/*! * Copyright (c) 2024 PLANKA Software GmbH * Licensed under the Fair Use License: https://github.com/plankanban/planka/blob/master/LICENSE.md */ const { idInput } = require('../../../utils/inputs'); const Errors = { BOARD_NOT_FOUND: { boardNotFound: 'Board not found', }, }; module.exports = { inputs: { boardId: { ...idInput, required: true, }, beforeId: idInput, }, exits: { boardNotFound: { responseType: 'notFound', }, }, async fn(inputs) { const { currentUser } = this.req; const { board, project } = await sails.helpers.boards .getPathToProjectById(inputs.boardId) .intercept('pathNotFound', () => Errors.BOARD_NOT_FOUND); const boardMembership = await BoardMembership.qm.getOneByBoardIdAndUserId( board.id, currentUser.id, ); if (!boardMembership) { if (currentUser.role !== User.Roles.ADMIN || project.ownerProjectManagerId) { const isProjectManager = await sails.helpers.users.isProjectManager( currentUser.id, project.id, ); if (!isProjectManager) { throw Errors.BOARD_NOT_FOUND; // Forbidden } } } const actions = await Action.qm.getByBoardId(board.id, { beforeId: inputs.beforeId, }); const userIds = sails.helpers.utils.mapRecords(actions, 'userId', true, true); const users = await User.qm.getByIds(userIds); return { items: actions, included: { users: sails.helpers.users.presentMany(users, currentUser), }, }; }, };