frontend permissions

* rework backend workspace permissions

apps/server/src/core/casl/interfaces/policy-handler.interface.ts

@@ -1,9 +0,0 @@
-import { AppAbility } from '../abilities/casl-ability.factory';
-
-interface IPolicyHandler {
-  handle(ability: AppAbility): boolean;
-}
-
-type PolicyHandlerCallback = (ability: AppAbility) => boolean;
-
-export type PolicyHandler = IPolicyHandler | PolicyHandlerCallback;

apps/server/src/core/casl/interfaces/space-ability.type.ts

@@ -11,7 +11,7 @@ export enum SpaceCaslSubject {
   Page = 'page',
 }
 
-export type SpaceAbility =
+export type ISpaceAbility =
   | [SpaceCaslAction, SpaceCaslSubject.Settings]
   | [SpaceCaslAction, SpaceCaslSubject.Member]
   | [SpaceCaslAction, SpaceCaslSubject.Page];

apps/server/src/core/casl/interfaces/workspace-ability.type.ts

@@ -0,0 +1,21 @@
+export enum WorkspaceCaslAction {
+  Manage = 'manage',
+  Create = 'create',
+  Read = 'read',
+  Edit = 'edit',
+  Delete = 'delete',
+}
+export enum WorkspaceCaslSubject {
+  Settings = 'settings',
+  Member = 'member',
+  Space = 'space',
+  Group = 'group',
+  Attachment = 'attachment',
+}
+
+export type IWorkspaceAbility =
+  | [WorkspaceCaslAction, WorkspaceCaslSubject.Settings]
+  | [WorkspaceCaslAction, WorkspaceCaslSubject.Member]
+  | [WorkspaceCaslAction, WorkspaceCaslSubject.Space]
+  | [WorkspaceCaslAction, WorkspaceCaslSubject.Group]
+  | [WorkspaceCaslAction, WorkspaceCaslSubject.Attachment];