feat: board access group permissions (#422)
* fix: cache is not exportet from react * fix: format issue * wip: add usage of group permissions * feat: show inherited groups and add manage group * refactor: improve board access management * chore: address pull request feedback * fix: type issues * fix: migrations * test: add unit tests for board permissions, permissions and board router * test: add unit tests for board router and get current user permissions method * fix: format issues * fix: deepsource issue
This commit is contained in:
@@ -10,7 +10,10 @@ export type BoardPermissionsProps = (
|
||||
creatorId: string | null;
|
||||
}
|
||||
) & {
|
||||
permissions: {
|
||||
userPermissions: {
|
||||
permission: string;
|
||||
}[];
|
||||
groupPermissions: {
|
||||
permission: string;
|
||||
}[];
|
||||
isPublic: boolean;
|
||||
@@ -23,13 +26,23 @@ export const constructBoardPermissions = (
|
||||
const creatorId = "creator" in board ? board.creator?.id : board.creatorId;
|
||||
|
||||
return {
|
||||
hasFullAccess: session?.user?.id === creatorId,
|
||||
hasFullAccess:
|
||||
session?.user?.id === creatorId ||
|
||||
session?.user.permissions.includes("board-full-access"),
|
||||
hasChangeAccess:
|
||||
session?.user?.id === creatorId ||
|
||||
board.permissions.some(({ permission }) => permission === "board-change"),
|
||||
board.userPermissions.some(
|
||||
({ permission }) => permission === "board-change",
|
||||
) ||
|
||||
board.groupPermissions.some(
|
||||
({ permission }) => permission === "board-change",
|
||||
) ||
|
||||
session?.user.permissions.includes("board-modify-all"),
|
||||
hasViewAccess:
|
||||
session?.user?.id === creatorId ||
|
||||
board.permissions.length >= 1 ||
|
||||
board.isPublic,
|
||||
board.userPermissions.length >= 1 ||
|
||||
board.groupPermissions.length >= 1 ||
|
||||
board.isPublic ||
|
||||
session?.user.permissions.includes("board-view-all"),
|
||||
};
|
||||
};
|
||||
|
||||
Reference in New Issue
Block a user