2024-02-06 16:16:10 +11:00
|
|
|
import { TEAM_MEMBER_ROLE_PERMISSIONS_MAP } from '@documenso/lib/constants/teams';
|
|
|
|
|
import { AppError } from '@documenso/lib/errors/app-error';
|
|
|
|
|
import { prisma } from '@documenso/prisma';
|
|
|
|
|
|
|
|
|
|
import { sendTeamMemberInviteEmail } from './create-team-member-invites';
|
|
|
|
|
|
|
|
|
|
export type ResendTeamMemberInvitationOptions = {
|
|
|
|
|
/**
|
|
|
|
|
* The ID of the user who is initiating this action.
|
|
|
|
|
*/
|
|
|
|
|
userId: number;
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* The name of the user who is initiating this action.
|
|
|
|
|
*/
|
|
|
|
|
userName: string;
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* The ID of the team.
|
|
|
|
|
*/
|
|
|
|
|
teamId: number;
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* The IDs of the invitations to resend.
|
|
|
|
|
*/
|
|
|
|
|
invitationId: number;
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* Resend an email for a given team member invite.
|
|
|
|
|
*/
|
|
|
|
|
export const resendTeamMemberInvitation = async ({
|
|
|
|
|
userId,
|
|
|
|
|
userName,
|
|
|
|
|
teamId,
|
|
|
|
|
invitationId,
|
|
|
|
|
}: ResendTeamMemberInvitationOptions) => {
|
2024-02-22 11:05:49 +00:00
|
|
|
await prisma.$transaction(
|
|
|
|
|
async (tx) => {
|
|
|
|
|
const team = await tx.team.findUniqueOrThrow({
|
|
|
|
|
where: {
|
|
|
|
|
id: teamId,
|
|
|
|
|
members: {
|
|
|
|
|
some: {
|
|
|
|
|
userId,
|
|
|
|
|
role: {
|
|
|
|
|
in: TEAM_MEMBER_ROLE_PERMISSIONS_MAP['MANAGE_TEAM'],
|
|
|
|
|
},
|
2024-02-06 16:16:10 +11:00
|
|
|
},
|
|
|
|
|
},
|
|
|
|
|
},
|
feat: add global settings for teams (#1391)
## Description
This PR introduces global settings for teams. At the moment, it allows
team admins to configure the following:
* The default visibility of the documents uploaded to the team account
* Whether to include the document owner (sender) details when sending
emails to the recipients.
### Include Sender Details
If the Sender Details setting is enabled, the emails sent by the team
will include the sender's name:
> "Example User" on behalf of "Example Team" has invited you to sign
"document.pdf"
Otherwise, the email will say:
> "Example Team" has invited you to sign "document.pdf"
### Default Document Visibility
This new option allows users to set the default visibility for the
documents uploaded to the team account. It can have the following
values:
* Everyone
* Manager and above
* Admins only
If the default document visibility isn't set, the document will be set
to the role of the user who created the document:
* If a user with the "User" role creates a document, the document's
visibility is set to "Everyone".
* Manager role -> "Manager and above"
* Admin role -> "Admins only"
Otherwise, if there is a default document visibility value, it uses that
value.
#### Gotcha
To avoid issues, the `document owner` and the `recipient` can access the
document irrespective of their role. For example:
* If a team member with the role "Member" uploads a document and the
default document visibility is "Admins", only the document owner and
admins can access the document.
* Similar to the other scenarios.
* If an admin uploads a document and the default document visibility is
"Admins", the recipient can access the document.
* The admins have access to all the documents.
* Managers have access to documents with the visibility set to
"Everyone" and "Manager and above"
* Members have access only to the documents with the visibility set to
"Everyone".
## Testing Performed
Tested it locally.
2024-11-08 13:50:49 +02:00
|
|
|
include: {
|
|
|
|
|
teamGlobalSettings: true,
|
|
|
|
|
},
|
2024-02-22 11:05:49 +00:00
|
|
|
});
|
2024-02-06 16:16:10 +11:00
|
|
|
|
2024-02-22 11:05:49 +00:00
|
|
|
if (!team) {
|
2024-11-28 16:05:37 +07:00
|
|
|
throw new AppError('TeamNotFound', { message: 'User is not a valid member of the team.' });
|
2024-02-22 11:05:49 +00:00
|
|
|
}
|
2024-02-06 16:16:10 +11:00
|
|
|
|
2024-02-22 11:05:49 +00:00
|
|
|
const teamMemberInvite = await tx.teamMemberInvite.findUniqueOrThrow({
|
|
|
|
|
where: {
|
|
|
|
|
id: invitationId,
|
|
|
|
|
teamId,
|
|
|
|
|
},
|
|
|
|
|
});
|
2024-02-06 16:16:10 +11:00
|
|
|
|
2024-02-22 11:05:49 +00:00
|
|
|
if (!teamMemberInvite) {
|
2024-11-28 16:05:37 +07:00
|
|
|
throw new AppError('InviteNotFound', { message: 'No invite exists for this user.' });
|
2024-02-22 11:05:49 +00:00
|
|
|
}
|
2024-02-06 16:16:10 +11:00
|
|
|
|
2024-02-22 11:05:49 +00:00
|
|
|
await sendTeamMemberInviteEmail({
|
|
|
|
|
email: teamMemberInvite.email,
|
|
|
|
|
token: teamMemberInvite.token,
|
|
|
|
|
senderName: userName,
|
feat: add global settings for teams (#1391)
## Description
This PR introduces global settings for teams. At the moment, it allows
team admins to configure the following:
* The default visibility of the documents uploaded to the team account
* Whether to include the document owner (sender) details when sending
emails to the recipients.
### Include Sender Details
If the Sender Details setting is enabled, the emails sent by the team
will include the sender's name:
> "Example User" on behalf of "Example Team" has invited you to sign
"document.pdf"
Otherwise, the email will say:
> "Example Team" has invited you to sign "document.pdf"
### Default Document Visibility
This new option allows users to set the default visibility for the
documents uploaded to the team account. It can have the following
values:
* Everyone
* Manager and above
* Admins only
If the default document visibility isn't set, the document will be set
to the role of the user who created the document:
* If a user with the "User" role creates a document, the document's
visibility is set to "Everyone".
* Manager role -> "Manager and above"
* Admin role -> "Admins only"
Otherwise, if there is a default document visibility value, it uses that
value.
#### Gotcha
To avoid issues, the `document owner` and the `recipient` can access the
document irrespective of their role. For example:
* If a team member with the role "Member" uploads a document and the
default document visibility is "Admins", only the document owner and
admins can access the document.
* Similar to the other scenarios.
* If an admin uploads a document and the default document visibility is
"Admins", the recipient can access the document.
* The admins have access to all the documents.
* Managers have access to documents with the visibility set to
"Everyone" and "Manager and above"
* Members have access only to the documents with the visibility set to
"Everyone".
## Testing Performed
Tested it locally.
2024-11-08 13:50:49 +02:00
|
|
|
team,
|
2024-02-22 11:05:49 +00:00
|
|
|
});
|
|
|
|
|
},
|
|
|
|
|
{ timeout: 30_000 },
|
|
|
|
|
);
|
2024-02-06 16:16:10 +11:00
|
|
|
};
|