Update purpose on group admin and project owner entitlements to convey ownership (#93)

* Update baton-sdk to v0.6.17 and add ownership entitlement support

* Refactor entitlement creation to use OwnershipEntitlement for group and project owners

Author: jirwin

go.mod

@@ -3,7 +3,7 @@ module github.com/conductorone/baton-demo
 go 1.25.2
 
 require (
-	github.com/conductorone/baton-sdk v0.6.14
+	github.com/conductorone/baton-sdk v0.6.17
 	github.com/doug-martin/goqu/v9 v9.19.0
 	github.com/ennyjfrick/ruleguard-logfatal v0.0.2
 	github.com/grpc-ecosystem/go-grpc-middleware v1.4.0

go.sum

@@ -60,8 +60,8 @@ github.com/cenkalti/backoff/v4 v4.3.0/go.mod h1:Y3VNntkOUPxTVeUxJ/G5vcM//AlwfmyY
 github.com/census-instrumentation/opencensus-proto v0.2.1/go.mod h1:f6KPmirojxKA12rnyqOA5BBL4O983OfeGPqjHWSTneU=
 github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDkc90ppPyw=
 github.com/cncf/udpa/go v0.0.0-20191209042840-269d4d468f6f/go.mod h1:M8M6+tZqaGXZJjfX53e64911xZQV5JYwmTeXPW+k8Sc=
-github.com/conductorone/baton-sdk v0.6.14 h1:PAFx8Wvl13SpYfVLCn+1xDA2Tnxrop4lIlDvl/AaFDU=
-github.com/conductorone/baton-sdk v0.6.14/go.mod h1:9S5feBOuIJxlNdGmkv3ObkCNHbVyOHr6foNrIrk+d4Y=
+github.com/conductorone/baton-sdk v0.6.17 h1:ZC+pcsh/iGA1wjS5GGQjIg+mIIK/Mr0E7G3Dg72f03Y=
+github.com/conductorone/baton-sdk v0.6.17/go.mod h1:9S5feBOuIJxlNdGmkv3ObkCNHbVyOHr6foNrIrk+d4Y=
 github.com/conductorone/dpop v0.2.3 h1:s91U3845GHQ6P6FWrdNr2SEOy1ES/jcFs1JtKSl2S+o=
 github.com/conductorone/dpop v0.2.3/go.mod h1:gyo8TtzB9SCFCsjsICH4IaLZ7y64CcrDXMOPBwfq/3s=
 github.com/conductorone/dpop/integrations/dpop_grpc v0.2.3 h1:kLMCNIh0Mo2vbvvkCmJ3ixsPbXEJ6HPcW53Ku9yje3s=

pkg/connector/groups.go

@@ -86,7 +86,7 @@ func (o *groupBuilder) Entitlements(ctx context.Context, resource *v2.Resource,
 	member := sdkEntitlement.NewAssignmentEntitlement(resource, groupMemberEntitlement, sdkEntitlement.WithGrantableTo(userResourceType))
 	member.Description = fmt.Sprintf("Is a member of the %s group", resource.DisplayName)
 
-	admin := sdkEntitlement.NewPermissionEntitlement(resource, groupAdminEntitlement, sdkEntitlement.WithGrantableTo(userResourceType))
+	admin := sdkEntitlement.NewOwnershipEntitlement(resource, groupAdminEntitlement, sdkEntitlement.WithGrantableTo(userResourceType))
 	admin.Description = fmt.Sprintf("Is an admin of the %s group", resource.DisplayName)
 
 	return []*v2.Entitlement{member, admin}, nil, nil

pkg/connector/projects.go

@@ -71,7 +71,7 @@ func (o *projectBuilder) Entitlements(ctx context.Context, r *v2.Resource, ops r
 	access := sdkEntitlement.NewAssignmentEntitlement(r, projectAccessEntitlement, sdkEntitlement.WithGrantableTo(groupResourceType, userResourceType))
 	access.Description = fmt.Sprintf("Has access to the %s project", r.DisplayName)
 
-	owner := sdkEntitlement.NewPermissionEntitlement(r, projectOwnerEntitlement, sdkEntitlement.WithGrantableTo(userResourceType))
+	owner := sdkEntitlement.NewOwnershipEntitlement(r, projectOwnerEntitlement, sdkEntitlement.WithGrantableTo(userResourceType))
 	owner.Description = fmt.Sprintf("Is the owner of the %s project", r.DisplayName)
 
 	return []*v2.Entitlement{access, owner}, nil, nil

vendor/github.com/conductorone/baton-sdk/pb/c1/connector/v2/entitlement.pb.go

@@ -159,7 +159,7 @@ github.com/benbjohnson/clock
 # github.com/cenkalti/backoff/v4 v4.3.0
 ## explicit; go 1.18
 github.com/cenkalti/backoff/v4
-# github.com/conductorone/baton-sdk v0.6.14
+# github.com/conductorone/baton-sdk v0.6.17
 ## explicit; go 1.25.2
 github.com/conductorone/baton-sdk/internal/connector
 github.com/conductorone/baton-sdk/pb/c1/c1z/v1