Function getOrganizationAccess

apps/web/actions/organization/authorization.ts:21–68

(
	userId: User.UserId,
	organizationId: Organisation.OrganisationId,
)

};

export async function getOrganizationAccess(
	userId: User.UserId,
	organizationId: Organisation.OrganisationId,
): Promise<OrganizationAccess | null> {
	const [organization] = await db()
		.select({
			id: organizations.id,
			ownerId: organizations.ownerId,
			memberId: organizationMembers.id,
			memberRole: organizationMembers.role,
		})
		.from(organizations)
		.leftJoin(
			organizationMembers,
			and(
				eq(organizationMembers.organizationId, organizations.id),
				eq(organizationMembers.userId, userId),
			),
		)
		.where(
			and(
				eq(organizations.id, organizationId),
				isNull(organizations.tombstoneAt),
				or(
					eq(organizations.ownerId, userId),
					eq(organizationMembers.userId, userId),
				),
			),
		)
		.limit(1);

	if (!organization) return null;

	const role = getEffectiveOrganizationRole({
		userId,
		ownerId: organization.ownerId,
		memberRole: organization.memberRole,
	});

	if (!role) return null;

	return {
		id: organization.id,
		ownerId: organization.ownerId,
		memberId: organization.memberId,
		role,
	};
}

export async function requireOrganizationAccess(
	userId: User.UserId,