Function requireIsProjectAdmin

app/src/utils/accessControl.ts:92–111

(projectId: string, ctx: TRPCContext)

};

export const requireIsProjectAdmin = async (projectId: string, ctx: TRPCContext) => {
  ctx.markAccessControlRun();

  const userId = requireUserId(ctx);

  const isAdmin = await prisma.projectUser.findFirst({
    where: {
      userId,
      projectId,
      role: { in: [ProjectUserRole.OWNER, ProjectUserRole.ADMIN] },
    },
  });

  if (!isAdmin) {
    throw new TRPCError({
      code: "UNAUTHORIZED",
      message: "Only project admins can perform this action.",
    });
  }
};

export const requireIsAdmin = async (ctx: TRPCContext) => {
  ctx.markAccessControlRun();