mirror of
https://github.com/documenso/documenso.git
synced 2025-11-13 00:03:33 +10:00
## Description This PR introduces global settings for teams. At the moment, it allows team admins to configure the following: * The default visibility of the documents uploaded to the team account * Whether to include the document owner (sender) details when sending emails to the recipients. ### Include Sender Details If the Sender Details setting is enabled, the emails sent by the team will include the sender's name: > "Example User" on behalf of "Example Team" has invited you to sign "document.pdf" Otherwise, the email will say: > "Example Team" has invited you to sign "document.pdf" ### Default Document Visibility This new option allows users to set the default visibility for the documents uploaded to the team account. It can have the following values: * Everyone * Manager and above * Admins only If the default document visibility isn't set, the document will be set to the role of the user who created the document: * If a user with the "User" role creates a document, the document's visibility is set to "Everyone". * Manager role -> "Manager and above" * Admin role -> "Admins only" Otherwise, if there is a default document visibility value, it uses that value. #### Gotcha To avoid issues, the `document owner` and the `recipient` can access the document irrespective of their role. For example: * If a team member with the role "Member" uploads a document and the default document visibility is "Admins", only the document owner and admins can access the document. * Similar to the other scenarios. * If an admin uploads a document and the default document visibility is "Admins", the recipient can access the document. * The admins have access to all the documents. * Managers have access to documents with the visibility set to "Everyone" and "Manager and above" * Members have access only to the documents with the visibility set to "Everyone". ## Testing Performed Tested it locally.
145 lines
4.9 KiB
TypeScript
145 lines
4.9 KiB
TypeScript
import Link from 'next/link';
|
|
import { redirect } from 'next/navigation';
|
|
|
|
import { Plural, Trans } from '@lingui/macro';
|
|
import { ChevronLeft, Users2 } from 'lucide-react';
|
|
import { match } from 'ts-pattern';
|
|
|
|
import { isUserEnterprise } from '@documenso/ee/server-only/util/is-document-enterprise';
|
|
import { DOCUMENSO_ENCRYPTION_KEY } from '@documenso/lib/constants/crypto';
|
|
import { getRequiredServerComponentSession } from '@documenso/lib/next-auth/get-server-component-session';
|
|
import { getDocumentWithDetailsById } from '@documenso/lib/server-only/document/get-document-with-details-by-id';
|
|
import { DocumentVisibility } from '@documenso/lib/types/document-visibility';
|
|
import { symmetricDecrypt } from '@documenso/lib/universal/crypto';
|
|
import { formatDocumentsPath } from '@documenso/lib/utils/teams';
|
|
import type { Team } from '@documenso/prisma/client';
|
|
import { TeamMemberRole } from '@documenso/prisma/client';
|
|
import { DocumentStatus as InternalDocumentStatus } from '@documenso/prisma/client';
|
|
|
|
import { EditDocumentForm } from '~/app/(dashboard)/documents/[id]/edit-document';
|
|
import { StackAvatarsWithTooltip } from '~/components/(dashboard)/avatar/stack-avatars-with-tooltip';
|
|
import { DocumentStatus } from '~/components/formatter/document-status';
|
|
|
|
export type DocumentEditPageViewProps = {
|
|
params: {
|
|
id: string;
|
|
};
|
|
team?: Team & { currentTeamMember: { role: TeamMemberRole } };
|
|
};
|
|
|
|
export const DocumentEditPageView = async ({ params, team }: DocumentEditPageViewProps) => {
|
|
const { id } = params;
|
|
|
|
const documentId = Number(id);
|
|
|
|
const documentRootPath = formatDocumentsPath(team?.url);
|
|
|
|
if (!documentId || Number.isNaN(documentId)) {
|
|
redirect(documentRootPath);
|
|
}
|
|
|
|
const { user } = await getRequiredServerComponentSession();
|
|
|
|
const document = await getDocumentWithDetailsById({
|
|
id: documentId,
|
|
userId: user.id,
|
|
teamId: team?.id,
|
|
}).catch(() => null);
|
|
|
|
if (document?.teamId && !team?.url) {
|
|
redirect(documentRootPath);
|
|
}
|
|
|
|
const documentVisibility = document?.visibility;
|
|
const currentTeamMemberRole = team?.currentTeamMember?.role;
|
|
const isRecipient = document?.Recipient.find((recipient) => recipient.email === user.email);
|
|
let canAccessDocument = true;
|
|
|
|
if (!isRecipient && document?.userId !== user.id) {
|
|
canAccessDocument = match([documentVisibility, currentTeamMemberRole])
|
|
.with([DocumentVisibility.EVERYONE, TeamMemberRole.ADMIN], () => true)
|
|
.with([DocumentVisibility.EVERYONE, TeamMemberRole.MANAGER], () => true)
|
|
.with([DocumentVisibility.EVERYONE, TeamMemberRole.MEMBER], () => true)
|
|
.with([DocumentVisibility.MANAGER_AND_ABOVE, TeamMemberRole.ADMIN], () => true)
|
|
.with([DocumentVisibility.MANAGER_AND_ABOVE, TeamMemberRole.MANAGER], () => true)
|
|
.with([DocumentVisibility.ADMIN, TeamMemberRole.ADMIN], () => true)
|
|
.otherwise(() => false);
|
|
}
|
|
|
|
if (!document) {
|
|
redirect(documentRootPath);
|
|
}
|
|
|
|
if (team && !canAccessDocument) {
|
|
redirect(documentRootPath);
|
|
}
|
|
|
|
if (document.status === InternalDocumentStatus.COMPLETED) {
|
|
redirect(`${documentRootPath}/${documentId}`);
|
|
}
|
|
|
|
const { documentMeta, Recipient: recipients } = document;
|
|
|
|
if (documentMeta?.password) {
|
|
const key = DOCUMENSO_ENCRYPTION_KEY;
|
|
|
|
if (!key) {
|
|
throw new Error('Missing DOCUMENSO_ENCRYPTION_KEY');
|
|
}
|
|
|
|
const securePassword = Buffer.from(
|
|
symmetricDecrypt({
|
|
key,
|
|
data: documentMeta.password,
|
|
}),
|
|
).toString('utf-8');
|
|
|
|
documentMeta.password = securePassword;
|
|
}
|
|
|
|
const isDocumentEnterprise = await isUserEnterprise({
|
|
userId: user.id,
|
|
teamId: team?.id,
|
|
});
|
|
|
|
return (
|
|
<div className="mx-auto -mt-4 w-full max-w-screen-xl px-4 md:px-8">
|
|
<Link href={documentRootPath} className="flex items-center text-[#7AC455] hover:opacity-80">
|
|
<ChevronLeft className="mr-2 inline-block h-5 w-5" />
|
|
<Trans>Documents</Trans>
|
|
</Link>
|
|
|
|
<h1 className="mt-4 truncate text-2xl font-semibold md:text-3xl" title={document.title}>
|
|
{document.title}
|
|
</h1>
|
|
|
|
<div className="mt-2.5 flex items-center gap-x-6">
|
|
<DocumentStatus inheritColor status={document.status} className="text-muted-foreground" />
|
|
|
|
{recipients.length > 0 && (
|
|
<div className="text-muted-foreground flex items-center">
|
|
<Users2 className="mr-2 h-5 w-5" />
|
|
|
|
<StackAvatarsWithTooltip
|
|
recipients={recipients}
|
|
documentStatus={document.status}
|
|
position="bottom"
|
|
>
|
|
<span>
|
|
<Plural one="1 Recipient" other="# Recipients" value={recipients.length} />
|
|
</span>
|
|
</StackAvatarsWithTooltip>
|
|
</div>
|
|
)}
|
|
</div>
|
|
|
|
<EditDocumentForm
|
|
className="mt-6"
|
|
initialDocument={document}
|
|
documentRootPath={documentRootPath}
|
|
isDocumentEnterprise={isDocumentEnterprise}
|
|
/>
|
|
</div>
|
|
);
|
|
};
|