feat: add board access settings (#249)

* wip: add board access settings

* wip: add user access control

* wip: add user access control

* feat: add user access control

* refactor: move away from mantine-modal-manager

* fix: ci issues and failing tests

* fix: lint issue

* fix: format issue

* fix: deepsource issues

* chore: address pull request feedback

packages/api/src/router/board.ts

@@ -4,6 +4,7 @@ import superjson from "superjson";
 import type { Database, SQL } from "@homarr/db";
 import { and, createId, eq, inArray } from "@homarr/db";
 import {
+  boardPermissions,
   boards,
   integrationItems,
   items,
@@ -309,6 +310,52 @@ export const boardRouter = createTRPCRouter({
         }
       });
     }),
+
+  permissions: publicProcedure
+    .input(validation.board.permissions)
+    .query(async ({ input, ctx }) => {
+      const permissions = await ctx.db.query.boardPermissions.findMany({
+        where: eq(boardPermissions.boardId, input.id),
+        with: {
+          user: {
+            columns: {
+              id: true,
+              name: true,
+            },
+          },
+        },
+      });
+      return permissions
+        .map((permission) => ({
+          user: {
+            id: permission.userId,
+            name: permission.user.name ?? "",
+          },
+          permission: permission.permission,
+        }))
+        .sort((permissionA, permissionB) => {
+          return permissionA.user.name.localeCompare(permissionB.user.name);
+        });
+    }),
+  savePermissions: publicProcedure
+    .input(validation.board.savePermissions)
+    .mutation(async ({ input, ctx }) => {
+      await ctx.db.transaction(async (tx) => {
+        await tx
+          .delete(boardPermissions)
+          .where(eq(boardPermissions.boardId, input.id));
+        if (input.permissions.length === 0) {
+          return;
+        }
+        await tx.insert(boardPermissions).values(
+          input.permissions.map((permission) => ({
+            userId: permission.user.id,
+            permission: permission.permission,
+            boardId: input.id,
+          })),
+        );
+      });
+    }),
 });
 
 const noBoardWithSimilarName = async (
@@ -341,6 +388,12 @@ const getFullBoardWithWhere = async (db: Database, where: SQL<unknown>) => {
   const board = await db.query.boards.findFirst({
     where,
     with: {
+      creator: {
+        columns: {
+          id: true,
+          name: true,
+        },
+      },
       sections: {
         with: {
           items: {

packages/api/src/router/user.ts

@@ -44,6 +44,14 @@ export const userRouter = createTRPCRouter({
       },
     });
   }),
+  selectable: publicProcedure.query(async ({ ctx }) => {
+    return await ctx.db.query.users.findMany({
+      columns: {
+        id: true,
+        name: true,
+      },
+    });
+  }),
   getById: publicProcedure
     .input(z.object({ userId: z.string() }))
     .query(async ({ input, ctx }) => {