twenty/server/src/ability/handlers/workspace-member.ability-handler.ts

import {
  ExecutionContext,
  Injectable,
  NotFoundException,
} from '@nestjs/common';
import { GqlExecutionContext } from '@nestjs/graphql';

import { subject } from '@casl/ability';

import { IAbilityHandler } from 'src/ability/interfaces/ability-handler.interface';

import { PrismaService } from 'src/database/prisma.service';
import { AbilityAction } from 'src/ability/ability.action';
import { AppAbility } from 'src/ability/ability.factory';
import { WorkspaceMemberWhereInput } from 'src/core/@generated/workspace-member/workspace-member-where.input';
import { assert } from 'src/utils/assert';

class WorksapceMemberArgs {
  where?: WorkspaceMemberWhereInput;
}

@Injectable()
export class ManageWorkspaceMemberAbilityHandler implements IAbilityHandler {
  async handle(ability: AppAbility) {
    return ability.can(AbilityAction.Manage, 'WorkspaceMember');
  }
}

@Injectable()
export class ReadWorkspaceMemberAbilityHandler implements IAbilityHandler {
  handle(ability: AppAbility) {
    return ability.can(AbilityAction.Read, 'WorkspaceMember');
  }
}

@Injectable()
export class CreateWorkspaceMemberAbilityHandler implements IAbilityHandler {
  handle(ability: AppAbility) {
    return ability.can(AbilityAction.Create, 'WorkspaceMember');
  }
}

@Injectable()
export class UpdateWorkspaceMemberAbilityHandler implements IAbilityHandler {
  constructor(private readonly prismaService: PrismaService) {}

  async handle(ability: AppAbility, context: ExecutionContext) {
    const gqlContext = GqlExecutionContext.create(context);
    const args = gqlContext.getArgs<WorksapceMemberArgs>();
    const workspaceMember = await this.prismaService.workspaceMember.findFirst({
      where: args.where,
    });
    assert(workspaceMember, '', NotFoundException);

    return ability.can(
      AbilityAction.Update,
      subject('WorkspaceMember', workspaceMember),
    );
  }
}

@Injectable()
export class DeleteWorkspaceMemberAbilityHandler implements IAbilityHandler {
  constructor(private readonly prismaService: PrismaService) {}

  async handle(ability: AppAbility, context: ExecutionContext) {
    const gqlContext = GqlExecutionContext.create(context);
    const args = gqlContext.getArgs<WorksapceMemberArgs>();
    const workspaceMember = await this.prismaService.workspaceMember.findFirst({
      where: args.where,
    });
    assert(workspaceMember, '', NotFoundException);

    return ability.can(
      AbilityAction.Delete,
      subject('WorkspaceMember', workspaceMember),
    );
  }
}