add rbac todo

mafredri · mafredri · commit 9e712619405e · 2025-03-20T15:46:57.000Z
diff --git a/coderd/database/dbauthz/dbauthz.go b/coderd/database/dbauthz/dbauthz.go
@@ -3399,6 +3399,8 @@ func (q *querier) InsertWorkspaceAgent(ctx context.Context, arg database.InsertW
 }
 
 func (q *querier) InsertWorkspaceAgentDevcontainers(ctx context.Context, arg database.InsertWorkspaceAgentDevcontainersParams) ([]database.WorkspaceAgentDevcontainer, error) {
+	// TODO: This should probably be a new RBAC resource and not rely on ResourceSystem.
+	// See: https://github.com/coder/coder/issues/13315
 	if err := q.authorizeContext(ctx, policy.ActionCreate, rbac.ResourceSystem); err != nil {
 		return nil, err
 	}

Original file line number	Diff line number	Diff line change
`@@ -3399,6 +3399,8 @@ func (q *querier) InsertWorkspaceAgent(ctx context.Context, arg database.InsertW`
`3399`	`3399`	`}`
`3400`	`3400`
`3401`	`3401`	`func (q *querier) InsertWorkspaceAgentDevcontainers(ctx context.Context, arg database.InsertWorkspaceAgentDevcontainersParams) ([]database.WorkspaceAgentDevcontainer, error) {`
	`3402`	`+ // TODO: This should probably be a new RBAC resource and not rely on ResourceSystem.`
	`3403`	`+ // See: https://github.com/coder/coder/issues/13315`
`3402`	`3404`	`if err := q.authorizeContext(ctx, policy.ActionCreate, rbac.ResourceSystem); err != nil {`
`3403`	`3405`	`return nil, err`
`3404`	`3406`	`}`