feat(rbac): added org permission context for pulling permission from api

frontend/src/context/OrgPermissionContext/OrgPermissionContext.tsx

@@ -0,0 +1,50 @@
+import { createContext, ReactNode, useContext } from "react";
+
+import { useGetUserOrgPermissions } from "@app/hooks/api";
+
+import { useOrganization } from "../OrganizationContext";
+import { TPermission } from "./types";
+
+type Props = {
+  children: ReactNode;
+};
+
+const PermissionContext = createContext<null | TPermission>(null);
+
+export const OrgPermissionProvider = ({ children }: Props): JSX.Element => {
+  const { currentOrg } = useOrganization();
+  const orgId = currentOrg?._id || "";
+  const { data: permission, isLoading } = useGetUserOrgPermissions({ orgId });
+
+  if (isLoading) {
+    return (
+      <div className="flex items-center justify-center w-screen h-screen bg-bunker-800">
+        <img
+          src="/images/loading/loading.gif"
+          height={70}
+          width={120}
+          alt="infisical loading indicator"
+        />
+      </div>
+    );
+  }
+
+  if (!permission) {
+    return (
+      <div className="flex items-center justify-center w-screen h-screen bg-bunker-800">
+        Failed to load user permissions
+      </div>
+    );
+  }
+
+  return <PermissionContext.Provider value={permission}>{children}</PermissionContext.Provider>;
+};
+
+export const useOrgPermission = () => {
+  const ctx = useContext(PermissionContext);
+  if (!ctx) {
+    throw new Error("useOrgPermission to be used within <OrgPermissionProvider>");
+  }
+
+  return ctx;
+};

frontend/src/context/OrgPermissionContext/index.tsx

@@ -0,0 +1 @@
+export { OrgPermissionProvider, useOrgPermission } from "./OrgPermissionContext";

frontend/src/context/OrgPermissionContext/types.ts

@@ -0,0 +1,36 @@
+import { MongoAbility } from "@casl/ability";
+
+export enum GeneralPermissionActions {
+  Read = "read",
+  Create = "create",
+  Edit = "edit",
+  Delete = "delete"
+}
+
+export enum WorkspacePermissionActions {
+  Read = "read",
+  Create = "create"
+}
+
+export enum OrgPermissionSubjects {
+  Workspace = "workspace",
+  Role = "role",
+  Member = "member",
+  Settings = "settings",
+  IncidentAccount = "incident-contact",
+  Sso = "sso",
+  Billing = "billing",
+  SecretScanning = "secret-scanning"
+}
+
+export type OrgPermissionSet =
+  | [WorkspacePermissionActions, OrgPermissionSubjects.Workspace]
+  | [GeneralPermissionActions, OrgPermissionSubjects.Role]
+  | [GeneralPermissionActions, OrgPermissionSubjects.Member]
+  | [GeneralPermissionActions, OrgPermissionSubjects.Settings]
+  | [GeneralPermissionActions, OrgPermissionSubjects.IncidentAccount]
+  | [GeneralPermissionActions, OrgPermissionSubjects.Sso]
+  | [GeneralPermissionActions, OrgPermissionSubjects.SecretScanning]
+  | [GeneralPermissionActions, OrgPermissionSubjects.Billing];
+
+export type TPermission = MongoAbility<OrgPermissionSet>;

frontend/src/context/index.tsx

@@ -1,5 +1,6 @@
 export { AuthProvider } from "./AuthContext";
 export { OrgProvider, useOrganization } from "./OrganizationContext";
+export { OrgPermissionProvider,useOrgPermission } from "./OrgPermissionContext";
 export { SubscriptionProvider, useSubscription } from "./SubscriptionContext";
 export { UserProvider, useUser } from "./UserContext";
 export { useWorkspace, WorkspaceProvider } from "./WorkspaceContext";