feat: add endpoint to retrieve member permissions in organizations

Author: XIYUEKONGLING

API.MD

@@ -243,6 +243,7 @@ Endpoints follow the pattern `/api/me/{resource}`. All **POST/PATCH** return `Me
 | :--- | :--- | :--- | :--- | :--- | :--- |
 | **GET** | `/api/orgs/{org}/members` | List all members. | Any Member | N/A | `IEnumerable<OrganizationMemberDto>` |
 | **GET** | `/api/orgs/{org}/members/me/role` | Get my Role. | Any Member | N/A | `MemberRoleDto` |
+| **GET** | `/api/orgs/{org}/permissions` | Get my permissions. | Any Member | N/A | `OrganizationPermissionsDto` |
 | **POST** | `/api/orgs/{org}/members` | Invite/Add member. | Owner/Admin* | `InviteMemberRequestDto` | `MessageResponse` |
 | **PATCH** | `/api/orgs/{org}/members/me` | Update my info. | Any Member | `UpdateMemberRequestDto` | `MessageResponse` |
 | **DELETE** | `/api/orgs/{org}/members/me` | Leave organization. | Any Member | N/A | `MessageResponse` |

OpenProfileServer/Controllers/User/OrganizationController.cs

@@ -265,6 +265,20 @@ public async Task<ActionResult<ApiResponse<MemberRoleDto>>> GetMyRole(string org
         return result.Status ? Ok(result) : StatusCode(403, result);
     }
 
+    /// <summary>
+    /// GET /api/orgs/{org}/permissions
+    /// Returns the current member's permissions in the organization.
+    /// </summary>
+    [HttpGet("{org}/permissions")]
+    public async Task<ActionResult<ApiResponse<OrganizationPermissionsDto>>> GetMyPermissions(string org)
+    {
+        var orgId = await ResolveOrgId(org);
+        if (orgId == null) return NotFound(ApiResponse<MessageResponse>.Failure("Organization not found."));
+
+        var result = await _orgService.GetMyPermissionsAsync(GetUserId(), orgId.Value);
+        return result.Status ? Ok(result) : StatusCode(403, result);
+    }
+
     [HttpPatch("{org}/members/me")]
     public async Task<ActionResult<ApiResponse<MessageResponse>>> UpdateMyMemberDetails(string org, [FromBody] UpdateMemberRequestDto dto)
     {

OpenProfileServer/Interfaces/IOrganizationService.cs

@@ -38,6 +38,7 @@ public interface IOrganizationService
     // === Members (Self & Management by Owner) ===
     Task<ApiResponse<IEnumerable<OrganizationMemberDto>>> GetMembersAsync(Guid userId, Guid orgId);
     Task<ApiResponse<MemberRoleDto>> GetMyRoleAsync(Guid userId, Guid orgId);
+    Task<ApiResponse<OrganizationPermissionsDto>> GetMyPermissionsAsync(Guid userId, Guid orgId);
     Task<ApiResponse<MessageResponse>> UpdateMyMemberDetailsAsync(Guid userId, Guid orgId, UpdateMemberRequestDto dto);
 
     Task<ApiResponse<MessageResponse>> RemoveMemberAsync(Guid requesterId, Guid orgId, Guid targetUserId);

OpenProfileServer/Models/DTOs/Organization/OrganizationPermissionsDto.cs

@@ -0,0 +1,17 @@
+using OpenProfileServer.Models.Enums;
+
+namespace OpenProfileServer.Models.DTOs.Organization;
+
+public class OrganizationPermissionsDto
+{
+    /// <summary>
+    /// Indicates if the current member can invite others to the organization.
+    /// This is true for Owner/Admin, or for Members when AllowMemberInvite setting is enabled.
+    /// </summary>
+    public bool CanInvite { get; set; }
+
+    /// <summary>
+    /// The current member's role in the organization.
+    /// </summary>
+    public MemberRole Role { get; set; }
+}

OpenProfileServer/Services/OrganizationService.cs

@@ -496,6 +496,21 @@ public async Task<ApiResponse<MemberRoleDto>> GetMyRoleAsync(Guid userId, Guid o
         });
     }
 
+    public async Task<ApiResponse<OrganizationPermissionsDto>> GetMyPermissionsAsync(Guid userId, Guid orgId)
+    {
+        var (member, settings) = await GetMemberAndSettingsAsync(userId, orgId);
+        if (member == null) return ApiResponse<OrganizationPermissionsDto>.Failure("Not a member.");
+
+        bool canInvite = member.Role == MemberRole.Owner || member.Role == MemberRole.Admin ||
+                         (member.Role == MemberRole.Member && settings != null && settings.AllowMemberInvite);
+
+        return ApiResponse<OrganizationPermissionsDto>.Success(new OrganizationPermissionsDto
+        {
+            CanInvite = canInvite,
+            Role = member.Role
+        });
+    }
+
     public async Task<ApiResponse<MessageResponse>> UpdateMyMemberDetailsAsync(Guid userId, Guid orgId, UpdateMemberRequestDto dto)
     {
         var member = await _context.OrganizationMembers.FirstOrDefaultAsync(m => m.OrganizationId == orgId && m.AccountId == userId);