diff --git a/apps/api/src/services/company/index.ts b/apps/api/src/services/company/index.ts index 71e67d73..b6289167 100644 --- a/apps/api/src/services/company/index.ts +++ b/apps/api/src/services/company/index.ts @@ -26,7 +26,6 @@ export { acceptInvitation, cancelInvitation, getInvitationByToken, - getPendingInvitations, inviteMember, listPendingInvitations, resendInvitation, @@ -38,7 +37,6 @@ export { getMembers, listMembers, getUserCompanies, - hasPermission, removeMember, transferOwnership, updateMemberRole, diff --git a/apps/api/src/services/company/invitations.ts b/apps/api/src/services/company/invitations.ts index 04bc77dc..ca1e07da 100644 --- a/apps/api/src/services/company/invitations.ts +++ b/apps/api/src/services/company/invitations.ts @@ -221,37 +221,6 @@ export async function inviteMember( return invitation as unknown as Invitation; } -/** - * Gets pending invitations for a company - */ -export async function getPendingInvitations( - companyId: string, -): Promise { - const invitations = await db - .selectFrom("invitations as i") - .innerJoin("users as inviter", "inviter.id", "i.invited_by") - .select([ - "i.id", - "i.company_id", - "i.email", - "i.role", - "i.permissions", - "i.token", - "i.invited_by", - "inviter.name as inviter_name", - "inviter.email as inviter_email", - "i.expires_at", - "i.accepted_at", - "i.created_at", - ]) - .where("i.company_id", "=", companyId) - .where("i.accepted_at", "is", null) - .where("i.expires_at", ">", toDbDate()) - .execute(); - - return invitations as unknown as Invitation[]; -} - export interface ListPendingInvitationsOptions { search?: string; role?: "all" | "admin" | "member"; diff --git a/apps/api/src/services/company/members.ts b/apps/api/src/services/company/members.ts index a334b21d..3dd515f5 100644 --- a/apps/api/src/services/company/members.ts +++ b/apps/api/src/services/company/members.ts @@ -144,21 +144,6 @@ export async function getMemberRole( return (member?.role as "owner" | "admin" | "member") || null; } -/** - * Checks if a user has permission to perform an action - */ -export async function hasPermission( - companyId: string, - userId: string, - requiredRole: "owner" | "admin" | "member", -): Promise { - const role = await getMemberRole(companyId, userId); - if (!role) return false; - - const roleHierarchy = { owner: 3, admin: 2, member: 1 }; - return roleHierarchy[role] >= roleHierarchy[requiredRole]; -} - /** Hierarchy policy shared by role changes and member removal. */ export function canManageMember( actorRole: "owner" | "admin" | "member",