feat(authz): Workspace.canInvite and Project.canInvite (#4419)

packages/server/modules/workspaces/tests/integration/invites.graph.spec.ts

@@ -186,9 +186,7 @@ describe('Workspaces Invites GQL', () => {
           }
         })
 
-        expect(res).to.haveGraphQLErrors(
-          'Attempting to invite into a non-existant workspace'
-        )
+        expect(res).to.haveGraphQLErrors('You do not have access to the workspace')
         expect(res.data?.workspaceMutations?.invites?.create).to.not.be.ok
       })
 
@@ -226,7 +224,9 @@ describe('Workspaces Invites GQL', () => {
           }
         })
 
-        expect(res).to.haveGraphQLErrors('You are not authorized')
+        expect(res).to.haveGraphQLErrors(
+          'You do not have enough permissions in the workspace to perform this action'
+        )
         expect(res.data?.workspaceMutations?.invites?.create).to.not.be.ok
       })
 
@@ -269,7 +269,9 @@ describe('Workspaces Invites GQL', () => {
           }))
         })
 
-        expect(res).to.haveGraphQLErrors('You are not authorized')
+        expect(res).to.haveGraphQLErrors(
+          'You do not have enough permissions in the workspace to perform this action'
+        )
         expect(res.data?.workspaceMutations?.invites?.batchCreate).to.not.be.ok
       })
 
@@ -739,7 +741,9 @@ describe('Workspaces Invites GQL', () => {
           }
         })
 
-        expect(res).to.haveGraphQLErrors('You are not authorized')
+        expect(res).to.haveGraphQLErrors(
+          'You do not have enough permissions in the workspace to perform this action'
+        )
         expect(res.data?.workspaceMutations?.invites?.cancel).to.not.be.ok
 
         const invite = await findInviteFactory({ db })({

packages/server/modules/workspaces/tests/integration/workspaces.graph.spec.ts

@@ -1082,7 +1082,9 @@ describe('Workspaces GQL CRUD', () => {
         })
 
         expect(deleteRes).to.not.haveGraphQLErrors()
-        expect(getRes).to.haveGraphQLErrors('Workspace not found')
+        expect(getRes).to.haveGraphQLErrors(
+          'You are not authorized to access this resource'
+        )
       })
 
       it('should throw if non-workspace-admin triggers delete', async () => {