Function checkAccess

server/api/AiRoute.js:21–40

(req, res, next)

};

const checkAccess = async (req, res, next) => {
  try {
    const teamId = req.body?.teamId || req.query?.teamId || req.params?.teamId;

    if (!teamId) {
      return res.status(400).json({ error: "teamId is required" });
    }

    const teamController = new TeamController();
    const teamRole = await teamController.getTeamRole(teamId, req.user.id);

    if (!teamRole?.role || !["teamOwner", "teamAdmin"].includes(teamRole.role)) {
      return res.status(403).json({ error: "Access denied" });
    }

    return next();
  } catch (error) {
    return res.status(500).json({ error: error.message || "Access check failed" });
  }
};

const isOpenAiApiKeySet = () => {
  if (process.env.NODE_ENV === "production") {