membership

Jul 29, 2026

Changes in this version

+ type ResourceService interface

+ RemovePrincipalAccess func(ctx context.Context, principalID, principalType string, projectIDs []string) error

type Service

+ func (s *Service) SetResourceService(rs ResourceService)

Jun 18, 2026

Changes in this version

type Service

+ func (s *Service) ForceRemoveOrganizationMember(ctx context.Context, orgID, principalID, principalType string) error

+ func (s *Service) ListPrincipalIDsByResource(ctx context.Context, resourceID, resourceType, principalType string) ([]string, error)

Jun 4, 2026

Changes in this version

+ var ErrPrincipalExpired = errors.New("principal has expired")

type Service

+ func (s *Service) ListPoliciesByPrincipal(ctx context.Context, principalID, principalType string) ([]policy.Policy, error)

+ func (s *Service) RemoveAllPATPolicies(ctx context.Context, patID string) error

+ func (s *Service) SetPATAllProjectsRole(ctx context.Context, orgID, patID, roleID string) error

+ func (s *Service) SetUserPATService(ups UserPATService)

+ type UserPATService interface

+ GetByID func(ctx context.Context, id string) (patmodels.PAT, error)

May 26, 2026

Changes in this version

type Service

+ func (s *Service) ListGroupsByPrincipal(ctx context.Context, principal authenticate.Principal, orgID string) ([]string, error)

+ func (s *Service) ListOrgsByPrincipal(ctx context.Context, principal authenticate.Principal) ([]string, error)

+ func (s *Service) ListProjectsByPrincipal(ctx context.Context, principal authenticate.Principal, orgID string, ...) ([]string, error)

May 20, 2026

Changes in this version

+ type ResourceFilter struct

+ NonInherited bool

+ OrgID string

type Service

+ func (s *Service) ListResourcesByPrincipal(ctx context.Context, principal authenticate.Principal, resourceType string, ...) ([]string, error)

May 18, 2026

Changes in this version

type PolicyService

+ DeleteWithMinRoleGuard func(ctx context.Context, id string, guardRoleID string) error

type Service

+ func (s *Service) OnGroupDeleted(ctx context.Context, groupID string) error

+ func (s *Service) RemoveAllGroupMembers(ctx context.Context, groupID string) error

+ func (s *Service) RemoveGroupMember(ctx context.Context, groupID, principalID, principalType string) error

May 13, 2026

Changes in this version

+ var ErrInvalidGroupRole = errors.New("role is not valid for group scope")

+ var ErrInvalidResourceType = errors.New("unsupported resource type")

+ var ErrLastGroupOwnerRole = errors.New("cannot change role: this is the last owner of the group")

+ type Member struct

+ PrincipalID string

+ PrincipalType string

+ Roles []role.Role

+ type MemberFilter struct

+ PrincipalType string

+ RoleIDs []string

type RoleService

+ List func(ctx context.Context, flt role.Filter) ([]role.Role, error)

type Service

+ func (s *Service) AddGroupMember(ctx context.Context, groupID, principalID, principalType, roleID string) error

+ func (s *Service) ListPrincipalsByResource(ctx context.Context, resourceID, resourceType string, filter MemberFilter) ([]Member, error)

+ func (s *Service) OnGroupCreated(ctx context.Context, groupID, orgID, creatorID, creatorType string) error

+ func (s *Service) SetGroupMemberRole(ctx context.Context, groupID, principalID, principalType, roleID string) error

Apr 23, 2026

Changes in this version

+ var ErrAlreadyMember = errors.New("principal is already a member of this resource")

+ var ErrInvalidOrgRole = errors.New("role is not valid for organization scope")

+ var ErrInvalidPrincipal = errors.New("invalid principal")

+ var ErrInvalidPrincipalType = errors.New("unsupported principal type")

+ var ErrInvalidProjectRole = errors.New("role is not valid for project scope")

+ var ErrLastOwnerRole = errors.New("cannot change role: this is the last owner of the organization")

+ var ErrNotMember = errors.New("principal is not a member of this resource")

+ var ErrNotOrgMember = errors.New("principal is not a member of the organization")

+ var ErrPrincipalNotInOrg = errors.New("principal does not belong to this organization")

+ type AuditRecordRepository interface

+ Create func(ctx context.Context, auditRecord auditrecord.AuditRecord) (auditrecord.AuditRecord, error)

+ type GroupService interface

+ Get func(ctx context.Context, idOrName string) (group.Group, error)

+ List func(ctx context.Context, flt group.Filter) ([]group.Group, error)

+ type OrgService interface

+ Get func(ctx context.Context, idOrName string) (organization.Organization, error)

+ type PolicyService interface

+ Create func(ctx context.Context, pol policy.Policy) (policy.Policy, error)

+ Delete func(ctx context.Context, id string) error

+ List func(ctx context.Context, flt policy.Filter) ([]policy.Policy, error)

+ type ProjectService interface

+ Get func(ctx context.Context, idOrName string) (project.Project, error)

+ List func(ctx context.Context, flt project.Filter) ([]project.Project, error)

+ type RelationService interface

+ Create func(ctx context.Context, rel relation.Relation) (relation.Relation, error)

+ Delete func(ctx context.Context, rel relation.Relation) error

+ type RoleService interface

+ Get func(ctx context.Context, idOrName string) (role.Role, error)

+ type Service struct

+ func NewService(logger log.Logger, policyService PolicyService, ...) *Service

+ func (s *Service) AddOrganizationMember(ctx context.Context, orgID, principalID, principalType, roleID string) error

+ func (s *Service) RemoveOrganizationMember(ctx context.Context, orgID, principalID, principalType string) error

+ func (s *Service) RemoveProjectMember(ctx context.Context, projectID, principalID, principalType string) error

+ func (s *Service) SetOrganizationMemberRole(ctx context.Context, orgID, principalID, principalType, roleID string) error

+ func (s *Service) SetProjectMemberRole(ctx context.Context, projectID, principalID, principalType, roleID string) error

+ type ServiceuserService interface

+ Get func(ctx context.Context, id string) (serviceuser.ServiceUser, error)

+ type UserService interface

+ GetByID func(ctx context.Context, id string) (user.User, error)