hide member page if not owner

Author: msukkari

packages/web/src/app/[domain]/settings/access/page.tsx

@@ -1,5 +1,10 @@
 import { getOrgFromDomain } from "@/data/org";
 import { OrganizationAccessSettings } from "@/app/components/organizationAccessSettings";
+import { isServiceError } from "@/lib/utils";
+import { ServiceErrorException } from "@/lib/serviceError";
+import { getMe } from "@/actions";
+import { OrgRole } from "@sourcebot/db";
+import { redirect } from "next/navigation";
 
 interface AccessPageProps {
     params: {
@@ -13,6 +18,20 @@ export default async function AccessPage({ params: { domain } }: AccessPageProps
         throw new Error("Organization not found");
     }
 
+    const me = await getMe();
+    if (isServiceError(me)) {
+        throw new ServiceErrorException(me);
+    }
+
+    const userRoleInOrg = me.memberships.find((membership) => membership.id === org.id)?.role;
+    if (!userRoleInOrg) {
+        throw new Error("User role not found");
+    }
+
+    if (userRoleInOrg !== OrgRole.OWNER) {
+        redirect(`/${domain}/settings`);
+    }
+
     return (
         <div className="flex flex-col gap-6">
             <div>

packages/web/src/app/[domain]/settings/layout.tsx

@@ -70,19 +70,19 @@ export default async function SettingsLayout({
                 href: `/${domain}/settings/access`,
             }
         ] : []),
-        {
+        ...(userRoleInOrg === OrgRole.OWNER ? [{
             title: (
                 <div className="flex items-center gap-2">
                     Members
-                    {userRoleInOrg === OrgRole.OWNER && numJoinRequests !== undefined && numJoinRequests > 0 && (
+                    {numJoinRequests !== undefined && numJoinRequests > 0 && (
                         <span className="inline-flex h-5 min-w-5 items-center justify-center rounded-full bg-primary px-1.5 text-xs font-medium text-primary-foreground">
                             {numJoinRequests}
                         </span>
                     )}
                 </div>
             ),
             href: `/${domain}/settings/members`,
-        },
+        }] : []),
         {
             title: "Secrets",
             href: `/${domain}/settings/secrets`,

packages/web/src/app/[domain]/settings/members/page.tsx

@@ -12,6 +12,7 @@ import { ServiceErrorException } from "@/lib/serviceError";
 import { getSeats, SOURCEBOT_UNLIMITED_SEATS } from "@sourcebot/shared";
 import { RequestsList } from "./components/requestsList";
 import { OrgRole } from "@prisma/client";
+import { redirect } from "next/navigation";
 
 interface MembersSettingsPageProps {
     params: {
@@ -38,6 +39,10 @@ export default async function MembersSettingsPage({ params: { domain }, searchPa
         throw new Error("User role not found");
     }
 
+    if (userRoleInOrg !== OrgRole.OWNER) {
+        redirect(`/${domain}/settings`);
+    }
+
     const members = await getOrgMembers(domain);
     if (isServiceError(members)) {
         throw new ServiceErrorException(members);

packages/web/src/app/login/components/demoCard.tsx

@@ -5,7 +5,6 @@ import { Card } from "@/components/ui/card";
 import { SourcebotLogo } from "@/app/components/sourcebotLogo";
 import { AuthMethodSelector } from "@/app/components/authMethodSelector";
 import useCaptureEvent from "@/hooks/useCaptureEvent";
-import DemoCard from "@/app/login/components/demoCard";
 import Link from "next/link";
 import { env } from "@/env.mjs";
 import type { AuthProvider } from "@/lib/authProviders";
@@ -72,11 +71,6 @@ export const LoginForm = ({ callbackUrl, error, providers, context }: LoginFormP
                     {context === "login" ? "Sign in to your account" : "Create a new account"}
                 </h2>
             </div>
-            {env.NEXT_PUBLIC_SOURCEBOT_CLOUD_ENVIRONMENT !== undefined && (
-                <div className="w-full sm:w-[500px] max-w-[500px]">
-                    <DemoCard />
-                </div>
-            )}
             <Card className="flex flex-col items-center border p-6 sm:p-12 rounded-lg gap-4 sm:gap-6 w-full sm:w-[500px] max-w-[500px] bg-background">
                 {error && (
                     <div className="text-sm text-destructive text-center text-wrap border p-2 rounded-md border-destructive">