Allow admins to view any project metrics

triggerdotdev · May 1, 2024 · c822c89 · c822c89
1 parent 4a987c3
commit c822c89
Showing 1 changed file with 31 additions and 12 deletions.
diff --git a/apps/webapp/app/routes/projects.v3.$projectRef.metrics.ts b/apps/webapp/app/routes/projects.v3.$projectRef.metrics.ts
@@ -20,22 +20,41 @@ export async function loader({ params, request }: LoaderFunctionArgs) {
 
   const validatedParams = ParamsSchema.parse(params);
 
-  const project = await prisma.project.findFirst({
+  const user = await prisma.user.findUnique({
     where: {
-      externalRef: validatedParams.projectRef,
-      organization: {
-        members: {
-          some: {
-            userId: authenticationResult.userId,
-          },
-        },
-      },
-    },
-    include: {
-      organization: true,
+      id: authenticationResult.userId,
     },
   });
 
+  if (!user) {
+    return json({ error: "Invalid or Missing Access Token" }, { status: 401 });
+  }
+
+  const project = user.admin
+    ? await prisma.project.findFirst({
+        where: {
+          externalRef: validatedParams.projectRef,
+        },
+        include: {
+          organization: true,
+        },
+      })
+    : await prisma.project.findFirst({
+        where: {
+          externalRef: validatedParams.projectRef,
+          organization: {
+            members: {
+              some: {
+                userId: authenticationResult.userId,
+              },
+            },
+          },
+        },
+        include: {
+          organization: true,
+        },
+      });
+
   if (!project) {
     return new Response("Not found", { status: 404 });
   }