feat: права и инвайты

src/usecase/project/get_workspace_projects.py

@@ -1,6 +1,6 @@
 from typing import TYPE_CHECKING
 
-from src import dto
+from src import domain, dto
 
 if TYPE_CHECKING:
     from .. import Usecase
@@ -9,9 +9,15 @@ if TYPE_CHECKING:
 async def get_workspace_projects(
     self: 'Usecase', input: dto.GetWorkspaceProjectsInput
 ) -> dto.GetWorkspaceProjectsOutput:
-    await self.ensure_workspace_access(input.workspace_id, input.user_id)
+    context = await self.ensure_workspace_permission(
+        input.workspace_id, input.user_id, domain.PermissionKey.PROJECTS_READ
+    )
 
-    projects = await self.database.get_workspace_projects(input.workspace_id)
+    allowed_project_ids = context.allowed_project_ids(domain.PermissionKey.PROJECTS_READ)
+
+    projects = await self.database.get_workspace_projects(
+        input.workspace_id, allowed_project_ids=allowed_project_ids
+    )
 
     return dto.GetWorkspaceProjectsOutput(
         projects=[