@primocaredentgroup/elettromedicali 0.1.0

package/src/component/roles.ts

@@ -0,0 +1,99 @@
+import { v } from 'convex/values';
+import { query, mutation } from './_generated/server';
+
+export const listRoles = query({
+  args: {},
+  handler: async (ctx) => {
+    return await ctx.db.query('roles').collect();
+  },
+});
+
+export const getRole = query({
+  args: { roleId: v.id('roles') },
+  handler: async (ctx, args) => {
+    return await ctx.db.get(args.roleId);
+  },
+});
+
+export const createRole = mutation({
+  args: {
+    name: v.string(),
+    description: v.string(),
+    policies: v.optional(v.object({
+      canViewAllClinics: v.optional(v.boolean()),
+      canEditClinics: v.optional(v.boolean()),
+      canViewAllDevices: v.optional(v.boolean()),
+      canEditDevices: v.optional(v.boolean()),
+      canViewAllTickets: v.optional(v.boolean()),
+      canEditTickets: v.optional(v.boolean()),
+      canManageUsers: v.optional(v.boolean()),
+      canManageRoles: v.optional(v.boolean()),
+      canViewReports: v.optional(v.boolean()),
+    })),
+  },
+  handler: async (ctx, args) => {
+    const existing = await ctx.db
+      .query('roles')
+      .withIndex('by_name', (q) => q.eq('name', args.name))
+      .first();
+    if (existing) {
+      throw new Error(`Role ${args.name} already exists`);
+    }
+    return await ctx.db.insert('roles', {
+      name: args.name,
+      description: args.description,
+      policies: args.policies,
+      createdAt: Date.now(),
+    });
+  },
+});
+
+export const updateRole = mutation({
+  args: {
+    roleId: v.id('roles'),
+    name: v.optional(v.string()),
+    description: v.optional(v.string()),
+    policies: v.optional(v.object({
+      canViewAllClinics: v.optional(v.boolean()),
+      canEditClinics: v.optional(v.boolean()),
+      canViewAllDevices: v.optional(v.boolean()),
+      canEditDevices: v.optional(v.boolean()),
+      canViewAllTickets: v.optional(v.boolean()),
+      canEditTickets: v.optional(v.boolean()),
+      canManageUsers: v.optional(v.boolean()),
+      canManageRoles: v.optional(v.boolean()),
+      canViewReports: v.optional(v.boolean()),
+    })),
+  },
+  handler: async (ctx, args) => {
+    const role = await ctx.db.get(args.roleId);
+    if (role && (role.name === 'admin' || role.name === 'user') && args.name && args.name !== role.name) {
+      throw new Error('Cannot change name of system roles (admin, user)');
+    }
+    const updates: any = {};
+    if (args.name) updates.name = args.name;
+    if (args.description) updates.description = args.description;
+    if (args.policies) updates.policies = args.policies;
+    await ctx.db.patch(args.roleId, updates);
+    return args.roleId;
+  },
+});
+
+export const deleteRole = mutation({
+  args: { roleId: v.id('roles') },
+  handler: async (ctx, args) => {
+    const role = await ctx.db.get(args.roleId);
+    if (role && (role.name === 'admin' || role.name === 'user' || role.name === 'supplier')) {
+      throw new Error('Cannot delete system roles (admin, user, supplier)');
+    }
+    const usersWithRole = await ctx.db
+      .query('user_profiles')
+      .withIndex('by_roleId', (q) => q.eq('roleId', args.roleId))
+      .first();
+    if (usersWithRole) {
+      throw new Error('Cannot delete role that is assigned to users');
+    }
+    await ctx.db.delete(args.roleId);
+    return { success: true };
+  },
+});