Moheeb Zara
b8440e9c9e
New React cache()-wrapped hasPermission(uid,sid,perm): identical checks resolve once per server render, so the (app) layout's nav-permission resolution and a page's checks for the same perm (door.manage, forms.manage) no longer double-round-trip user_has_permission. Pure dedupe -- semantics unchanged, permission logic stays in SQL/RLS. Adopted in the layout + members page.
17 lines
786 B
TypeScript
17 lines
786 B
TypeScript
import { cache } from 'react'
|
|
import { createClient } from '@/lib/supabase/server'
|
|
|
|
// Request-scoped memoized permission check. The same (uid, sid, perm) is
|
|
// resolved at most once per server render, so the layout and the page it
|
|
// renders no longer double-round-trip the `user_has_permission` RPC for
|
|
// overlapping permissions (e.g. door.manage / forms.manage). Semantics are
|
|
// identical to calling the RPC directly -- this only dedupes, it does NOT
|
|
// reimplement permission logic (that stays in the SQL function + RLS).
|
|
export const hasPermission = cache(
|
|
async (uid: string, sid: string, perm: string): Promise<boolean> => {
|
|
const supabase = await createClient()
|
|
const { data } = await supabase.rpc('user_has_permission', { uid, sid, perm })
|
|
return !!data
|
|
},
|
|
)
|