feat: secure and cross-domain subdomain-based proxying (#4136)

Co-authored-by: Kyle Carberry <kyle@carberry.com>

coderd/roles_test.go

@@ -13,95 +13,6 @@ import (
 	"github.com/coder/coder/testutil"
 )
 
-func TestAuthorization(t *testing.T) {
-	t.Parallel()
-
-	client := coderdtest.New(t, nil)
-	// Create admin, member, and org admin
-	admin := coderdtest.CreateFirstUser(t, client)
-	member := coderdtest.CreateAnotherUser(t, client, admin.OrganizationID)
-	orgAdmin := coderdtest.CreateAnotherUser(t, client, admin.OrganizationID, rbac.RoleOrgAdmin(admin.OrganizationID))
-
-	// With admin, member, and org admin
-	const (
-		allUsers          = "read-all-users"
-		readOrgWorkspaces = "read-org-workspaces"
-		myself            = "read-myself"
-		myWorkspace       = "read-my-workspace"
-	)
-	params := map[string]codersdk.UserAuthorization{
-		allUsers: {
-			Object: codersdk.UserAuthorizationObject{
-				ResourceType: "users",
-			},
-			Action: "read",
-		},
-		myself: {
-			Object: codersdk.UserAuthorizationObject{
-				ResourceType: "users",
-				OwnerID:      "me",
-			},
-			Action: "read",
-		},
-		myWorkspace: {
-			Object: codersdk.UserAuthorizationObject{
-				ResourceType: "workspaces",
-				OwnerID:      "me",
-			},
-			Action: "read",
-		},
-		readOrgWorkspaces: {
-			Object: codersdk.UserAuthorizationObject{
-				ResourceType:   "workspaces",
-				OrganizationID: admin.OrganizationID.String(),
-			},
-			Action: "read",
-		},
-	}
-
-	testCases := []struct {
-		Name   string
-		Client *codersdk.Client
-		Check  codersdk.UserAuthorizationResponse
-	}{
-		{
-			Name:   "Admin",
-			Client: client,
-			Check: map[string]bool{
-				allUsers: true, myself: true, myWorkspace: true, readOrgWorkspaces: true,
-			},
-		},
-		{
-			Name:   "Member",
-			Client: member,
-			Check: map[string]bool{
-				allUsers: false, myself: true, myWorkspace: true, readOrgWorkspaces: false,
-			},
-		},
-		{
-			Name:   "OrgAdmin",
-			Client: orgAdmin,
-			Check: map[string]bool{
-				allUsers: false, myself: true, myWorkspace: true, readOrgWorkspaces: true,
-			},
-		},
-	}
-
-	for _, c := range testCases {
-		c := c
-		t.Run(c.Name, func(t *testing.T) {
-			t.Parallel()
-
-			ctx, cancel := context.WithTimeout(context.Background(), testutil.WaitLong)
-			defer cancel()
-
-			resp, err := c.Client.CheckPermissions(ctx, codersdk.UserAuthorizationRequest{Checks: params})
-			require.NoError(t, err, "check perms")
-			require.Equal(t, resp, c.Check)
-		})
-	}
-}
-
 func TestListRoles(t *testing.T) {
 	t.Parallel()