75465ac4bf
* PBAC on team members page + org members page to use specific permissions with fallbacks * Implement checks on edit sheet fetch to check for permisisons * WIP permission fixes * fix tests * WIP * fix edit mode perms * fix remove and list view permissions * fix add * feat: add pbac permissions for impersonation (#23035) * registery + migration + i18n * UI for can impersonate * impersonation backend * remove permission from db query * add missing prisma import * add resend invitation and edit mode checks for delete/changeRole * fix canChangeRole * canChangeRole gate * fix permission logic * fix depends on * push migration * fix migration * fix scoped advanced permissions * use listMembers instead of invite proxy * remove isOrgAdmin check to rely on pbac * wait for session to load before navigating * use event-types testId to ensure session loaded * use profile page instead of eventTypes * use correct roles * fix wait for session * correct orgs private isFallBackRoles * set a timeout on waiting for session * remove adminOrOwner check since its in fallpack --------- Co-authored-by: Volnei Munhoz <volnei.munhoz@gmail.com> Co-authored-by: Eunjae Lee <hey@eunjae.dev>
71 lines
2.6 KiB
TypeScript
71 lines
2.6 KiB
TypeScript
"use client";
|
|
|
|
import { useState } from "react";
|
|
|
|
import { checkAdminOrOwner } from "@calcom/features/auth/lib/checkAdminOrOwner";
|
|
import LicenseRequired from "@calcom/features/ee/common/components/LicenseRequired";
|
|
import { MemberInvitationModalWithoutMembers } from "@calcom/features/ee/teams/components/MemberInvitationModal";
|
|
import MemberList from "@calcom/features/ee/teams/components/MemberList";
|
|
import type { MemberPermissions } from "@calcom/features/users/components/UserTable/types";
|
|
import { useLocale } from "@calcom/lib/hooks/useLocale";
|
|
import type { RouterOutputs } from "@calcom/trpc/react";
|
|
|
|
interface TeamMembersViewProps {
|
|
team: NonNullable<RouterOutputs["viewer"]["teams"]["get"]>;
|
|
facetedTeamValues?: {
|
|
roles: { id: string; name: string }[];
|
|
teams: RouterOutputs["viewer"]["teams"]["get"][];
|
|
attributes: {
|
|
id: string;
|
|
name: string;
|
|
options: {
|
|
value: string;
|
|
}[];
|
|
}[];
|
|
};
|
|
attributes?: any[];
|
|
permissions: MemberPermissions;
|
|
}
|
|
|
|
export const TeamMembersView = ({ team, facetedTeamValues, permissions }: TeamMembersViewProps) => {
|
|
const { t } = useLocale();
|
|
const [showMemberInvitationModal, setShowMemberInvitationModal] = useState(false);
|
|
const [showInviteLinkSettingsModal, setShowInviteLinkSettingsModal] = useState(false);
|
|
|
|
// Use PBAC permissions if available, otherwise fall back to role-based check
|
|
const isTeamAdminOrOwner = checkAdminOrOwner(team.membership.role);
|
|
const canLoggedInUserSeeMembers = permissions?.canListMembers ?? (!team.isPrivate || isTeamAdminOrOwner);
|
|
|
|
return (
|
|
<LicenseRequired>
|
|
<div>
|
|
{canLoggedInUserSeeMembers && (
|
|
<div className="mb-6">
|
|
<MemberList
|
|
team={team}
|
|
isOrgAdminOrOwner={false}
|
|
setShowMemberInvitationModal={setShowMemberInvitationModal}
|
|
facetedTeamValues={facetedTeamValues}
|
|
permissions={permissions}
|
|
/>
|
|
</div>
|
|
)}
|
|
{!canLoggedInUserSeeMembers && (
|
|
<div className="border-subtle rounded-xl border p-6" data-testid="members-privacy-warning">
|
|
<h2 className="text-default">{t("only_admin_can_see_members_of_team")}</h2>
|
|
</div>
|
|
)}
|
|
{showMemberInvitationModal && team && team.id && (
|
|
<MemberInvitationModalWithoutMembers
|
|
hideInvitationModal={() => setShowMemberInvitationModal(false)}
|
|
showMemberInvitationModal={showMemberInvitationModal}
|
|
teamId={team.id}
|
|
token={team.inviteToken?.token}
|
|
onSettingsOpen={() => setShowInviteLinkSettingsModal(true)}
|
|
/>
|
|
)}
|
|
</div>
|
|
</LicenseRequired>
|
|
);
|
|
};
|