flipper-ui 1.4.0 → 1.4.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 00b09ef9134ecfe7b076edae579e9ff91827964ada4053fa8d5b5167b2965992
-  data.tar.gz: 22b200ae581fd91ced63c0936bfa03ce9ee306779bf09c7ed40809ec97e9d4c6
+  metadata.gz: '019dbf0664d70ba33fd6425f7ba20bff41a1be13ff42c97b184ea37c2c500fd5'
+  data.tar.gz: d1f2131f1d38cc5aa1ac4b0b5cc1298c914e8d4fd6e6f8693f218f6802977e8b
 SHA512:
-  metadata.gz: d85919950864694f4156846ffd1cf20c758451821409c6ae7fb566b11759740842368af8393669617c5d8c5764ac5a9d11c7f91207641c51892dec0169cd09ad
-  data.tar.gz: 62b4831c0a38c4321ab627480e79ab5043140d4b57869c80a3792288d9b2d21421133f701ba1a8df72b6d5d707854df65714cce7009cb383aee039c04177718a
+  metadata.gz: 9cee5defa8de58857b30dabf3db81047e61b1138bfaa090817d2b9b0732bc662bf7b1eaa4e5973cb59ae1ded71ccda44c178901450ccd20c7b2ebec5b79f292b
+  data.tar.gz: 011ba0f8d3db3ef0efaab5e684d79beb9fee04c28dc660ec394b1cdfab37ac1c0af3c83ab3f1731a623cdd92a159d87c8f157f269b0d1eac269603603eba18be

data/lib/flipper/ui/actions/boolean_gate.rb

@@ -16,6 +16,10 @@ module Flipper
           @feature = Decorators::Feature.new(feature)
 
           if params['action'] == 'Enable'
+            if Flipper::UI.configuration.disable_fully_enable
+              status 403
+              halt view_response(:disable_fully_enable)
+            end
             feature.enable
           else
             feature.disable

data/lib/flipper/ui/configuration.rb

@@ -77,6 +77,20 @@ module Flipper
       # Default is false.
       attr_accessor :confirm_disable
 
+      # Public: Set to disable the Fully Enable button in the UI, preventing
+      # users from fully enabling features via the web interface. Set to true
+      # for a default message, or a string for a custom message. Defaults to nil.
+      #
+      # Note: This only affects the UI. If flipper-api is mounted, full enable
+      # is still possible via the API.
+      #
+      # Examples:
+      #
+      #   config.disable_fully_enable = true
+      #   config.disable_fully_enable = "Use deploy pipeline instead."
+      #
+      attr_accessor :disable_fully_enable
+
       VALID_BANNER_CLASS_VALUES = %w(
         danger
         dark
@@ -90,6 +104,7 @@ module Flipper
 
       DEFAULT_DESCRIPTIONS_SOURCE = ->(_keys) { {} }
       DEFAULT_ACTOR_NAMES_SOURCE = ->(_keys) { {} }
+      DEFAULT_DISABLE_FULLY_ENABLE_MESSAGE = "Fully enabling features via the UI is disabled."
 
       def initialize
         @delete = Option.new("Danger Zone", "Deleting a feature removes it from the list of features and disables it for everyone.")
@@ -106,6 +121,7 @@ module Flipper
         @actors_separator = ','
         @confirm_fully_enable = false
         @confirm_disable = true
+        @disable_fully_enable = nil
         @read_only = false
         @nav_items = [
           { title: "Features", href: "features" },
@@ -121,6 +137,14 @@ module Flipper
         using_descriptions? && @show_feature_description_in_list
       end
 
+      def disable_fully_enable_message
+        if @disable_fully_enable.is_a?(String)
+          @disable_fully_enable
+        else
+          DEFAULT_DISABLE_FULLY_ENABLE_MESSAGE
+        end
+      end
+
       def banner_class=(value)
         unless VALID_BANNER_CLASS_VALUES.include?(value)
           raise InvalidConfigurationValue, "The banner_class provided '#{value}' is " \

data/lib/flipper/ui/views/disable_fully_enable.erb

@@ -0,0 +1,3 @@
+<div class="alert alert-danger">
+  <%= Flipper::UI.configuration.disable_fully_enable_message %>
+</div>

data/lib/flipper/ui/views/feature.erb

@@ -255,16 +255,24 @@
             <div class="row">
               <% unless @feature.boolean_value %>
                 <div class="col d-grid">
-                  <button type="submit" name="action" value="Enable" class="btn btn-outline-success"
-                    <% if Flipper::UI.configuration.confirm_fully_enable %>
-                      data-confirmation-prompt="Are you sure you want to fully enable this feature for everyone? Please enter the name of the feature to confirm it: <%= feature_name %>"
-                      data-confirmation-text="<%= feature_name %>"
-                    <% end %>
-                  >
-                    <span class="d-block" data-bs-toggle="tooltip" title="Enable for everyone">
-                      Fully Enable
+                  <% if Flipper::UI.configuration.disable_fully_enable %>
+                    <span class="d-inline-block" tabindex="0" data-bs-toggle="tooltip" title="<%= Flipper::UI.configuration.disable_fully_enable_message %>">
+                      <button type="submit" name="action" value="Enable" class="btn btn-outline-success w-100" disabled style="pointer-events: none;">
+                        Fully Enable
+                      </button>
                     </span>
-                  </button>
+                  <% else %>
+                    <button type="submit" name="action" value="Enable" class="btn btn-outline-success"
+                      <% if Flipper::UI.configuration.confirm_fully_enable %>
+                        data-confirmation-prompt="Are you sure you want to fully enable this feature for everyone? Please enter the name of the feature to confirm it: <%= feature_name %>"
+                        data-confirmation-text="<%= feature_name %>"
+                      <% end %>
+                    >
+                      <span class="d-block" data-bs-toggle="tooltip" title="Enable for everyone">
+                        Fully Enable
+                      </span>
+                    </button>
+                  <% end %>
                 </div>
               <% end %>
 

data/lib/flipper/version.rb

@@ -1,5 +1,5 @@
 module Flipper
-  VERSION = '1.4.0'.freeze
+  VERSION = '1.4.1'.freeze
 
   REQUIRED_RUBY_VERSION = '2.6'.freeze
   NEXT_REQUIRED_RUBY_VERSION = '3.0'.freeze

data/spec/flipper/ui/actions/boolean_gate_spec.rb

@@ -64,5 +64,76 @@ RSpec.describe Flipper::UI::Actions::BooleanGate do
         expect(last_response.headers['location']).to eq('/features/search')
       end
     end
+
+    context 'when disable_fully_enable is false' do
+      before { Flipper::UI.configuration.disable_fully_enable = false }
+      after { Flipper::UI.configuration.disable_fully_enable = nil }
+
+      it 'allows enabling the feature' do
+        flipper.disable :search
+        post 'features/search/boolean',
+             { 'action' => 'Enable', 'authenticity_token' => token },
+             'rack.session' => session
+        expect(flipper.enabled?(:search)).to be(true)
+      end
+    end
+
+    context 'when disable_fully_enable is true' do
+      before { Flipper::UI.configuration.disable_fully_enable = true }
+      after { Flipper::UI.configuration.disable_fully_enable = nil }
+
+      context 'with enable' do
+        before do
+          flipper.disable :search
+          post 'features/search/boolean',
+               { 'action' => 'Enable', 'authenticity_token' => token },
+               'rack.session' => session
+        end
+
+        it 'does not enable the feature' do
+          expect(flipper.enabled?(:search)).to be(false)
+        end
+
+        it 'returns 403 status' do
+          expect(last_response.status).to be(403)
+        end
+
+        it 'renders the default disabled message' do
+          expect(last_response.body).to include('Fully enabling features via the UI is disabled.')
+        end
+      end
+
+      context 'with disable' do
+        before do
+          flipper.enable :search
+          post 'features/search/boolean',
+               { 'action' => 'Disable', 'authenticity_token' => token },
+               'rack.session' => session
+        end
+
+        it 'still allows disabling the feature' do
+          expect(flipper.enabled?(:search)).to be(false)
+        end
+
+        it 'redirects back to feature' do
+          expect(last_response.status).to be(302)
+          expect(last_response.headers['location']).to eq('/features/search')
+        end
+      end
+    end
+
+    context 'when disable_fully_enable is a custom message' do
+      before { Flipper::UI.configuration.disable_fully_enable = "Use deploy pipeline instead." }
+      after { Flipper::UI.configuration.disable_fully_enable = nil }
+
+      it 'renders the custom message on 403' do
+        flipper.disable :search
+        post 'features/search/boolean',
+             { 'action' => 'Enable', 'authenticity_token' => token },
+             'rack.session' => session
+        expect(last_response.status).to be(403)
+        expect(last_response.body).to include('Use deploy pipeline instead.')
+      end
+    end
   end
 end

data/spec/flipper/ui/actions/feature_spec.rb

@@ -125,6 +125,32 @@ RSpec.describe Flipper::UI::Actions::Feature do
       end
     end
 
+    context "when disable_fully_enable is true" do
+      before { Flipper::UI.configuration.disable_fully_enable = true }
+      after { Flipper::UI.configuration.disable_fully_enable = nil }
+
+      it 'renders the Fully Enable button as disabled' do
+        get '/features/search'
+        expect(last_response.body).to include('Fully Enable')
+        expect(last_response.body).to match(/disabled\s*>/)
+      end
+
+      it 'shows the default disabled tooltip' do
+        get '/features/search'
+        expect(last_response.body).to include('Fully enabling features via the UI is disabled.')
+      end
+    end
+
+    context "when disable_fully_enable is a custom message" do
+      before { Flipper::UI.configuration.disable_fully_enable = "Use deploy pipeline instead." }
+      after { Flipper::UI.configuration.disable_fully_enable = nil }
+
+      it 'shows custom disabled tooltip' do
+        get '/features/search'
+        expect(last_response.body).to include('Use deploy pipeline instead.')
+      end
+    end
+
     context 'custom actor names' do
       before do
         actor = Flipper::Actor.new('some_actor_name')

data/spec/flipper/ui/configuration_spec.rb

@@ -146,6 +146,39 @@ RSpec.describe Flipper::UI::Configuration do
     end
   end
 
+  describe "#disable_fully_enable" do
+    it "defaults to nil" do
+      expect(configuration.disable_fully_enable).to be_nil
+    end
+
+    it "can be set to true" do
+      configuration.disable_fully_enable = true
+      expect(configuration.disable_fully_enable).to eq(true)
+    end
+
+    it "can be set to false" do
+      configuration.disable_fully_enable = false
+      expect(configuration.disable_fully_enable).to eq(false)
+    end
+
+    it "can be set to a custom message" do
+      configuration.disable_fully_enable = "Use deploy pipeline instead."
+      expect(configuration.disable_fully_enable).to eq("Use deploy pipeline instead.")
+    end
+  end
+
+  describe "#disable_fully_enable_message" do
+    it "returns default message when set to true" do
+      configuration.disable_fully_enable = true
+      expect(configuration.disable_fully_enable_message).to eq("Fully enabling features via the UI is disabled.")
+    end
+
+    it "returns custom message when set to a string" do
+      configuration.disable_fully_enable = "Use deploy pipeline instead."
+      expect(configuration.disable_fully_enable_message).to eq("Use deploy pipeline instead.")
+    end
+  end
+
   describe "#show_feature_description_in_list" do
     it "has default value" do
       expect(configuration.show_feature_description_in_list).to eq(false)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: flipper-ui
 version: !ruby/object:Gem::Version
-  version: 1.4.0
+  version: 1.4.1
 platform: ruby
 authors:
 - John Nunemaker
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-02-26 00:00:00.000000000 Z
+date: 2026-03-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rack
@@ -76,14 +76,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.4.0
+        version: 1.4.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.4.0
+        version: 1.4.1
 - !ruby/object:Gem::Dependency
   name: erubi
   requirement: !ruby/object:Gem::Requirement
@@ -166,6 +166,7 @@ files:
 - lib/flipper/ui/views/add_actor.erb
 - lib/flipper/ui/views/add_feature.erb
 - lib/flipper/ui/views/add_group.erb
+- lib/flipper/ui/views/disable_fully_enable.erb
 - lib/flipper/ui/views/feature.erb
 - lib/flipper/ui/views/feature_creation_disabled.erb
 - lib/flipper/ui/views/feature_removal_disabled.erb
@@ -202,7 +203,7 @@ metadata:
   homepage_uri: https://www.flippercloud.io
   source_code_uri: https://github.com/flippercloud/flipper
   bug_tracker_uri: https://github.com/flippercloud/flipper/issues
-  changelog_uri: https://github.com/flippercloud/flipper/releases/tag/v1.4.0
+  changelog_uri: https://github.com/flippercloud/flipper/releases/tag/v1.4.1
   funding_uri: https://github.com/sponsors/flippercloud
 post_install_message:
 rdoc_options: []