feat: Version 2

Closes #627, closes #1047

server/api/controllers/labels/update.js

@@ -1,3 +1,10 @@
+/*!
+ * Copyright (c) 2024 PLANKA Software GmbH
+ * Licensed under the Fair Use License: https://github.com/plankanban/planka/blob/master/LICENSE.md
+ */
+
+const { idInput } = require('../../../utils/inputs');
+
 const Errors = {
   NOT_ENOUGH_RIGHTS: {
     notEnoughRights: 'Not enough rights',
@@ -10,16 +17,17 @@ const Errors = {
 module.exports = {
   inputs: {
     id: {
-      type: 'string',
-      regex: /^[0-9]+$/,
+      ...idInput,
       required: true,
     },
     position: {
       type: 'number',
+      min: 0,
     },
     name: {
       type: 'string',
       isNotEmptyString: true,
+      maxLength: 128,
       allowNull: true,
     },
     color: {
@@ -40,17 +48,17 @@ module.exports = {
   async fn(inputs) {
     const { currentUser } = this.req;
 
-    const path = await sails.helpers.labels
-      .getProjectPath(inputs.id)
+    const pathToProject = await sails.helpers.labels
+      .getPathToProjectById(inputs.id)
       .intercept('pathNotFound', () => Errors.LABEL_NOT_FOUND);
 
-    let { label } = path;
-    const { board, project } = path;
+    let { label } = pathToProject;
+    const { board, project } = pathToProject;
 
-    const boardMembership = await BoardMembership.findOne({
-      boardId: board.id,
-      userId: currentUser.id,
-    });
+    const boardMembership = await BoardMembership.qm.getOneByBoardIdAndUserId(
+      board.id,
+      currentUser.id,
+    );
 
     if (!boardMembership) {
       throw Errors.LABEL_NOT_FOUND; // Forbidden
@@ -71,6 +79,10 @@ module.exports = {
       request: this.req,
     });
 
+    if (!label) {
+      throw Errors.LABEL_NOT_FOUND;
+    }
+
     return {
       item: label,
     };