From ec0b5fe6c4bfef89927954477d4b45c93eccabd6 Mon Sep 17 00:00:00 2001
From: Guillaume Dorce <polynux.dev@gmail.com>
Date: Fri, 14 Oct 2022 15:47:04 +0200
Subject: [PATCH] give user admin or user role. can't change creator role

---
 client/src/components/User.tsx           | 29 ++++++++++++++++++++----
 client/src/controllers/UserController.ts |  7 +++---
 2 files changed, 28 insertions(+), 8 deletions(-)

diff --git a/client/src/components/User.tsx b/client/src/components/User.tsx
index dcd3cb3..3a640b8 100644
--- a/client/src/components/User.tsx
+++ b/client/src/components/User.tsx
@@ -1,12 +1,23 @@
 import { useState } from 'react';
 import Modal from './Modal';
-import { giveUserRights } from '@controllers/UserController';
+import { getMeInfo, giveUserRights } from '@controllers/UserController';
 import { toastError, toastSuccess } from '@controllers/Toasts';
+import { useQuery, useQueryClient } from '@tanstack/react-query';
 
 const User = ({ author }: any) => {
   const [show, setShow] = useState(false);
   const [popupPos, setPopupPos] = useState({ posX: 0, posY: 0 });
   const [messageId, setMessageId] = useState('0');
+  const me = useQuery(['me'], getMeInfo, {
+    onSuccess: (data) => {
+      return data;
+    },
+    onError: (error) => {
+      toastError(error as string);
+    },
+  });
+  
+  const queryClient = useQueryClient();
 
   function handleContextMenu(e: any) {
 
@@ -28,7 +39,7 @@ const User = ({ author }: any) => {
 
   document.addEventListener('click', handleClick);
 
-  const handleRightClick = (e: any) => {
+  const handleRightClick = async (e: any) => {
     e.preventDefault();
     setMessageId(e.target.closest('.message').id.slice(9));
     setPopupPos({ posX: e.clientX, posY: e.clientY });
@@ -37,11 +48,12 @@ const User = ({ author }: any) => {
   async function changeRights() {
     setPopupPos({ posX: 0, posY: 0 });
     setMessageId('0');
-    const response = await giveUserRights(author.id, 'ADMIN');
+    const response = await giveUserRights(author.id, author.role === 'USER' ? 'ADMIN' : 'USER');
     if (response.error) {
       return toastError(response.error);
     }
     toastSuccess('User rights changed');
+    queryClient.invalidateQueries(['messages']);
   }
 
   return (
@@ -49,7 +61,14 @@ const User = ({ author }: any) => {
       <button
         className="text-red-light text-xl username"
         onClick={() => setShow(true)}
-        onContextMenu={handleRightClick}
+        onContextMenu={(e) => {
+          if (author.role === 'CREATOR') {
+            return;
+          }
+          if (me.data?.role === 'ADMIN' || me.data?.role === 'CREATOR') {
+            handleRightClick(e);
+          }
+        }}
       >
         {author.firstName} {author.lastName}
       </button>
@@ -64,7 +83,7 @@ const User = ({ author }: any) => {
               className="popup-item block text-white rounded-xl p-2 transition-all hover:cursor-pointer hover:bg-grey-light hover:text-grey-dark"
               onClick={changeRights}
             >
-              Donner le role d'admin
+              Donner le role {author.role === 'ADMIN' ? 'utilisateur' : 'administrateur'}
             </button>
           </div>
         </div>
diff --git a/client/src/controllers/UserController.ts b/client/src/controllers/UserController.ts
index d97e76e..ea578f6 100644
--- a/client/src/controllers/UserController.ts
+++ b/client/src/controllers/UserController.ts
@@ -58,14 +58,15 @@ const signup = async (formData: FormData) => {
   return data;
 };
 
-export const giveUserRights = async (userId: string, right: string) => {
-  const response = await fetch(`/api/users/${userId}/rights`, {
+export const giveUserRights = async (userId: string, role: string) => {
+  const response = await fetch(`/api/users/${userId}/roles`, {
     method: 'POST',
     mode: 'cors',
     headers: {
       Authorization: `Bearer ${token}`,
+      'Content-Type': 'application/json',
     },
-    body: JSON.stringify({ right }),
+    body: JSON.stringify({ role }),
   });
   if (!response.ok) {
     return {error: response.statusText};