add members | phase 1

dashboard/server/LIVE_DEMO_DATA.ts

@@ -1,6 +1,7 @@
 import { AuthContext } from "./middleware/01-authorization";
 import { ProjectModel } from "~/../shared/schema/ProjectSchema";
 import { LITLYX_PROJECT_ID } from '@data/LITLYX'
+import { hasAccessToProject } from "./utils/hasAccessToProject";
 
 export async function getUserProjectFromId(project_id: string, user: AuthContext | undefined) {
     if (project_id == LITLYX_PROJECT_ID) {
@@ -8,7 +9,10 @@ export async function getUserProjectFromId(project_id: string, user: AuthContext
         return project;
     } else {
         if (!user?.logged) return;
-        const project = await ProjectModel.findOne({ _id: project_id, owner: user.id });
+        const project = await ProjectModel.findById(project_id);
+        if (!project) return;
+        const hasAccess = await hasAccessToProject(user.id, project_id, project);
+        if (!hasAccess) return;
         return project;
     }
 

dashboard/server/api/project/list_guest.ts

@@ -0,0 +1,25 @@
+import { ProjectModel, TProject } from "@schema/ProjectSchema";
+import { TTeamMember, TeamMemberModel } from "@schema/TeamMemberSchema";
+
+export default defineEventHandler(async event => {
+
+    const userData = getRequestUser(event);
+    if (!userData?.logged) return [];
+
+
+    const members = await TeamMemberModel.find({
+        user_id: userData.id
+    });
+
+    const projects: TProject[] = [];
+
+    for (const member of members) {
+        const project = await ProjectModel.findById(member.project_id);
+        if (!project) continue;
+        projects.push(project.toJSON());
+    }
+
+    return projects;
+
+
+});

dashboard/server/api/project/members/add.post.ts

@@ -0,0 +1,38 @@
+import { ProjectModel } from "@schema/ProjectSchema";
+import { TeamMemberModel } from "@schema/TeamMemberSchema";
+import { UserModel } from "@schema/UserSchema";
+import { UserSettingsModel } from "@schema/UserSettings";
+
+export default defineEventHandler(async event => {
+
+    const userData = getRequestUser(event);
+    if (!userData?.logged) return setResponseStatus(event, 400, 'NotLogged');
+
+    const currentActiveProject = await UserSettingsModel.findOne({ user_id: userData.id });
+    if (!currentActiveProject) return setResponseStatus(event, 400, 'You need to select a project');
+
+    const project_id = currentActiveProject.active_project_id;
+
+    const project = await ProjectModel.findById(project_id);
+    if (!project) return setResponseStatus(event, 400, 'Project not found');
+
+    if (project.owner.toString() != userData.id) {
+        return setResponseStatus(event, 400, 'You are not the owner');
+    }
+
+    const { email } = await readBody(event);
+
+    const targetUser = await UserModel.findOne({ email });
+    if (!targetUser) return setResponseStatus(event, 400, 'No user with this email');
+
+
+    await TeamMemberModel.create({
+        project_id,
+        user_id: targetUser.id,
+        pending: true,
+        role: 'GUEST'
+    });
+
+    return { ok: true };
+
+});

dashboard/server/api/project/members/list.ts

@@ -0,0 +1,49 @@
+import { ProjectModel } from "@schema/ProjectSchema";
+import { TeamMemberModel } from "@schema/TeamMemberSchema";
+import { UserModel } from "@schema/UserSchema";
+import { UserSettingsModel } from "@schema/UserSettings";
+import StripeService from '~/server/services/StripeService';
+
+export default defineEventHandler(async event => {
+
+    const userData = getRequestUser(event);
+    if (!userData?.logged) return setResponseStatus(event, 400, 'NotLogged');
+
+    const currentActiveProject = await UserSettingsModel.findOne({ user_id: userData.id });
+    if (!currentActiveProject) return setResponseStatus(event, 400, 'You need to select a project');
+
+    const project_id = currentActiveProject.active_project_id;
+
+    const project = await ProjectModel.findById(project_id);
+    if (!project) return setResponseStatus(event, 400, 'Project not found');
+
+    const owner = await UserModel.findById(project.owner);
+    if (!owner) return setResponseStatus(event, 400, 'No owner');
+
+    const members = await TeamMemberModel.find({ project_id });
+
+    const result: { email: string, name: string, role: string, pending: boolean, me: boolean }[] = [];
+
+    result.push({
+        email: owner.email,
+        name: owner.name,
+        role: 'OWNER',
+        pending: false,
+        me: userData.id === owner.id
+    })
+
+    for (const member of members) {
+        const userMember = await UserModel.findById(member.user_id);
+        if (!userMember) continue;
+        result.push({
+            email: userMember.email,
+            name: userMember.name,
+            role: member.role,
+            pending: member.pending,
+            me: userData.id === userMember.id
+        })
+    }
+
+    return result;
+
+});

dashboard/server/api/user/set_active_project.ts

@@ -2,6 +2,7 @@
 import { ProjectModel } from "@schema/ProjectSchema";
 
 import { UserSettingsModel } from "@schema/UserSettings";
+import { hasAccessToProject } from "~/server/utils/hasAccessToProject";
 
 export default defineEventHandler(async event => {
 
@@ -12,7 +13,7 @@ export default defineEventHandler(async event => {
 
     const { project_id } = getQuery(event);
 
-    const hasAccess = await ProjectModel.exists({ owner: userData.id, _id: project_id });
+    const hasAccess = await hasAccessToProject(userData.id, project_id as string);
 
     if (!hasAccess) return setResponseStatus(event, 400, 'No access to project');
 

dashboard/server/utils/hasAccessToProject.ts

@@ -0,0 +1,11 @@
+import { ProjectModel, TProject } from "@schema/ProjectSchema";
+import { TeamMemberModel } from "@schema/TeamMemberSchema";
+
+export async function hasAccessToProject(user_id: string, project_id: string, project?: TProject) {
+    const targetProject = project || await ProjectModel.findById(project_id, { owner: true });
+    if (!targetProject) return [false, 'NONE'];
+    if (targetProject.owner.toString() === user_id) return [true, 'OWNER'];
+    const members = await TeamMemberModel.find({ project_id });
+    if (members.map(e => e.user_id.toString()).includes(user_id)) return [true, 'GUEST'];
+    return [false, 'NONE'];
+}