oops

aslilac · aslilac · commit 00526efcfb65 · 2025-04-01T21:04:29.000Z
diff --git a/coderd/database/dbauthz/dbauthz.go b/coderd/database/dbauthz/dbauthz.go
@@ -1748,7 +1748,8 @@ func (q *querier) GetFileIDByTemplateVersionID(ctx context.Context, templateVers
 	}
 	// This is a kind of weird check, because users will almost never have this
 	// permission. Since this query is not currently used to provide data in a
-	// user facing way, it is expected that this query is run as some system user.
+	// user facing way, it's expected that this query is run as some system
+	// subject in order to be authorized.
 	err = q.authorizeContext(ctx, policy.ActionRead, rbac.ResourceFile.WithID(fileID))
 	if err != nil {
 		return uuid.Nil, err
