feat: add workspace member assertion to remaining routers

packages/api/src/routers/member.ts

@@ -7,6 +7,7 @@ import * as userRepo from "@kan/db/repository/user.repo";
 import * as workspaceRepo from "@kan/db/repository/workspace.repo";
 
 import { createTRPCRouter, protectedProcedure } from "../trpc";
+import { assertUserInWorkspace } from "../utils/auth";
 
 export const memberRouter = createTRPCRouter({
   invite: protectedProcedure
@@ -47,6 +48,8 @@ export const memberRouter = createTRPCRouter({
           code: "NOT_FOUND",
         });
 
+      await assertUserInWorkspace(ctx.db, userId, workspace.id, "admin");
+
       const isInvitedEmailAlreadyMember = workspace.members.some(
         (member) => member.email === input.email,
       );
@@ -126,6 +129,8 @@ export const memberRouter = createTRPCRouter({
           code: "NOT_FOUND",
         });
 
+      await assertUserInWorkspace(ctx.db, userId, workspace.id, "admin");
+
       const member = await memberRepo.getByPublicId(
         ctx.db,
         input.memberPublicId,