feat: Permissions for board members

Closes #262

server/api/helpers/board-memberships/create-one.js

@@ -1,5 +1,9 @@
 module.exports = {
   inputs: {
+    values: {
+      type: 'json',
+      required: true,
+    },
     user: {
       type: 'ref',
       required: true,
@@ -18,7 +22,16 @@ module.exports = {
   },
 
   async fn(inputs) {
+    if (inputs.values.role === BoardMembership.Roles.EDITOR) {
+      delete inputs.values.canComment; // eslint-disable-line no-param-reassign
+    } else if (inputs.values.role === BoardMembership.Roles.VIEWER) {
+      if (_.isNil(inputs.values.canComment)) {
+        inputs.values.canComment = false; // eslint-disable-line no-param-reassign
+      }
+    }
+
     const boardMembership = await BoardMembership.create({
+      ...inputs.values,
       boardId: inputs.board.id,
       userId: inputs.user.id,
     })

server/api/helpers/board-memberships/update-one.js

@@ -0,0 +1,46 @@
+module.exports = {
+  inputs: {
+    record: {
+      type: 'ref',
+      required: true,
+    },
+    values: {
+      type: 'json',
+      required: true,
+    },
+    request: {
+      type: 'ref',
+    },
+  },
+
+  async fn(inputs) {
+    const role = inputs.values.role || inputs.record.role;
+
+    if (role === BoardMembership.Roles.EDITOR) {
+      inputs.values.canComment = null; // eslint-disable-line no-param-reassign
+    } else if (role === BoardMembership.Roles.VIEWER) {
+      const canComment = _.isUndefined(inputs.values.canComment)
+        ? inputs.record.canComment
+        : inputs.values.canComment;
+
+      if (_.isNull(canComment)) {
+        inputs.values.canComment = false; // eslint-disable-line no-param-reassign
+      }
+    }
+
+    const boardMembership = await BoardMembership.updateOne(inputs.record.id).set(inputs.values);
+
+    if (boardMembership) {
+      sails.sockets.broadcast(
+        `board:${boardMembership.boardId}`,
+        'boardMembershipUpdate',
+        {
+          item: boardMembership,
+        },
+        inputs.request,
+      );
+    }
+
+    return boardMembership;
+  },
+};

server/api/helpers/boards/create-one.js

@@ -57,6 +57,7 @@ module.exports = {
     const boardMembership = await BoardMembership.create({
       boardId: board.id,
       userId: inputs.user.id,
+      role: BoardMembership.Roles.EDITOR,
     }).fetch();
 
     managerUserIds.forEach((userId) => {