@oneuptime/common 9.4.12 → 9.5.0

package/Models/DatabaseModels/WorkspaceNotificationLog.ts

@@ -2,6 +2,7 @@ import Project from "./Project";
 import Incident from "./Incident";
 import Alert from "./Alert";
 import AlertEpisode from "./AlertEpisode";
+import IncidentEpisode from "./IncidentEpisode";
 import ScheduledMaintenance from "./ScheduledMaintenance";
 import StatusPage from "./StatusPage";
 import StatusPageAnnouncement from "./StatusPageAnnouncement";
@@ -40,6 +41,7 @@ import WorkspaceNotificationActionType from "../../Types/Workspace/WorkspaceNoti
     Permission.ProjectAdmin,
     Permission.ProjectMember,
     Permission.ReadWorkspaceNotificationLog,
+    Permission.ReadAllProjectResources,
   ],
   delete: [],
   update: [],
@@ -69,6 +71,7 @@ export default class WorkspaceNotificationLog extends BaseModel {
       Permission.ProjectAdmin,
       Permission.ProjectMember,
       Permission.ReadWorkspaceNotificationLog,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -100,6 +103,7 @@ export default class WorkspaceNotificationLog extends BaseModel {
       Permission.ProjectAdmin,
       Permission.ProjectMember,
       Permission.ReadWorkspaceNotificationLog,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -125,6 +129,7 @@ export default class WorkspaceNotificationLog extends BaseModel {
       Permission.ProjectAdmin,
       Permission.ProjectMember,
       Permission.ReadWorkspaceNotificationLog,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -149,6 +154,7 @@ export default class WorkspaceNotificationLog extends BaseModel {
       Permission.ProjectAdmin,
       Permission.ProjectMember,
       Permission.ReadWorkspaceNotificationLog,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -173,6 +179,7 @@ export default class WorkspaceNotificationLog extends BaseModel {
       Permission.ProjectAdmin,
       Permission.ProjectMember,
       Permission.ReadWorkspaceNotificationLog,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -197,6 +204,7 @@ export default class WorkspaceNotificationLog extends BaseModel {
       Permission.ProjectAdmin,
       Permission.ProjectMember,
       Permission.ReadWorkspaceNotificationLog,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -221,6 +229,7 @@ export default class WorkspaceNotificationLog extends BaseModel {
       Permission.ProjectAdmin,
       Permission.ProjectMember,
       Permission.ReadWorkspaceNotificationLog,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -244,6 +253,7 @@ export default class WorkspaceNotificationLog extends BaseModel {
       Permission.ProjectAdmin,
       Permission.ProjectMember,
       Permission.ReadWorkspaceNotificationLog,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -268,6 +278,7 @@ export default class WorkspaceNotificationLog extends BaseModel {
       Permission.ProjectAdmin,
       Permission.ProjectMember,
       Permission.ReadWorkspaceNotificationLog,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -292,6 +303,7 @@ export default class WorkspaceNotificationLog extends BaseModel {
       Permission.ProjectAdmin,
       Permission.ProjectMember,
       Permission.ReadWorkspaceNotificationLog,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -321,6 +333,7 @@ export default class WorkspaceNotificationLog extends BaseModel {
       Permission.ProjectAdmin,
       Permission.ProjectMember,
       Permission.ReadWorkspaceNotificationLog,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -352,6 +365,7 @@ export default class WorkspaceNotificationLog extends BaseModel {
       Permission.ProjectAdmin,
       Permission.ProjectMember,
       Permission.ReadPushLog,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -377,6 +391,7 @@ export default class WorkspaceNotificationLog extends BaseModel {
       Permission.ProjectAdmin,
       Permission.ProjectMember,
       Permission.ReadWorkspaceNotificationLog,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -408,6 +423,7 @@ export default class WorkspaceNotificationLog extends BaseModel {
       Permission.ProjectAdmin,
       Permission.ProjectMember,
       Permission.ReadWorkspaceNotificationLog,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -434,6 +450,7 @@ export default class WorkspaceNotificationLog extends BaseModel {
       Permission.ProjectAdmin,
       Permission.ProjectMember,
       Permission.ReadPushLog,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -465,6 +482,7 @@ export default class WorkspaceNotificationLog extends BaseModel {
       Permission.ProjectAdmin,
       Permission.ProjectMember,
       Permission.ReadPushLog,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -490,6 +508,7 @@ export default class WorkspaceNotificationLog extends BaseModel {
       Permission.ProjectAdmin,
       Permission.ProjectMember,
       Permission.ReadPushLog,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -521,6 +540,7 @@ export default class WorkspaceNotificationLog extends BaseModel {
       Permission.ProjectAdmin,
       Permission.ProjectMember,
       Permission.ReadPushLog,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -546,6 +566,65 @@ export default class WorkspaceNotificationLog extends BaseModel {
       Permission.ProjectAdmin,
       Permission.ProjectMember,
       Permission.ReadPushLog,
+      Permission.ReadAllProjectResources,
+    ],
+    update: [],
+  })
+  @TableColumn({
+    manyToOneRelationColumn: "incidentEpisodeId",
+    type: TableColumnType.Entity,
+    modelType: IncidentEpisode,
+    title: "Incident Episode",
+    description: "Incident Episode associated with this message (if any)",
+  })
+  @ManyToOne(
+    () => {
+      return IncidentEpisode;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "CASCADE",
+      orphanedRowAction: "nullify",
+    },
+  )
+  @JoinColumn({ name: "incidentEpisodeId" })
+  public incidentEpisode?: IncidentEpisode = undefined;
+
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.ReadPushLog,
+      Permission.ReadAllProjectResources,
+    ],
+    update: [],
+  })
+  @Index()
+  @TableColumn({
+    type: TableColumnType.ObjectID,
+    required: false,
+    canReadOnRelationQuery: true,
+    title: "Incident Episode ID",
+    description: "ID of Incident Episode associated with this message (if any)",
+  })
+  @Column({
+    type: ColumnType.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer(),
+  })
+  public incidentEpisodeId?: ObjectID = undefined;
+
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.ReadPushLog,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -577,6 +656,7 @@ export default class WorkspaceNotificationLog extends BaseModel {
       Permission.ProjectAdmin,
       Permission.ProjectMember,
       Permission.ReadPushLog,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -603,6 +683,7 @@ export default class WorkspaceNotificationLog extends BaseModel {
       Permission.ProjectAdmin,
       Permission.ProjectMember,
       Permission.ReadPushLog,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -634,6 +715,7 @@ export default class WorkspaceNotificationLog extends BaseModel {
       Permission.ProjectAdmin,
       Permission.ProjectMember,
       Permission.ReadPushLog,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -659,6 +741,7 @@ export default class WorkspaceNotificationLog extends BaseModel {
       Permission.ProjectAdmin,
       Permission.ProjectMember,
       Permission.ReadPushLog,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -691,6 +774,7 @@ export default class WorkspaceNotificationLog extends BaseModel {
       Permission.ProjectAdmin,
       Permission.ProjectMember,
       Permission.ReadPushLog,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -717,6 +801,7 @@ export default class WorkspaceNotificationLog extends BaseModel {
       Permission.ProjectAdmin,
       Permission.ProjectMember,
       Permission.ReadWorkspaceNotificationLog,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -748,6 +833,7 @@ export default class WorkspaceNotificationLog extends BaseModel {
       Permission.ProjectAdmin,
       Permission.ProjectMember,
       Permission.ReadWorkspaceNotificationLog,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -774,6 +860,7 @@ export default class WorkspaceNotificationLog extends BaseModel {
       Permission.ProjectAdmin,
       Permission.ProjectMember,
       Permission.ReadWorkspaceNotificationLog,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -807,6 +894,7 @@ export default class WorkspaceNotificationLog extends BaseModel {
       Permission.ProjectAdmin,
       Permission.ProjectMember,
       Permission.ReadWorkspaceNotificationLog,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -833,6 +921,7 @@ export default class WorkspaceNotificationLog extends BaseModel {
       Permission.ProjectAdmin,
       Permission.ProjectMember,
       Permission.ReadWorkspaceNotificationLog,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -865,6 +954,7 @@ export default class WorkspaceNotificationLog extends BaseModel {
       Permission.ProjectAdmin,
       Permission.ProjectMember,
       Permission.ReadWorkspaceNotificationLog,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -891,6 +981,7 @@ export default class WorkspaceNotificationLog extends BaseModel {
       Permission.ProjectAdmin,
       Permission.ProjectMember,
       Permission.ReadWorkspaceNotificationLog,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -922,6 +1013,7 @@ export default class WorkspaceNotificationLog extends BaseModel {
       Permission.ProjectAdmin,
       Permission.ProjectMember,
       Permission.ReadWorkspaceNotificationLog,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })

package/Models/DatabaseModels/WorkspaceNotificationRule.ts

@@ -36,6 +36,7 @@ import EnableDocumentation from "../../Types/Database/EnableDocumentation";
     Permission.ProjectOwner,
     Permission.ProjectMember,
     Permission.ReadWorkspaceNotificationRule,
+    Permission.ReadAllProjectResources,
   ],
   delete: [
     Permission.ProjectAdmin,
@@ -80,6 +81,7 @@ class WorkspaceNotificationRule extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectMember,
       Permission.ReadWorkspaceNotificationRule,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -116,6 +118,7 @@ class WorkspaceNotificationRule extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectMember,
       Permission.ReadWorkspaceNotificationRule,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -146,6 +149,7 @@ class WorkspaceNotificationRule extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectMember,
       Permission.ReadWorkspaceNotificationRule,
+      Permission.ReadAllProjectResources,
     ],
     update: [
       Permission.ProjectAdmin,
@@ -182,6 +186,7 @@ class WorkspaceNotificationRule extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectMember,
       Permission.ReadWorkspaceNotificationRule,
+      Permission.ReadAllProjectResources,
     ],
     update: [
       Permission.ProjectAdmin,
@@ -218,6 +223,7 @@ class WorkspaceNotificationRule extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectMember,
       Permission.ReadWorkspaceNotificationRule,
+      Permission.ReadAllProjectResources,
     ],
     update: [
       Permission.ProjectAdmin,
@@ -253,6 +259,7 @@ class WorkspaceNotificationRule extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectMember,
       Permission.ReadWorkspaceNotificationRule,
+      Permission.ReadAllProjectResources,
     ],
     update: [
       Permission.ProjectAdmin,
@@ -289,6 +296,7 @@ class WorkspaceNotificationRule extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectMember,
       Permission.ReadWorkspaceNotificationRule,
+      Permission.ReadAllProjectResources,
     ],
     update: [
       Permission.ProjectAdmin,
@@ -325,6 +333,7 @@ class WorkspaceNotificationRule extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectMember,
       Permission.ReadWorkspaceNotificationRule,
+      Permission.ReadAllProjectResources,
     ],
     update: [
       Permission.ProjectAdmin,
@@ -367,6 +376,7 @@ class WorkspaceNotificationRule extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectMember,
       Permission.ReadWorkspaceNotificationRule,
+      Permission.ReadAllProjectResources,
     ],
     update: [
       Permission.ProjectAdmin,
@@ -400,6 +410,7 @@ class WorkspaceNotificationRule extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectMember,
       Permission.ReadWorkspaceNotificationRule,
+      Permission.ReadAllProjectResources,
     ],
     update: [
       Permission.ProjectAdmin,
@@ -445,6 +456,7 @@ class WorkspaceNotificationRule extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectMember,
       Permission.ReadWorkspaceNotificationRule,
+      Permission.ReadAllProjectResources,
     ],
     update: [
       Permission.ProjectAdmin,

package/Models/DatabaseModels/WorkspaceProjectAuthToken.ts

@@ -66,6 +66,7 @@ export type WorkspaceMiscData = SlackMiscData | MicrosoftTeamsMiscData;
     Permission.ProjectOwner,
     Permission.ProjectAdmin,
     Permission.ProjectMember,
+    Permission.ReadAllProjectResources,
   ],
   delete: [Permission.ProjectOwner, Permission.ProjectAdmin],
   update: [
@@ -96,6 +97,7 @@ class WorkspaceProjectAuthToken extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -130,6 +132,7 @@ class WorkspaceProjectAuthToken extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -181,6 +184,7 @@ class WorkspaceProjectAuthToken extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.ReadAllProjectResources,
     ],
     update: [],
   })
@@ -210,6 +214,7 @@ class WorkspaceProjectAuthToken extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.ReadAllProjectResources,
     ],
     update: [
       Permission.ProjectOwner,
@@ -242,6 +247,7 @@ class WorkspaceProjectAuthToken extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.ReadAllProjectResources,
     ],
     update: [
       Permission.ProjectOwner,
@@ -273,6 +279,7 @@ class WorkspaceProjectAuthToken extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.ReadAllProjectResources,
     ],
     update: [
       Permission.ProjectOwner,
@@ -312,6 +319,7 @@ class WorkspaceProjectAuthToken extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.ReadAllProjectResources,
     ],
     update: [
       Permission.ProjectOwner,
@@ -342,6 +350,7 @@ class WorkspaceProjectAuthToken extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.ReadAllProjectResources,
     ],
     update: [
       Permission.ProjectOwner,
@@ -382,6 +391,7 @@ class WorkspaceProjectAuthToken extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.ReadAllProjectResources,
     ],
     update: [
       Permission.ProjectOwner,

package/Server/API/IncidentEpisodeAPI.ts

@@ -0,0 +1,150 @@
+import IncidentEpisode from "../../Models/DatabaseModels/IncidentEpisode";
+import BadDataException from "../../Types/Exception/BadDataException";
+import NotFoundException from "../../Types/Exception/NotFoundException";
+import ObjectID from "../../Types/ObjectID";
+import IncidentEpisodeService, {
+  Service as IncidentEpisodeServiceType,
+} from "../Services/IncidentEpisodeService";
+import UserMiddleware from "../Middleware/UserAuthorization";
+import Response from "../Utils/Response";
+import BaseAPI from "./BaseAPI";
+import {
+  ExpressRequest,
+  ExpressResponse,
+  NextFunction,
+} from "../Utils/Express";
+import CommonAPI from "./CommonAPI";
+import DatabaseCommonInteractionProps from "../../Types/BaseDatabase/DatabaseCommonInteractionProps";
+import AIService, { AILogRequest, AILogResponse } from "../Services/AIService";
+import IncidentEpisodeAIContextBuilder, {
+  IncidentEpisodeContextData,
+} from "../Utils/AI/IncidentEpisodeAIContextBuilder";
+import { AIGenerationContext } from "../Utils/AI/IncidentAIContextBuilder";
+import JSONFunctions from "../../Types/JSONFunctions";
+import Permission from "../../Types/Permission";
+
+export default class IncidentEpisodeAPI extends BaseAPI<
+  IncidentEpisode,
+  IncidentEpisodeServiceType
+> {
+  public constructor() {
+    super(IncidentEpisode, IncidentEpisodeService);
+
+    // Generate postmortem from AI
+    this.router.post(
+      `${new this.entityType()
+        .getCrudApiPath()
+        ?.toString()}/generate-postmortem-from-ai/:episodeId`,
+      UserMiddleware.getUserMiddleware,
+      async (req: ExpressRequest, res: ExpressResponse, next: NextFunction) => {
+        try {
+          await this.generatePostmortemFromAI(req, res);
+        } catch (err) {
+          next(err);
+        }
+      },
+    );
+  }
+
+  private async generatePostmortemFromAI(
+    req: ExpressRequest,
+    res: ExpressResponse,
+  ): Promise<void> {
+    const episodeIdParam: string | undefined = req.params["episodeId"];
+
+    if (!episodeIdParam) {
+      throw new BadDataException("Episode ID is required");
+    }
+
+    let episodeId: ObjectID;
+
+    try {
+      episodeId = new ObjectID(episodeIdParam);
+    } catch {
+      throw new BadDataException("Invalid Episode ID");
+    }
+
+    const props: DatabaseCommonInteractionProps =
+      await CommonAPI.getDatabaseCommonInteractionProps(req);
+
+    // Verify user has permission to edit the episode
+    const permissions: Array<Permission> | undefined = props
+      .userTenantAccessPermission?.["permissions"] as
+      | Array<Permission>
+      | undefined;
+
+    const hasPermission: boolean = permissions
+      ? permissions.some((p: Permission) => {
+          return (
+            p === Permission.ProjectOwner ||
+            p === Permission.ProjectAdmin ||
+            p === Permission.EditIncidentEpisode
+          );
+        })
+      : false;
+
+    if (!hasPermission && !props.isMasterAdmin) {
+      throw new BadDataException(
+        "You do not have permission to generate postmortem for this episode. You need to have one of these permissions: Project Owner, Project Admin, Edit Incident Episode.",
+      );
+    }
+
+    // Get the template from request body if provided
+    const template: string | undefined = JSONFunctions.getJSONValueInPath(
+      req.body,
+      "template",
+    ) as string | undefined;
+
+    // Always include workspace messages for comprehensive context
+    const includeWorkspaceMessages: boolean = true;
+
+    // Get the episode to verify it exists and get the project ID
+    const episode: IncidentEpisode | null = await this.service.findOneById({
+      id: episodeId,
+      select: {
+        _id: true,
+        projectId: true,
+      },
+      props,
+    });
+
+    if (!episode || !episode.projectId) {
+      throw new NotFoundException("Episode not found");
+    }
+
+    // Build episode context
+    const contextData: IncidentEpisodeContextData =
+      await IncidentEpisodeAIContextBuilder.buildEpisodeContext({
+        episodeId,
+        includeWorkspaceMessages,
+        workspaceMessageLimit: 500,
+      });
+
+    // Format context for postmortem generation
+    const aiContext: AIGenerationContext =
+      IncidentEpisodeAIContextBuilder.formatEpisodeContextForPostmortem(
+        contextData,
+        template,
+      );
+
+    // Generate postmortem using AIService (handles billing and logging)
+    const aiLogRequest: AILogRequest = {
+      projectId: episode.projectId,
+      feature: "Incident Episode Postmortem",
+      messages: aiContext.messages,
+      maxTokens: 8192,
+      temperature: 0.7,
+    };
+
+    if (props.userId) {
+      aiLogRequest.userId = props.userId;
+    }
+
+    const response: AILogResponse =
+      await AIService.executeWithLogging(aiLogRequest);
+
+    return Response.sendJsonObjectResponse(req, res, {
+      postmortemNote: response.content,
+    });
+  }
+}

package/Server/API/ProjectAPI.ts

@@ -14,6 +14,8 @@ import {
 } from "../Utils/Express";
 import Response from "../Utils/Response";
 import BaseAPI from "./BaseAPI";
+import BillingService from "../Services/BillingService";
+import Errors from "../Utils/Errors";
 import { LIMIT_PER_PROJECT } from "../../Types/Database/LimitMax";
 import NotAuthenticatedException from "../../Types/Exception/NotAuthenticatedException";
 import PositiveNumber from "../../Types/PositiveNumber";
@@ -52,6 +54,36 @@ export default class ProjectAPI extends BaseAPI<Project, ProjectServiceType> {
             throw new BadDataException("Plan ID is required to change plan");
           }
 
+          // Check for payment methods early before making any Stripe API calls
+          const project: Project | null = await ProjectService.findOneById({
+            id: projectId,
+            select: {
+              paymentProviderCustomerId: true,
+            },
+            props: {
+              isRoot: true,
+            },
+          });
+
+          if (!project) {
+            throw new BadDataException("Project not found");
+          }
+
+          if (!project.paymentProviderCustomerId) {
+            throw new BadDataException("Payment Provider customer not found");
+          }
+
+          const hasPaymentMethods: boolean =
+            await BillingService.hasPaymentMethods(
+              project.paymentProviderCustomerId,
+            );
+
+          if (!hasPaymentMethods) {
+            throw new BadDataException(
+              Errors.BillingService.NO_PAYMENTS_METHODS,
+            );
+          }
+
           const permissions: Array<UserPermission> =
             await this.getPermissionsForTenant(req);