Function requireCanModifyProject

app/src/utils/accessControl.ts:71–90

(projectId: string, ctx: TRPCContext)

};

export const requireCanModifyProject = async (projectId: string, ctx: TRPCContext) => {
  ctx.markAccessControlRun();

  const userId = requireUserId(ctx);

  const canModify = await prisma.projectUser.findFirst({
    where: {
      userId,
      projectId,
      role: { in: [ProjectUserRole.OWNER, ProjectUserRole.ADMIN, ProjectUserRole.MEMBER] },
    },
  });

  if (!canModify) {
    throw new TRPCError({
      code: "UNAUTHORIZED",
      message: "Only project members can perform this action.",
    });
  }
};

export const requireIsProjectAdmin = async (projectId: string, ctx: TRPCContext) => {
  ctx.markAccessControlRun();