Validate role for internship projects

src/components/project/workflow/project-workflow.ts

@@ -3,6 +3,7 @@ import { TransitionType as Type } from '../../workflow/dto';
 import { ProjectStep as Step } from '../dto';
 import { ProjectWorkflowEvent } from './dto';
 import {
+  hasValidRoleForProjectType,
   IsMultiplication,
   IsNotMultiplication,
   RequireOngoingEngagementsToBeFinalizingCompletion,
@@ -116,15 +117,15 @@ export const ProjectWorkflow = defineWorkflow({
       to: Step.PrepForFinancialEndorsement,
       label: 'Endorse Plan',
       type: Type.Approve,
-      conditions: IsNotMultiplication,
+      conditions: [IsNotMultiplication, hasValidRoleForProjectType],
     },
   'Pending Consultant Endorsement -> Prep for Financial Endorsement Without Consultant Endorsement':
     {
       from: Step.PendingConsultantEndorsement,
       to: Step.PrepForFinancialEndorsement,
       label: 'Do Not Endorse Plan',
       type: Type.Neutral,
-      conditions: IsNotMultiplication,
+      conditions: [IsNotMultiplication, hasValidRoleForProjectType],
     },
 
   // Prep for Financial Endorsement

src/components/project/workflow/transitions/conditions.ts

@@ -1,3 +1,4 @@
+import { ScopedRole } from '../../../authorization/dto';
 import { EngagementService } from '../../../engagement';
 import { EngagementStatus } from '../../../engagement/dto';
 import { TransitionCondition } from '../../../workflow/transitions/conditions';
@@ -23,6 +24,35 @@ export const IsMultiplication: Condition = {
   },
 };
 
+export const hasValidRoleForProjectType: Condition = {
+  description: 'Validate role by project type',
+  resolve({ project, session }) {
+    const validRoles: ScopedRole[] = [
+      'global:Administrator',
+      'global:Consultant',
+      'global:ConsultantManager',
+    ];
+    const hasAtLeastOneValidRole = validRoles.some((role) =>
+      session?.roles.includes(role),
+    );
+
+    switch (project.type) {
+      case 'MomentumTranslation':
+        return {
+          status: 'ENABLED',
+        };
+      case 'Internship':
+        return {
+          status: hasAtLeastOneValidRole ? 'ENABLED' : 'OMIT',
+        };
+      default:
+        return {
+          status: 'OMIT',
+        };
+    }
+  },
+};
+
 export const RequireOngoingEngagementsToBeFinalizingCompletion: Condition = {
   description:
     'All engagements must be Finalizing Completion or in a terminal status',

src/components/project/workflow/transitions/dynamic-step.ts

@@ -1,11 +1,13 @@
 import { ModuleRef } from '@nestjs/core';
+import { Session } from '~/common';
 import { DynamicState } from '../../../workflow/transitions/dynamic-state';
 import { Project, ProjectStep, ProjectStep as Step } from '../../dto';
 import { ProjectWorkflowRepository } from '../project-workflow.repository';
 
 export interface ResolveParams {
   project: Project;
   moduleRef: ModuleRef;
+  session?: Session;
 }
 
 export const BackTo = (

src/components/workflow/workflow.service.ts

@@ -31,6 +31,7 @@ export const WorkflowService = <W extends Workflow>(workflow: W) => {
       dynamicContext: W['context'],
       session: Session,
     ) {
+      const dynamicContextWithSession = { ...dynamicContext, session };
       let available = this.workflow.transitions;
 
       // Filter out non applicable transitions
@@ -52,7 +53,10 @@ export const WorkflowService = <W extends Workflow>(workflow: W) => {
         await Promise.all(
           [...new Set(conditions)].map(
             async (condition) =>
-              [condition, await condition.resolve(dynamicContext)] as const,
+              [
+                condition,
+                await condition.resolve(dynamicContextWithSession),
+              ] as const,
           ),
         ),
       );