Various fixes (#362)

server/src/ability/ability.factory.ts

@@ -61,18 +61,24 @@ export class AbilityFactory {
 
     // Company
     can(AbilityAction.Read, 'Company', { workspaceId: workspace.id });
+    can(AbilityAction.Create, 'Company');
+    can(AbilityAction.Update, 'Company', { workspaceId: workspace.id });
 
     // Person
     can(AbilityAction.Read, 'Person', { workspaceId: workspace.id });
+    can(AbilityAction.Create, 'Person');
+    can(AbilityAction.Update, 'Person', { workspaceId: workspace.id });
 
     // RefreshToken
     cannot(AbilityAction.Manage, 'RefreshToken');
 
     // CommentThread
     can(AbilityAction.Read, 'CommentThread', { workspaceId: workspace.id });
+    can(AbilityAction.Create, 'CommentThread');
 
     // Comment
     can(AbilityAction.Read, 'Comment', { workspaceId: workspace.id });
+    can(AbilityAction.Create, 'Comment');
     can(AbilityAction.Update, 'Comment', {
       workspaceId: workspace.id,
       authorId: user.id,

server/src/ability/handlers/company.ability-handler.ts

@@ -47,6 +47,7 @@ export class UpdateCompanyAbilityHandler implements IAbilityHandler {
     const company = await this.prismaService.company.findFirst({
       where: args.where,
     });
+
     assert(company, '', NotFoundException);
 
     return ability.can(AbilityAction.Update, subject('Company', company));