Refactor to requiredRoles instead and add back member role

steven-tey · steven-tey · commit b816883e998a · 2026-01-14T18:12:33.000-08:00
diff --git a/apps/web/app/(ee)/api/audit-logs/export/route.ts b/apps/web/app/(ee)/api/audit-logs/export/route.ts
@@ -54,7 +54,7 @@ export const POST = withWorkspace(
     });
   },
   {
-    requiredPermissions: ["workspaces.write"],
+    requiredRoles: ["owner", "member"],
     requiredPlan: ["enterprise"],
   },
 );
diff --git a/apps/web/app/(ee)/api/bounties/[bountyId]/route.ts b/apps/web/app/(ee)/api/bounties/[bountyId]/route.ts
@@ -228,7 +228,7 @@ export const PATCH = withWorkspace(
       "advanced",
       "enterprise",
     ],
-    requiredPermissions: ["workspaces.write"],
+    requiredRoles: ["owner", "member"],
   },
 );
 
@@ -312,6 +312,6 @@ export const DELETE = withWorkspace(
       "advanced",
       "enterprise",
     ],
-    requiredPermissions: ["workspaces.write"],
+    requiredRoles: ["owner", "member"],
   },
 );
diff --git a/apps/web/app/(ee)/api/bounties/route.ts b/apps/web/app/(ee)/api/bounties/route.ts
@@ -333,6 +333,6 @@ export const POST = withWorkspace(
       "advanced",
       "enterprise",
     ],
-    requiredPermissions: ["workspaces.write"],
+    requiredRoles: ["owner", "member"],
   },
 );
diff --git a/apps/web/app/(ee)/api/campaigns/[campaignId]/duplicate/route.ts b/apps/web/app/(ee)/api/campaigns/[campaignId]/duplicate/route.ts
@@ -78,6 +78,6 @@ export const POST = withWorkspace(
   },
   {
     requiredPlan: ["advanced", "enterprise"],
-    requiredPermissions: ["workspaces.write"],
+    requiredRoles: ["owner", "member"],
   },
 );
diff --git a/apps/web/app/(ee)/api/campaigns/[campaignId]/preview/route.ts b/apps/web/app/(ee)/api/campaigns/[campaignId]/preview/route.ts
@@ -107,6 +107,6 @@ export const POST = withWorkspace(
   },
   {
     requiredPlan: ["advanced", "enterprise"],
-    requiredPermissions: ["workspaces.write"],
+    requiredRoles: ["owner", "member"],
   },
 );
diff --git a/apps/web/app/(ee)/api/campaigns/route.ts b/apps/web/app/(ee)/api/campaigns/route.ts
@@ -135,6 +135,6 @@ export const POST = withWorkspace(
   },
   {
     requiredPlan: ["advanced", "enterprise"],
-    requiredPermissions: ["workspaces.write"],
+    requiredRoles: ["owner", "member"],
   },
 );
diff --git a/apps/web/app/(ee)/api/discount-codes/[discountCodeId]/route.ts b/apps/web/app/(ee)/api/discount-codes/[discountCodeId]/route.ts
@@ -74,6 +74,6 @@ export const DELETE = withWorkspace(
       "advanced",
       "enterprise",
     ],
-    requiredPermissions: ["workspaces.write"],
+    requiredRoles: ["owner", "member"],
   },
 );
diff --git a/apps/web/app/(ee)/api/discount-codes/route.ts b/apps/web/app/(ee)/api/discount-codes/route.ts
@@ -191,6 +191,6 @@ export const POST = withWorkspace(
       "advanced",
       "enterprise",
     ],
-    requiredPermissions: ["workspaces.write"],
+    requiredRoles: ["owner", "member"],
   },
 );
diff --git a/apps/web/app/(ee)/api/fraud/rules/route.ts b/apps/web/app/(ee)/api/fraud/rules/route.ts
@@ -120,6 +120,6 @@ export const PATCH = withWorkspace(
   },
   {
     requiredPlan: ["advanced", "enterprise"],
-    requiredPermissions: ["workspaces.write"],
+    requiredRoles: ["owner", "member"],
   },
 );
diff --git a/apps/web/app/(ee)/api/shopify/integration/callback/route.ts b/apps/web/app/(ee)/api/shopify/integration/callback/route.ts
@@ -85,7 +85,7 @@ export const PATCH = withWorkspace(
     }
   },
   {
-    requiredPermissions: ["workspaces.write"],
+    requiredRoles: ["owner", "member"],
     requiredPlan: [
       "business",
       "business plus",
diff --git a/apps/web/app/api/workspaces/[idOrSlug]/upload-url/route.ts b/apps/web/app/api/workspaces/[idOrSlug]/upload-url/route.ts
@@ -25,6 +25,6 @@ export const POST = withWorkspace(
     });
   },
   {
-    requiredPermissions: ["workspaces.write"],
+    requiredRoles: ["owner", "member"],
   },
 );
diff --git a/apps/web/lib/actions/fraud/bulk-resolve-fraud-groups.ts b/apps/web/lib/actions/fraud/bulk-resolve-fraud-groups.ts
@@ -16,7 +16,7 @@ export const bulkResolveFraudGroupsAction = authActionClient
 
     throwIfNoPermission({
       role: workspace.role,
-      requiredPermissions: ["workspaces.write"],
+      requiredRoles: ["owner", "member"],
     });
 
     const { canManageFraudEvents } = getPlanCapabilities(workspace.plan);
diff --git a/apps/web/lib/actions/fraud/resolve-fraud-group.ts b/apps/web/lib/actions/fraud/resolve-fraud-group.ts
@@ -16,7 +16,7 @@ export const resolveFraudGroupAction = authActionClient
 
     throwIfNoPermission({
       role: workspace.role,
-      requiredPermissions: ["workspaces.write"],
+      requiredRoles: ["owner", "member"],
     });
 
     const { canManageFraudEvents } = getPlanCapabilities(workspace.plan);
diff --git a/apps/web/lib/actions/partners/approve-bounty-submission.ts b/apps/web/lib/actions/partners/approve-bounty-submission.ts
@@ -21,7 +21,7 @@ export const approveBountySubmissionAction = authActionClient
 
     throwIfNoPermission({
       role: workspace.role,
-      requiredPermissions: ["workspaces.write"],
+      requiredRoles: ["owner", "member"],
     });
 
     const programId = getDefaultProgramIdOrThrow(workspace);
diff --git a/apps/web/lib/actions/partners/approve-partner.ts b/apps/web/lib/actions/partners/approve-partner.ts
@@ -15,7 +15,7 @@ export const approvePartnerAction = authActionClient
 
     throwIfNoPermission({
       role: workspace.role,
-      requiredPermissions: ["workspaces.write"],
+      requiredRoles: ["owner", "member"],
     });
 
     const programId = getDefaultProgramIdOrThrow(workspace);
diff --git a/apps/web/lib/actions/partners/archive-partner.ts b/apps/web/lib/actions/partners/archive-partner.ts
@@ -18,7 +18,7 @@ export const archivePartnerAction = authActionClient
 
     throwIfNoPermission({
       role: workspace.role,
-      requiredPermissions: ["workspaces.write"],
+      requiredRoles: ["owner", "member"],
     });
 
     const programId = getDefaultProgramIdOrThrow(workspace);
diff --git a/apps/web/lib/actions/partners/ban-partner.ts b/apps/web/lib/actions/partners/ban-partner.ts
@@ -31,7 +31,7 @@ export const banPartnerAction = authActionClient
 
     throwIfNoPermission({
       role: workspace.role,
-      requiredPermissions: ["workspaces.write"],
+      requiredRoles: ["owner", "member"],
     });
 
     await banPartner({
diff --git a/apps/web/lib/actions/partners/bulk-approve-partners.ts b/apps/web/lib/actions/partners/bulk-approve-partners.ts
@@ -19,7 +19,7 @@ export const bulkApprovePartnersAction = authActionClient
 
     throwIfNoPermission({
       role: workspace.role,
-      requiredPermissions: ["workspaces.write"],
+      requiredRoles: ["owner", "member"],
     });
 
     const programId = getDefaultProgramIdOrThrow(workspace);
diff --git a/apps/web/lib/actions/partners/bulk-archive-partners.ts b/apps/web/lib/actions/partners/bulk-archive-partners.ts
@@ -16,7 +16,7 @@ export const bulkArchivePartnersAction = authActionClient
 
     throwIfNoPermission({
       role: workspace.role,
-      requiredPermissions: ["workspaces.write"],
+      requiredRoles: ["owner", "member"],
     });
 
     const programId = getDefaultProgramIdOrThrow(workspace);
diff --git a/apps/web/lib/actions/partners/bulk-ban-partners.ts b/apps/web/lib/actions/partners/bulk-ban-partners.ts
@@ -20,7 +20,7 @@ export const bulkBanPartnersAction = authActionClient
 
     throwIfNoPermission({
       role: workspace.role,
-      requiredPermissions: ["workspaces.write"],
+      requiredRoles: ["owner", "member"],
     });
 
     const programId = getDefaultProgramIdOrThrow(workspace);
diff --git a/apps/web/lib/actions/partners/bulk-reject-partner-applications.ts b/apps/web/lib/actions/partners/bulk-reject-partner-applications.ts
@@ -23,7 +23,7 @@ export const bulkRejectPartnerApplicationsAction = authActionClient
 
     throwIfNoPermission({
       role: workspace.role,
-      requiredPermissions: ["workspaces.write"],
+      requiredRoles: ["owner", "member"],
     });
 
     const programId = getDefaultProgramIdOrThrow(workspace);
diff --git a/apps/web/lib/actions/partners/create-clawback.ts b/apps/web/lib/actions/partners/create-clawback.ts
@@ -15,7 +15,7 @@ export const createClawbackAction = authActionClient
 
     throwIfNoPermission({
       role: workspace.role,
-      requiredPermissions: ["workspaces.write"],
+      requiredRoles: ["owner", "member"],
     });
 
     const { partnerId, amount, description } = parsedInput;
diff --git a/apps/web/lib/actions/partners/create-discount.ts b/apps/web/lib/actions/partners/create-discount.ts
@@ -32,7 +32,7 @@ export const createDiscountAction = authActionClient
 
     throwIfNoPermission({
       role: workspace.role,
-      requiredPermissions: ["workspaces.write"],
+      requiredRoles: ["owner", "member"],
     });
 
     const programId = getDefaultProgramIdOrThrow(workspace);
diff --git a/apps/web/lib/actions/partners/create-manual-commission.ts b/apps/web/lib/actions/partners/create-manual-commission.ts
@@ -46,7 +46,7 @@ export const createManualCommissionAction = authActionClient
 
     throwIfNoPermission({
       role: workspace.role,
-      requiredPermissions: ["workspaces.write"],
+      requiredRoles: ["owner", "member"],
     });
 
     const {
diff --git a/apps/web/lib/actions/partners/create-reward.ts b/apps/web/lib/actions/partners/create-reward.ts
@@ -35,7 +35,7 @@ export const createRewardAction = authActionClient
 
     throwIfNoPermission({
       role: workspace.role,
-      requiredPermissions: ["workspaces.write"],
+      requiredRoles: ["owner", "member"],
     });
 
     const programId = getDefaultProgramIdOrThrow(workspace);
diff --git a/apps/web/lib/actions/partners/deactivate-partner.ts b/apps/web/lib/actions/partners/deactivate-partner.ts
@@ -23,7 +23,7 @@ export const deactivatePartnerAction = authActionClient
 
     throwIfNoPermission({
       role: workspace.role,
-      requiredPermissions: ["workspaces.write"],
+      requiredRoles: ["owner", "member"],
     });
 
     const programId = getDefaultProgramIdOrThrow(workspace);
diff --git a/apps/web/lib/actions/partners/delete-discount.ts b/apps/web/lib/actions/partners/delete-discount.ts
@@ -25,7 +25,7 @@ export const deleteDiscountAction = authActionClient
 
     throwIfNoPermission({
       role: workspace.role,
-      requiredPermissions: ["workspaces.write"],
+      requiredRoles: ["owner", "member"],
     });
 
     const programId = getDefaultProgramIdOrThrow(workspace);
diff --git a/apps/web/lib/actions/partners/delete-program-invite.ts b/apps/web/lib/actions/partners/delete-program-invite.ts
@@ -21,7 +21,7 @@ export const deleteProgramInviteAction = authActionClient
 
     throwIfNoPermission({
       role: workspace.role,
-      requiredPermissions: ["workspaces.write"],
+      requiredRoles: ["owner", "member"],
     });
 
     const programId = getDefaultProgramIdOrThrow(workspace);
diff --git a/apps/web/lib/actions/partners/delete-reward.ts b/apps/web/lib/actions/partners/delete-reward.ts
@@ -23,7 +23,7 @@ export const deleteRewardAction = authActionClient
 
     throwIfNoPermission({
       role: workspace.role,
-      requiredPermissions: ["workspaces.write"],
+      requiredRoles: ["owner", "member"],
     });
 
     const programId = getDefaultProgramIdOrThrow(workspace);
diff --git a/apps/web/lib/actions/partners/generate-lander.ts b/apps/web/lib/actions/partners/generate-lander.ts
@@ -36,7 +36,7 @@ export const generateLanderAction = authActionClient
 
     throwIfNoPermission({
       role: workspace.role,
-      requiredPermissions: ["workspaces.write"],
+      requiredRoles: ["owner", "member"],
     });
 
     const programId = getDefaultProgramIdOrThrow(workspace);
diff --git a/apps/web/lib/actions/partners/invite-partner-from-network.ts b/apps/web/lib/actions/partners/invite-partner-from-network.ts
@@ -22,7 +22,7 @@ export const invitePartnerFromNetworkAction = authActionClient
 
     throwIfNoPermission({
       role: workspace.role,
-      requiredPermissions: ["workspaces.write"],
+      requiredRoles: ["owner", "member"],
     });
 
     const networkInvitesUsage = await getNetworkInvitesUsage(workspace);
diff --git a/apps/web/lib/actions/partners/invite-partner.ts b/apps/web/lib/actions/partners/invite-partner.ts
@@ -21,7 +21,7 @@ export const invitePartnerAction = authActionClient
 
     throwIfNoPermission({
       role: workspace.role,
-      requiredPermissions: ["workspaces.write"],
+      requiredRoles: ["owner", "member"],
     });
 
     const programId = getDefaultProgramIdOrThrow(workspace);
diff --git a/apps/web/lib/actions/partners/mark-commission-duplicate.ts b/apps/web/lib/actions/partners/mark-commission-duplicate.ts
@@ -24,7 +24,7 @@ export const markCommissionDuplicateAction = authActionClient
 
     throwIfNoPermission({
       role: workspace.role,
-      requiredPermissions: ["workspaces.write"],
+      requiredRoles: ["owner", "member"],
     });
 
     const programId = getDefaultProgramIdOrThrow(workspace);
diff --git a/apps/web/lib/actions/partners/mark-commission-fraud-or-canceled.ts b/apps/web/lib/actions/partners/mark-commission-fraud-or-canceled.ts
@@ -24,7 +24,7 @@ export const markCommissionFraudOrCanceledAction = authActionClient
 
     throwIfNoPermission({
       role: workspace.role,
-      requiredPermissions: ["workspaces.write"],
+      requiredRoles: ["owner", "member"],
     });
 
     const programId = getDefaultProgramIdOrThrow(workspace);
diff --git a/apps/web/lib/actions/partners/onboard-program.ts b/apps/web/lib/actions/partners/onboard-program.ts
@@ -19,7 +19,7 @@ export const onboardProgramAction = authActionClient
 
     throwIfNoPermission({
       role: workspace.role,
-      requiredPermissions: ["workspaces.write"],
+      requiredRoles: ["owner", "member"],
     });
 
     if (workspace.defaultProgramId) {
diff --git a/apps/web/lib/actions/partners/program-resources/add-program-resource.ts b/apps/web/lib/actions/partners/program-resources/add-program-resource.ts
@@ -64,7 +64,7 @@ export const addProgramResourceAction = authActionClient
 
     throwIfNoPermission({
       role: workspace.role,
-      requiredPermissions: ["workspaces.write"],
+      requiredRoles: ["owner", "member"],
     });
 
     const programId = getDefaultProgramIdOrThrow(workspace);
diff --git a/apps/web/lib/actions/partners/program-resources/delete-program-resource.ts b/apps/web/lib/actions/partners/program-resources/delete-program-resource.ts
@@ -27,7 +27,7 @@ export const deleteProgramResourceAction = authActionClient
 
     throwIfNoPermission({
       role: workspace.role,
-      requiredPermissions: ["workspaces.write"],
+      requiredRoles: ["owner", "member"],
     });
 
     const programId = getDefaultProgramIdOrThrow(workspace);
diff --git a/apps/web/lib/actions/partners/reactivate-partner.ts b/apps/web/lib/actions/partners/reactivate-partner.ts
@@ -19,7 +19,7 @@ export const reactivatePartnerAction = authActionClient
 
     throwIfNoPermission({
       role: workspace.role,
-      requiredPermissions: ["workspaces.write"],
+      requiredRoles: ["owner", "member"],
     });
 
     const programId = getDefaultProgramIdOrThrow(workspace);
diff --git a/apps/web/lib/actions/partners/reject-bounty-submission.ts b/apps/web/lib/actions/partners/reject-bounty-submission.ts
@@ -21,7 +21,7 @@ export const rejectBountySubmissionAction = authActionClient
 
     throwIfNoPermission({
       role: workspace.role,
-      requiredPermissions: ["workspaces.write"],
+      requiredRoles: ["owner", "member"],
     });
 
     const programId = getDefaultProgramIdOrThrow(workspace);
diff --git a/apps/web/lib/actions/partners/reject-partner-application.ts b/apps/web/lib/actions/partners/reject-partner-application.ts
@@ -23,7 +23,7 @@ export const rejectPartnerApplicationAction = authActionClient
 
     throwIfNoPermission({
       role: workspace.role,
-      requiredPermissions: ["workspaces.write"],
+      requiredRoles: ["owner", "member"],
     });
 
     const programId = getDefaultProgramIdOrThrow(workspace);
diff --git a/apps/web/lib/actions/partners/reopen-bounty-submission.ts b/apps/web/lib/actions/partners/reopen-bounty-submission.ts
@@ -23,7 +23,7 @@ export const reopenBountySubmissionAction = authActionClient
 
     throwIfNoPermission({
       role: workspace.role,
-      requiredPermissions: ["workspaces.write"],
+      requiredRoles: ["owner", "member"],
     });
 
     const programId = getDefaultProgramIdOrThrow(workspace);
diff --git a/apps/web/lib/actions/partners/resend-program-invite.ts b/apps/web/lib/actions/partners/resend-program-invite.ts
@@ -23,7 +23,7 @@ export const resendProgramInviteAction = authActionClient
 
     throwIfNoPermission({
       role: workspace.role,
-      requiredPermissions: ["workspaces.write"],
+      requiredRoles: ["owner", "member"],
     });
 
     const programId = getDefaultProgramIdOrThrow(workspace);
diff --git a/apps/web/lib/actions/partners/revoke-program-invite.ts b/apps/web/lib/actions/partners/revoke-program-invite.ts
@@ -24,7 +24,7 @@ export const revokeProgramInviteAction = authActionClient
 
     throwIfNoPermission({
       role: workspace.role,
-      requiredPermissions: ["workspaces.write"],
+      requiredRoles: ["owner", "member"],
     });
 
     const programId = getDefaultProgramIdOrThrow(workspace);
diff --git a/apps/web/lib/actions/partners/save-invite-email-data.ts b/apps/web/lib/actions/partners/save-invite-email-data.ts
@@ -22,7 +22,7 @@ export const saveInviteEmailDataAction = authActionClient
 
     throwIfNoPermission({
       role: workspace.role,
-      requiredPermissions: ["workspaces.write"],
+      requiredRoles: ["owner", "member"],
     });
 
     const programId = getDefaultProgramIdOrThrow(workspace);
diff --git a/apps/web/lib/actions/partners/set-rewardful-token.ts b/apps/web/lib/actions/partners/set-rewardful-token.ts
diff --git a/apps/web/lib/actions/partners/set-tolt-token.ts b/apps/web/lib/actions/partners/set-tolt-token.ts
diff --git a/apps/web/lib/actions/partners/start-firstpromoter-import.ts b/apps/web/lib/actions/partners/start-firstpromoter-import.ts
diff --git a/apps/web/lib/actions/partners/start-partnerstack-import.ts b/apps/web/lib/actions/partners/start-partnerstack-import.ts
diff --git a/apps/web/lib/actions/partners/start-rewardful-import.ts b/apps/web/lib/actions/partners/start-rewardful-import.ts
diff --git a/apps/web/lib/actions/partners/start-tolt-import.ts b/apps/web/lib/actions/partners/start-tolt-import.ts
diff --git a/apps/web/lib/actions/partners/unban-partner.ts b/apps/web/lib/actions/partners/unban-partner.ts
diff --git a/apps/web/lib/actions/partners/update-application-settings.ts b/apps/web/lib/actions/partners/update-application-settings.ts
diff --git a/apps/web/lib/actions/partners/update-discount.ts b/apps/web/lib/actions/partners/update-discount.ts
diff --git a/apps/web/lib/actions/partners/update-discovered-partner.ts b/apps/web/lib/actions/partners/update-discovered-partner.ts
diff --git a/apps/web/lib/actions/partners/update-group-branding.ts b/apps/web/lib/actions/partners/update-group-branding.ts
diff --git a/apps/web/lib/actions/partners/update-partner-enrollment.ts b/apps/web/lib/actions/partners/update-partner-enrollment.ts
diff --git a/apps/web/lib/actions/partners/update-program.ts b/apps/web/lib/actions/partners/update-program.ts
diff --git a/apps/web/lib/actions/partners/update-reward.ts b/apps/web/lib/actions/partners/update-reward.ts
diff --git a/apps/web/lib/actions/partners/upload-campaign-image.ts b/apps/web/lib/actions/partners/upload-campaign-image.ts
diff --git a/apps/web/lib/actions/partners/upload-lander-image.ts b/apps/web/lib/actions/partners/upload-lander-image.ts
diff --git a/apps/web/lib/actions/throw-if-no-permission.ts b/apps/web/lib/actions/throw-if-no-permission.ts

Original file line number	Diff line number	Diff line change
`@@ -54,7 +54,7 @@ export const POST = withWorkspace(`
`54`	`54`	`});`
`55`	`55`	`},`
`56`	`56`	`{`
`57`		`- requiredPermissions: ["workspaces.write"],`
	`57`	`+ requiredRoles: ["owner", "member"],`
`58`	`58`	`requiredPlan: ["enterprise"],`
`59`	`59`	`},`
`60`	`60`	`);`
Original file line number	Diff line number	Diff line change
`@@ -78,6 +78,6 @@ export const POST = withWorkspace(`
`78`	`78`	`},`
`79`	`79`	`{`
`80`	`80`	`requiredPlan: ["advanced", "enterprise"],`
`81`		`- requiredPermissions: ["workspaces.write"],`
	`81`	`+ requiredRoles: ["owner", "member"],`
`82`	`82`	`},`
`83`	`83`	`);`
Original file line number	Diff line number	Diff line change
`@@ -107,6 +107,6 @@ export const POST = withWorkspace(`
`107`	`107`	`},`
`108`	`108`	`{`
`109`	`109`	`requiredPlan: ["advanced", "enterprise"],`
`110`		`- requiredPermissions: ["workspaces.write"],`
	`110`	`+ requiredRoles: ["owner", "member"],`
`111`	`111`	`},`
`112`	`112`	`);`
Original file line number	Diff line number	Diff line change
`@@ -135,6 +135,6 @@ export const POST = withWorkspace(`
`135`	`135`	`},`
`136`	`136`	`{`
`137`	`137`	`requiredPlan: ["advanced", "enterprise"],`
`138`		`- requiredPermissions: ["workspaces.write"],`
	`138`	`+ requiredRoles: ["owner", "member"],`
`139`	`139`	`},`
`140`	`140`	`);`
Original file line number	Diff line number	Diff line change
`@@ -120,6 +120,6 @@ export const PATCH = withWorkspace(`
`120`	`120`	`},`
`121`	`121`	`{`
`122`	`122`	`requiredPlan: ["advanced", "enterprise"],`
`123`		`- requiredPermissions: ["workspaces.write"],`
	`123`	`+ requiredRoles: ["owner", "member"],`
`124`	`124`	`},`
`125`	`125`	`);`
Original file line number	Diff line number	Diff line change
`@@ -85,7 +85,7 @@ export const PATCH = withWorkspace(`
`85`	`85`	`}`
`86`	`86`	`},`
`87`	`87`	`{`
`88`		`- requiredPermissions: ["workspaces.write"],`
	`88`	`+ requiredRoles: ["owner", "member"],`
`89`	`89`	`requiredPlan: [`
`90`	`90`	`"business",`
`91`	`91`	`"business plus",`