handle unassignment of role

internal/permissions/assignments.go

@@ -45,6 +45,29 @@ func (c *Client) AssignRole(ctx context.Context, roleID gidx.PrefixedID, memberI
 	return nil
 }
 
+func (c *Client) UnassignRole(ctx context.Context, roleID gidx.PrefixedID, memberID gidx.PrefixedID) error {
+	path := fmt.Sprintf("/api/v1/roles/%s/assignments", roleID.String())
+
+	body, err := encodeJSON(RoleAssign{
+		SubjectID: memberID.String(),
+	})
+	if err != nil {
+		return err
+	}
+
+	var response RoleAssignResponse
+
+	if _, err = c.DoRequest(ctx, http.MethodDelete, path, body, &response); err != nil {
+		return err
+	}
+
+	if !response.Success {
+		return ErrUnassignmentFailed
+	}
+
+	return nil
+}
+
 func (c *Client) ListRoleAssignments(ctx context.Context, roleID gidx.PrefixedID) ([]gidx.PrefixedID, error) {
 	path := fmt.Sprintf("/api/v1/roles/%s/assignments", roleID.String())
 

internal/permissions/errors.go

@@ -3,6 +3,8 @@ package permissions
 import "errors"
 
 var (
-	ErrRoleNotFound     = errors.New("role not found")
-	ErrAssignmentFailed = errors.New("assignment failed")
+	ErrRoleNotFound               = errors.New("role not found")
+	ErrAssignmentFailed           = errors.New("assignment failed")
+	ErrUnassignmentFailed         = errors.New("unassignment failed")
+	ErrUnexpectedRoleDeleteFailed = errors.New("unknown role delete error")
 )

internal/permissions/roles.go

@@ -17,6 +17,10 @@ type ResourceRoleCreateResponse struct {
 	ID string `json:"id"`
 }
 
+type ResourceRoleDeleteResponse struct {
+	Success bool `json:"success"`
+}
+
 type ResourceRoles []ResourceRole
 
 type ResourceRole struct {
@@ -48,6 +52,22 @@ func (c *Client) CreateRole(ctx context.Context, resourceID gidx.PrefixedID, act
 	return roleID, nil
 }
 
+func (c *Client) DeleteRole(ctx context.Context, roleID gidx.PrefixedID) error {
+	path := fmt.Sprintf("/api/v1/roles/%s", roleID.String())
+
+	var response ResourceRoleDeleteResponse
+
+	if _, err := c.DoRequest(ctx, http.MethodDelete, path, nil, &response); err != nil {
+		return err
+	}
+
+	if !response.Success {
+		return ErrUnexpectedRoleDeleteFailed
+	}
+
+	return nil
+}
+
 func (c *Client) ListResourceRoles(ctx context.Context, resourceID gidx.PrefixedID) (ResourceRoles, error) {
 	path := fmt.Sprintf("/api/v1/resources/%s/roles", resourceID.String())