Josep Piguillem
8bf7d47b2e
A project member can be a GUEST. In a private project a guest only sees the tickets they take part in (opened, assigned or followed): every other ticket answers 404, also in my work, realtime changes, blockers and linked tickets, and project-wide views (activity, statistics, dashboard, releases, sprints, epics, trash) answer 403. Guests open tickets without assigning or planning them, and comment, attach, follow and vote on their own; they change nothing else. In a public project they see what anyone does. The web gives them only Tablero, Lista and Miembros and loads none of the project-wide data. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
37 lines
1.2 KiB
TypeScript
37 lines
1.2 KiB
TypeScript
import { IQueryHandler, QueryHandler } from '@nestjs/cqrs';
|
|
import { ReleaseProgressReadModel } from '@task-stream/api/tracker/domain';
|
|
import { FindIssuesRepository } from '../ports/find-issues.repository';
|
|
import { FindReleasesRepository } from '../ports/find-releases.repository';
|
|
import { ReadAccess } from './read-access';
|
|
import { GetReleaseProgressQuery } from './get-release-progress.query';
|
|
|
|
@QueryHandler(GetReleaseProgressQuery)
|
|
export class GetReleaseProgressQueryHandler
|
|
implements IQueryHandler<GetReleaseProgressQuery, ReleaseProgressReadModel>
|
|
{
|
|
constructor(
|
|
private readonly findReleases: FindReleasesRepository,
|
|
private readonly findIssues: FindIssuesRepository,
|
|
private readonly access: ReadAccess,
|
|
) {}
|
|
|
|
async execute(
|
|
query: GetReleaseProgressQuery,
|
|
): Promise<ReleaseProgressReadModel> {
|
|
const release = this.access.assertFound(
|
|
await this.findReleases.findById(query.releaseId),
|
|
'Release',
|
|
query.releaseId,
|
|
);
|
|
await this.access.assertSeesWholeProject(
|
|
release.projectId,
|
|
query.viewerId,
|
|
{
|
|
entity: 'Release',
|
|
ref: query.releaseId,
|
|
},
|
|
);
|
|
return this.findIssues.releaseProgress(release.id);
|
|
}
|
|
}
|