feat: права и инвайты

src/usecase/creative/delete_creative.py

@@ -10,13 +10,17 @@ log = logging.getLogger(__name__)
 
 
 async def delete_creative(self: 'Usecase', input: dto.DeleteCreativeInput) -> None:
-    await self.ensure_workspace_access(input.workspace_id, input.user_id)
+    context = await self.ensure_workspace_permission(
+        input.workspace_id, input.user_id, domain.PermissionKey.PROJECTS_WRITE
+    )
 
     creative = await self.database.get_creative(input.workspace_id, input.creative_id)
     if not creative:
         log.warning('User %s attempted to delete unavailable creative %s', input.user_id, input.creative_id)
         raise domain.CreativeNotFound(input.creative_id)
 
+    context.ensure_project_permission(domain.PermissionKey.PROJECTS_WRITE, creative.project_id)
+
     if creative.placements_count > 0:
         log.warning('Creative %s is used in placements and cannot be deleted', input.creative_id)
         raise domain.CreativeInUse(input.creative_id)