[BB-1807] use SyncDirectMembersOnly logic to decide about groups memeber endpoint for grants (#75)

* use SyncDirectMembersOnly logic to decide about groups memeber endpoint for grants

* add nil check for pageToken

Author: luisina-santos

pkg/connector/client/client.go

@@ -173,7 +173,7 @@ func (c *GitlabClient) GetGroup(ctx context.Context, groupID string) (*Group, *v
 	return &group, rateLimitDesc, nil
 }
 
-// ListAllGroupMembers retrieves members and pending invites of a specific group.
+// ListAllGroupMembers retrieves members and pending invites of a specific group including inherited members through ancestor groups.
 func (c *GitlabClient) ListAllGroupMembers(ctx context.Context, groupID string, nextPageToken string) ([]*GroupMember, string, *v2.RateLimitDescription, error) {
 	var members []*GroupMember
 

pkg/connector/groups.go

@@ -117,13 +117,25 @@ func (o *groupBuilder) Grants(ctx context.Context, resource *v2.Resource, pToken
 	var outGrants []*v2.Grant
 	var outputAnnotations = annotations.New()
 	var users []*client.GroupMember
+	var err error
+
+	var pageToken string
+	if pToken != nil {
+		pageToken = pToken.Token
+	}
 
 	groupId, err := fromGroupResourceId(resource.Id.Resource)
 	if err != nil {
 		return nil, "", nil, fmt.Errorf("error parsing group resource id: %w", err)
 	}
 
-	users, nextPageToken, rateLimitDesc, err := o.client.ListGroupMembers(ctx, groupId, pToken.Token)
+	var nextPageToken string
+	var rateLimitDesc *v2.RateLimitDescription
+	if o.client.SyncDirectMembersOnly {
+		users, nextPageToken, rateLimitDesc, err = o.client.ListGroupMembers(ctx, groupId, pageToken)
+	} else {
+		users, nextPageToken, rateLimitDesc, err = o.client.ListAllGroupMembers(ctx, groupId, pageToken)
+	}
 	if rateLimitDesc != nil {
 		outputAnnotations.WithRateLimiting(rateLimitDesc)
 	}