feat: enforce user roles

enforces user admin role requirement for
- creating / deleting / setting role for organization users
- creating / deleting / setting role for project users
- updating project name
- deleting project

hides action elements based on role for
- admin console
- team settings if team is only visible through project membership
- add project tile if not team admin
- project name text editor if not team / project admin
- add redirect from team page if settings only visible through project
  membership
- add redirect from admin console if not org admin

role enforcement is handled on the api side through a custom GraphQL
directive `hasRole`. on the client side, role information is fetched in
the TopNavbar's `me` query and stored in the `UserContext`.

there is a custom hook, `useCurrentUser`, that provides a user object
with two functions, `isVisibile` & `isAdmin` which is used to check
roles in order to render/hide relevant UI elements.

internal/db/query/project.sql

@@ -8,10 +8,7 @@ SELECT * FROM project WHERE team_id = $1;
 SELECT * FROM project WHERE project_id = $1;
 
 -- name: CreateProject :one
-INSERT INTO project(owner, team_id, created_at, name) VALUES ($1, $2, $3, $4) RETURNING *;
-
--- name: SetProjectOwner :one
-UPDATE project SET owner = $2 WHERE project_id = $1 RETURNING *;
+INSERT INTO project(team_id, created_at, name) VALUES ($1, $2, $3) RETURNING *;
 
 -- name: UpdateProjectNameByID :one
 UPDATE project SET name = $2 WHERE project_id = $1 RETURNING *;
@@ -23,7 +20,7 @@ DELETE FROM project WHERE project_id = $1;
 SELECT * FROM project_member WHERE project_id = $1;
 
 -- name: GetRoleForProjectMemberByUserID :one
-SELECT code, role.name FROM project_member INNER JOIN role ON role.code = project_member.role_code 
+SELECT code, role.name FROM project_member INNER JOIN role ON role.code = project_member.role_code
 WHERE user_id = $1 AND project_id = $2;
 
 -- name: CreateProjectMember :one
@@ -37,14 +34,19 @@ DELETE FROM project_member WHERE user_id = $1 AND project_id = $2;
 UPDATE project_member SET role_code = $3 WHERE project_id = $1 AND user_id = $2
   RETURNING *;
 
--- name: GetOwnedTeamProjectsForUserID :many
-SELECT project_id FROM project WHERE owner = $1 AND team_id = $2;
-
--- name: GetOwnedProjectsForUserID :many
-SELECT * FROM project WHERE owner = $1;
+-- name: GetProjectRolesForUserID :many
+SELECT project_id, role_code FROM project_member WHERE user_id = $1;
 
 -- name: GetMemberProjectIDsForUserID :many
 SELECT project_id FROM project_member WHERE user_id = $1;
 
--- name: UpdateProjectOwnerByOwnerID :many
-UPDATE project SET owner = $2 WHERE owner = $1 RETURNING project_id;
+-- name: GetAllVisibleProjectsForUserID :many
+SELECT project.* FROM project LEFT JOIN
+ project_member ON project_member.project_id = project.project_id WHERE project_member.user_id = $1;
+
+-- name: GetUserRolesForProject :one
+SELECT p.team_id, COALESCE(tm.role_code, '') AS team_role, COALESCE(pm.role_code, '') AS project_role
+  FROM project AS p
+  LEFT JOIN project_member AS pm ON pm.project_id = p.project_id AND pm.user_id = $1
+  LEFT JOIN team_member AS tm ON tm.team_id = p.team_id AND tm.user_id = $1
+  WHERE p.project_id = $2;

internal/db/query/team.sql

@@ -5,7 +5,7 @@ SELECT * FROM team;
 SELECT * FROM team WHERE team_id = $1;
 
 -- name: CreateTeam :one
-INSERT INTO team (organization_id, created_at, name, owner) VALUES ($1, $2, $3, $4) RETURNING *;
+INSERT INTO team (organization_id, created_at, name) VALUES ($1, $2, $3) RETURNING *;
 
 -- name: DeleteTeamByID :exec
 DELETE FROM team WHERE team_id = $1;
@@ -13,14 +13,15 @@ DELETE FROM team WHERE team_id = $1;
 -- name: GetTeamsForOrganization :many
 SELECT * FROM team WHERE organization_id = $1;
 
--- name: SetTeamOwner :one
-UPDATE team SET owner = $2 WHERE team_id = $1 RETURNING *;
-
--- name: GetOwnedTeamsForUserID :many
-SELECT * FROM team WHERE owner = $1;
-
 -- name: GetMemberTeamIDsForUserID :many
 SELECT team_id FROM team_member WHERE user_id = $1;
 
--- name: UpdateTeamOwnerByOwnerID :many
-UPDATE team SET owner = $2 WHERE owner = $1 RETURNING team_id;
+-- name: GetTeamRoleForUserID :one
+SELECT team_id, role_code FROM team_member WHERE user_id = $1 AND team_id = $2;
+
+-- name: GetTeamRolesForUserID :many
+SELECT team_id, role_code FROM team_member WHERE user_id = $1;
+
+-- name: GetTeamsForUserIDWhereAdmin :many
+SELECT team.* FROM team_member INNER JOIN team
+  ON team.team_id = team_member.team_id  WHERE (role_code = 'admin' OR role_code = 'member') AND user_id = $1;