mirror of
https://github.com/hanzo-apps/dataroom.git
synced 2026-11-02 04:35:56 +00:00
zeekay
ee2c84a559
This feature allows users to hide folders and documents from the All Documents view without deleting them: - Add hiddenInAllDocuments field to Document and Folder models - Create API endpoints for hiding documents (/documents/hide) and folders (/folders/hide) - Update documents and folders APIs to exclude hidden items from All Documents view - Add "Hide from All Documents" action to document and folder dropdown menus - Add bulk hide action to multi-select action panel - Cascade hiding: when a folder is hidden, all subfolders and documents within are also hidden This is a non-destructive feature that only affects visibility in the All Documents section. Hidden items remain accessible via Data Rooms and are not deleted. Resolves PM-465
75 lines
2.0 KiB
TypeScript
75 lines
2.0 KiB
TypeScript
import { NextApiRequest, NextApiResponse } from "next";
|
|
|
|
import { authOptions } from "@/pages/api/auth/[...nextauth]";
|
|
import { getServerSession } from "next-auth/next";
|
|
|
|
import { errorhandler } from "@/lib/errorHandler";
|
|
import prisma from "@/lib/prisma";
|
|
import { CustomUser } from "@/lib/types";
|
|
|
|
export default async function handle(
|
|
req: NextApiRequest,
|
|
res: NextApiResponse,
|
|
) {
|
|
if (req.method === "POST") {
|
|
// POST /api/teams/:teamId/documents/hide
|
|
const session = await getServerSession(req, res, authOptions);
|
|
if (!session) {
|
|
return res.status(401).end("Unauthorized");
|
|
}
|
|
|
|
const { teamId } = req.query as { teamId: string };
|
|
const userId = (session.user as CustomUser).id;
|
|
|
|
const { documentIds, hidden } = req.body as {
|
|
documentIds: string[];
|
|
hidden: boolean;
|
|
};
|
|
|
|
if (!documentIds || !Array.isArray(documentIds) || documentIds.length === 0) {
|
|
return res.status(400).json({ error: "Document IDs are required" });
|
|
}
|
|
|
|
if (typeof hidden !== "boolean") {
|
|
return res.status(400).json({ error: "Hidden flag is required" });
|
|
}
|
|
|
|
try {
|
|
// Check team access
|
|
const teamAccess = await prisma.userTeam.findUnique({
|
|
where: {
|
|
userId_teamId: {
|
|
userId,
|
|
teamId,
|
|
},
|
|
},
|
|
});
|
|
|
|
if (!teamAccess) {
|
|
return res.status(401).end("Unauthorized");
|
|
}
|
|
|
|
// Update the documents
|
|
const result = await prisma.document.updateMany({
|
|
where: {
|
|
id: { in: documentIds },
|
|
teamId,
|
|
},
|
|
data: {
|
|
hiddenInAllDocuments: hidden,
|
|
},
|
|
});
|
|
|
|
return res.status(200).json({
|
|
message: `${result.count} document(s) ${hidden ? "hidden" : "unhidden"} successfully`,
|
|
count: result.count,
|
|
});
|
|
} catch (error) {
|
|
errorhandler(error, res);
|
|
}
|
|
} else {
|
|
res.setHeader("Allow", ["POST"]);
|
|
return res.status(405).end(`Method ${req.method} Not Allowed`);
|
|
}
|
|
}
|