feat(rbac): added glob support in permission and revealed settings

frontend/src/views/Project/MembersPage/components/ProjectRoleListTab/components/ProjectRoleModifySection/MultiEnvProjectPermission.tsx

@@ -7,6 +7,7 @@ import { twMerge } from "tailwind-merge";
 
 import {
   Checkbox,
+  FormControl,
   Input,
   Select,
   SelectItem,
@@ -68,7 +69,7 @@ export const MultiEnvProjectPermission = ({
   const handlePermissionChange = (val: Permission) => {
     switch (val) {
       case Permission.NoAccess:
-        setValue(`permissions.${formName}`, {}, { shouldDirty: true });
+        setValue(`permissions.${formName}`, undefined, { shouldDirty: true });
         break;
       case Permission.FullAccess:
         setValue(
@@ -151,7 +152,14 @@ export const MultiEnvProjectPermission = ({
                         name={`permissions.${formName}.${slug}.secretPath`}
                         control={control}
                         render={({ field }) => (
-                          <Input {...field} className="w-full overflow-ellipsis" />
+                          /* eslint-disable-next-line no-template-curly-in-string */
+                          <FormControl helperText="Ex pattern: /, /**, /{folder1,folder2}">
+                            <Input
+                              {...field}
+                              className="w-full overflow-ellipsis"
+                              placeholder="Glob patterns are supported"
+                            />
+                          </FormControl>
                         )}
                       />
                     </Td>

frontend/src/views/Project/MembersPage/components/ProjectRoleListTab/components/ProjectRoleModifySection/ProjectRoleModifySection.tsx

@@ -133,6 +133,7 @@ export const ProjectRoleModifySection = ({ role, onGoBack }: Props) => {
   const handleRoleUpdate = async (el: TFormSchema) => {
     if (!role?._id) return;
 
+    console.log(el);
     try {
       await updateRole({
         orgId,

frontend/src/views/Project/MembersPage/components/ProjectRoleListTab/components/ProjectRoleModifySection/ProjectRoleModifySection.utils.ts

@@ -73,7 +73,7 @@ const multiEnvApi2Form = (
   }
 
   const secretEnv = permission?.conditions?.environment || "all";
-  const secretPath = permission?.conditions?.secretPath;
+  const secretPath = permission?.conditions?.secretPath?.$glob;
   // initialize
   if (formVal && !formVal?.[secretEnv]) {
     formVal[secretEnv] = { read: false, edit: false, create: false, delete: false, secretPath };
@@ -109,6 +109,8 @@ const multiEnvForm2Api = (
   formVal: Record<string, { secretPath?: string } & { [key: string]: boolean }>,
   subject: (typeof MULTI_ENV_KEY)[number]
 ) => {
+  if (!formVal) return;
+
   const isFullAccess = PERMISSION_ACTIONS.every((action) => formVal?.all?.[action]);
   // if any of them is set in all push it without any  condition
   PERMISSION_ACTIONS.forEach((action) => {
@@ -130,7 +132,8 @@ const multiEnvForm2Api = (
           // if not full access for an action
           if (!formVal?.all?.[action] && action !== "secretPath" && formVal?.[slug]?.[action]) {
             const conditions: Record<string, unknown> = { environment: slug };
-            if (formVal[slug]?.secretPath) conditions.secretPath = formVal?.[slug]?.secretPath;
+            if (formVal[slug]?.secretPath)
+              conditions.secretPath = { $glob: formVal?.[slug]?.secretPath };
 
             permissions.push({ action, subject, conditions });
           }
@@ -141,17 +144,22 @@ const multiEnvForm2Api = (
 
 export const formRolePermission2API = (formVal: TFormSchema["permissions"]) => {
   const permissions: TProjectPermission[] = [];
-  MULTI_ENV_KEY.forEach((formName) => {
-    multiEnvForm2Api(permissions, JSON.parse(JSON.stringify(formVal?.[formName] || {})), formName);
-  });
   // other than workspace everything else follows same
   // if in future there is a different follow the above on how workspace is done
   Object.entries(formVal || {}).forEach(([rule, actions]) => {
-    Object.entries(actions).forEach(([action, isAllowed]) => {
-      if (isAllowed) {
-        permissions.push({ subject: rule, action });
-      }
-    });
+    if (MULTI_ENV_KEY.includes(rule as (typeof MULTI_ENV_KEY)[number])) {
+      multiEnvForm2Api(
+        permissions,
+        JSON.parse(JSON.stringify(actions || {})),
+        rule as (typeof MULTI_ENV_KEY)[number]
+      );
+    } else {
+      Object.entries(actions).forEach(([action, isAllowed]) => {
+        if (isAllowed) {
+          permissions.push({ subject: rule, action });
+        }
+      });
+    }
   });
   return permissions;
 };