Moheeb ZaraandClaude Opus 4.8
dbaae4851b
908-line lib/actions/classes.ts → lib/actions/classes/{definitions,sessions,
signups,instructor}.ts ('use server') + _guard.ts (requirePermission/Gate) +
_forms.ts (findSpaceForm/hasFormSubmission) + a plain index.ts barrel. All 14
actions preserved verbatim; lib/actions/index.ts unchanged. Helpers stay
internal (not re-exported). tsc 0, tests green.
Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
36 lines
1006 B
TypeScript
36 lines
1006 B
TypeScript
import { createClient } from '@/lib/supabase/server'
|
|
import {
|
|
requireMember,
|
|
type Member,
|
|
type ServerSupabase,
|
|
} from '@/lib/auth-helpers'
|
|
|
|
export type Gate =
|
|
| { ok: true; supabase: ServerSupabase; member: Member }
|
|
| { ok: false; error: string }
|
|
|
|
export async function requirePermission(
|
|
perm: 'classes.manage' | 'classes.instruct',
|
|
): Promise<Gate> {
|
|
const supabase = await createClient()
|
|
const auth = await requireMember(supabase)
|
|
if (!auth.ok) return { ok: false, error: auth.error }
|
|
const { member } = auth
|
|
const { data: allowed, error } = await supabase.rpc('user_has_permission', {
|
|
uid: member.user_id as string,
|
|
sid: member.space_id,
|
|
perm,
|
|
})
|
|
if (error) return { ok: false, error: error.message }
|
|
if (!allowed) {
|
|
return {
|
|
ok: false,
|
|
error:
|
|
perm === 'classes.manage'
|
|
? 'You do not have permission to manage classes'
|
|
: 'You do not have permission to run classes',
|
|
}
|
|
}
|
|
return { ok: true, supabase, member }
|
|
}
|