Add RBAC

coder · BrunoQuaresma · May 6, 2022 · May 4, 2022 · May 4, 2022 · May 5, 2022
commit f6be255e05f3d45af6ade198ca82a99757c67643
diff --git a/coderd/coderd.go b/coderd/coderd.go
@@ -240,7 +240,10 @@ func New(options *Options) (http.Handler, func()) {
 					r.Get("/", api.userByName)
 					r.Put("/profile", api.putUserProfile)
 					r.Put("/suspend", api.putUserSuspend)
-					r.Put("/password", api.putUserPassword)
+					r.Route("/password", func(r chi.Router) {
+						r.Use(httpmw.WithRBACObject(rbac.ResourceUserPasswordRole))
+						r.Put("/password", authorize(api.putUserPassword, rbac.ActionUpdate))
+					})
 					r.Get("/organizations", api.organizationsByUser)
 					r.Post("/organizations", api.postOrganizationsByUser)
 					// These roles apply to the site wide permissions.

diff --git a/coderd/rbac/object.go b/coderd/rbac/object.go
@@ -24,6 +24,10 @@ var (
 		Type: "user_role",
 	}
 
+	ResourceUserPasswordRole = Object{
+		Type: "user_password",
+	}
+
 	// ResourceWildcard represents all resource types
 	ResourceWildcard = Object{
 		Type: WildcardSymbol,