Skip to content

Commit

Permalink
fix: do not remove user during revoke
Browse files Browse the repository at this point in the history
  • Loading branch information
Ayushi Sharma committed Dec 23, 2024
1 parent 32be815 commit 645cb55
Showing 1 changed file with 0 additions and 14 deletions.
14 changes: 0 additions & 14 deletions plugins/providers/maxcompute/provider.go
Original file line number Diff line number Diff line change
Expand Up @@ -251,28 +251,14 @@ func (p *provider) RevokeAccess(ctx context.Context, pc *domain.ProviderConfig,
project := g.Resource.URN
securityManager := client.Project(project).SecurityManager()

revokeFromProjectMember := false
var permissions []string
for _, p := range g.Permissions {
if p == projectPermissionMember {
revokeFromProjectMember = true
continue
}
permissions = append(permissions, p)
}

if revokeFromProjectMember {
query := fmt.Sprintf("REMOVE USER %s", g.AccountID)
job, err := securityManager.Run(query, true, "")
if err != nil {
return fmt.Errorf("failed to remove %q as member in %q: %v", g.AccountID, project, err)
}

if _, err := job.WaitForSuccess(); err != nil {
return fmt.Errorf("failed to remove %q as member in %q: %v", g.AccountID, project, err)
}
}

if len(permissions) > 0 {
mcRoles := strings.Join(permissions, ", ")
query := fmt.Sprintf("REVOKE %s FROM %s", mcRoles, g.AccountID)
Expand Down

0 comments on commit 645cb55

Please sign in to comment.