[_] feat: workspace role guard

src/modules/workspaces/domains/workspace-team-user.domain.ts

@@ -0,0 +1,48 @@
+import { User } from '../../user/user.domain';
+import { WorkspaceTeam } from './workspace-team.domain';
+import { WorkspaceTeamUserAttributes } from '../attributes/workspace-team-users.attributes';
+
+export class WorkspaceTeamUser implements WorkspaceTeamUserAttributes {
+  id: string;
+  teamId: string;
+  memberId: string;
+  team?: WorkspaceTeam;
+  createdAt: Date;
+  updatedAt: Date;
+
+  constructor({
+    id,
+    teamId,
+    memberId,
+    team,
+    createdAt,
+    updatedAt,
+  }: WorkspaceTeamUserAttributes & { team?: WorkspaceTeam }) {
+    this.id = id;
+    this.teamId = teamId;
+    this.memberId = memberId;
+    this.team = team;
+    this.createdAt = createdAt;
+    this.updatedAt = updatedAt;
+  }
+
+  static build(
+    workspaceTeamUser: WorkspaceTeamUserAttributes & {
+      team?: WorkspaceTeam;
+      member?: User;
+    },
+  ): WorkspaceTeamUser {
+    return new WorkspaceTeamUser(workspaceTeamUser);
+  }
+
+  toJSON() {
+    return {
+      id: this.id,
+      teamId: this.teamId,
+      memberId: this.memberId,
+      team: this.team ? this.team.toJSON() : undefined,
+      createdAt: this.createdAt,
+      updatedAt: this.updatedAt,
+    };
+  }
+}

src/modules/workspaces/domains/workspace-team.domain.ts

@@ -1,3 +1,4 @@
+import { User } from '../../user/user.domain';
 import { WorkspaceTeamAttributes } from '../attributes/workspace-team.attributes';
 
 export class WorkspaceTeam implements WorkspaceTeamAttributes {
@@ -24,6 +25,10 @@ export class WorkspaceTeam implements WorkspaceTeamAttributes {
     this.updatedAt = updatedAt;
   }
 
+  isUserManager(user: User) {
+    return user.uuid === this.managerId;
+  }
+
   static build(teamAttributes: WorkspaceTeamAttributes): WorkspaceTeam {
     return new WorkspaceTeam(teamAttributes);
   }

src/modules/workspaces/domains/workspace-user.domain.ts

@@ -0,0 +1,57 @@
+import { WorkspaceUserAttributes } from '../attributes/workspace-users.attributes';
+
+export class WorkspaceUser implements WorkspaceUserAttributes {
+  id: string;
+  memberId: string;
+  key: string;
+  workspaceId: string;
+  spaceLimit: bigint;
+  driveUsage: bigint;
+  backupsUsage: bigint;
+  deactivated: boolean;
+  createdAt: Date;
+  updatedAt: Date;
+
+  constructor({
+    id,
+    memberId,
+    key,
+    workspaceId,
+    spaceLimit,
+    driveUsage,
+    backupsUsage,
+    deactivated,
+    createdAt,
+    updatedAt,
+  }: WorkspaceUserAttributes) {
+    this.id = id;
+    this.memberId = memberId;
+    this.key = key;
+    this.workspaceId = workspaceId;
+    this.spaceLimit = spaceLimit;
+    this.driveUsage = driveUsage;
+    this.backupsUsage = backupsUsage;
+    this.deactivated = deactivated;
+    this.createdAt = createdAt;
+    this.updatedAt = updatedAt;
+  }
+
+  static build(workspaceUser: WorkspaceUserAttributes): WorkspaceUser {
+    return new WorkspaceUser(workspaceUser);
+  }
+
+  toJSON() {
+    return {
+      id: this.id,
+      memberId: this.memberId,
+      key: this.key,
+      workspaceId: this.workspaceId,
+      spaceLimit: this.spaceLimit.toString(),
+      driveUsage: this.driveUsage.toString(),
+      backupsUsage: this.backupsUsage.toString(),
+      deactivated: this.deactivated,
+      createdAt: this.createdAt,
+      updatedAt: this.updatedAt,
+    };
+  }
+}

src/modules/workspaces/domains/workspaces.domain.ts

@@ -1,3 +1,4 @@
+import { User } from '../../user/user.domain';
 import { WorkspaceAttributes } from '../attributes/workspace.attributes';
 
 export class Workspace implements WorkspaceAttributes {
@@ -40,6 +41,10 @@ export class Workspace implements WorkspaceAttributes {
     return new Workspace(user);
   }
 
+  isUserOwner(user: User) {
+    return user.uuid === this.ownerId;
+  }
+
   toJSON() {
     return {
       id: this.id,

src/modules/workspaces/guards/workspace-required-access.decorator.ts

@@ -0,0 +1,29 @@
+import { SetMetadata } from '@nestjs/common';
+
+export enum WorkspaceRole {
+  OWNER = 'owner',
+  MANAGER = 'manager',
+  MEMBER = 'member',
+}
+
+export enum AccessContext {
+  WORKSPACE = 'workspace',
+  TEAM = 'team',
+}
+
+export const WorkspaceContextIdFieldName = {
+  [AccessContext.WORKSPACE]: 'workspaceId',
+  [AccessContext.TEAM]: 'teamId',
+};
+
+export interface AccessOptions {
+  accessContext: AccessContext;
+  requiredRole: WorkspaceRole;
+  idSource: 'params' | 'body' | 'query';
+}
+
+export const WorkspaceRequiredAccess = (
+  accessContext: AccessContext,
+  requiredRole: WorkspaceRole,
+  idSource: 'params' | 'body' | 'query' = 'params',
+) => SetMetadata('accessControl', { accessContext, requiredRole, idSource });