e64f6f8569
enforces user admin role requirement for - creating / deleting / setting role for organization users - creating / deleting / setting role for project users - updating project name - deleting project hides action elements based on role for - admin console - team settings if team is only visible through project membership - add project tile if not team admin - project name text editor if not team / project admin - add redirect from team page if settings only visible through project membership - add redirect from admin console if not org admin role enforcement is handled on the api side through a custom GraphQL directive `hasRole`. on the client side, role information is fetched in the TopNavbar's `me` query and stored in the `UserContext`. there is a custom hook, `useCurrentUser`, that provides a user object with two functions, `isVisibile` & `isAdmin` which is used to check roles in order to render/hide relevant UI elements.
28 lines
893 B
SQL
28 lines
893 B
SQL
-- name: GetAllTeams :many
|
|
SELECT * FROM team;
|
|
|
|
-- name: GetTeamByID :one
|
|
SELECT * FROM team WHERE team_id = $1;
|
|
|
|
-- name: CreateTeam :one
|
|
INSERT INTO team (organization_id, created_at, name) VALUES ($1, $2, $3) RETURNING *;
|
|
|
|
-- name: DeleteTeamByID :exec
|
|
DELETE FROM team WHERE team_id = $1;
|
|
|
|
-- name: GetTeamsForOrganization :many
|
|
SELECT * FROM team WHERE organization_id = $1;
|
|
|
|
-- name: GetMemberTeamIDsForUserID :many
|
|
SELECT team_id FROM team_member WHERE user_id = $1;
|
|
|
|
-- name: GetTeamRoleForUserID :one
|
|
SELECT team_id, role_code FROM team_member WHERE user_id = $1 AND team_id = $2;
|
|
|
|
-- name: GetTeamRolesForUserID :many
|
|
SELECT team_id, role_code FROM team_member WHERE user_id = $1;
|
|
|
|
-- name: GetTeamsForUserIDWhereAdmin :many
|
|
SELECT team.* FROM team_member INNER JOIN team
|
|
ON team.team_id = team_member.team_id WHERE (role_code = 'admin' OR role_code = 'member') AND user_id = $1;
|