ref: project structure

2026-08-19 23:25:08 +07:00
parent 05a93cfc09
commit a1fe31cf70
155 changed files with 3339 additions and 1007 deletions
@@ -0,0 +1,71 @@
+using mws.backend.dotnet.application.Common;
+using mws.backend.dotnet.application.Permissions;
+using mws.backend.dotnet.domain.Documents;
+using mws.backend.dotnet.domain.Projects;
+
+namespace mws.backend.dotnet.application.Documents;
+
+internal static class DocumentAccess
+{
+    public static async Task EnsureDocumentPermissionAsync(
+        IUnitOfWork uow, Guid userId, Guid projectId, PermissionAction action, CancellationToken ct)
+    {
+        var member = await uow.Projects.GetMemberAsync(projectId, userId, ct)
+            ?? throw new NotFoundException("Project not found");
+
+        if (!await HasDocumentPermissionAsync(uow, member, action, ct))
+        {
+            throw new ForbiddenException("You do not have permission to access documents in this project");
+        }
+    }
+
+    public static async Task<bool> HasDocumentPermissionAsync(
+        IUnitOfWork uow, ProjectMember member, PermissionAction action, CancellationToken ct)
+    {
+        if (member.Role == MemberRole.Owner)
+        {
+            return true;
+        }
+
+        var permission = await uow.Projects.GetMemberPermissionAsync(member.ProjectId, member.UserId, ProjectPermissionScreens.Documents, ct);
+
+        return action switch
+        {
+            PermissionAction.View => permission?.CanView ?? false,
+            PermissionAction.Create => permission?.CanCreate ?? false,
+            PermissionAction.Edit => permission?.CanEdit ?? false,
+            PermissionAction.Delete => permission?.CanDelete ?? false,
+            _ => false,
+        };
+    }
+
+    public static async Task<Document> GetDocumentForUserAsync(IUnitOfWork uow, Guid userId, Guid documentId, CancellationToken ct)
+    {
+        var doc = await uow.Documents.GetByIdAsync(documentId, ct)
+            ?? throw new NotFoundException("Document not found");
+
+        var member = await uow.Projects.GetMemberAsync(doc.ProjectId, userId, ct);
+
+        if (member is null)
+        {
+            throw new NotFoundException("Document not found");
+        }
+
+        if (!await HasDocumentPermissionAsync(uow, member, PermissionAction.View, ct))
+        {
+            throw new ForbiddenException("You do not have permission to view this document");
+        }
+
+        return doc;
+    }
+
+    public static async Task DeleteDescendantsAsync(IUnitOfWork uow, Guid parentId, CancellationToken ct)
+    {
+        var children = await uow.Documents.GetChildrenAsync(parentId, ct);
+        foreach (var child in children)
+        {
+            await DeleteDescendantsAsync(uow, child.Id, ct);
+            uow.Documents.Remove(child);
+        }
+    }
+}