RocketChat/Rocket.Chat

import type { IOmnichannelRoom } from '@rocket.chat/core-typings';
import { LivechatDepartment } from '@rocket.chat/models';
import type { FilterOperators } from 'mongodb';

import { callbacks } from '../../../../../lib/callbacks';
import { cbLogger } from '../lib/logger';
import { getUnitsFromUser } from '../lib/units';

export const restrictQuery = async (originalQuery: FilterOperators<IOmnichannelRoom> = {}) => {
    const query = { ...originalQuery };

    const units = await getUnitsFromUser();
    if (!Array.isArray(units)) {
        return query;
    }
    const departments = await LivechatDepartment.find({ ancestors: { $in: units } }, { projection: { _id: 1 } }).toArray();

    const expressions = query.$and || [];
    const condition = {
        $or: [{ departmentAncestors: { $in: units } }, { departmentId: { $in: departments.map(({ _id }) => _id) } }],
    };
    query.$and = [condition, ...expressions];

    cbLogger.debug({ msg: 'Applying room query restrictions', units });
    return query;
};

callbacks.add(
    'livechat.applyRoomRestrictions',
    async (originalQuery: FilterOperators<IOmnichannelRoom> = {}) => {
        return restrictQuery(originalQuery);
    },
    callbacks.priority.HIGH,
    'livechat-apply-room-restrictions',
);