feat: removed filters made in project roles

This commit is contained in:
=
2025-07-02 01:16:49 +05:30
parent 6b3279cbe5
commit 1bfdbb7314
9 changed files with 365 additions and 404 deletions
@@ -8,15 +8,10 @@ export const useGetProjectTypeFromRoute = () => {
return useMemo(() => { return useMemo(() => {
const segments = location.pathname.split("/"); const segments = location.pathname.split("/");
const type = segments?.[2];
if (!type) return ProjectType.SecretManager;
let type: ProjectType | undefined; // second element would be /projects/$projectId/<type>
return Object.values(ProjectType).find((el) => el === type) || ProjectType.SecretManager;
// location of project type can vary in router path, so we need to check all possible values
segments.forEach((segment) => {
if (Object.values(ProjectType).includes(segment as ProjectType))
type = segment as ProjectType;
});
return type;
}, [location]); }, [location]);
}; };
@@ -1,6 +1,7 @@
import { createFileRoute, linkOptions } from "@tanstack/react-router"; import { createFileRoute, linkOptions } from "@tanstack/react-router";
import { GroupDetailsByIDPage } from "./GroupDetailsByIDPage"; import { GroupDetailsByIDPage } from "./GroupDetailsByIDPage";
import { ProjectAccessControlTabs } from "@app/types/project";
export const Route = createFileRoute( export const Route = createFileRoute(
"/_authenticate/_inject-org-details/_org-layout/projects/$projectId/_project-layout/_project-general-layout/groups/$groupId" "/_authenticate/_inject-org-details/_org-layout/projects/$projectId/_project-layout/_project-general-layout/groups/$groupId"
@@ -16,6 +17,9 @@ export const Route = createFileRoute(
to: "/projects/$projectId/access-management", to: "/projects/$projectId/access-management",
params: { params: {
projectId: params.projectId projectId: params.projectId
},
search: {
selectedTab: ProjectAccessControlTabs.Groups
} }
}) })
}, },
@@ -1,6 +1,7 @@
import { createFileRoute, linkOptions } from "@tanstack/react-router"; import { createFileRoute, linkOptions } from "@tanstack/react-router";
import { IdentityDetailsByIDPage } from "./IdentityDetailsByIDPage"; import { IdentityDetailsByIDPage } from "./IdentityDetailsByIDPage";
import { ProjectAccessControlTabs } from "@app/types/project";
export const Route = createFileRoute( export const Route = createFileRoute(
"/_authenticate/_inject-org-details/_org-layout/projects/$projectId/_project-layout/_project-general-layout/identities/$identityId" "/_authenticate/_inject-org-details/_org-layout/projects/$projectId/_project-layout/_project-general-layout/identities/$identityId"
@@ -16,6 +17,9 @@ export const Route = createFileRoute(
to: "/projects/$projectId/access-management", to: "/projects/$projectId/access-management",
params: { params: {
projectId: params.projectId projectId: params.projectId
},
search: {
selectedTab: ProjectAccessControlTabs.Identities
} }
}) })
}, },
@@ -1,6 +1,7 @@
import { createFileRoute, linkOptions } from "@tanstack/react-router"; import { createFileRoute, linkOptions } from "@tanstack/react-router";
import { MemberDetailsByIDPage } from "./MemberDetailsByIDPage"; import { MemberDetailsByIDPage } from "./MemberDetailsByIDPage";
import { ProjectAccessControlTabs } from "@app/types/project";
export const Route = createFileRoute( export const Route = createFileRoute(
"/_authenticate/_inject-org-details/_org-layout/projects/$projectId/_project-layout/_project-general-layout/members/$membershipId" "/_authenticate/_inject-org-details/_org-layout/projects/$projectId/_project-layout/_project-general-layout/members/$membershipId"
@@ -16,6 +17,9 @@ export const Route = createFileRoute(
to: "/projects/$projectId/access-management", to: "/projects/$projectId/access-management",
params: { params: {
projectId: params.projectId projectId: params.projectId
},
search: {
selectedTab: ProjectAccessControlTabs.Member
} }
}) })
}, },
@@ -19,14 +19,11 @@ import {
Tr Tr
} from "@app/components/v2"; } from "@app/components/v2";
import { ProjectPermissionSub } from "@app/context"; import { ProjectPermissionSub } from "@app/context";
import { useGetProjectTypeFromRoute } from "@app/hooks";
import { ProjectType } from "@app/hooks/api/workspace/types";
import { import {
EXCLUDED_PERMISSION_SUBS, EXCLUDED_PERMISSION_SUBS,
isConditionalSubjects, isConditionalSubjects,
PROJECT_PERMISSION_OBJECT, PROJECT_PERMISSION_OBJECT,
ProjectTypePermissionSubjects,
TFormSchema TFormSchema
} from "./ProjectRoleModifySection.utils"; } from "./ProjectRoleModifySection.utils";
@@ -58,15 +55,8 @@ const Content = ({ onClose }: ContentProps) => {
} }
}); });
const projectType = useGetProjectTypeFromRoute();
const filteredPolicies = Object.entries(PROJECT_PERMISSION_OBJECT) const filteredPolicies = Object.entries(PROJECT_PERMISSION_OBJECT)
.filter( .filter(([, { title }]) => (search ? title.toLowerCase().includes(search.toLowerCase()) : true))
([subject, { title }]) =>
ProjectTypePermissionSubjects[projectType ?? ProjectType.SecretManager][
subject as ProjectPermissionSub
] && (search ? title.toLowerCase().includes(search.toLowerCase()) : true)
)
.filter(([subject]) => !EXCLUDED_PERMISSION_SUBS.includes(subject as ProjectPermissionSub)) .filter(([subject]) => !EXCLUDED_PERMISSION_SUBS.includes(subject as ProjectPermissionSub))
.sort((a, b) => a[1].title.localeCompare(b[1].title)) .sort((a, b) => a[1].title.localeCompare(b[1].title))
.map(([subject]) => subject); .map(([subject]) => subject);
@@ -13,8 +13,6 @@ import {
ModalContent ModalContent
} from "@app/components/v2"; } from "@app/components/v2";
import { ProjectPermissionSub } from "@app/context"; import { ProjectPermissionSub } from "@app/context";
import { useGetProjectTypeFromRoute } from "@app/hooks";
import { ProjectType } from "@app/hooks/api/workspace/types";
import { import {
PROJECT_PERMISSION_OBJECT, PROJECT_PERMISSION_OBJECT,
@@ -34,14 +32,11 @@ type ContentProps = {
const Content = ({ onClose }: ContentProps) => { const Content = ({ onClose }: ContentProps) => {
const rootForm = useFormContext<TFormSchema>(); const rootForm = useFormContext<TFormSchema>();
const projectType = useGetProjectTypeFromRoute();
const [selectedTemplate, setSelectedTemplate] = useState<RoleTemplate>(); const [selectedTemplate, setSelectedTemplate] = useState<RoleTemplate>();
const [conflictingSubjects, setConflictingSubjects] = useState<ProjectPermissionSub[]>([]); const [conflictingSubjects, setConflictingSubjects] = useState<ProjectPermissionSub[]>([]);
const [showConflictingSubjects, setShowConflictingSubjects] = useState(false); const [showConflictingSubjects, setShowConflictingSubjects] = useState(false);
const templates = RoleTemplates[projectType ?? ProjectType.SecretManager];
const onSubmit = (skipConflicting = false) => { const onSubmit = (skipConflicting = false) => {
if (!selectedTemplate) { if (!selectedTemplate) {
createNotification({ type: "error", text: "Please select a template" }); createNotification({ type: "error", text: "Please select a template" });
@@ -126,12 +121,12 @@ const Content = ({ onClose }: ContentProps) => {
type="single" type="single"
value={selectedTemplate?.id} value={selectedTemplate?.id}
onValueChange={(value) => onValueChange={(value) =>
setSelectedTemplate(templates.find((template) => template.id === value)) setSelectedTemplate(RoleTemplates.find((template) => template.id === value))
} }
collapsible collapsible
className="w-full border-collapse" className="w-full border-collapse"
> >
{templates.map(({ name, description, permissions, id }) => ( {RoleTemplates.map(({ name, description, permissions, id }) => (
<AccordionItem <AccordionItem
key={id} key={id}
value={id} value={id}
@@ -1645,9 +1645,8 @@ export type RoleTemplate = {
permissions: { subject: ProjectPermissionSub; actions: string[] }[]; permissions: { subject: ProjectPermissionSub; actions: string[] }[];
}; };
const projectManagerTemplate = ( export const RoleTemplates = [
additionalPermissions: RoleTemplate["permissions"] = [] {
): RoleTemplate => ({
id: "project-manager", id: "project-manager",
name: "Project Management Policies", name: "Project Management Policies",
description: "Grants access to manage project members and settings", description: "Grants access to manage project members and settings",
@@ -1677,12 +1676,24 @@ const projectManagerTemplate = (
subject: ProjectPermissionSub.Settings, subject: ProjectPermissionSub.Settings,
actions: [ProjectPermissionActions.Read, ProjectPermissionActions.Edit] actions: [ProjectPermissionActions.Read, ProjectPermissionActions.Edit]
}, },
...additionalPermissions {
subject: ProjectPermissionSub.IpAllowList,
actions: Object.values(ProjectPermissionActions)
},
{
subject: ProjectPermissionSub.SecretApproval,
actions: Object.values(ProjectPermissionActions)
},
{
subject: ProjectPermissionSub.ServiceTokens,
actions: Object.values(ProjectPermissionActions)
},
{
subject: ProjectPermissionSub.Webhooks,
actions: Object.values(ProjectPermissionActions)
}
] ]
}); },
export const RoleTemplates: Record<ProjectType, RoleTemplate[]> = {
[ProjectType.SSH]: [
{ {
id: "ssh-viewer", id: "ssh-viewer",
name: "SSH Viewing Policies", name: "SSH Viewing Policies",
@@ -1744,9 +1755,6 @@ export const RoleTemplates: Record<ProjectType, RoleTemplate[]> = {
} }
] ]
}, },
projectManagerTemplate()
],
[ProjectType.KMS]: [
{ {
id: "kms-viewer", id: "kms-viewer",
name: "KMS Viewing Policies", name: "KMS Viewing Policies",
@@ -1784,9 +1792,6 @@ export const RoleTemplates: Record<ProjectType, RoleTemplate[]> = {
} }
] ]
}, },
projectManagerTemplate()
],
[ProjectType.CertificateManager]: [
{ {
id: "cert-viewer", id: "cert-viewer",
name: "Certificate Viewing Policies", name: "Certificate Viewing Policies",
@@ -1844,9 +1849,6 @@ export const RoleTemplates: Record<ProjectType, RoleTemplate[]> = {
} }
] ]
}, },
projectManagerTemplate()
],
[ProjectType.SecretScanning]: [
{ {
id: "scanning-viewer", id: "scanning-viewer",
name: "Secret Scanning Viewing Policies", name: "Secret Scanning Viewing Policies",
@@ -1889,14 +1891,6 @@ export const RoleTemplates: Record<ProjectType, RoleTemplate[]> = {
} }
] ]
}, },
projectManagerTemplate([
{
subject: ProjectPermissionSub.SecretScanningConfigs,
actions: Object.values(ProjectPermissionSecretScanningConfigActions)
}
])
],
[ProjectType.SecretManager]: [
{ {
id: "secret-viewer", id: "secret-viewer",
name: "Secret Viewing Policies", name: "Secret Viewing Policies",
@@ -2007,28 +2001,5 @@ export const RoleTemplates: Record<ProjectType, RoleTemplate[]> = {
actions: Object.values(ProjectPermissionCommitsActions) actions: Object.values(ProjectPermissionCommitsActions)
} }
] ]
},
projectManagerTemplate([
{
subject: ProjectPermissionSub.IpAllowList,
actions: Object.values(ProjectPermissionActions)
},
{
subject: ProjectPermissionSub.Kms,
actions: [ProjectPermissionActions.Edit]
},
{
subject: ProjectPermissionSub.SecretApproval,
actions: Object.values(ProjectPermissionActions)
},
{
subject: ProjectPermissionSub.ServiceTokens,
actions: Object.values(ProjectPermissionActions)
},
{
subject: ProjectPermissionSub.Webhooks,
actions: Object.values(ProjectPermissionActions)
} }
]) ];
]
};
@@ -14,7 +14,6 @@ import { ProjectPermissionSet } from "@app/context/ProjectPermissionContext";
import { evaluatePermissionsAbility } from "@app/helpers/permissions"; import { evaluatePermissionsAbility } from "@app/helpers/permissions";
import { useGetProjectRoleBySlug, useUpdateProjectRole } from "@app/hooks/api"; import { useGetProjectRoleBySlug, useUpdateProjectRole } from "@app/hooks/api";
import { ProjectMembershipRole } from "@app/hooks/api/roles/types"; import { ProjectMembershipRole } from "@app/hooks/api/roles/types";
import { ProjectType } from "@app/hooks/api/workspace/types";
import { AddPoliciesButton } from "./AddPoliciesButton"; import { AddPoliciesButton } from "./AddPoliciesButton";
import { DynamicSecretPermissionConditions } from "./DynamicSecretPermissionConditions"; import { DynamicSecretPermissionConditions } from "./DynamicSecretPermissionConditions";
@@ -30,7 +29,6 @@ import {
isConditionalSubjects, isConditionalSubjects,
PROJECT_PERMISSION_OBJECT, PROJECT_PERMISSION_OBJECT,
projectRoleFormSchema, projectRoleFormSchema,
ProjectTypePermissionSubjects,
rolePermission2Form, rolePermission2Form,
TFormSchema TFormSchema
} from "./ProjectRoleModifySection.utils"; } from "./ProjectRoleModifySection.utils";
@@ -135,8 +133,6 @@ export const RolePermissionsSection = ({ roleSlug, isDisabled }: Props) => {
[JSON.stringify(permissions)] [JSON.stringify(permissions)]
); );
const isSecretManagerProject = currentWorkspace.type === ProjectType.SecretManager;
return ( return (
<div className="w-full"> <div className="w-full">
<form <form
@@ -185,7 +181,6 @@ export const RolePermissionsSection = ({ roleSlug, isDisabled }: Props) => {
{!isPending && <PermissionEmptyState />} {!isPending && <PermissionEmptyState />}
{(Object.keys(PROJECT_PERMISSION_OBJECT) as ProjectPermissionSub[]) {(Object.keys(PROJECT_PERMISSION_OBJECT) as ProjectPermissionSub[])
.filter((subject) => !EXCLUDED_PERMISSION_SUBS.includes(subject)) .filter((subject) => !EXCLUDED_PERMISSION_SUBS.includes(subject))
.filter((subject) => ProjectTypePermissionSubjects[currentWorkspace.type][subject])
.map((subject) => ( .map((subject) => (
<GeneralPermissionPolicies <GeneralPermissionPolicies
subject={subject} subject={subject}
@@ -194,7 +189,6 @@ export const RolePermissionsSection = ({ roleSlug, isDisabled }: Props) => {
key={`project-permission-${subject}`} key={`project-permission-${subject}`}
isDisabled={isDisabled} isDisabled={isDisabled}
onShowAccessTree={ onShowAccessTree={
isSecretManagerProject &&
[ [
ProjectPermissionSub.Secrets, ProjectPermissionSub.Secrets,
ProjectPermissionSub.SecretFolders, ProjectPermissionSub.SecretFolders,
@@ -212,7 +206,7 @@ export const RolePermissionsSection = ({ roleSlug, isDisabled }: Props) => {
</div> </div>
</FormProvider> </FormProvider>
</form> </form>
{isSecretManagerProject && showAccessTree && ( {showAccessTree && (
<AccessTree <AccessTree
permissions={formattedPermissions} permissions={formattedPermissions}
subject={showAccessTree} subject={showAccessTree}
@@ -1,6 +1,7 @@
import { createFileRoute, linkOptions } from "@tanstack/react-router"; import { createFileRoute, linkOptions } from "@tanstack/react-router";
import { RoleDetailsBySlugPage } from "./RoleDetailsBySlugPage"; import { RoleDetailsBySlugPage } from "./RoleDetailsBySlugPage";
import { ProjectAccessControlTabs } from "@app/types/project";
export const Route = createFileRoute( export const Route = createFileRoute(
"/_authenticate/_inject-org-details/_org-layout/projects/$projectId/_project-layout/_project-general-layout/roles/$roleSlug" "/_authenticate/_inject-org-details/_org-layout/projects/$projectId/_project-layout/_project-general-layout/roles/$roleSlug"
@@ -16,6 +17,9 @@ export const Route = createFileRoute(
to: "/projects/$projectId/access-management", to: "/projects/$projectId/access-management",
params: { params: {
projectId: params.projectId projectId: params.projectId
},
search: {
selectedTab: ProjectAccessControlTabs.Roles
} }
}) })
}, },