feat(authz): Project.canCreateModel and Project.canMoveToWorkspace policies (#4342)

* feat(authz): Project.canCreateModel policy

* feat(authz): Project.canMoveToWorkspace policy

* fix(authz): expose policies as permissions objects

* chore(authz): actually use the policies lol

* chore(authz): add tests for new policies

* fix(authz): skip affected test

* fix(authz): pr comments

* fix(authz): better errors, better tests

* chore(authz): remove references to deleted error

packages/server/modules/workspaces/authz/loaders/index.ts

@@ -1,11 +1,16 @@
 import { db } from '@/db/knex'
+import { getPaginatedProjectModelsTotalCountFactory } from '@/modules/core/repositories/branches'
+import { legacyGetStreamsFactory } from '@/modules/core/repositories/streams'
 import { getWorkspacePlanFactory } from '@/modules/gatekeeper/repositories/billing'
 import { defineModuleLoaders } from '@/modules/loaders'
+import { getProjectDbClient } from '@/modules/multiregion/utils/dbSelector'
 import {
   getUserSsoSessionFactory,
   getWorkspaceSsoProviderRecordFactory
 } from '@/modules/workspaces/repositories/sso'
 import { getWorkspaceRoleForUserFactory } from '@/modules/workspaces/repositories/workspaces'
+import { queryAllWorkspaceProjectsFactory } from '@/modules/workspaces/services/projects'
+import { getWorkspaceModelCountFactory } from '@/modules/workspaces/services/workspaceLimits'
 import { WorkspacePaidPlanConfigs, WorkspaceUnpaidPlanConfigs } from '@speckle/shared'
 
 // TODO: Move everything to use dataLoaders
@@ -46,6 +51,21 @@ export default defineModuleLoaders(async () => {
         )?.type || null
       )
     },
+    getWorkspaceModelCount: async ({ workspaceId }) => {
+      // TODO: Dataloader that has to dynamically pick regional dbs?
+      return await getWorkspaceModelCountFactory({
+        queryAllWorkspaceProjects: queryAllWorkspaceProjectsFactory({
+          getStreams: legacyGetStreamsFactory({ db })
+        }),
+        getPaginatedProjectModelsTotalCount: async (projectId, params) => {
+          const regionDb = await getProjectDbClient({ projectId })
+          return await getPaginatedProjectModelsTotalCountFactory({ db: regionDb })(
+            projectId,
+            params
+          )
+        }
+      })({ workspaceId })
+    },
     getWorkspaceProjectCount: async ({ workspaceId }, { dataLoaders }) => {
       return await dataLoaders.workspaces!.getProjectCount.load(workspaceId)
     },