Revert "feat(api/secrets): view secret value permission"

2026-10-15 19:16:22 +00:00 · 2025-03-05 14:15:02 -05:00
parent 8e82813894
commit bf6cfbac7a
70 changed files with 806 additions and 2202 deletions
@@ -19,7 +19,6 @@ import {
 import { getKeyValue } from "@app/helpers/parseEnvVar";
 import { useCreateFolder, useCreateSecretV3, useCreateWsTag, useGetWsTags } from "@app/hooks/api";
 import { SecretType } from "@app/hooks/api/types";
-import { ProjectPermissionSecretActions } from "@app/context/ProjectPermissionContext/types";

 const typeSchema = z
  .object({
@@ -276,7 +275,7 @@ export const CreateSecretForm = ({ secretPath = "/", onClose }: Props) => {
              isMulti
              options={environments.filter((environment) =>
                permission.can(
-                  ProjectPermissionSecretActions.Create,
+                  ProjectPermissionActions.Create,
                  subject(ProjectPermissionSub.Secrets, {
                    environment: environment.slug,
                    secretPath,
@@ -25,7 +25,6 @@ import {
  ModalTrigger,
  Tooltip
 } from "@app/components/v2";
-import { Blur } from "@app/components/v2/Blur";
 import { InfisicalSecretInput } from "@app/components/v2/InfisicalSecretInput";
 import { ProjectPermissionActions, ProjectPermissionSub } from "@app/context";
 import { useToggle } from "@app/hooks";
@@ -40,7 +39,6 @@ type Props = {
  isVisible?: boolean;
  isImportedSecret: boolean;
  environment: string;
-  secretValueHidden: boolean;
  secretPath: string;
  onSecretCreate: (env: string, key: string, value: string) => Promise<void>;
  onSecretUpdate: (
@@ -60,7 +58,6 @@ export const SecretEditRow = ({
  isImportedSecret,
  onSecretUpdate,
  secretName,
-  secretValueHidden,
  onSecretCreate,
  onSecretDelete,
  environment,
@@ -143,29 +140,24 @@ export const SecretEditRow = ({
      />

      <div className="flex-grow border-r border-r-mineshaft-600 pl-1 pr-2">
-        {secretValueHidden ? (
-          <Blur tooltipText="You do not have permission to read the value of this secret." />
-        ) : (
-          <Controller
-            disabled={isImportedSecret && !defaultValue}
-            control={control}
-            name="value"
-            render={({ field }) => (
-              <InfisicalSecretInput
-                {...field}
-                isReadOnly={isImportedSecret}
-                value={field.value as string}
-                key="secret-input"
-                isVisible={isVisible}
-                secretPath={secretPath}
-                environment={environment}
-                isImport={isImportedSecret}
-              />
-            )}
-          />
-        )}
+        <Controller
+          disabled={isImportedSecret && !defaultValue}
+          control={control}
+          name="value"
+          render={({ field }) => (
+            <InfisicalSecretInput
+              {...field}
+              isReadOnly={isImportedSecret}
+              value={field.value as string}
+              key="secret-input"
+              isVisible={isVisible}
+              secretPath={secretPath}
+              environment={environment}
+              isImport={isImportedSecret}
+            />
+          )}
+        />
      </div>
-
      <div
        className={twMerge(
          "flex w-24 justify-center space-x-3 pl-2 transition-all",
@@ -219,7 +211,6 @@ export const SecretEditRow = ({
            <div className="opacity-0 group-hover:opacity-100">
              <Tooltip content="Copy Secret">
                <IconButton
-                  isDisabled={secretValueHidden}
                  ariaLabel="copy-value"
                  onClick={handleCopySecretToClipboard}
                  variant="plain"
@@ -3,7 +3,6 @@ import { faLock } from "@fortawesome/free-solid-svg-icons";
 import { FontAwesomeIcon } from "@fortawesome/react-fontawesome";

 import { Td, Tooltip, Tr } from "@app/components/v2";
-import { Blur } from "@app/components/v2/Blur";

 type Props = {
  environments: { name: string; slug: string }[];
@@ -26,7 +25,7 @@ export const SecretNoAccessOverviewTableRow = ({ environments = [], count }: Pro
                  <div className="text-bunker-300">
                    <FontAwesomeIcon className="block" icon={faLock} />
                  </div>
-                  <Blur />
+                  <div className="blur-sm">NO ACCESS</div>
                </div>
              </Tooltip>
            </div>
@@ -221,13 +221,10 @@ export const SecretOverviewTableRow = ({
                              secretPath={secretPath}
                              isVisible={isSecretVisible}
                              secretName={secretKey}
-                              secretValueHidden={secret?.secretValueHidden || false}
                              defaultValue={
-                                secret?.secretValueHidden
-                                  ? ""
-                                  : secret?.valueOverride ||
-                                    secret?.value ||
-                                    importedSecret?.secret?.value
+                                secret?.valueOverride ||
+                                secret?.value ||
+                                importedSecret?.secret?.value
                              }
                              secretId={secret?.id}
                              isOverride={Boolean(secret?.valueOverride)}
@@ -10,8 +10,12 @@ import { z } from "zod";

 import { createNotification } from "@app/components/notifications";
 import { IconButton, Input, Spinner, Tooltip } from "@app/components/v2";
-import { ProjectPermissionSub, useProjectPermission, useWorkspace } from "@app/context";
-import { ProjectPermissionSecretActions } from "@app/context/ProjectPermissionContext/types";
+import {
+  ProjectPermissionActions,
+  ProjectPermissionSub,
+  useProjectPermission,
+  useWorkspace
+} from "@app/context";
 import { useToggle } from "@app/hooks";
 import { useUpdateSecretV3 } from "@app/hooks/api";
 import { SecretType, SecretV3RawSanitized } from "@app/hooks/api/types";
@@ -51,8 +55,8 @@ function SecretRenameRow({ environments, getSecretByKey, secretKey, secretPath }
      secretTags: (secretDetails?.tags || []).map((i) => i.slug)
    });
    const isSecretInEnvReadOnly =
-      permission.can(ProjectPermissionSecretActions.DescribeSecret, secretPermissionSubject) &&
-      permission.cannot(ProjectPermissionSecretActions.Edit, secretPermissionSubject);
+      permission.can(ProjectPermissionActions.Read, secretPermissionSubject) &&
+      permission.cannot(ProjectPermissionActions.Edit, secretPermissionSubject);
    if (isSecretInEnvReadOnly) {
      return true;
    }
@@ -110,31 +110,21 @@ export const QuickSearchSecretItem = ({
            </Badge>
          )}
          {isSingleEnv ? (
-            <Tooltip
-              isDisabled={!groupSecret?.secretValueHidden}
-              content={
-                groupSecret?.secretValueHidden
-                  ? "You do not have permission to view this secret value"
-                  : ""
-              }
+            <IconButton
+              size="md"
+              variant="plain"
+              colorSchema="secondary"
+              ariaLabel="Copy secret value"
+              onClick={(e) => {
+                e.stopPropagation();
+                const el = envSlugMap.get(groupSecret.env)?.name;
+                if (el) {
+                  handleCopy(groupSecret.value!, el);
+                }
+              }}
            >
-              <IconButton
-                size="md"
-                isDisabled={groupSecret?.secretValueHidden}
-                variant="plain"
-                colorSchema="secondary"
-                ariaLabel="Copy secret value"
-                onClick={(e) => {
-                  e.stopPropagation();
-                  const el = envSlugMap.get(groupSecret.env)?.name;
-                  if (el) {
-                    handleCopy(groupSecret.value!, el);
-                  }
-                }}
-              >
-                <FontAwesomeIcon icon={isUrlCopied ? faCheck : faCopy} />
-              </IconButton>
-            </Tooltip>
+              <FontAwesomeIcon icon={isUrlCopied ? faCheck : faCopy} />
+            </IconButton>
          ) : (
            <DropdownMenu>
              <DropdownMenuTrigger asChild>
@@ -168,24 +158,14 @@ export const QuickSearchSecretItem = ({
          )}
          <DropdownMenu>
            <DropdownMenuTrigger asChild>
-              <Tooltip
-                isDisabled={!groupSecret?.secretValueHidden}
-                content={
-                  groupSecret?.secretValueHidden
-                    ? "You do not have permission to view this secret value"
-                    : ""
-                }
+              <IconButton
+                size="md"
+                variant="plain"
+                colorSchema="secondary"
+                ariaLabel="View secret value"
              >
-                <IconButton
-                  size="md"
-                  isDisabled={groupSecret?.secretValueHidden}
-                  variant="plain"
-                  colorSchema="secondary"
-                  ariaLabel="View secret value"
-                >
-                  <FontAwesomeIcon icon={faEye} />
-                </IconButton>
-              </Tooltip>
+                <FontAwesomeIcon icon={faEye} />
+              </IconButton>
            </DropdownMenuTrigger>
            <DropdownMenuContent align="end">
              <DropdownMenuLabel>Hover to Reveal...</DropdownMenuLabel>
@@ -11,7 +11,6 @@ import {
  useProjectPermission,
  useWorkspace
 } from "@app/context";
-import { ProjectPermissionSecretActions } from "@app/context/ProjectPermissionContext/types";
 import { usePopUp } from "@app/hooks";
 import { useDeleteFolder, useDeleteSecretBatch } from "@app/hooks/api";
 import {
@@ -59,7 +58,7 @@ export const SelectionPanel = ({ secretPath, resetSelectedEntries, selectedEntri
  // user should have the ability to delete secrets/folders in at least one of the envs
  const shouldShowDelete = userAvailableEnvs.some((env) =>
    permission.can(
-      ProjectPermissionSecretActions.Delete,
+      ProjectPermissionActions.Delete,
      subject(ProjectPermissionSub.Secrets, {
        environment: env.slug,
        secretPath,
@@ -111,7 +110,7 @@ export const SelectionPanel = ({ secretPath, resetSelectedEntries, selectedEntri
        (accum: TDeleteSecretBatchDTO["secrets"], secretRecord) => {
          const entry = secretRecord[env.slug];
          const canDeleteSecret = permission.can(
-            ProjectPermissionSecretActions.Delete,
+            ProjectPermissionActions.Delete,
            subject(ProjectPermissionSub.Secrets, {
              environment: env.slug,
              secretPath,
@@ -25,8 +25,7 @@ import {
  Spinner,
  Switch
 } from "@app/components/v2";
-import { ProjectPermissionSub, useProjectPermission } from "@app/context";
-import { ProjectPermissionSecretActions } from "@app/context/ProjectPermissionContext/types";
+import { ProjectPermissionActions, ProjectPermissionSub, useProjectPermission } from "@app/context";
 import { useDebounce } from "@app/hooks";
 import { useMoveSecrets } from "@app/hooks/api";
 import { useGetProjectSecretsQuickSearch } from "@app/hooks/api/dashboard";
@@ -96,7 +95,7 @@ const Content = ({
        env.slug,
        {
          missingPermissions: permission.cannot(
-            ProjectPermissionSecretActions.Delete,
+            ProjectPermissionActions.Delete,
            subject(ProjectPermissionSub.Secrets, {
              environment: env.slug,
              secretPath: sourceSecretPath,