fix: distinguish soft-deleted relations from RLS-restricted ones

When a relation FK exists but the target record is null, the frontend
now checks whether row-level permission predicates are configured on
the target object. If RLS is active, shows "Not shared" (record may be
access-restricted). If no RLS exists, shows empty (record is
soft-deleted).

Fixes #20076

Co-authored-by: Cursor <cursoragent@cursor.com>

node_modules

@@ -1 +0,0 @@
-/work/repos/twentyhq-twenty/node_modules

packages/twenty-front/src/modules/activities/hooks/useActivities.ts

@@ -33,6 +33,11 @@ export const useActivities = <T extends Task | Note>({
     (activityTargets: (TaskTarget | NoteTarget)[]) => {
       for (const activityTarget of activityTargets) {
         const activity = activityTarget[objectNameSingular];
+
+        if (!isDefined(activity)) {
+          continue;
+        }
+
         store.set(recordStoreFamilyState.atomFamily(activity.id), activity);
       }
     },

packages/twenty-front/src/modules/object-record/record-field/ui/meta-types/display/components/RelationFromManyFieldDisplay.tsx

@@ -3,9 +3,11 @@ import { useContext } from 'react';
 import { useActivityTargetObjectRecords } from '@/activities/hooks/useActivityTargetObjectRecords';
 import { type NoteTarget } from '@/activities/types/NoteTarget';
 import { type TaskTarget } from '@/activities/types/TaskTarget';
+import { getObjectPermissionsForObject } from '@/object-metadata/utils/getObjectPermissionsForObject';
 import { useObjectMetadataItems } from '@/object-metadata/hooks/useObjectMetadataItems';
 import { CoreObjectNameSingular } from 'twenty-shared/types';
 import { RecordChip } from '@/object-record/components/RecordChip';
+import { useObjectPermissions } from '@/object-record/hooks/useObjectPermissions';
 import { isActivityTargetField } from '@/object-record/record-field-list/utils/categorizeRelationFields';
 import { FieldContext } from '@/object-record/record-field/ui/contexts/FieldContext';
 import { useFieldFocus } from '@/object-record/record-field/ui/hooks/useFieldFocus';
@@ -13,6 +15,7 @@ import { useRelationFromManyFieldDisplay } from '@/object-record/record-field/ui
 import { ForbiddenFieldDisplay } from '@/object-record/record-field/ui/meta-types/display/components/ForbiddenFieldDisplay';
 import { extractTargetRecordsFromJunction } from '@/object-record/record-field/ui/utils/junction/extractTargetRecordsFromJunction';
 import { getJunctionConfig } from '@/object-record/record-field/ui/utils/junction/getJunctionConfig';
+import { getTargetObjectMetadataIdsFromField } from '@/object-record/record-field/ui/utils/junction/getTargetObjectMetadataIdsFromField';
 import { hasJunctionConfig } from '@/object-record/record-field/ui/utils/junction/hasJunctionConfig';
 
 import { ExpandableList } from '@/ui/layout/expandable-list/components/ExpandableList';
@@ -37,6 +40,7 @@ export const RelationFromManyFieldDisplay = () => {
   const { isFocused } = useFieldFocus();
   const { disableChipClick, triggerEvent } = useContext(FieldContext);
   const { objectMetadataItems } = useObjectMetadataItems();
+  const { objectPermissionsByObjectMetadataId } = useObjectPermissions();
 
   const { fieldName, objectMetadataNameSingular } = fieldDefinition.metadata;
 
@@ -147,7 +151,23 @@ export const RelationFromManyFieldDisplay = () => {
       .filter(isDefined);
 
     if (fieldValue.some(isDefined) && targetRecordsWithMetadata.length === 0) {
-      return <ForbiddenFieldDisplay />;
+      const targetObjectMetadataIds = junctionConfig.targetFields.flatMap(
+        getTargetObjectMetadataIdsFromField,
+      );
+
+      const hasRowLevelRestrictions = targetObjectMetadataIds.some(
+        (targetId) =>
+          getObjectPermissionsForObject(
+            objectPermissionsByObjectMetadataId,
+            targetId,
+          ).rowLevelPermissionPredicates.length > 0,
+      );
+
+      if (hasRowLevelRestrictions) {
+        return <ForbiddenFieldDisplay />;
+      }
+
+      return null;
     }
 
     return (

packages/twenty-front/src/modules/object-record/record-field/ui/meta-types/display/components/RelationToOneFieldDisplay.tsx

@@ -1,5 +1,6 @@
 import { CoreObjectNameSingular } from 'twenty-shared/types';
 import { RecordChip } from '@/object-record/components/RecordChip';
+import { useObjectPermissionsForObject } from '@/object-record/hooks/useObjectPermissionsForObject';
 import { FieldContext } from '@/object-record/record-field/ui/contexts/FieldContext';
 import { ForbiddenFieldDisplay } from '@/object-record/record-field/ui/meta-types/display/components/ForbiddenFieldDisplay';
 import { useRelationToOneFieldDisplay } from '@/object-record/record-field/ui/meta-types/hooks/useRelationToOneFieldDisplay';
@@ -16,8 +17,19 @@ export const RelationToOneFieldDisplay = () => {
 
   const { disableChipClick, triggerEvent } = useContext(FieldContext);
 
+  const targetObjectPermissions = useObjectPermissionsForObject(
+    fieldDefinition.metadata.relationObjectMetadataId,
+  );
+
   if (!isDefined(fieldValue) && isDefined(foreignKeyFieldValue)) {
-    return <ForbiddenFieldDisplay />;
+    const hasRowLevelRestrictions =
+      targetObjectPermissions.rowLevelPermissionPredicates.length > 0;
+
+    if (hasRowLevelRestrictions) {
+      return <ForbiddenFieldDisplay />;
+    }
+
+    return null;
   }
 
   if (

packages/twenty-ui/src/input/button/components/AnimatedButton.tsx

@@ -90,9 +90,7 @@ const computeAnimatedButtonDynamicStyles = (
           break;
         case 'blue':
           result.background = !inverted
-            ? disabled
-              ? themeCssVariables.accent.accent4060
-              : themeCssVariables.color.blue
+            ? themeCssVariables.color.blue
             : themeCssVariables.background.primary;
           result.borderColor = !inverted
             ? focus
@@ -272,9 +270,7 @@ const computeAnimatedButtonDynamicStyles = (
                 }`
               : 'none';
           result.color = !inverted
-            ? !disabled
-              ? themeCssVariables.font.color.danger
-              : themeCssVariables.color.red5
+            ? themeCssVariables.font.color.danger
             : themeCssVariables.font.color.inverted;
           result.hoverBackground = !inverted
             ? !disabled

packages/twenty-ui/src/input/button/components/InsideButton.tsx

@@ -27,10 +27,7 @@ const StyledButton = styled.button`
   transition: background-color 0.1s ease;
 
   &:hover {
-    background-color: ${({ disabled }) =>
-      !disabled
-        ? themeCssVariables.background.transparent.light
-        : 'transparent'};
+    background-color: ${themeCssVariables.background.transparent.light};
   }
 `;
 

packages/twenty-ui/src/input/button/components/MainButton.tsx

@@ -77,22 +77,13 @@ const StyledButton = styled.button<
     fullWidth ? '100%' : width ? `${width}px` : 'auto'};
   &:hover {
     background: ${({ variant, disabled }) => {
-      if (disabled) {
-        switch (variant) {
-          case 'primary':
-            return themeCssVariables.background.secondary;
-          case 'secondary':
-            return themeCssVariables.background.primary;
-          default:
-            return themeCssVariables.background.primary;
-        }
-      }
-
       switch (variant) {
         case 'secondary':
           return themeCssVariables.background.tertiary;
         default:
-          return themeCssVariables.background.primaryInvertedHover;
+          return !disabled
+            ? themeCssVariables.background.primaryInvertedHover
+            : themeCssVariables.background.secondary;
       }
     }};
   }