Enable mapping entitlement IDs as CEL expressions for grants

jirwin · jirwin · commit 67e7a22e403c · 2024-12-10T11:23:56.000-08:00
diff --git a/pkg/bsql/grants.go b/pkg/bsql/grants.go
@@ -134,5 +134,10 @@ func (s *SQLSyncer) mapGrant(ctx context.Context, resource *v2.Resource, mapping
 		Resource:     principalID,
 	}
 
-	return sdkGrant.NewGrant(resource, mapping.Entitlement, principal), true, nil
+	entitlementID, err := s.env.EvaluateString(ctx, mapping.Entitlement, inputs)
+	if err != nil {
+		return nil, false, err
+	}
+
+	return sdkGrant.NewGrant(resource, entitlementID, principal), true, nil
 }

Original file line number	Diff line number	Diff line change
`@@ -134,5 +134,10 @@ func (s SQLSyncer) mapGrant(ctx context.Context, resource v2.Resource, mapping`
`134`	`134`	`Resource: principalID,`
`135`	`135`	`}`
`136`	`136`
`137`		`- return sdkGrant.NewGrant(resource, mapping.Entitlement, principal), true, nil`
	`137`	`+ entitlementID, err := s.env.EvaluateString(ctx, mapping.Entitlement, inputs)`
	`138`	`+ if err != nil {`
	`139`	`+ return nil, false, err`
	`140`	`+ }`
	`141`	`+`
	`142`	`+ return sdkGrant.NewGrant(resource, entitlementID, principal), true, nil`
`138`	`143`	`}`