fleet/frontend/utilities/permissions/permissions.ts

import { IUser } from "interfaces/user";
import { IConfig } from "interfaces/config";

export const isFreeTier = (config: IConfig): boolean => {
  return config.tier === "free";
};

export const isPremiumTier = (config: IConfig): boolean => {
  return config.tier === "premium";
};

export const isGlobalAdmin = (user: IUser): boolean => {
  return user.global_role === "admin";
};

export const isGlobalMaintainer = (user: IUser): boolean => {
  return user.global_role === "maintainer";
};

export const isGlobalObserver = (user: IUser): boolean => {
  return user.global_role === "observer";
};

export const isOnGlobalTeam = (user: IUser): boolean => {
  return user.global_role !== null;
};

// This checks against a specific team
const isTeamObserver = (user: IUser, teamId: number): boolean => {
  const userTeamRole = user.teams.find((team) => team.id === teamId)?.role;
  return userTeamRole === "observer";
};

const isTeamMaintainer = (
  user: IUser | null,
  teamId: number | null
): boolean => {
  const userTeamRole = user?.teams.find((team) => team.id === teamId)?.role;
  return userTeamRole === "maintainer";
};

const isTeamAdmin = (user: IUser | null, teamId: number | null): boolean => {
  const userTeamRole = user?.teams.find((team) => team.id === teamId)?.role;
  return userTeamRole === "admin";
};

const isTeamMaintainerOrTeamAdmin = (
  user: IUser | null,
  teamId: number | null
): boolean => {
  const userTeamRole = user?.teams.find((team) => team.id === teamId)?.role;
  return userTeamRole === "admin" || userTeamRole === "maintainer";
};

// This checks against all teams
const isAnyTeamMaintainer = (user: IUser): boolean => {
  if (!isOnGlobalTeam(user)) {
    return user.teams.some((team) => team?.role === "maintainer");
  }

  return false;
};

const isAnyTeamAdmin = (user: IUser): boolean => {
  if (!isOnGlobalTeam(user)) {
    return user.teams.some((team) => team?.role === "admin");
  }

  return false;
};

const isAnyTeamMaintainerOrTeamAdmin = (user: IUser): boolean => {
  if (!isOnGlobalTeam(user)) {
    return user.teams.some(
      (team) => team?.role === "maintainer" || team?.role === "admin"
    );
  }

  return false;
};

const isOnlyObserver = (user: IUser): boolean => {
  if (isGlobalObserver(user)) {
    return true;
  }

  // Return false if any role is team maintainer
  if (!isOnGlobalTeam(user)) {
    return !user.teams.some(
      (team) => team?.role === "maintainer" || team?.role === "admin"
    );
  }

  return false;
};

export default {
  isFreeTier,
  isPremiumTier,
  isGlobalAdmin,
  isGlobalMaintainer,
  isGlobalObserver,
  isOnGlobalTeam,
  isTeamObserver,
  isTeamMaintainer,
  isTeamMaintainerOrTeamAdmin,
  isAnyTeamMaintainer,
  isAnyTeamMaintainerOrTeamAdmin,
  isTeamAdmin,
  isAnyTeamAdmin,
  isOnlyObserver,
};