force owners permissions

Author: pierre-b

CHANGELOG.md

@@ -2,6 +2,11 @@
 
 All notable changes to this project will be documented in this file.
 
+## [6.3] - 2025-09-08
+
+- Fix set permissions on root user
+- Force all permissions to owners
+
 ## [6.2] - 2025-09-08
 
 - Fix circuit breaker error message in broadcast pause reason

config/config.go

@@ -10,7 +10,7 @@ import (
 	"github.com/spf13/viper"
 )
 
-const VERSION = "6.2"
+const VERSION = "6.3"
 
 type Config struct {
 	Server          ServerConfig

examples/service_layer_permissions.md

@@ -36,6 +36,16 @@ const (
 	PermissionTypeWrite PermissionType = "write"
 )
 
+var FullPermissions = UserPermissions{
+	PermissionResourceContacts:       ResourcePermissions{Read: true, Write: true},
+	PermissionResourceLists:          ResourcePermissions{Read: true, Write: true},
+	PermissionResourceTemplates:      ResourcePermissions{Read: true, Write: true},
+	PermissionResourceBroadcasts:     ResourcePermissions{Read: true, Write: true},
+	PermissionResourceTransactional:  ResourcePermissions{Read: true, Write: true},
+	PermissionResourceWorkspace:      ResourcePermissions{Read: true, Write: true},
+	PermissionResourceMessageHistory: ResourcePermissions{Read: true, Write: true},
+}
+
 // ResourcePermissions defines read/write permissions for a specific resource
 type ResourcePermissions struct {
 	Read  bool `json:"read"`

internal/domain/workspace.go

@@ -329,15 +329,16 @@ func (r *workspaceRepository) DeleteDatabase(ctx context.Context, workspaceID st
 
 func (r *workspaceRepository) AddUserToWorkspace(ctx context.Context, userWorkspace *domain.UserWorkspace) error {
 	query := `
-		INSERT INTO user_workspaces (user_id, workspace_id, role, created_at, updated_at)
-		VALUES ($1, $2, $3, $4, $5)
+		INSERT INTO user_workspaces (user_id, workspace_id, role, permissions, created_at, updated_at)
+		VALUES ($1, $2, $3, $4, $5, $6)
 		ON CONFLICT (user_id, workspace_id) DO UPDATE
-		SET role = $3, updated_at = $5
+		SET role = $3, permissions = $4, updated_at = $6
 	`
 	_, err := r.systemDB.ExecContext(ctx, query,
 		userWorkspace.UserID,
 		userWorkspace.WorkspaceID,
 		userWorkspace.Role,
+		userWorkspace.Permissions,
 		userWorkspace.CreatedAt,
 		userWorkspace.UpdatedAt,
 	)
@@ -514,7 +515,7 @@ func (r *workspaceRepository) GetInvitationByEmail(ctx context.Context, workspac
 // GetWorkspaceInvitations retrieves all workspace invitations for a specific workspace
 func (r *workspaceRepository) GetWorkspaceInvitations(ctx context.Context, workspaceID string) ([]*domain.WorkspaceInvitation, error) {
 	query := `
-		SELECT id, workspace_id, inviter_id, email, expires_at, created_at, updated_at
+		SELECT id, workspace_id, inviter_id, email, permissions, expires_at, created_at, updated_at
 		FROM workspace_invitations
 		WHERE workspace_id = $1
 		ORDER BY created_at DESC
@@ -533,6 +534,7 @@ func (r *workspaceRepository) GetWorkspaceInvitations(ctx context.Context, works
 			&invitation.WorkspaceID,
 			&invitation.InviterID,
 			&invitation.Email,
+			&invitation.Permissions,
 			&invitation.ExpiresAt,
 			&invitation.CreatedAt,
 			&invitation.UpdatedAt,

internal/repository/workspace_postgres.go

@@ -28,6 +28,7 @@ func TestWorkspaceRepository_AddUserToWorkspace(t *testing.T) {
 		UserID:      "user123",
 		WorkspaceID: "workspace123",
 		Role:        "member",
+		Permissions: domain.FullPermissions,
 	}
 
 	// Test success case
@@ -36,6 +37,7 @@ func TestWorkspaceRepository_AddUserToWorkspace(t *testing.T) {
 			userWorkspace.UserID,
 			userWorkspace.WorkspaceID,
 			userWorkspace.Role,
+			userWorkspace.Permissions,
 			sqlmock.AnyArg(), // created_at
 			sqlmock.AnyArg(), // updated_at
 		).
@@ -50,8 +52,9 @@ func TestWorkspaceRepository_AddUserToWorkspace(t *testing.T) {
 			userWorkspace.UserID,
 			userWorkspace.WorkspaceID,
 			userWorkspace.Role,
-			sqlmock.AnyArg(),
-			sqlmock.AnyArg(),
+			userWorkspace.Permissions,
+			sqlmock.AnyArg(), // created_at
+			sqlmock.AnyArg(), // updated_at
 		).
 		WillReturnError(fmt.Errorf("database error"))