63 lines
2.6 KiB
C#
63 lines
2.6 KiB
C#
using MediatR;
|
|
using mws.backend.dotnet.application.Audit;
|
|
using mws.backend.dotnet.application.Common;
|
|
using mws.backend.dotnet.domain.Projects;
|
|
|
|
namespace mws.backend.dotnet.application.Projects;
|
|
|
|
public record UpdateMemberDocumentPermissionsCommand(
|
|
Guid UserId, Guid ProjectId, Guid MemberUserId, UpdateMemberDocumentPermissionsRequest Request) : IRequest<ProjectMemberDto>, IAuditableRequest
|
|
{
|
|
public string Action => "ProjectMember.UpdatePermissions";
|
|
public string EntityType => "ProjectMember";
|
|
public Guid? EntityId => MemberUserId;
|
|
}
|
|
|
|
public class UpdateMemberDocumentPermissionsHandler(IUnitOfWork uow, IAuditContext auditContext)
|
|
: IRequestHandler<UpdateMemberDocumentPermissionsCommand, ProjectMemberDto>
|
|
{
|
|
public async Task<ProjectMemberDto> Handle(UpdateMemberDocumentPermissionsCommand command, CancellationToken ct)
|
|
{
|
|
if (await uow.Projects.GetMemberRoleAsync(command.ProjectId, command.UserId, ct) != MemberRole.Owner)
|
|
{
|
|
throw new ForbiddenException("Only the project owner can change member permissions");
|
|
}
|
|
|
|
var member = await uow.Projects.GetMemberWithUserAsync(command.ProjectId, command.MemberUserId, ct)
|
|
?? throw new NotFoundException("Member not found in project");
|
|
|
|
if (member.Role == MemberRole.Owner)
|
|
{
|
|
throw new BadRequestException("Owner permissions cannot be changed");
|
|
}
|
|
|
|
var permission = await uow.Projects.GetMemberPermissionAsync(command.ProjectId, command.MemberUserId, ProjectPermissionScreens.Documents, ct);
|
|
if (permission is null)
|
|
{
|
|
permission = new ProjectMemberPermission { ProjectId = command.ProjectId, UserId = command.MemberUserId, Screen = ProjectPermissionScreens.Documents };
|
|
uow.Projects.AddMemberPermission(permission);
|
|
}
|
|
|
|
var request = command.Request;
|
|
permission.CanView = request.CanViewDocuments;
|
|
permission.CanCreate = request.CanCreateDocuments;
|
|
permission.CanEdit = request.CanEditDocuments;
|
|
permission.CanDelete = request.CanDeleteDocuments;
|
|
await uow.SaveChangesAsync(ct);
|
|
|
|
auditContext.EntityName = member.User.Username;
|
|
|
|
return new ProjectMemberDto
|
|
{
|
|
UserId = member.UserId,
|
|
Username = member.User.Username,
|
|
DisplayName = member.User.DisplayName,
|
|
Role = member.Role,
|
|
CanViewDocuments = permission.CanView,
|
|
CanCreateDocuments = permission.CanCreate,
|
|
CanEditDocuments = permission.CanEdit,
|
|
CanDeleteDocuments = permission.CanDelete,
|
|
};
|
|
}
|
|
}
|