75465ac4bf
* PBAC on team members page + org members page to use specific permissions with fallbacks * Implement checks on edit sheet fetch to check for permisisons * WIP permission fixes * fix tests * WIP * fix edit mode perms * fix remove and list view permissions * fix add * feat: add pbac permissions for impersonation (#23035) * registery + migration + i18n * UI for can impersonate * impersonation backend * remove permission from db query * add missing prisma import * add resend invitation and edit mode checks for delete/changeRole * fix canChangeRole * canChangeRole gate * fix permission logic * fix depends on * push migration * fix migration * fix scoped advanced permissions * use listMembers instead of invite proxy * remove isOrgAdmin check to rely on pbac * wait for session to load before navigating * use event-types testId to ensure session loaded * use profile page instead of eventTypes * use correct roles * fix wait for session * correct orgs private isFallBackRoles * set a timeout on waiting for session * remove adminOrOwner check since its in fallpack --------- Co-authored-by: Volnei Munhoz <volnei.munhoz@gmail.com> Co-authored-by: Eunjae Lee <hey@eunjae.dev>
31 lines
1.4 KiB
TypeScript
31 lines
1.4 KiB
TypeScript
"use client";
|
|
|
|
import { checkAdminOrOwner } from "@calcom/features/auth/lib/checkAdminOrOwner";
|
|
import LicenseRequired from "@calcom/features/ee/common/components/LicenseRequired";
|
|
import { UserListTable } from "@calcom/features/users/components/UserTable/UserListTable";
|
|
import type { UserListTableProps } from "@calcom/features/users/components/UserTable/UserListTable";
|
|
import type { MemberPermissions } from "@calcom/features/users/components/UserTable/types";
|
|
import { useLocale } from "@calcom/lib/hooks/useLocale";
|
|
|
|
export const MembersView = (props: UserListTableProps & { permissions?: MemberPermissions }) => {
|
|
const { t } = useLocale();
|
|
const { permissions, ...tableProps } = props;
|
|
|
|
// Use PBAC permissions if available, otherwise fall back to role-based check
|
|
const isOrgAdminOrOwner = props.org && checkAdminOrOwner(props.org.user.role);
|
|
const canLoggedInUserSeeMembers =
|
|
permissions?.canListMembers ??
|
|
((props.org?.isPrivate && isOrgAdminOrOwner) || isOrgAdminOrOwner || !props.org?.isPrivate);
|
|
|
|
return (
|
|
<LicenseRequired>
|
|
<div>{canLoggedInUserSeeMembers && <UserListTable {...tableProps} permissions={permissions} />}</div>
|
|
{!canLoggedInUserSeeMembers && (
|
|
<div className="border-subtle rounded-xl border p-6" data-testid="members-privacy-warning">
|
|
<h2 className="text-default">{t("only_admin_can_see_members_of_org")}</h2>
|
|
</div>
|
|
)}
|
|
</LicenseRequired>
|
|
);
|
|
};
|