package teammemberships import ( "net/http" "github.com/portainer/portainer" httperror "github.com/portainer/portainer/http/error" "github.com/portainer/portainer/http/request" "github.com/portainer/portainer/http/response" "github.com/portainer/portainer/http/security" ) type teamMembershipCreatePayload struct { UserID int TeamID int Role int } func (payload *teamMembershipCreatePayload) Validate(r *http.Request) error { if payload.UserID == 0 { return portainer.Error("Invalid UserID") } if payload.TeamID == 0 { return portainer.Error("Invalid TeamID") } if payload.Role != 1 && payload.Role != 2 { return portainer.Error("Invalid role value. Value must be one of: 1 (leader) or 2 (member)") } return nil } // POST request on /api/team_memberships func (handler *Handler) teamMembershipCreate(w http.ResponseWriter, r *http.Request) *httperror.HandlerError { var payload teamMembershipCreatePayload err := request.DecodeAndValidateJSONPayload(r, &payload) if err != nil { return &httperror.HandlerError{http.StatusBadRequest, "Invalid request payload", err} } securityContext, err := security.RetrieveRestrictedRequestContext(r) if err != nil { return &httperror.HandlerError{http.StatusInternalServerError, "Unable to retrieve info from request context", err} } if !security.AuthorizedTeamManagement(portainer.TeamID(payload.TeamID), securityContext) { return &httperror.HandlerError{http.StatusForbidden, "Permission denied to manage team memberships", portainer.ErrResourceAccessDenied} } memberships, err := handler.TeamMembershipService.TeamMembershipsByUserID(portainer.UserID(payload.UserID)) if err != nil { return &httperror.HandlerError{http.StatusInternalServerError, "Unable to retrieve team memberships from the database", err} } if len(memberships) > 0 { for _, membership := range memberships { if membership.UserID == portainer.UserID(payload.UserID) && membership.TeamID == portainer.TeamID(payload.TeamID) { return &httperror.HandlerError{http.StatusConflict, "Team membership already registered", portainer.ErrTeamMembershipAlreadyExists} } } } membership := &portainer.TeamMembership{ UserID: portainer.UserID(payload.UserID), TeamID: portainer.TeamID(payload.TeamID), Role: portainer.MembershipRole(payload.Role), } err = handler.TeamMembershipService.CreateTeamMembership(membership) if err != nil { return &httperror.HandlerError{http.StatusInternalServerError, "Unable to persist team memberships inside the database", err} } return response.JSON(w, membership) }