feat(rbac): implemented project based permission loading and role management

frontend/src/context/OrgPermissionContext/index.tsx

@@ -1,7 +1,3 @@
 export { OrgPermissionProvider, useOrgPermission } from "./OrgPermissionContext";
 export type { TOrgPermission } from "./types";
-export {
-  OrgGeneralPermissionActions,
-  OrgPermissionSubjects,
-  OrgWorkspacePermissionActions
-} from "./types";
+export { GeneralPermissionActions,OrgPermissionSubjects } from "./types";

frontend/src/context/OrgPermissionContext/types.ts

@@ -1,17 +1,12 @@
 import { MongoAbility } from "@casl/ability";
 
-export enum OrgGeneralPermissionActions {
+export enum GeneralPermissionActions {
   Read = "read",
   Create = "create",
   Edit = "edit",
   Delete = "delete"
 }
 
-export enum OrgWorkspacePermissionActions {
-  Read = "read",
-  Create = "create"
-}
-
 export enum OrgPermissionSubjects {
   Workspace = "workspace",
   Role = "role",
@@ -24,13 +19,14 @@ export enum OrgPermissionSubjects {
 }
 
 export type OrgPermissionSet =
-  | [OrgWorkspacePermissionActions, OrgPermissionSubjects.Workspace]
-  | [OrgGeneralPermissionActions, OrgPermissionSubjects.Role]
-  | [OrgGeneralPermissionActions, OrgPermissionSubjects.Member]
-  | [OrgGeneralPermissionActions, OrgPermissionSubjects.Settings]
-  | [OrgGeneralPermissionActions, OrgPermissionSubjects.IncidentAccount]
-  | [OrgGeneralPermissionActions, OrgPermissionSubjects.Sso]
-  | [OrgGeneralPermissionActions, OrgPermissionSubjects.SecretScanning]
-  | [OrgGeneralPermissionActions, OrgPermissionSubjects.Billing];
+  | [GeneralPermissionActions.Create, OrgPermissionSubjects.Workspace]
+  | [GeneralPermissionActions.Read, OrgPermissionSubjects.Workspace]
+  | [GeneralPermissionActions, OrgPermissionSubjects.Role]
+  | [GeneralPermissionActions, OrgPermissionSubjects.Member]
+  | [GeneralPermissionActions, OrgPermissionSubjects.Settings]
+  | [GeneralPermissionActions, OrgPermissionSubjects.IncidentAccount]
+  | [GeneralPermissionActions, OrgPermissionSubjects.Sso]
+  | [GeneralPermissionActions, OrgPermissionSubjects.SecretScanning]
+  | [GeneralPermissionActions, OrgPermissionSubjects.Billing];
 
 export type TOrgPermission = MongoAbility<OrgPermissionSet>;

frontend/src/context/ProjectPermissionContext/ProjectPermissionContext.tsx

@@ -0,0 +1,58 @@
+import { createContext, ReactNode, useContext } from "react";
+
+import { useGetUserProjectPermissions } from "@app/hooks/api";
+
+import { useWorkspace } from "../WorkspaceContext";
+import { TProjectPermission } from "./types";
+
+type Props = {
+  children: ReactNode;
+};
+
+const ProjectPermissionContext = createContext<null | TProjectPermission>(null);
+
+export const ProjectPermissionProvider = ({ children }: Props): JSX.Element => {
+  const { currentWorkspace } = useWorkspace();
+  const workspaceId = currentWorkspace?._id || "";
+  const { data: permission, isLoading } = useGetUserProjectPermissions({ workspaceId });
+
+  if (isLoading && workspaceId) {
+    return (
+      <div className="flex items-center justify-center w-screen h-screen bg-bunker-800">
+        <img
+          src="/images/loading/loading.gif"
+          height={70}
+          width={120}
+          alt="infisical loading indicator"
+        />
+      </div>
+    );
+  }
+
+  if (!permission && currentWorkspace) {
+    return (
+      <div className="flex items-center justify-center w-screen h-screen bg-bunker-800">
+        Failed to load user permissions
+      </div>
+    );
+  }
+
+  if (!permission) {
+    return <>children</>;
+  }
+
+  return (
+    <ProjectPermissionContext.Provider value={permission}>
+      {children}
+    </ProjectPermissionContext.Provider>
+  );
+};
+
+export const useProjectPermission = () => {
+  const ctx = useContext(ProjectPermissionContext);
+  if (!ctx) {
+    throw new Error("useProjectPermission to be used within <ProjectPermissionContext>");
+  }
+
+  return ctx;
+};

frontend/src/context/ProjectPermissionContext/index.tsx

@@ -0,0 +1,3 @@
+export { ProjectPermissionProvider, useProjectPermission } from "./ProjectPermissionContext";
+export type { ProjectPermissionSet, TProjectPermission } from "./types";
+export { ProjectGeneralPermissionActions, ProjectPermissionSubjects } from "./types";

frontend/src/context/ProjectPermissionContext/types.ts

@@ -0,0 +1,44 @@
+import { MongoAbility } from "@casl/ability";
+
+export enum ProjectGeneralPermissionActions {
+  Read = "read",
+  Create = "create",
+  Edit = "edit",
+  Delete = "delete"
+}
+
+export enum ProjectPermissionSubjects {
+  Role = "role",
+  Member = "member",
+  Settings = "settings",
+  Integrations = "integrations",
+  Webhooks = "webhooks",
+  ServiceTokens = "service-tokens",
+  Environments = "environments",
+  Tags = "tags",
+  AuditLogs = "audit-logs",
+  IpAllowList = "ip-allowlist",
+  Workspace = "workspace",
+  Secrets = "secrets",
+  SecretImports = "secret-imports",
+  Folders = "folders"
+}
+
+export type ProjectPermissionSet =
+  | [ProjectGeneralPermissionActions, ProjectPermissionSubjects.Secrets]
+  | [ProjectGeneralPermissionActions, ProjectPermissionSubjects.Folders]
+  | [ProjectGeneralPermissionActions, ProjectPermissionSubjects.SecretImports]
+  | [ProjectGeneralPermissionActions, ProjectPermissionSubjects.Role]
+  | [ProjectGeneralPermissionActions, ProjectPermissionSubjects.Tags]
+  | [ProjectGeneralPermissionActions, ProjectPermissionSubjects.Member]
+  | [ProjectGeneralPermissionActions, ProjectPermissionSubjects.Integrations]
+  | [ProjectGeneralPermissionActions, ProjectPermissionSubjects.Webhooks]
+  | [ProjectGeneralPermissionActions, ProjectPermissionSubjects.AuditLogs]
+  | [ProjectGeneralPermissionActions, ProjectPermissionSubjects.Environments]
+  | [ProjectGeneralPermissionActions, ProjectPermissionSubjects.IpAllowList]
+  | [ProjectGeneralPermissionActions, ProjectPermissionSubjects.Settings]
+  | [ProjectGeneralPermissionActions, ProjectPermissionSubjects.ServiceTokens]
+  | [ProjectGeneralPermissionActions.Delete, ProjectPermissionSubjects.Workspace]
+  | [ProjectGeneralPermissionActions.Edit, ProjectPermissionSubjects.Workspace];
+
+export type TProjectPermission = MongoAbility<ProjectPermissionSet>;

frontend/src/context/index.tsx

@@ -2,11 +2,17 @@ export { AuthProvider } from "./AuthContext";
 export { OrgProvider, useOrganization } from "./OrganizationContext";
 export type { TOrgPermission } from "./OrgPermissionContext";
 export {
-  OrgGeneralPermissionActions,
+  GeneralPermissionActions,
+  OrgPermissionProvider,
   OrgPermissionSubjects,
-  OrgWorkspacePermissionActions
+  useOrgPermission
 } from "./OrgPermissionContext";
-export { OrgPermissionProvider, useOrgPermission } from "./OrgPermissionContext";
+export {
+  ProjectGeneralPermissionActions,
+  ProjectPermissionProvider,
+  ProjectPermissionSubjects,
+  useProjectPermission
+} from "./ProjectPermissionContext";
 export { SubscriptionProvider, useSubscription } from "./SubscriptionContext";
 export { UserProvider, useUser } from "./UserContext";
 export { useWorkspace, WorkspaceProvider } from "./WorkspaceContext";