Replace `rbac.ResourceSystem` usage in `dbauthz.InsertWorkspaceApp`

Currently `InsertWorkspaceApp` relies on `rbac.ResourceSystem`

https://github.com/coder/coder/blob/da9a313d0cd45c61641d7585771d93ca503a23c9/coderd/database/dbauthz/dbauthz.go#L3853-L3858

This is problematic as calling this requires `AsSystemRestricted`, which grants far too many permissions. 

	func (q *querier) InsertWorkspaceApp(ctx context.Context, arg database.InsertWorkspaceAppParams) (database.WorkspaceApp, error) {
	if err := q.authorizeContext(ctx, policy.ActionCreate, rbac.ResourceSystem); err != nil {
	return database.WorkspaceApp{}, err
	}
	return q.db.InsertWorkspaceApp(ctx, arg)
	}

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Replace `rbac.ResourceSystem` usage in `dbauthz.InsertWorkspaceApp` #18210

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Replace rbac.ResourceSystem usage in dbauthz.InsertWorkspaceApp #18210

Description

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions

Replace `rbac.ResourceSystem` usage in `dbauthz.InsertWorkspaceApp` #18210