rolestore

Feb 3, 2026

Changes in this version

+ func ConvertDBPermissions(dbPerms []database.CustomRolePermission) []rbac.Permission

+ func ConvertPermissionsToDB(perms []rbac.Permission) []database.CustomRolePermission

+ func CreateOrgMemberRole(ctx context.Context, tx database.Store, org database.Organization) error

+ func ReconcileOrgMemberRole(ctx context.Context, tx database.Store, in database.CustomRole, ...) (database.CustomRole, bool, error)

+ func ReconcileSystemRoles(ctx context.Context, log slog.Logger, db database.Store) error

Nov 12, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 11, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 10, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 4, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 12, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 11, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 10, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 30, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 28, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 16, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 2, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 10, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 28, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 16, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 1, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Sep 3, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 1, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Sep 3, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Aug 7, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Aug 5, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Sep 4, 2025 GO-2025-4182

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Aug 7, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 15, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 2, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 1, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Aug 7, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 15, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 8, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jun 30, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jun 10, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jun 3, 2025 GO-2025-3938 +1 more

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

May 20, 2025 GO-2025-3921 +2 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

May 15, 2025 GO-2025-3921 +2 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Apr 29, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Apr 24, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Apr 23, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Apr 2, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Apr 29, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Mar 17, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Mar 15, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Mar 4, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Apr 29, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Apr 23, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Mar 6, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Feb 4, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jan 29, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jan 23, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jan 18, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jan 7, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Dec 16, 2024 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Dec 3, 2024 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Dec 12, 2024 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 8, 2024 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 8, 2024 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Nov 4, 2024 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 24, 2024 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 1, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 28, 2024 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 8, 2024 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 8, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 1, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Sep 3, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Oct 24, 2024 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Sep 5, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Aug 20, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Aug 7, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Aug 6, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Aug 20, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Aug 6, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Aug 1, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 23, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 18, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 2, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Aug 1, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 22, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jul 18, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jun 24, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jun 21, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jun 6, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Jun 4, 2024 GO-2024-3228 +2 more

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

Changes in this version

+ func ConvertDBRole(dbRole database.CustomRole) (rbac.Role, error)

+ func ConvertRoleToDB(role rbac.Role) (database.CustomRole, error)

+ func CustomRoleCacheContext(ctx context.Context) context.Context

+ func CustomRoleMW(next http.Handler) http.Handler

+ func Expand(ctx context.Context, db database.Store, names []string) (rbac.Roles, error)