Add organization transfer endpoint

#58

apps/api/src/security/dto/transfer-organization.dto.ts

@@ -0,0 +1,7 @@
+import { IsMongoId } from 'class-validator';
+import { ITransferOrganizationDto } from 'shared-types';
+
+export class TransferOrganizationDto implements ITransferOrganizationDto {
+	@IsMongoId()
+	user: string;
+}

apps/api/src/security/security.controller.ts

@@ -30,6 +30,8 @@ import { SecurityUtils } from './helpers/security.utils';
 import { HasOrganizationAccessPipe } from './pipes/has-organization-access.pipe';
 import { SecurityValidationPipe } from './pipes/security-validation.pipe';
 import { SecurityService } from './security.service';
+import { HasOwnerAccessPipe } from './pipes/has-owner-access.pipe';
+import { TransferOrganizationDto } from './dto/transfer-organization.dto';
 
 @Controller('security')
 @ApiTags('security')
@@ -109,6 +111,19 @@ export class SecurityController {
 		return { statusCode: 200 };
 	}
 
+	@Post(':org/transfer')
+	@ApiOperation({ summary: 'Transfer organization ownership to another user' })
+	@HttpCode(200)
+	async transfer(
+		@Param('org', ParseObjectIdPipe, HasOwnerAccessPipe) org: Types.ObjectId,
+		@Body() body: TransferOrganizationDto,
+	): Promise<any> {
+		const to = new Types.ObjectId(body.user);
+
+		await this.securityService.transferOwnership(org, to);
+		return { statusCode: 200 };
+	}
+
 	@Get(':id')
 	@ApiOperation({ summary: 'List organization security rules' })
 	async listRules(

apps/api/src/security/security.service.ts

@@ -24,18 +24,51 @@ export class SecurityService {
 		return rule ? rule.role : null;
 	}
 
-	async addRule(org: Types.ObjectId, user: Types.ObjectId) {
+	async addRule(
+		org: Types.ObjectId,
+		user: Types.ObjectId,
+		role: OrganizationSecurityRole = OrganizationSecurityRole.MEMBER,
+	) {
 		const ruleExist = await this.ruleExist(org, user._id);
 		if (ruleExist) {
 			throw new BadRequestException('This user is already a member of this organization');
 		}
 
 		return this.organizationAclService.addRule(org, {
 			user: user._id,
-			role: OrganizationSecurityRole.MEMBER,
+			role,
 		});
 	}
 
+	async transferOwnership(organization: Types.ObjectId, to: Types.ObjectId) {
+		const owner = await this.organizationAclService.getOwner(organization);
+
+		if (owner.equals(to)) {
+			throw new BadRequestException('Provided user is already owner of this organization');
+		}
+
+		const isTargetAnMember = await this.ruleExist(organization, to);
+		if (!isTargetAnMember) {
+			throw new BadRequestException('Provided user is not a part of this organization');
+		}
+
+		const role = await this.organizationAclService.updateRule(
+			organization,
+			to,
+			OrganizationSecurityRole.OWNER,
+		);
+
+		if (owner) {
+			await this.organizationAclService.updateRule(
+				organization,
+				owner,
+				OrganizationSecurityRole.ADMIN,
+			);
+		}
+
+		return role;
+	}
+
 	async updateRule(org: Types.ObjectId, user: Types.ObjectId, newRole: OrganizationSecurityRole) {
 		return this.organizationAclService.updateRule(org, user, newRole);
 	}

packages/shared-types/src/index.ts

@@ -36,6 +36,7 @@ import { ICreateWarehouseDto } from './warehouse/ICreateWarehouseDto';
 import { ICreateWarehouseInOrgDto } from './warehouse/ICreateWarehouseInOrgDto';
 import { IUpdateWarehouseDto } from './warehouse/IUpdateWarehouseDto';
 import { WarehouseDto } from './warehouse/WarehouseDto';
+import { ITransferOrganizationDto } from './organizations/ITransferOrganizationDto';
 
 export {
     BasicInventoryItemDto,
@@ -76,5 +77,6 @@ export {
     IUpdateEmailDto,
     IDeleteAccountDto,
     ApiKeyDto,
+    ITransferOrganizationDto,
 };
 

packages/shared-types/src/organizations/ITransferOrganizationDto.ts

@@ -0,0 +1,3 @@
+export interface ITransferOrganizationDto {
+    user: string;
+}