Permission changes

src/endpoints/permissions/get_top_level_permitted_folders.rs

@@ -0,0 +1,11 @@
+use crate::prelude::*;
+
+pub async fn get_top_level(
+    State(state): State<AppState>,
+    claims: Claims,
+) -> Result<Json<Vec<Uuid>>, StatusCode> {
+    let folders = db::permissions::get_top_level_permitted_folders(claims.user_id, &state.pool)
+        .await
+        .handle_internal()?;
+    Ok(Json(folders))
+}

src/endpoints/permissions/mod.rs

@@ -1,3 +1,4 @@
 pub mod delete;
 pub mod get;
+pub mod get_top_level_permitted_folders;
 pub mod set;

src/endpoints/permissions/set.rs

@@ -14,6 +14,13 @@ pub async fn set(
     State(state): State<AppState>,
     Json(params): Json<Params>,
 ) -> Result<StatusCode, StatusCode> {
+    let root = db::folder::get_root(claims.user_id, &state.pool)
+        .await
+        .handle_internal()?;
+    if params.folder_id == root {
+        return Err(StatusCode::BAD_REQUEST);
+    }
+
     db::folder::get_permissions(params.folder_id, claims.user_id, &state.pool)
         .await
         .handle_internal()?