import. We don't need all the other methods, and this approach
 	// is simpler than refactoring the package structure.
-	OrganizationSyncEnabled func(ctx context.Context, db database.Store) bool
+	OrganizationSyncEnabled func() bool
 }
 
 // New constructs a reporter for telemetry data.
@@ -250,7 +250,7 @@ func (r *remoteReporter) deployment() error {
 
 	idpOrgSync := false
 	if r.options.OrganizationSyncEnabled != nil {
-		idpOrgSync = r.options.OrganizationSyncEnabled(r.ctx, r.options.Database)
+		idpOrgSync = r.options.OrganizationSyncEnabled()
 	} else {
 		r.options.Logger.Debug(r.ctx, "organization sync enabled function is nil, skipping IDP org sync check")
 	}
