АРХ - МЕЖПРОЕКТНАЯ КОММУНИКАЦИЯ: managedBy split Operational Core

plane-src/apps/api/plane/app/views/project/member.py

@@ -9,6 +9,10 @@ from django.db.models import Min
 
 # Module imports
 from .base import BaseViewSet, BaseAPIView
+from plane.authentication.nodedc_workspace_policy import (
+    is_nodedc_launcher_managed_workspace,
+    nodedc_launcher_managed_workspace_response,
+)
 from plane.app.serializers import (
     ProjectMemberSerializer,
     ProjectMemberAdminSerializer,
@@ -45,6 +49,9 @@ class ProjectMemberViewSet(BaseViewSet):
 
     @allow_permission([ROLE.ADMIN])
     def create(self, request, slug, project_id):
+        if is_nodedc_launcher_managed_workspace(request.user, slug):
+            return Response(nodedc_launcher_managed_workspace_response(), status=status.HTTP_403_FORBIDDEN)
+
         # Get the list of members to be added to the project and their roles i.e. the user_id and the role
         members = request.data.get("members", [])
 
@@ -204,6 +211,9 @@ class ProjectMemberViewSet(BaseViewSet):
 
     @allow_permission([ROLE.ADMIN, ROLE.MEMBER, ROLE.GUEST])
     def partial_update(self, request, slug, project_id, pk):
+        if is_nodedc_launcher_managed_workspace(request.user, slug):
+            return Response(nodedc_launcher_managed_workspace_response(), status=status.HTTP_403_FORBIDDEN)
+
         project_member = ProjectMember.objects.get(pk=pk, workspace__slug=slug, project_id=project_id, is_active=True)
 
         # Fetch the workspace role of the project member
@@ -266,6 +276,9 @@ class ProjectMemberViewSet(BaseViewSet):
 
     @allow_permission([ROLE.ADMIN])
     def destroy(self, request, slug, project_id, pk):
+        if is_nodedc_launcher_managed_workspace(request.user, slug):
+            return Response(nodedc_launcher_managed_workspace_response(), status=status.HTTP_403_FORBIDDEN)
+
         project_member = ProjectMember.objects.get(
             workspace__slug=slug,
             project_id=project_id,
@@ -300,6 +313,9 @@ class ProjectMemberViewSet(BaseViewSet):
 
     @allow_permission([ROLE.ADMIN, ROLE.MEMBER, ROLE.GUEST])
     def leave(self, request, slug, project_id):
+        if is_nodedc_launcher_managed_workspace(request.user, slug):
+            return Response(nodedc_launcher_managed_workspace_response(), status=status.HTTP_403_FORBIDDEN)
+
         project_member = ProjectMember.objects.get(
             workspace__slug=slug,
             project_id=project_id,

plane-src/apps/api/plane/app/views/workspace/base.py

@@ -257,7 +257,8 @@ class UserWorkSpacesEndpoint(BaseAPIView):
 
 class NodeDCWorkspaceCreationPolicyEndpoint(BaseAPIView):
     def get(self, request):
-        return Response(get_nodedc_workspace_creation_policy(request.user), status=status.HTTP_200_OK)
+        workspace_slug = request.query_params.get("workspace_slug") or request.query_params.get("workspaceSlug")
+        return Response(get_nodedc_workspace_creation_policy(request.user, workspace_slug=workspace_slug), status=status.HTTP_200_OK)
 
 
 class WorkSpaceAvailabilityCheckEndpoint(BaseAPIView):

plane-src/apps/api/plane/app/views/workspace/invite.py

@@ -20,6 +20,10 @@ from rest_framework.response import Response
 
 # Module imports
 from plane.app.permissions import WorkSpaceAdminPermission
+from plane.authentication.nodedc_workspace_policy import (
+    is_nodedc_launcher_managed_workspace,
+    nodedc_launcher_managed_workspace_response,
+)
 from plane.app.serializers import (
     WorkSpaceMemberInviteSerializer,
     WorkSpaceMemberSerializer,
@@ -52,6 +56,9 @@ class WorkspaceInvitationsViewset(BaseViewSet):
         )
 
     def create(self, request, slug):
+        if is_nodedc_launcher_managed_workspace(request.user, slug):
+            return Response(nodedc_launcher_managed_workspace_response(), status=status.HTTP_403_FORBIDDEN)
+
         emails = request.data.get("emails", [])
         # Check if email is provided
         if not emails:
@@ -154,6 +161,9 @@ class WorkspaceInvitationsViewset(BaseViewSet):
         return Response({"message": "Emails sent successfully"}, status=status.HTTP_200_OK)
 
     def destroy(self, request, slug, pk):
+        if is_nodedc_launcher_managed_workspace(request.user, slug):
+            return Response(nodedc_launcher_managed_workspace_response(), status=status.HTTP_403_FORBIDDEN)
+
         workspace_member_invite = WorkspaceMemberInvite.objects.get(pk=pk, workspace__slug=slug)
         workspace_member_invite.delete()
         return Response(status=status.HTTP_204_NO_CONTENT)

plane-src/apps/api/plane/app/views/workspace/member.py

@@ -12,6 +12,10 @@ from rest_framework import status
 from rest_framework.response import Response
 
 from plane.app.permissions import WorkspaceEntityPermission, allow_permission, ROLE
+from plane.authentication.nodedc_workspace_policy import (
+    is_nodedc_launcher_managed_workspace,
+    nodedc_launcher_managed_workspace_response,
+)
 
 # Module imports
 from plane.app.serializers import (
@@ -75,6 +79,9 @@ class WorkSpaceMemberViewSet(BaseViewSet):
 
     @allow_permission(allowed_roles=[ROLE.ADMIN], level="WORKSPACE")
     def partial_update(self, request, slug, pk):
+        if is_nodedc_launcher_managed_workspace(request.user, slug):
+            return Response(nodedc_launcher_managed_workspace_response(), status=status.HTTP_403_FORBIDDEN)
+
         workspace_member = WorkspaceMember.objects.get(
             pk=pk, workspace__slug=slug, member__is_bot=False, is_active=True
         )
@@ -97,6 +104,9 @@ class WorkSpaceMemberViewSet(BaseViewSet):
 
     @allow_permission(allowed_roles=[ROLE.ADMIN], level="WORKSPACE")
     def destroy(self, request, slug, pk):
+        if is_nodedc_launcher_managed_workspace(request.user, slug):
+            return Response(nodedc_launcher_managed_workspace_response(), status=status.HTTP_403_FORBIDDEN)
+
         # Check the user role who is deleting the user
         workspace_member = WorkspaceMember.objects.get(
             workspace__slug=slug, pk=pk, member__is_bot=False, is_active=True
@@ -160,6 +170,9 @@ class WorkSpaceMemberViewSet(BaseViewSet):
     @invalidate_cache(path="api/users/me/workspaces/", user=False, multiple=True)
     @allow_permission(allowed_roles=[ROLE.ADMIN, ROLE.MEMBER, ROLE.GUEST], level="WORKSPACE")
     def leave(self, request, slug):
+        if is_nodedc_launcher_managed_workspace(request.user, slug):
+            return Response(nodedc_launcher_managed_workspace_response(), status=status.HTTP_403_FORBIDDEN)
+
         workspace_member = WorkspaceMember.objects.get(workspace__slug=slug, member=request.user, is_active=True)
 
         # Check if the leaving user is the only admin of the workspace