coder

mirror of https://github.com/coder/coder.git synced 2026-06-03 13:08:25 +00:00

Files

T

Cian Johnston c552f9f281 fix: stop group spend limits from leaking across org boundaries (#24294 )

Three SQL queries (`GetUserGroupSpendLimit`,
`ResolveUserChatSpendLimit`, `GetUserChatSpendInPeriod`) aggregated chat
spend limits and usage globally across all organizations. A restrictive
group limit in org A would bleed into org B.

## Changes

- Add `organization_id` parameter to all three SQL queries in
`coderd/database/queries/chats.sql`
- When nil UUID is passed, queries fall back to global behavior
(backward compat for HTTP dashboard endpoints)
- When real org ID is passed, limits and spend are scoped to that
organization
- Thread `organizationID` through `ResolveUsageLimitStatus` →
`checkUsageLimit` → all chatd call sites
- Update dbauthz wrappers for new param structs
- HTTP endpoints (`chatCostSummary`, `getMyChatUsageLimitStatus`) pass
`uuid.Nil` with TODO for future org-scoped UI
- Add `TestResolveUsageLimitStatus_OrgScoped` with 5 test cases covering
org isolation, nil-UUID fallback, spend scoping, and user override
priority

Closes coder/internal#1466

> 🤖

2026-04-14 16:56:17 +01:00

accesscontrol.go

feat: implement deprecated flag for templates to prevent new workspaces (#10745 )

2023-11-20 19:16:18 +00:00

customroles_test.go

chore(coderd/database): remove deprecated db2sdk.List(Lazy)? methods (#21902 )

2026-02-03 17:52:07 +00:00

dbauthz_test.go

fix: stop group spend limits from leaking across org boundaries (#24294 )

2026-04-14 16:56:17 +01:00

dbauthz.go

fix: stop group spend limits from leaking across org boundaries (#24294 )