fix(dbpurge): use dbauthz.AsSystemRestricted (#7017)

coadler · web-flow · commit 407f80a1ef80 · 2023-04-05T17:48:39.000Z
diff --git a/coderd/database/dbpurge/dbpurge.go b/coderd/database/dbpurge/dbpurge.go
@@ -10,6 +10,11 @@ import (
 
 	"cdr.dev/slog"
 	"github.com/coder/coder/coderd/database"
+	"github.com/coder/coder/coderd/database/dbauthz"
+)
+
+const (
+	delay = 24 * time.Hour
 )
 
 // New creates a new periodically purging database instance.
@@ -19,9 +24,12 @@ import (
 func New(ctx context.Context, logger slog.Logger, db database.Store) io.Closer {
 	closed := make(chan struct{})
 	ctx, cancelFunc := context.WithCancel(ctx)
+	//nolint:gocritic // The system purges old db records without user input.
+	ctx = dbauthz.AsSystemRestricted(ctx)
 	go func() {
 		defer close(closed)
-		ticker := time.NewTicker(24 * time.Hour)
+
+		ticker := time.NewTicker(delay)
 		defer ticker.Stop()
 		for {
 			select {
@@ -44,6 +52,8 @@ func New(ctx context.Context, logger slog.Logger, db database.Store) io.Closer {
 				}
 				logger.Error(ctx, "failed to purge old database entries", slog.Error(err))
 			}
+
+			ticker.Reset(delay)
 		}
 	}()
 	return &instance{
