Function ensureWorkspaceAccess

apps/sim/lib/copilot/tools/handlers/access.ts:46–68

(
  workspaceId: string,
  userId: string,
  level: 'read' | 'write' | 'admin' = 'read'
)

}

export async function ensureWorkspaceAccess(
  workspaceId: string,
  userId: string,
  level: 'read' | 'write' | 'admin' = 'read'
): Promise<void> {
  const access = await checkWorkspaceAccess(workspaceId, userId)
  if (!access.exists || !access.hasAccess) {
    throw new Error(`Workspace ${workspaceId} not found`)
  }

  if (level === 'read') return

  if (level === 'admin') {
    if (!access.canAdmin) {
      throw new Error('Admin access required for this workspace')
    }
    return
  }

  if (!access.canWrite) {
    throw new Error('Write or admin access required for this workspace')
  }
}