chore: rename locked to dormant (#9290)

* chore: rename locked to dormant

- The following columns have been updated:
  - workspace.locked_at -> dormant_at
  - template.inactivity_ttl -> time_til_dormant
  - template.locked_ttl -> time_til_dormant_autodelete

This change has also been reflected in the SDK.

A route has also been updated from /workspaces/<id>/lock to /workspaces/<id>/dormant

coderd/rbac/object.go

@@ -37,10 +37,10 @@ var (
 		Type: "workspace_build",
 	}
 
-	// ResourceWorkspaceLocked is returned if a workspace is locked.
+	// ResourceWorkspaceDormant is returned if a workspace is dormant.
 	// It grants restricted permissions on workspace builds.
-	ResourceWorkspaceLocked = Object{
-		Type: "workspace_locked",
+	ResourceWorkspaceDormant = Object{
+		Type: "workspace_dormant",
 	}
 
 	// ResourceWorkspaceProxy CRUD. Org

coderd/rbac/object_gen.go

@@ -26,8 +26,8 @@ func AllResources() []Object {
 		ResourceWorkspace,
 		ResourceWorkspaceApplicationConnect,
 		ResourceWorkspaceBuild,
+		ResourceWorkspaceDormant,
 		ResourceWorkspaceExecution,
-		ResourceWorkspaceLocked,
 		ResourceWorkspaceProxy,
 	}
 }

coderd/rbac/roles.go

@@ -121,7 +121,7 @@ func ReloadBuiltinRoles(opts *RoleOptions) {
 		opts = &RoleOptions{}
 	}
 
-	ownerAndAdminExceptions := []Object{ResourceWorkspaceLocked}
+	ownerAndAdminExceptions := []Object{ResourceWorkspaceDormant}
 	if opts.NoOwnerWorkspaceExec {
 		ownerAndAdminExceptions = append(ownerAndAdminExceptions,
 			ResourceWorkspaceExecution,
@@ -150,7 +150,7 @@ func ReloadBuiltinRoles(opts *RoleOptions) {
 			ResourceProvisionerDaemon.Type: {ActionRead},
 		}),
 		Org: map[string][]Permission{},
-		User: append(allPermsExcept(ResourceWorkspaceLocked, ResourceUser, ResourceOrganizationMember),
+		User: append(allPermsExcept(ResourceWorkspaceDormant, ResourceUser, ResourceOrganizationMember),
 			Permissions(map[string][]Action{
 				// Users cannot do create/update/delete on themselves, but they
 				// can read their own details.
@@ -246,7 +246,7 @@ func ReloadBuiltinRoles(opts *RoleOptions) {
 				Site:        []Permission{},
 				Org: map[string][]Permission{
 					// Org admins should not have workspace exec perms.
-					organizationID: allPermsExcept(ResourceWorkspaceExecution, ResourceWorkspaceLocked),
+					organizationID: allPermsExcept(ResourceWorkspaceExecution, ResourceWorkspaceDormant),
 				},
 				User: []Permission{},
 			}

coderd/rbac/roles_test.go

@@ -319,9 +319,9 @@ func TestRolePermissions(t *testing.T) {
 			},
 		},
 		{
-			Name:     "WorkspaceLocked",
+			Name:     "WorkspaceDormant",
 			Actions:  rbac.AllActions(),
-			Resource: rbac.ResourceWorkspaceLocked.WithID(uuid.New()).InOrg(orgID).WithOwner(memberMe.Actor.ID),
+			Resource: rbac.ResourceWorkspaceDormant.WithID(uuid.New()).InOrg(orgID).WithOwner(memberMe.Actor.ID),
 			AuthorizeMap: map[bool][]authSubject{
 				true:  {},
 				false: {memberMe, orgAdmin, userAdmin, otherOrgAdmin, otherOrgMember, orgMemberMe, owner, templateAdmin},