bvandeusen
c7ef709633
Backend: - Alembic migration 0025: groups, group_memberships, project_shares, note_shares, notifications tables - models: Group, GroupMembership, ProjectShare, NoteShare, Notification - services/access.py: permission resolution (viewer/editor/admin/owner) - services/groups.py + routes/groups.py: full group CRUD + membership - services/sharing.py + routes/shares.py: project/note sharing API - services/notifications.py: in-app notification create/list/mark-read - routes/in_app_notifications.py: GET/POST notification endpoints - routes/users.py: user search endpoint - services/projects.py + services/notes.py: *_for_user variants - routes updated to use *_for_user on get/list; adds permission field - app.py: register all new blueprints Frontend: - api/client.ts: ShareEntry, GroupEntry, NotificationEntry types + helpers - stores/notifications.ts: Pinia store with polling - NotificationBell.vue: bell icon + badge + dropdown toggle + 60s poll - NotificationsPanel.vue: unread notification list with mark-all-read - ShareDialog.vue: teleport modal for sharing projects/notes with users/groups - SharedWithMeView.vue: /shared route listing shared projects and notes - AppHeader: NotificationBell, Shared nav link - ProjectView, NoteViewerView, TaskViewerView: Share button + ShareDialog - SettingsView: Groups admin tab with create/delete groups + member mgmt - router: /shared route Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
129 lines
4.8 KiB
Python
129 lines
4.8 KiB
Python
import asyncio
|
|
|
|
from quart import Blueprint, jsonify, request
|
|
|
|
from fabledassistant.auth import get_current_user_id, login_required
|
|
from fabledassistant.services import sharing as share_svc
|
|
from fabledassistant.services.access import can_admin_project, can_write_note
|
|
from fabledassistant.services.notifications import notify_note_shared, notify_project_shared
|
|
from fabledassistant.services.sharing import list_shared_with_me
|
|
|
|
shares_bp = Blueprint("shares", __name__)
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# Project shares
|
|
# ---------------------------------------------------------------------------
|
|
|
|
@shares_bp.route("/api/projects/<int:project_id>/shares", methods=["GET"])
|
|
@login_required
|
|
async def list_project_shares(project_id: int):
|
|
uid = get_current_user_id()
|
|
if not await can_admin_project(uid, project_id):
|
|
return jsonify({"error": "Forbidden"}), 403
|
|
return jsonify({"shares": await share_svc.list_project_shares(project_id)})
|
|
|
|
|
|
@shares_bp.route("/api/projects/<int:project_id>/shares", methods=["POST"])
|
|
@login_required
|
|
async def create_project_share(project_id: int):
|
|
uid = get_current_user_id()
|
|
data = await request.get_json()
|
|
share = await share_svc.share_project(
|
|
uid, project_id,
|
|
target_user_id=data.get("user_id"),
|
|
target_group_id=data.get("group_id"),
|
|
permission=data.get("permission", "viewer"),
|
|
)
|
|
if not share:
|
|
return jsonify({"error": "Forbidden or invalid permission"}), 403
|
|
asyncio.create_task(notify_project_shared(
|
|
project_id, share.permission, uid,
|
|
data.get("user_id"), data.get("group_id"),
|
|
))
|
|
return jsonify(share.to_dict()), 201
|
|
|
|
|
|
@shares_bp.route("/api/projects/<int:project_id>/shares/<int:share_id>", methods=["PATCH"])
|
|
@login_required
|
|
async def update_project_share(project_id: int, share_id: int):
|
|
uid = get_current_user_id()
|
|
data = await request.get_json()
|
|
share = await share_svc.update_project_share(uid, share_id, data.get("permission", ""))
|
|
if not share:
|
|
return jsonify({"error": "Not found or forbidden"}), 404
|
|
return jsonify(share.to_dict())
|
|
|
|
|
|
@shares_bp.route("/api/projects/<int:project_id>/shares/<int:share_id>", methods=["DELETE"])
|
|
@login_required
|
|
async def remove_project_share(project_id: int, share_id: int):
|
|
uid = get_current_user_id()
|
|
if not await share_svc.remove_project_share(uid, share_id):
|
|
return jsonify({"error": "Not found or forbidden"}), 404
|
|
return jsonify({"status": "ok"})
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# Note / task shares
|
|
# ---------------------------------------------------------------------------
|
|
|
|
@shares_bp.route("/api/notes/<int:note_id>/shares", methods=["GET"])
|
|
@login_required
|
|
async def list_note_shares(note_id: int):
|
|
uid = get_current_user_id()
|
|
if not await can_write_note(uid, note_id):
|
|
return jsonify({"error": "Forbidden"}), 403
|
|
return jsonify({"shares": await share_svc.list_note_shares(note_id)})
|
|
|
|
|
|
@shares_bp.route("/api/notes/<int:note_id>/shares", methods=["POST"])
|
|
@login_required
|
|
async def create_note_share(note_id: int):
|
|
uid = get_current_user_id()
|
|
data = await request.get_json()
|
|
share = await share_svc.share_note(
|
|
uid, note_id,
|
|
target_user_id=data.get("user_id"),
|
|
target_group_id=data.get("group_id"),
|
|
permission=data.get("permission", "viewer"),
|
|
)
|
|
if not share:
|
|
return jsonify({"error": "Forbidden or invalid permission"}), 403
|
|
asyncio.create_task(notify_note_shared(
|
|
note_id, share.permission, uid,
|
|
data.get("user_id"), data.get("group_id"),
|
|
))
|
|
return jsonify(share.to_dict()), 201
|
|
|
|
|
|
@shares_bp.route("/api/notes/<int:note_id>/shares/<int:share_id>", methods=["PATCH"])
|
|
@login_required
|
|
async def update_note_share(note_id: int, share_id: int):
|
|
uid = get_current_user_id()
|
|
data = await request.get_json()
|
|
share = await share_svc.update_note_share(uid, share_id, data.get("permission", ""))
|
|
if not share:
|
|
return jsonify({"error": "Not found or forbidden"}), 404
|
|
return jsonify(share.to_dict())
|
|
|
|
|
|
@shares_bp.route("/api/notes/<int:note_id>/shares/<int:share_id>", methods=["DELETE"])
|
|
@login_required
|
|
async def remove_note_share(note_id: int, share_id: int):
|
|
uid = get_current_user_id()
|
|
if not await share_svc.remove_note_share(uid, share_id):
|
|
return jsonify({"error": "Not found or forbidden"}), 404
|
|
return jsonify({"status": "ok"})
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# Shared-with-me
|
|
# ---------------------------------------------------------------------------
|
|
|
|
@shares_bp.route("/api/shared-with-me", methods=["GET"])
|
|
@login_required
|
|
async def shared_with_me():
|
|
uid = get_current_user_id()
|
|
return jsonify(await list_shared_with_me(uid))
|