mirror of
https://github.com/hanzo-apps/dataroom.git
synced 2026-10-30 14:47:36 +00:00
zeekay
ee2c84a559
This feature allows users to hide folders and documents from the All Documents view without deleting them: - Add hiddenInAllDocuments field to Document and Folder models - Create API endpoints for hiding documents (/documents/hide) and folders (/folders/hide) - Update documents and folders APIs to exclude hidden items from All Documents view - Add "Hide from All Documents" action to document and folder dropdown menus - Add bulk hide action to multi-select action panel - Cascade hiding: when a folder is hidden, all subfolders and documents within are also hidden This is a non-destructive feature that only affects visibility in the All Documents section. Hidden items remain accessible via Data Rooms and are not deleted. Resolves PM-465
102 lines
2.8 KiB
TypeScript
102 lines
2.8 KiB
TypeScript
import { NextApiRequest, NextApiResponse } from "next";
|
|
|
|
import { authOptions } from "@/pages/api/auth/[...nextauth]";
|
|
import { getServerSession } from "next-auth/next";
|
|
|
|
import prisma from "@/lib/prisma";
|
|
import { CustomUser } from "@/lib/types";
|
|
import { folderPathSchema } from "@/lib/zod/schemas/folders";
|
|
|
|
export default async function handle(
|
|
req: NextApiRequest,
|
|
res: NextApiResponse,
|
|
) {
|
|
if (req.method === "GET") {
|
|
// GET /api/teams/:teamId/folders/:name
|
|
const session = await getServerSession(req, res, authOptions);
|
|
if (!session) {
|
|
return res.status(401).end("Unauthorized");
|
|
}
|
|
|
|
const userId = (session.user as CustomUser).id;
|
|
const { teamId, name } = req.query as { teamId: string; name: string[] };
|
|
|
|
// Validate that name is an array of strings using shared Zod schema
|
|
const nameValidation = folderPathSchema.safeParse(name);
|
|
if (!nameValidation.success) {
|
|
return res.status(400).json({
|
|
error: "Invalid folder path format",
|
|
details: nameValidation.error.issues.map((issue) => issue.message),
|
|
});
|
|
}
|
|
|
|
const validatedName = nameValidation.data;
|
|
const path = "/" + validatedName.join("/"); // construct the materialized path
|
|
|
|
try {
|
|
// Check if the user is part of the team
|
|
const teamAccess = await prisma.userTeam.findUnique({
|
|
where: {
|
|
userId_teamId: {
|
|
userId: userId,
|
|
teamId: teamId,
|
|
},
|
|
},
|
|
});
|
|
|
|
if (!teamAccess) {
|
|
return res.status(401).end("Unauthorized");
|
|
}
|
|
|
|
const parentFolder = await prisma.folder.findUnique({
|
|
where: {
|
|
teamId_path: {
|
|
teamId: teamId,
|
|
path: path,
|
|
},
|
|
},
|
|
select: {
|
|
id: true,
|
|
parentId: true,
|
|
},
|
|
});
|
|
|
|
if (!parentFolder) {
|
|
return res.status(404).end("Parent Folder not found");
|
|
}
|
|
|
|
const folders = await prisma.folder.findMany({
|
|
where: {
|
|
teamId: teamId,
|
|
parentId: parentFolder.id,
|
|
hiddenInAllDocuments: false, // Exclude hidden folders from All Documents folder tree
|
|
},
|
|
orderBy: {
|
|
name: "asc",
|
|
},
|
|
include: {
|
|
_count: {
|
|
select: {
|
|
documents: {
|
|
where: { hiddenInAllDocuments: false },
|
|
},
|
|
childFolders: {
|
|
where: { hiddenInAllDocuments: false },
|
|
},
|
|
},
|
|
},
|
|
},
|
|
});
|
|
|
|
return res.status(200).json(folders);
|
|
} catch (error) {
|
|
console.error("Request error", error);
|
|
return res.status(500).json({ error: "Error fetching folders" });
|
|
}
|
|
} else {
|
|
// We only allow POST requests
|
|
res.setHeader("Allow", ["GET"]);
|
|
return res.status(405).end(`Method ${req.method} Not Allowed`);
|
|
}
|
|
}
|