Function hasProjectReadAccess

server/api/ChartRoute.js:74–104

(project, user)

  };

  const hasProjectReadAccess = async (project, user) => {
    if (!project || !user?.id) {
      return false;
    }

    const teamRole = await teamController.getTeamRole(project.team_id, user.id);
    if (!teamRole?.role) {
      return false;
    }

    const permission = accessControl.can(teamRole.role).readOwn("chart");
    if (!permission.granted) {
      return false;
    }

    user.teamRole = teamRole;

    if (["teamOwner", "teamAdmin"].includes(teamRole.role)) {
      return true;
    }

    if (teamRole?.projects?.length > 0) {
      const hasProjectAccess = teamRole.projects.some((projectId) => `${projectId}` === `${project.id}`);
      if (hasProjectAccess || project.ghost) {
        user.projects = teamRole.projects;
        return true;
      }
    }

    return false;
  };

  const checkPublicAccess = async (req, requiredAccess) => {
    const chart = await chartController.findById(req.params.chart_id);