···

       
66
       
66
       
 
       
			return fmt.Errorf("domain mismatch: %s != %s", record.Instance, domain)

     

       
67
       
67
       
 
       
		}

     

       
68
       
68
       
 
       


     

       
69
       
69
       
-
       
		ok, err := s.e.E.Enforce(did, rbacDomain, rbacDomain, "server:invite")

     

       
69
       
69
       
+
       
		ok, err := s.e.IsSpindleInviteAllowed(did, rbacDomain)

     

       
70
       
70
       
 
       
		if err != nil || !ok {

     

       
71
       
71
       
 
       
			l.Error("failed to add member", "did", did, "error", err)

     

       
72
       
72
       
 
       
			return fmt.Errorf("failed to enforce permissions: %w", err)

     
···

       
78
       
78
       
 
       
		}

     

       
79
       
79
       
 
       
		l.Info("added member from firehose", "member", record.Subject)

     

       
80
       
80
       
 
       


     

       
81
       
81
       
-
       
		if err := s.db.AddDid(did); err != nil {

     

       
81
       
81
       
+
       
		if err := s.db.AddDid(record.Subject); err != nil {

     

       
82
       
82
       
 
       
			l.Error("failed to add did", "error", err)

     

       
83
       
83
       
 
       
			return fmt.Errorf("failed to add did: %w", err)

     

       
84
       
84
       
 
       
		}

     

       
85
       
85
       
-
       
		s.jc.AddDid(did)

     

       
85
       
85
       
+
       
		s.jc.AddDid(record.Subject)

     

       
86
       
86
       
 
       


     

       
87
       
87
       
 
       
		return nil

     

       
88
       
88