Garrett Delfosse e8d6016807 fix: allow users with workspace:create for any owner to list users (#21947) ...

## Summary

Custom roles that can create workspaces on behalf of other users need to
be able to list users to populate the owner dropdown in the workspace
creation UI. Previously, this required a separate `user:read`
permission, causing the dropdown to fail for custom roles.

## Changes

- Modified `GetUsers` in `dbauthz` to check if the user can create
workspaces for any owner (`workspace:create` with `owner_id: *`)
- If the user has this permission, they can list all users without
needing explicit `user:read` permission
- Added tests to verify the new behavior

## Testing

- Updated mock tests to assert the new authorization check
- Added integration tests for both positive and negative cases

Fixes #18203

2026-02-19 13:04:53 -05:00

..

agents.md

feat(agent): populate subagent ID for terraform-defined devcontainers (#21942)

2026-02-06 15:52:54 +00:00

aibridge.md

feat: add client column to aibridge_interceptions table (#21839)

2026-02-17 15:43:02 +01:00

applications.md

chore: adopt markdownlint and markdown-table-formatter for *.md (#15831)

2025-01-03 13:12:59 +00:00

audit.md

chore: fix swagger type of AuditLog AdditionalFields (#17286)

2025-04-07 13:48:58 -06:00

authentication.md

docs: move api and cli docs routes to reference/ (#14241)

2024-08-13 18:39:46 +03:00

authorization.md

feat: add external API key scopes (#19916)

2025-09-26 11:43:32 +02:00

builds.md

feat: add link for viewing raw build logs in workspace and template build jobs (#21727)

2026-02-03 09:45:23 +00:00

debug.md

chore: return template data for provisioner daemons (#16514)

2025-02-11 14:22:34 -03:00

enterprise.md

refactor: add RFC-compliant enum types and use SDK as source of truth (#21468)

2026-01-15 12:41:28 +03:00

files.md

docs: document 200 OK response for upload file API when file exists (#21071)

2025-12-08 16:04:56 -06:00

general.md

feat: conditionally send aibridge actor headers (#21643)

2026-01-26 15:08:17 +00:00

git.md

feat: add best effort attempt to revoke oauth access token in external auth provider (#19775)

2025-09-19 16:27:02 +02:00

index.md

chore: adopt markdownlint and markdown-table-formatter for *.md (#15831)

2025-01-03 13:12:59 +00:00

initscript.md

feat(coderd): add support for external agents to API's and provisioner (#19286)

2025-08-19 10:41:33 +02:00

insights.md

docs: group enumerated values by property in API docs (#21372)

2025-12-22 16:19:25 +01:00

members.md

feat(coderd/agentapi): support terraform-defined subagent ids (#21837)

2026-02-04 15:33:48 +00:00

notifications.md

docs: group enumerated values by property in API docs (#21372)

2025-12-22 16:19:25 +01:00

organizations.md

docs: group enumerated values by property in API docs (#21372)

2025-12-22 16:19:25 +01:00

portsharing.md

docs: fix swagger documentation for DELETE port share endpoint (#18426)

2025-06-18 14:07:53 +00:00

prebuilds.md

feat: allow users to pause prebuilt workspace reconciliation (#18700)

2025-07-02 15:05:42 +00:00

provisioning.md

docs: group enumerated values by property in API docs (#21372)

2025-12-22 16:19:25 +01:00

schemas.md

fix(coderd): use BuildReasonTaskAutoPause for task workspaces (#22126)

2026-02-17 15:11:04 +00:00

tasks.md

feat: add an endpoint to manually resume a coder task (#21948)

2026-02-12 09:59:53 +02:00

templates.md

fix: hide "Create Workspace" button for deleted templates (#22092)

2026-02-13 19:44:50 -05:00

users.md

feat(cli)!: expire tokens by default (#21783)

2026-02-17 13:16:46 +00:00

workspaceproxies.md

chore: adopt markdownlint and markdown-table-formatter for *.md (#15831)

2025-01-03 13:12:59 +00:00

workspaces.md

fix: allow users with workspace:create for any owner to list users (#21947)

2026-02-19 13:04:53 -05:00