feat(rbac): resolved batch bug in permission check

backend/src/controllers/v2/secretsController.ts

@@ -163,19 +163,19 @@ export const batchSecrets = async (req: Request, res: Response) => {
   // not using service token  using auth
   if (!(req.authData.authPayload instanceof ServiceTokenData)) {
     const { permission } = await getUserProjectPermissions(req.user._id, workspaceId);
-    if (!createSecrets.length)
+    if (createSecrets.length)
       ForbiddenError.from(permission).throwUnlessCan(
         ProjectPermissionActions.Create,
         subject(ProjectPermissionSub.Secrets, { environment, secretPath })
       );
 
-    if (!updateSecrets.length)
+    if (updateSecrets.length)
       ForbiddenError.from(permission).throwUnlessCan(
         ProjectPermissionActions.Edit,
         subject(ProjectPermissionSub.Secrets, { environment, secretPath })
       );
 
-    if (!deleteSecrets.length)
+    if (deleteSecrets.length)
       ForbiddenError.from(permission).throwUnlessCan(
         ProjectPermissionActions.Delete,
         subject(ProjectPermissionSub.Secrets, { environment, secretPath })

frontend/src/views/DashboardPage/DashboardPage.tsx

@@ -333,6 +333,10 @@ export const DashboardPage = () => {
       permission.cannot(
         ProjectPermissionActions.Edit,
         subject(ProjectPermissionSub.Secrets, { environment, secretPath })
+      ) &&
+      permission.cannot(
+        ProjectPermissionActions.Create,
+        subject(ProjectPermissionSub.Secrets, { environment, secretPath })
       );
 
   const canDoRollback = !isReadOnly;

frontend/src/views/DashboardPage/components/SecretInputRow/SecretInputRow.tsx

@@ -304,10 +304,6 @@ export const SecretInputRow = memo(
                       (isOverridden ? isAddOnly : shouldBeBlockedInAddOnly)
                     }
                     {...field}
-                    onChange={(val) => {
-                      console.log(val);
-                      field.onChange(val);
-                    }}
                   />
                 )}
               />