[permissions] Add permissions check layer in entityManager (#11818)

First and main step of
https://github.com/twentyhq/core-team-issues/issues/747

We are implementing a permission check layer in our custom
WorkspaceEntityManager by overriding all the db-executing methods (this
PR only overrides some as a POC, the rest will be done in the next PR).
Our custom repositories call entity managers under the hood to interact
with the db so this solves the repositories case too.
This is still behind the feature flag IsPermissionsV2Enabled.

In the next PR
- finish overriding all the methods required in WorkspaceEntityManager
- add tests

packages/twenty-server/src/modules/calendar/calendar-event-import-manager/services/calendar-save-events.service.ts

@@ -6,6 +6,7 @@ import { InjectMessageQueue } from 'src/engine/core-modules/message-queue/decora
 import { MessageQueue } from 'src/engine/core-modules/message-queue/message-queue.constants';
 import { MessageQueueService } from 'src/engine/core-modules/message-queue/services/message-queue.service';
 import { FieldActorSource } from 'src/engine/metadata-modules/field-metadata/composite-types/actor.composite-type';
+import { WorkspaceEntityManager } from 'src/engine/twenty-orm/entity-manager/workspace-entity-manager';
 import { TwentyORMManager } from 'src/engine/twenty-orm/twenty-orm.manager';
 import { injectIdsInCalendarEvents } from 'src/modules/calendar/calendar-event-import-manager/utils/inject-ids-in-calendar-events.util';
 import { CalendarEventParticipantService } from 'src/modules/calendar/calendar-event-participant-manager/services/calendar-event-participant.service';
@@ -113,71 +114,73 @@ export class CalendarSaveEventsService {
 
     const workspaceDataSource = await this.twentyORMManager.getDatasource();
 
-    await workspaceDataSource?.transaction(async (transactionManager) => {
-      await calendarEventRepository.save(
-        eventsToSave.map(
-          (calendarEvent) =>
-            ({
-              id: calendarEvent.id,
-              iCalUID: calendarEvent.iCalUID,
-              title: calendarEvent.title,
-              description: calendarEvent.description,
-              startsAt: calendarEvent.startsAt,
-              endsAt: calendarEvent.endsAt,
-              location: calendarEvent.location,
-              isFullDay: calendarEvent.isFullDay,
-              isCanceled: calendarEvent.isCanceled,
-              conferenceSolution: calendarEvent.conferenceSolution,
-              conferenceLink: {
-                primaryLinkLabel: calendarEvent.conferenceLinkLabel,
-                primaryLinkUrl: calendarEvent.conferenceLinkUrl,
-              },
-              externalCreatedAt: calendarEvent.externalCreatedAt,
-              externalUpdatedAt: calendarEvent.externalUpdatedAt,
-            }) satisfies DeepPartial<CalendarEventWorkspaceEntity>,
-        ),
-        {},
-        transactionManager,
-      );
+    await workspaceDataSource?.transaction(
+      async (transactionManager: WorkspaceEntityManager) => {
+        await calendarEventRepository.save(
+          eventsToSave.map(
+            (calendarEvent) =>
+              ({
+                id: calendarEvent.id,
+                iCalUID: calendarEvent.iCalUID,
+                title: calendarEvent.title,
+                description: calendarEvent.description,
+                startsAt: calendarEvent.startsAt,
+                endsAt: calendarEvent.endsAt,
+                location: calendarEvent.location,
+                isFullDay: calendarEvent.isFullDay,
+                isCanceled: calendarEvent.isCanceled,
+                conferenceSolution: calendarEvent.conferenceSolution,
+                conferenceLink: {
+                  primaryLinkLabel: calendarEvent.conferenceLinkLabel,
+                  primaryLinkUrl: calendarEvent.conferenceLinkUrl,
+                },
+                externalCreatedAt: calendarEvent.externalCreatedAt,
+                externalUpdatedAt: calendarEvent.externalUpdatedAt,
+              }) satisfies DeepPartial<CalendarEventWorkspaceEntity>,
+          ),
+          {},
+          transactionManager,
+        );
 
-      await calendarEventRepository.save(
-        eventsToUpdate.map(
-          (calendarEvent) =>
-            ({
-              id: calendarEvent.id,
-              iCalUID: calendarEvent.iCalUID,
-              title: calendarEvent.title,
-              description: calendarEvent.description,
-              startsAt: calendarEvent.startsAt,
-              endsAt: calendarEvent.endsAt,
-              location: calendarEvent.location,
-              isFullDay: calendarEvent.isFullDay,
-              isCanceled: calendarEvent.isCanceled,
-              conferenceSolution: calendarEvent.conferenceSolution,
-              conferenceLink: {
-                primaryLinkLabel: calendarEvent.conferenceLinkLabel,
-                primaryLinkUrl: calendarEvent.conferenceLinkUrl,
-              },
-              externalCreatedAt: calendarEvent.externalCreatedAt,
-              externalUpdatedAt: calendarEvent.externalUpdatedAt,
-            }) satisfies DeepPartial<CalendarEventWorkspaceEntity>,
-        ),
-        {},
-        transactionManager,
-      );
+        await calendarEventRepository.save(
+          eventsToUpdate.map(
+            (calendarEvent) =>
+              ({
+                id: calendarEvent.id,
+                iCalUID: calendarEvent.iCalUID,
+                title: calendarEvent.title,
+                description: calendarEvent.description,
+                startsAt: calendarEvent.startsAt,
+                endsAt: calendarEvent.endsAt,
+                location: calendarEvent.location,
+                isFullDay: calendarEvent.isFullDay,
+                isCanceled: calendarEvent.isCanceled,
+                conferenceSolution: calendarEvent.conferenceSolution,
+                conferenceLink: {
+                  primaryLinkLabel: calendarEvent.conferenceLinkLabel,
+                  primaryLinkUrl: calendarEvent.conferenceLinkUrl,
+                },
+                externalCreatedAt: calendarEvent.externalCreatedAt,
+                externalUpdatedAt: calendarEvent.externalUpdatedAt,
+              }) satisfies DeepPartial<CalendarEventWorkspaceEntity>,
+          ),
+          {},
+          transactionManager,
+        );
 
-      await calendarChannelEventAssociationRepository.save(
-        calendarChannelEventAssociationsToSave,
-        {},
-        transactionManager,
-      );
+        await calendarChannelEventAssociationRepository.save(
+          calendarChannelEventAssociationsToSave,
+          {},
+          transactionManager,
+        );
 
-      await this.calendarEventParticipantService.upsertAndDeleteCalendarEventParticipants(
-        participantsToSave,
-        participantsToUpdate,
-        transactionManager,
-      );
-    });
+        await this.calendarEventParticipantService.upsertAndDeleteCalendarEventParticipants(
+          participantsToSave,
+          participantsToUpdate,
+          transactionManager,
+        );
+      },
+    );
 
     if (calendarChannel.isContactAutoCreationEnabled) {
       await this.messageQueueService.add<CreateCompanyAndContactJobData>(

packages/twenty-server/src/modules/calendar/calendar-event-participant-manager/services/calendar-event-participant.service.ts

@@ -4,6 +4,7 @@ import { isDefined } from 'class-validator';
 import differenceWith from 'lodash.differencewith';
 import { Any } from 'typeorm';
 
+import { WorkspaceEntityManager } from 'src/engine/twenty-orm/entity-manager/workspace-entity-manager';
 import { TwentyORMManager } from 'src/engine/twenty-orm/twenty-orm.manager';
 import { CalendarEventParticipantWorkspaceEntity } from 'src/modules/calendar/common/standard-objects/calendar-event-participant.workspace-entity';
 import { CalendarEventParticipantWithCalendarEventId } from 'src/modules/calendar/common/types/calendar-event';
@@ -19,7 +20,7 @@ export class CalendarEventParticipantService {
   public async upsertAndDeleteCalendarEventParticipants(
     participantsToSave: CalendarEventParticipantWithCalendarEventId[],
     participantsToUpdate: CalendarEventParticipantWithCalendarEventId[],
-    transactionManager?: any,
+    transactionManager?: WorkspaceEntityManager,
   ): Promise<void> {
     const calendarEventParticipantRepository =
       await this.twentyORMManager.getRepository<CalendarEventParticipantWorkspaceEntity>(