Susana Ferreira b9fad66214 refactor: authorize AI budget reads against the user resource directly (#27443) ...

Replaces the `GetUserByID` read used as an authz check in the AI budget-resolution queries with a targeted `authorizeContext` against the user resource. Same RBAC decision, one fewer db query per resolution step.

Follow-up to https://github.com/coder/coder/pull/27364#discussion_r3632577802.

> [!NOTE]
> Initially generated by Claude Opus 4.7, modified and reviewed by @ssncferreira

2026-07-23 10:46:58 +01:00

..

accesscontrol.go

…

customroles_test.go

chore(coderd/database): remove deprecated db2sdk.List(Lazy)? methods (#21902)

2026-02-03 17:52:07 +00:00

dbauthz_test.go

refactor: authorize AI budget reads against the user resource directly (#27443)

2026-07-23 10:46:58 +01:00

dbauthz.go

refactor: authorize AI budget reads against the user resource directly (#27443)

2026-07-23 10:46:58 +01:00

doc.go

…

groupsauth_test.go

feat(coderd/rbac): make organization-member a per-org system custom role (#21359)

2026-01-12 18:19:19 -08:00

setup_test.go

feat: rank chat workspace templates (#25037)

2026-06-18 06:41:47 +01:00

workspace_rbac_context.go

perf: reduce DB calls to GetWorkspaceByAgentID via caching workspace info (#20662)

2025-11-25 14:45:05 -08:00