@@ -367,6 +367,7 @@ func (api *API) workspaceAgentStartupLogs(rw http.ResponseWriter, r *http.Reques
367367// This mostly copies how provisioner job logs are streamed!
368368var (
369369ctx = r .Context ()
370+ actor ,_ = dbauthz .ActorFromContext (ctx )
370371workspaceAgent = httpmw .WorkspaceAgentParam (r )
371372workspace = httpmw .WorkspaceParam (r )
372373logger = api .Logger .With (slog .F ("workspace_agent_id" ,workspaceAgent .ID ))
@@ -475,7 +476,7 @@ func (api *API) workspaceAgentStartupLogs(rw http.ResponseWriter, r *http.Reques
475476}
476477
477478if jlMsg .CreatedAfter != 0 {
478- logs ,err := api .Database .GetWorkspaceAgentStartupLogsAfter (ctx , database.GetWorkspaceAgentStartupLogsAfterParams {
479+ logs ,err := api .Database .GetWorkspaceAgentStartupLogsAfter (dbauthz . As ( ctx , actor ) , database.GetWorkspaceAgentStartupLogsAfterParams {
479480AgentID :workspaceAgent .ID ,
480481CreatedAfter :jlMsg .CreatedAfter ,
481482})
@@ -488,7 +489,7 @@ func (api *API) workspaceAgentStartupLogs(rw http.ResponseWriter, r *http.Reques
488489
489490if jlMsg .EndOfLogs {
490491endOfLogs .Store (true )
491- logs ,err := api .Database .GetWorkspaceAgentStartupLogsAfter (ctx , database.GetWorkspaceAgentStartupLogsAfterParams {
492+ logs ,err := api .Database .GetWorkspaceAgentStartupLogsAfter (dbauthz . As ( ctx , actor ) , database.GetWorkspaceAgentStartupLogsAfterParams {
492493AgentID :workspaceAgent .ID ,
493494CreatedAfter :lastSentLogID .Load (),
494495})