Function getUsersWithPermissions

apps/sim/lib/workspaces/permissions/utils.ts:263–343

(
  workspaceId: string
)

}

export async function getUsersWithPermissions(
  workspaceId: string
): Promise<WorkspaceMemberWithRole[]> {
  const ws = await getWorkspaceWithOwner(workspaceId)
  if (!ws) return []

  const explicitRows = await db
    .select({
      userId: user.id,
      email: user.email,
      name: user.name,
      image: user.image,
      permissionType: permissions.permissionType,
      joinedAt: permissions.createdAt,
      userOrganizationId: member.organizationId,
    })
    .from(permissions)
    .innerJoin(user, eq(permissions.userId, user.id))
    .leftJoin(member, eq(member.userId, user.id))
    .where(and(eq(permissions.entityType, 'workspace'), eq(permissions.entityId, workspaceId)))

  const byUser = new Map<string, WorkspaceMemberWithRole>()

  for (const row of explicitRows) {
    const isOwner = row.userId === ws.ownerId
    byUser.set(row.userId, {
      userId: row.userId,
      email: row.email,
      name: row.name,
      image: row.image ?? null,
      permissionType: row.permissionType,
      isExternal: !isOwner && row.userOrganizationId !== ws.organizationId,
      joinedAt: row.joinedAt.toISOString(),
      roleSource: isOwner ? 'owner' : 'explicit',
    })
  }

  if (ws.organizationId) {
    const orgAdmins = await db
      .select({
        userId: user.id,
        email: user.email,
        name: user.name,
        image: user.image,
        joinedAt: member.createdAt,
      })
      .from(member)
      .innerJoin(user, eq(member.userId, user.id))
      .where(
        and(
          eq(member.organizationId, ws.organizationId),
          inArray(member.role, [...ORG_ADMIN_ROLES])
        )
      )

    for (const row of orgAdmins) {
      const isOwner = row.userId === ws.ownerId
      const existing = byUser.get(row.userId)