project/collaborators: implement ownership management -- #7718

Author: haraldschilly

src/packages/frontend/client/project-collaborators.ts

@@ -3,6 +3,8 @@
  *  License: MS-RSL – see LICENSE.md for details
  */
 
+// cSpell:ignore replyto collabs noncloud
+
 import type { ConatClient } from "@cocalc/frontend/conat/client";
 import type { AddCollaborator } from "@cocalc/conat/hub/api/projects";
 
@@ -57,7 +59,7 @@ export class ProjectCollaborators {
   public async add_collaborator(
     opts: AddCollaborator,
   ): Promise<{ project_id?: string | string[] }> {
-    // project_id is a single string or possibly an array of project_id's 
+    // project_id is a single string or possibly an array of project_id's
     // in case of a token.
     return await this.conat.hub.projects.addCollaborator({
       opts,

src/packages/frontend/collaborators/current-collabs.tsx

@@ -3,6 +3,8 @@
  *  License: MS-RSL – see LICENSE.md for details
  */
 
+// cSpell:ignore replyto collabs noncloud
+
 import { Button, Card, Popconfirm } from "antd";
 import React from "react";
 import { FormattedMessage, useIntl } from "react-intl";
@@ -40,7 +42,7 @@ export const CurrentCollaboratorsPanel: React.FC<Props> = (props: Props) => {
     const project_id = project.get("project_id");
     redux.getActions("projects").remove_collaborator(project_id, account_id);
     if (account_id === get_account_id()) {
-      (redux.getActions("page") as any).close_project_tab(project_id); 
+      (redux.getActions("page") as any).close_project_tab(project_id);
       // TODO: better types
     }
   }

src/packages/frontend/projects/actions.ts

@@ -41,6 +41,8 @@ import type {
 } from "@cocalc/util/db-schema/projects";
 export type { Datastore, EnvVars, EnvVarsRecord };
 
+// cSpell:ignore replyto collabs noncloud Payg
+
 // Define projects actions
 export class ProjectsActions extends Actions<ProjectsState> {
   private getProjectTable = async () => {
@@ -426,7 +428,7 @@ export class ProjectsActions extends Actions<ProjectsState> {
       license: undefined,
     });
     if (!opts2.image) {
-      // make falseish same as not specified.
+      // make false-ish same as not specified.
       delete opts2.image;
     }
 
@@ -1050,7 +1052,7 @@ export class ProjectsActions extends Actions<ProjectsState> {
     await this.start_project(project_id, options);
   };
 
-  // Explcitly set whether or not project is hidden for the given account
+  // Explicitly set whether or not project is hidden for the given account
   // (hide=true means hidden)
   public async set_project_hide(
     account_id: string,

src/packages/util/db-schema/projects.ts

@@ -108,6 +108,12 @@ Table({
           users(obj, db, account_id) {
             return db._user_set_query_project_users(obj, account_id);
           },
+          manage_users_owner_only(obj, db, account_id) {
+            return db._user_set_query_project_manage_users_owner_only(
+              obj,
+              account_id,
+            );
+          },
           action_request: true, // used to request that an action be performed, e.g., "save"; handled by before_change
           compute_image: true,
           site_license: true,
@@ -191,6 +197,11 @@ Table({
       desc: "This is a map from account_id's to {hide:bool, group:'owner'|'collaborator', upgrades:{memory:1000, ...}, ssh:{...}}.",
       render: { type: "usersmap", editable: true },
     },
+    manage_users_owner_only: {
+      type: "boolean",
+      desc: "If true, only project owners can add or remove collaborators. Collaborators can still remove themselves. Disabled by default (undefined or false means current behavior where collaborators can manage other collaborators).",
+      render: { type: "boolean", editable: true },
+    },
     invite: {
       type: "map",
       desc: "Map from email addresses to {time:when invite sent, error:error message if there was one}",