fix: event-type permissions (calcom#24318)

* New permission function

* Update permission check service to have fall backs

Update event type create permission procedure to also have org heigharchy

* Update get eventType handler to use new procedure

* Type check

* Type fix

* Update packages/features/pbac/lib/event-type-permissions.ts

Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>

* Fix type errorr

---------

Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>

Author: sean-brydon

apps/web/app/(use-page-wrapper)/event-types/[type]/page.tsx

@@ -8,10 +8,7 @@ import { z } from "zod";
 
 import { EventTypeWebWrapper } from "@calcom/atoms/event-types/wrappers/EventTypeWebWrapper";
 import { getServerSession } from "@calcom/features/auth/lib/getServerSession";
-import { Resource } from "@calcom/features/pbac/domain/types/permission-registry";
-import { getResourcePermissions } from "@calcom/features/pbac/lib/resource-permissions";
-import { prisma } from "@calcom/prisma";
-import { MembershipRole } from "@calcom/prisma/enums";
+import { getEventTypePermissions } from "@calcom/features/pbac/lib/event-type-permissions";
 import { eventTypesRouter } from "@calcom/trpc/server/routers/viewer/eventTypes/_router";
 
 import { buildLegacyRequest } from "@lib/buildLegacyCtx";
@@ -44,95 +41,6 @@ const getCachedEventType = unstable_cache(
   { revalidate: 3600 } // Cache for 1 hour
 );
 
-const getEventPermissions = async (userId: number, teamId: number | null) => {
-  // Personal event - has all perms
-  if (!teamId)
-    return {
-      eventTypes: {
-        canRead: true,
-        canCreate: true,
-        canUpdate: true,
-        canDelete: true,
-      },
-      workflows: {
-        canRead: true,
-        canCreate: true,
-        canUpdate: true,
-        canDelete: true,
-      },
-    };
-
-  const membership = await prisma.membership.findFirst({
-    where: {
-      userId,
-      teamId,
-    },
-    select: {
-      role: true,
-    },
-  });
-
-  if (!membership) throw new Error("Membership not found");
-
-  const [eventTypePermissions, workflowPermissions] = await Promise.all([
-    getResourcePermissions({
-      userId,
-      teamId,
-      resource: Resource.EventType,
-      userRole: membership.role,
-      fallbackRoles: {
-        read: {
-          roles: [MembershipRole.MEMBER, MembershipRole.ADMIN, MembershipRole.OWNER],
-        },
-        update: {
-          roles: [MembershipRole.ADMIN, MembershipRole.OWNER],
-        },
-        delete: {
-          roles: [MembershipRole.ADMIN, MembershipRole.OWNER],
-        },
-        create: {
-          roles: [MembershipRole.ADMIN, MembershipRole.OWNER],
-        },
-      },
-    }),
-    getResourcePermissions({
-      userId,
-      teamId,
-      resource: Resource.Workflow,
-      userRole: membership.role,
-      fallbackRoles: {
-        read: {
-          roles: [MembershipRole.MEMBER, MembershipRole.ADMIN, MembershipRole.OWNER],
-        },
-        update: {
-          roles: [MembershipRole.ADMIN, MembershipRole.OWNER],
-        },
-        delete: {
-          roles: [MembershipRole.ADMIN, MembershipRole.OWNER],
-        },
-        create: {
-          roles: [MembershipRole.ADMIN, MembershipRole.OWNER],
-        },
-      },
-    }),
-  ]);
-
-  return {
-    eventTypes: {
-      canRead: eventTypePermissions.canRead,
-      canCreate: eventTypePermissions.canCreate,
-      canUpdate: eventTypePermissions.canEdit,
-      canDelete: eventTypePermissions.canDelete,
-    },
-    workflows: {
-      canRead: workflowPermissions.canRead,
-      canCreate: workflowPermissions.canCreate,
-      canUpdate: workflowPermissions.canEdit,
-      canDelete: workflowPermissions.canDelete,
-    },
-  };
-};
-
 const ServerPage = async ({ params }: PageProps) => {
   const session = await getServerSession({ req: buildLegacyRequest(await headers(), await cookies()) });
   if (!session?.user?.id) {
@@ -153,7 +61,7 @@ const ServerPage = async ({ params }: PageProps) => {
   }
 
   // Fetch permissions for the event type's team
-  const permissions = await getEventPermissions(session.user.id, data.eventType.teamId);
+  const permissions = await getEventTypePermissions(session.user.id, data.eventType.teamId);
 
   return <EventTypeWebWrapper data={data} id={eventTypeId} permissions={permissions} />;
 };