Function requireCanViewProject

app/src/utils/accessControl.ts:29–69

(projectId: string, ctx: TRPCContext)

};

export const requireCanViewProject = async (projectId: string, ctx: TRPCContext) => {
  ctx.markAccessControlRun();

  const userId = requireUserId(ctx);

  const user = await prisma.user.findFirst({
    where: {
      id: userId,
    },
  });

  const canView = await prisma.projectUser.findFirst({
    where: {
      userId,
      projectId,
    },
  });

  if (user?.role !== "ADMIN" && !canView) {
    const project = await prisma.project.findFirst({
      where: {
        id: projectId,
      },
    });
    // Automatically add the user to the project if it's public
    if (project?.isPublic) {
      await prisma.projectUser.create({
        data: {
          userId,
          projectId,
          role: "VIEWER",
        },
      });
    } else {
      throw new TRPCError({
        code: "UNAUTHORIZED",
        message: "You don't have access to view this project.",
      });
    }
  }
};

export const requireCanModifyProject = async (projectId: string, ctx: TRPCContext) => {
  ctx.markAccessControlRun();