Add delete permission to group and membership tables

packages/api/src/services/groups.ts

@@ -172,19 +172,25 @@ export const leaveGroup = async (
       throw new Error('User not in group')
     }
 
+    const membershipId = membership.id
     await t.getRepository(GroupMembership).remove(membership)
 
+    if (group.members.length === 1) {
+      // delete the group if there are no more members
+      await t.getRepository(Group).remove(group)
+
+      return true
+    }
+
     if (membership.isAdmin) {
-      // If the user is the admin, we need to promote another user to admin
+      // If the user is the only admin, we need to promote another user to admin
       const hasAdmin = group.members.some(
-        (m) => m.isAdmin && m.user.id !== user.id
+        (m) => m.isAdmin && m.id !== membershipId
       )
       if (!hasAdmin) {
         const newAdmin = group.members.find((m) => !m.isAdmin)
         if (!newAdmin) {
-          // delete the group if there are no more members
-          await t.getRepository(Group).delete({ id: group.id })
-          return true
+          throw new Error('No user found')
         }
 
         newAdmin.isAdmin = true

packages/db/migrations/0103.do.add_delete_permission_to_group.sql

@@ -0,0 +1,11 @@
+-- Type: DO
+-- Name: add_delete_permission_to_group
+-- Description: Add delete permission to group and membership table
+
+BEGIN;
+
+GRANT DELETE ON omnivore."group" TO omnivore_user;
+
+GRANT DELETE ON omnivore.group_membership TO omnivore_user;
+
+COMMIT;

packages/db/migrations/0103.undo.add_delete_permission_to_group.sql

@@ -0,0 +1,11 @@
+-- Type: UNDO
+-- Name: add_delete_permission_to_group
+-- Description: Add delete permission to group and membership table
+
+BEGIN;
+
+REVOKE DELETE ON omnivore.group_membership FROM omnivore_user;
+
+REVOKE DELETE ON omnivore."group" FROM omnivore_user;
+
+COMMIT;