refactor(projects): remove project membership access model

apps/projects/api/permissions.py

@@ -1,11 +1,9 @@
 from rest_framework import permissions
 
-from apps.projects.models import ProjectMembership
 from apps.workspaces.services import (
     PROJECTS_EDIT,
     PROJECTS_VIEW,
-    PROJECT_MEMBERS_CHANGE_ROLE,
-    has_project_capability,
+    has_workspace_capability,
 )
 
 
@@ -17,9 +15,9 @@ def get_project_from_obj(obj):
 
 
 class IsProjectMember(permissions.BasePermission):
-    """
-    Allows access only to users who have an active membership in the project.
-    """
+    """
+    Allows access to users who can view projects in the parent workspace.
+    """
     message = "شما عضو این پروژه نیستید."
 
     def has_object_permission(self, request, view, obj):
@@ -27,13 +25,13 @@ class IsProjectMember(permissions.BasePermission):
             return False
 
         project = get_project_from_obj(obj)
-        return has_project_capability(request.user, project, PROJECTS_VIEW)
+        return has_workspace_capability(request.user, project.workspace, PROJECTS_VIEW)
 
 
 class IsProjectManager(permissions.BasePermission):
-    """
-    Allows access only to users who are active MANAGERs of the project.
-    """
+    """
+    Allows access to users who can manage projects in the parent workspace.
+    """
     message = "فقط مدیران پروژه مجاز به انجام این عملیات هستند."
 
     def has_object_permission(self, request, view, obj):
@@ -41,19 +39,4 @@ class IsProjectManager(permissions.BasePermission):
             return False
 
         project = get_project_from_obj(obj)
-        return has_project_capability(request.user, project, PROJECTS_EDIT)
-
-
-class CanManageProjectMembers(permissions.BasePermission):
-    message = "Only authorized users can manage project memberships."
-
-    def has_object_permission(self, request, view, obj):
-        if not request.user or not request.user.is_authenticated:
-            return False
-
-        project = get_project_from_obj(obj)
-        return has_project_capability(
-            request.user,
-            project,
-            PROJECT_MEMBERS_CHANGE_ROLE,
-        )
+        return has_workspace_capability(request.user, project.workspace, PROJECTS_EDIT)