import { ExecutionContext, ForbiddenException, Injectable, NotFoundException, } from '@nestjs/common'; import { GqlExecutionContext } from '@nestjs/graphql'; import { subject } from '@casl/ability'; import { IAbilityHandler } from 'src/ability/interfaces/ability-handler.interface'; import { PrismaService } from 'src/database/prisma.service'; import { AbilityAction } from 'src/ability/ability.action'; import { AppAbility } from 'src/ability/ability.factory'; import { WorkspaceWhereInput } from 'src/core/@generated/workspace/workspace-where.input'; import { assert } from 'src/utils/assert'; import { getRequest } from 'src/utils/extract-request'; class WorksapceArgs { where?: WorkspaceWhereInput; } @Injectable() export class ManageWorkspaceAbilityHandler implements IAbilityHandler { async handle(ability: AppAbility) { return ability.can(AbilityAction.Manage, 'Workspace'); } } @Injectable() export class ReadWorkspaceAbilityHandler implements IAbilityHandler { handle(ability: AppAbility) { return ability.can(AbilityAction.Read, 'Workspace'); } } @Injectable() export class CreateWorkspaceAbilityHandler implements IAbilityHandler { handle(ability: AppAbility) { return ability.can(AbilityAction.Create, 'Workspace'); } } @Injectable() export class UpdateWorkspaceAbilityHandler implements IAbilityHandler { constructor(private readonly prismaService: PrismaService) {} async handle(ability: AppAbility, context: ExecutionContext) { const request = getRequest(context); assert(request.user.workspace.id, '', ForbiddenException); const workspace = await this.prismaService.workspace.findUnique({ where: { id: request.user.workspace.id }, }); assert(workspace, '', NotFoundException); return ability.can(AbilityAction.Update, subject('Workspace', workspace)); } } @Injectable() export class DeleteWorkspaceAbilityHandler implements IAbilityHandler { constructor(private readonly prismaService: PrismaService) {} async handle(ability: AppAbility, context: ExecutionContext) { const gqlContext = GqlExecutionContext.create(context); const args = gqlContext.getArgs(); const workspace = await this.prismaService.workspace.findFirst({ where: args.where, }); assert(workspace, '', NotFoundException); return ability.can(AbilityAction.Delete, subject('Workspace', workspace)); } }