Restrict removal of user's director roles that are in use by field zones/regions

Author: CarsonF

src/components/field-region/field-region.gel.repository.ts

@@ -1,6 +1,6 @@
 import { Injectable } from '@nestjs/common';
-import { type PublicOf } from '~/common';
-import { RepoFor } from '~/core/gel';
+import { type ID, type PublicOf } from '~/common';
+import { e, RepoFor } from '~/core/gel';
 import { FieldRegion } from './dto';
 import { type FieldRegionRepository } from './field-region.repository';
 
@@ -13,4 +13,16 @@ export class FieldRegionGelRepository
       fieldZone: true,
     }),
   })
-  implements PublicOf<FieldRegionRepository> {}
+  implements PublicOf<FieldRegionRepository>
+{
+  async readAllByDirector(id: ID<'User'>) {
+    return await this.db.run(this.readAllByDirectorQuery, { id });
+  }
+  private readonly readAllByDirectorQuery = e.params({ id: e.uuid }, ($) => {
+    const director = e.cast(e.User, $.id);
+    return e.select(e.FieldRegion, (region) => ({
+      filter: e.op(region.director, '=', director),
+      ...this.hydrate(region),
+    }));
+  });
+}

src/components/field-region/field-region.module.ts

@@ -8,6 +8,7 @@ import { FieldRegionLoader } from './field-region.loader';
 import { FieldRegionRepository } from './field-region.repository';
 import { FieldRegionResolver } from './field-region.resolver';
 import { FieldRegionService } from './field-region.service';
+import { RestrictRegionDirectorRemovalHandler } from './handlers/restrict-region-director-removal.handler';
 
 @Module({
   imports: [
@@ -20,6 +21,7 @@ import { FieldRegionService } from './field-region.service';
     FieldRegionService,
     splitDb(FieldRegionRepository, FieldRegionGelRepository),
     FieldRegionLoader,
+    RestrictRegionDirectorRemovalHandler,
   ],
   exports: [FieldRegionService],
 })

src/components/field-region/field-region.repository.ts

@@ -115,4 +115,17 @@ export class FieldRegionRepository extends DtoRepository(FieldRegion) {
       .first();
     return result!; // result from paginate() will always have 1 row.
   }
+
+  async readAllByDirector(id: ID<'User'>) {
+    return await this.db
+      .query()
+      .match([
+        node('node', 'FieldRegion'),
+        relation('out', '', 'director', ACTIVE),
+        node('', 'User', { id }),
+      ])
+      .apply(this.hydrate())
+      .map('dto')
+      .run();
+  }
 }

src/components/field-region/handlers/restrict-region-director-removal.handler.ts

@@ -0,0 +1,29 @@
+import { InputException } from '~/common';
+import { EventsHandler } from '~/core/events';
+import { UserUpdatedEvent } from '../../user/events/user-updated.event';
+import { FieldRegionRepository } from '../field-region.repository';
+
+@EventsHandler(UserUpdatedEvent)
+export class RestrictRegionDirectorRemovalHandler {
+  constructor(private readonly repo: FieldRegionRepository) {}
+
+  async handle(event: UserUpdatedEvent) {
+    if (!event.updated.roles) {
+      return;
+    }
+    const roleRemoved =
+      event.previous.roles.includes('RegionalDirector') &&
+      !event.updated.roles.includes('RegionalDirector');
+    if (!roleRemoved) {
+      return;
+    }
+
+    const regions = await this.repo.readAllByDirector(event.updated.id);
+    if (regions.length > 0) {
+      throw new InputException(
+        'User is still a director for these field regions:\n' +
+          regions.map((z) => `  - ${z.name}`).join('\n'),
+      );
+    }
+  }
+}

src/components/field-zone/field-zone.gel.repository.ts

@@ -1,6 +1,6 @@
 import { Injectable } from '@nestjs/common';
-import { type PublicOf } from '~/common';
-import { RepoFor } from '~/core/gel';
+import { type ID, type PublicOf } from '~/common';
+import { e, RepoFor } from '~/core/gel';
 import { FieldZone } from './dto';
 import { type FieldZoneRepository } from './field-zone.repository';
 
@@ -12,4 +12,16 @@ export class FieldZoneGelRepository
       director: true,
     }),
   })
-  implements PublicOf<FieldZoneRepository> {}
+  implements PublicOf<FieldZoneRepository>
+{
+  async readAllByDirector(id: ID<'User'>) {
+    return await this.db.run(this.readAllByDirectorQuery, { id });
+  }
+  private readonly readAllByDirectorQuery = e.params({ id: e.uuid }, ($) => {
+    const director = e.cast(e.User, $.id);
+    return e.select(e.FieldZone, (zone) => ({
+      filter: e.op(zone.director, '=', director),
+      ...this.hydrate(zone),
+    }));
+  });
+}

src/components/field-zone/field-zone.module.ts

@@ -7,6 +7,7 @@ import { FieldZoneLoader } from './field-zone.loader';
 import { FieldZoneRepository } from './field-zone.repository';
 import { FieldZoneResolver } from './field-zone.resolver';
 import { FieldZoneService } from './field-zone.service';
+import { RestrictZoneDirectorRemovalHandler } from './handlers/restrict-zone-director-removal.handler';
 
 @Module({
   imports: [
@@ -18,6 +19,7 @@ import { FieldZoneService } from './field-zone.service';
     FieldZoneService,
     splitDb(FieldZoneRepository, FieldZoneGelRepository),
     FieldZoneLoader,
+    RestrictZoneDirectorRemovalHandler,
   ],
   exports: [FieldZoneService],
 })

src/components/field-zone/field-zone.repository.ts

@@ -133,4 +133,17 @@ export class FieldZoneRepository extends DtoRepository(FieldZone) {
       .first();
     return result!; // result from paginate() will always have 1 row.
   }
+
+  async readAllByDirector(id: ID<'User'>) {
+    return await this.db
+      .query()
+      .match([
+        node('node', 'FieldZone'),
+        relation('out', '', 'director', ACTIVE),
+        node('', 'User', { id }),
+      ])
+      .apply(this.hydrate())
+      .map('dto')
+      .run();
+  }
 }

src/components/field-zone/handlers/restrict-zone-director-removal.handler.ts

@@ -0,0 +1,29 @@
+import { InputException } from '~/common';
+import { EventsHandler } from '~/core/events';
+import { UserUpdatedEvent } from '../../user/events/user-updated.event';
+import { FieldZoneRepository } from '../field-zone.repository';
+
+@EventsHandler(UserUpdatedEvent)
+export class RestrictZoneDirectorRemovalHandler {
+  constructor(private readonly repo: FieldZoneRepository) {}
+
+  async handle(event: UserUpdatedEvent) {
+    if (!event.updated.roles) {
+      return;
+    }
+    const roleRemoved =
+      event.previous.roles.includes('FieldOperationsDirector') &&
+      !event.updated.roles.includes('FieldOperationsDirector');
+    if (!roleRemoved) {
+      return;
+    }
+
+    const zones = await this.repo.readAllByDirector(event.updated.id);
+    if (zones.length > 0) {
+      throw new InputException(
+        'User is still a director for these field zones:\n' +
+          zones.map((z) => `  - ${z.name}`).join('\n'),
+      );
+    }
+  }
+}