feat: persist view sorts (#1154)

Closes #1122

server/src/ability/ability.factory.ts

@@ -17,8 +17,8 @@ import {
   PipelineStage,
   PipelineProgress,
   UserSettings,
-  ViewField,
   View,
+  ViewField,
   ViewSort,
 } from '@prisma/client';
 
@@ -134,11 +134,22 @@ export class AbilityFactory {
       workspaceId: workspace.id,
     });
 
+    // View
+    can(AbilityAction.Read, 'View', { workspaceId: workspace.id });
+    can(AbilityAction.Create, 'View', { workspaceId: workspace.id });
+    can(AbilityAction.Update, 'View', { workspaceId: workspace.id });
+
     // ViewField
     can(AbilityAction.Read, 'ViewField', { workspaceId: workspace.id });
     can(AbilityAction.Create, 'ViewField', { workspaceId: workspace.id });
     can(AbilityAction.Update, 'ViewField', { workspaceId: workspace.id });
 
+    // ViewSort
+    can(AbilityAction.Read, 'ViewSort', { workspaceId: workspace.id });
+    can(AbilityAction.Create, 'ViewSort', { workspaceId: workspace.id });
+    can(AbilityAction.Update, 'ViewSort', { workspaceId: workspace.id });
+    can(AbilityAction.Delete, 'ViewSort', { workspaceId: workspace.id });
+
     return build();
   }
 }

server/src/ability/ability.module.ts

@@ -99,6 +99,12 @@ import {
   ReadViewFieldAbilityHandler,
   UpdateViewFieldAbilityHandler,
 } from './handlers/view-field.ability-handler';
+import {
+  CreateViewSortAbilityHandler,
+  ReadViewSortAbilityHandler,
+  UpdateViewSortAbilityHandler,
+  DeleteViewSortAbilityHandler,
+} from './handlers/view-sort.ability-handler';
 
 @Global()
 @Module({
@@ -187,6 +193,11 @@ import {
     ReadViewFieldAbilityHandler,
     CreateViewFieldAbilityHandler,
     UpdateViewFieldAbilityHandler,
+    // ViewSort
+    ReadViewSortAbilityHandler,
+    CreateViewSortAbilityHandler,
+    UpdateViewSortAbilityHandler,
+    DeleteViewSortAbilityHandler,
   ],
   exports: [
     AbilityFactory,
@@ -272,6 +283,11 @@ import {
     ReadViewFieldAbilityHandler,
     CreateViewFieldAbilityHandler,
     UpdateViewFieldAbilityHandler,
+    // ViewSort
+    ReadViewSortAbilityHandler,
+    CreateViewSortAbilityHandler,
+    UpdateViewSortAbilityHandler,
+    DeleteViewSortAbilityHandler,
   ],
 })
 export class AbilityModule {}

server/src/ability/handlers/view-sort.ability-handler.ts

@@ -0,0 +1,122 @@
+import {
+  ExecutionContext,
+  Injectable,
+  NotFoundException,
+} from '@nestjs/common';
+import { GqlExecutionContext } from '@nestjs/graphql';
+
+import { subject } from '@casl/ability';
+
+import { IAbilityHandler } from 'src/ability/interfaces/ability-handler.interface';
+
+import { AbilityAction } from 'src/ability/ability.action';
+import { AppAbility } from 'src/ability/ability.factory';
+import {
+  convertToWhereInput,
+  relationAbilityChecker,
+} from 'src/ability/ability.util';
+import { PrismaService } from 'src/database/prisma.service';
+import { assert } from 'src/utils/assert';
+import { ViewSortWhereUniqueInput } from 'src/core/@generated/view-sort/view-sort-where-unique.input';
+import { ViewSortWhereInput } from 'src/core/@generated/view-sort/view-sort-where.input';
+
+class ViewSortArgs {
+  where?: ViewSortWhereInput | ViewSortWhereUniqueInput;
+  [key: string]: any;
+}
+
+const isViewSortWhereUniqueInput = (
+  input: ViewSortWhereInput | ViewSortWhereUniqueInput,
+): input is ViewSortWhereUniqueInput => 'viewId_key' in input;
+
+@Injectable()
+export class ReadViewSortAbilityHandler implements IAbilityHandler {
+  handle(ability: AppAbility) {
+    return ability.can(AbilityAction.Read, 'ViewSort');
+  }
+}
+
+@Injectable()
+export class CreateViewSortAbilityHandler implements IAbilityHandler {
+  constructor(private readonly prismaService: PrismaService) {}
+
+  async handle(ability: AppAbility, context: ExecutionContext) {
+    const gqlContext = GqlExecutionContext.create(context);
+    const args = gqlContext.getArgs();
+
+    const allowed = await relationAbilityChecker(
+      'ViewSort',
+      ability,
+      this.prismaService.client,
+      args,
+    );
+
+    if (!allowed) {
+      return false;
+    }
+
+    return ability.can(AbilityAction.Create, 'ViewSort');
+  }
+}
+
+@Injectable()
+export class UpdateViewSortAbilityHandler implements IAbilityHandler {
+  constructor(private readonly prismaService: PrismaService) {}
+
+  async handle(ability: AppAbility, context: ExecutionContext) {
+    const gqlContext = GqlExecutionContext.create(context);
+    const args = gqlContext.getArgs<ViewSortArgs>();
+    const viewSort = await this.prismaService.client.viewSort.findFirst({
+      where:
+        args.where && isViewSortWhereUniqueInput(args.where)
+          ? args.where.viewId_key
+          : args.where,
+    });
+    assert(viewSort, '', NotFoundException);
+
+    const allowed = await relationAbilityChecker(
+      'ViewSort',
+      ability,
+      this.prismaService.client,
+      args,
+    );
+
+    if (!allowed) {
+      return false;
+    }
+
+    return ability.can(AbilityAction.Update, subject('ViewSort', viewSort));
+  }
+}
+
+@Injectable()
+export class DeleteViewSortAbilityHandler implements IAbilityHandler {
+  constructor(private readonly prismaService: PrismaService) {}
+
+  async handle(ability: AppAbility, context: ExecutionContext) {
+    const gqlContext = GqlExecutionContext.create(context);
+    const args = gqlContext.getArgs<ViewSortArgs>();
+    const where = convertToWhereInput(
+      args.where && isViewSortWhereUniqueInput(args.where)
+        ? args.where.viewId_key
+        : args.where,
+    );
+    const viewSorts = await this.prismaService.client.viewSort.findMany({
+      where,
+    });
+    assert(viewSorts.length, '', NotFoundException);
+
+    for (const viewSort of viewSorts) {
+      const allowed = ability.can(
+        AbilityAction.Delete,
+        subject('ViewSort', viewSort),
+      );
+
+      if (!allowed) {
+        return false;
+      }
+    }
+
+    return true;
+  }
+}

server/src/ability/handlers/view.ability-handler.ts

@@ -0,0 +1,79 @@
+import {
+  ExecutionContext,
+  Injectable,
+  NotFoundException,
+} from '@nestjs/common';
+import { GqlExecutionContext } from '@nestjs/graphql';
+
+import { subject } from '@casl/ability';
+
+import { IAbilityHandler } from 'src/ability/interfaces/ability-handler.interface';
+
+import { AbilityAction } from 'src/ability/ability.action';
+import { AppAbility } from 'src/ability/ability.factory';
+import { relationAbilityChecker } from 'src/ability/ability.util';
+import { ViewWhereInput } from 'src/core/@generated/view/view-where.input';
+import { PrismaService } from 'src/database/prisma.service';
+import { assert } from 'src/utils/assert';
+
+class ViewArgs {
+  where?: ViewWhereInput;
+  [key: string]: any;
+}
+
+@Injectable()
+export class ReadViewAbilityHandler implements IAbilityHandler {
+  handle(ability: AppAbility) {
+    return ability.can(AbilityAction.Read, 'View');
+  }
+}
+
+@Injectable()
+export class CreateViewAbilityHandler implements IAbilityHandler {
+  constructor(private readonly prismaService: PrismaService) {}
+
+  async handle(ability: AppAbility, context: ExecutionContext) {
+    const gqlContext = GqlExecutionContext.create(context);
+    const args = gqlContext.getArgs();
+
+    const allowed = await relationAbilityChecker(
+      'View',
+      ability,
+      this.prismaService.client,
+      args,
+    );
+
+    if (!allowed) {
+      return false;
+    }
+
+    return ability.can(AbilityAction.Create, 'View');
+  }
+}
+
+@Injectable()
+export class UpdateViewAbilityHandler implements IAbilityHandler {
+  constructor(private readonly prismaService: PrismaService) {}
+
+  async handle(ability: AppAbility, context: ExecutionContext) {
+    const gqlContext = GqlExecutionContext.create(context);
+    const args = gqlContext.getArgs<ViewArgs>();
+    const view = await this.prismaService.client.view.findFirst({
+      where: args.where,
+    });
+    assert(view, '', NotFoundException);
+
+    const allowed = await relationAbilityChecker(
+      'View',
+      ability,
+      this.prismaService.client,
+      args,
+    );
+
+    if (!allowed) {
+      return false;
+    }
+
+    return ability.can(AbilityAction.Update, subject('View', view));
+  }
+}