feature: restrict users from assigning any player to their match

Author: lukepolo

hasura/metadata/databases/default/tables/public_match_invites.yaml

@@ -19,10 +19,8 @@ insert_permissions:
           _and:
             - status:
                 _eq: PickingPlayers
-            - is_organizer:
-                _eq: true
-            - _and:
-                - is_in_lineup:
+            - _or:
+                - is_organizer:
                     _eq: true
                 - options:
                     lobby_access:
@@ -49,12 +47,9 @@ select_permissions:
         _or:
           - steam_id:
               _eq: X-Hasura-User-Id
-          - _and:
-              - match:
-                  is_in_lineup:
-                    _eq: true
-              - invited_by_player_steam_id:
-                  _eq: X-Hasura-User-Id
+          - match:
+              is_in_lineup:
+                _eq: true
     comment: ""
 delete_permissions:
   - role: user

hasura/metadata/databases/default/tables/public_match_lineup_players.yaml

@@ -9,22 +9,116 @@ object_relationships:
     using:
       foreign_key_constraint_on: steam_id
 insert_permissions:
-  - role: system_administrator
+  - role: match_organizer
     permission:
       check: {}
       columns:
         - captain
         - match_lineup_id
         - steam_id
     comment: ""
+  - role: streamer
+    permission:
+      check:
+        _and:
+          - lineup:
+              v_match_lineup:
+                match:
+                  is_organizer:
+                    _eq: true
+          - _or:
+              - _not:
+                  _exists:
+                    _table:
+                      name: settings
+                      schema: public
+                    _where:
+                      _and:
+                        - name:
+                            _eq: public.lineup_add_without_invite
+              - _exists:
+                  _table:
+                    name: settings
+                    schema: public
+                  _where:
+                    _and:
+                      - name:
+                          _eq: public.lineup_add_without_invite
+                      - value:
+                          _in:
+                            - user
+                            - verified_user
+                            - streamer
+      columns:
+        - captain
+        - match_lineup_id
+        - steam_id
+    comment: ""
   - role: user
     permission:
       check:
-        lineup:
-          v_match_lineup:
-            match:
-              is_organizer:
-                _eq: true
+        _and:
+          - lineup:
+              v_match_lineup:
+                match:
+                  is_organizer:
+                    _eq: true
+          - _or:
+              - _not:
+                  _exists:
+                    _table:
+                      name: settings
+                      schema: public
+                    _where:
+                      _and:
+                        - name:
+                            _eq: public.lineup_add_without_invite
+              - _exists:
+                  _table:
+                    name: settings
+                    schema: public
+                  _where:
+                    _and:
+                      - name:
+                          _eq: public.lineup_add_without_invite
+                      - value:
+                          _eq: user
+      columns:
+        - captain
+        - match_lineup_id
+        - steam_id
+    comment: ""
+  - role: verified_user
+    permission:
+      check:
+        _and:
+          - lineup:
+              v_match_lineup:
+                match:
+                  is_organizer:
+                    _eq: true
+          - _or:
+              - _not:
+                  _exists:
+                    _table:
+                      name: settings
+                      schema: public
+                    _where:
+                      _and:
+                        - name:
+                            _eq: public.lineup_add_without_invite
+              - _exists:
+                  _table:
+                    name: settings
+                    schema: public
+                  _where:
+                    _and:
+                      - name:
+                          _eq: public.lineup_add_without_invite
+                      - value:
+                          _in:
+                            - user
+                            - verified_user
       columns:
         - captain
         - match_lineup_id