@7365admin1/layer-common 4.0.3-staging.229 → 4.0.3-staging.230

package/components/ServiceProviderMain.vue

@@ -727,15 +727,15 @@ const props = defineProps({
   },
   canAddServiceProvider: {
     type: Boolean,
-    default: true,
+    default: undefined,
   },
   canInviteServiceProvider: {
     type: Boolean,
-    default: true,
+    default: undefined,
   },
   canViewServiceProviders: {
     type: Boolean,
-    default: true,
+    default: undefined,
   },
   showAddButton: {
     type: Boolean,
@@ -747,6 +747,25 @@ const props = defineProps({
   },
 });
 
+// No app binds these three -- there was no permission catalogue key to bind
+// them to, so they defaulted to `true` and every action was open to any
+// signed-in user in every consumer. `useServiceProviderPermission` computes
+// the real gate now; an app that DOES pass the prop still wins over it.
+const {
+  canAddServiceProvider: derivedCanAddServiceProvider,
+  canInviteServiceProvider: derivedCanInviteServiceProvider,
+  canViewServiceProviders: derivedCanViewServiceProviders,
+} = useServiceProviderPermission();
+const canAddServiceProvider = computed(
+  () => props.canAddServiceProvider ?? derivedCanAddServiceProvider.value
+);
+const canInviteServiceProvider = computed(
+  () => props.canInviteServiceProvider ?? derivedCanInviteServiceProvider.value
+);
+const canViewServiceProviders = computed(
+  () => props.canViewServiceProviders ?? derivedCanViewServiceProviders.value
+);
+
 // Only property-management contributes a service-provider-mgmt/billing page;
 // null in every other consumer, which hides the button instead of throwing.
 const billingRouteName = pickRouteName(

package/composables/useCommonPermission.ts

@@ -221,6 +221,21 @@ export function useCommonPermissions() {
       },
     }
 
+    const serviceProviderPermissions: Record<string, TPermission> = {
+      "add-service-provider": {
+        check: true,
+        description: "Allows the user to add a new service provider.",
+      },
+      "invite-service-provider": {
+        check: true,
+        description: "Allows the user to invite a service provider to the organization.",
+      },
+      "see-all-service-providers": {
+        check: true,
+        description: "Allows the user to view the list of all service providers.",
+      },
+    }
+
     const siteSettingsPermissions: Record<string, TPermission> = {
       "manage-site-information": {
         check: true,
@@ -291,6 +306,7 @@ export function useCommonPermissions() {
     buildingManagementPermissions,
     buildingUnitManagementPermissions,
     bulletinBoardPermissions,
+    serviceProviderPermissions,
     siteSettingsPermissions,
 
   };

package/composables/useServiceProviderPermission.ts

@@ -0,0 +1,33 @@
+import { useCommonPermissions } from "./useCommonPermission";
+
+export function useServiceProviderPermission() {
+  const { hasPermission } = usePermission();
+  const { serviceProviderPermissions } = useCommonPermissions();
+  const permissions: TPermissions = { "service-provider": serviceProviderPermissions };
+
+  const { userAppRole } = useLocalSetup();
+
+  const canAddServiceProvider = computed(() => {
+    if (!userAppRole.value) return false;
+    if (userAppRole.value.permissions.includes("*")) return true;
+    return hasPermission(userAppRole.value, permissions, "service-provider", "add-service-provider");
+  });
+
+  const canInviteServiceProvider = computed(() => {
+    if (!userAppRole.value) return false;
+    if (userAppRole.value.permissions.includes("*")) return true;
+    return hasPermission(userAppRole.value, permissions, "service-provider", "invite-service-provider");
+  });
+
+  const canViewServiceProviders = computed(() => {
+    if (!userAppRole.value) return false;
+    if (userAppRole.value.permissions.includes("*")) return true;
+    return hasPermission(userAppRole.value, permissions, "service-provider", "see-all-service-providers");
+  });
+
+  return {
+    canAddServiceProvider,
+    canInviteServiceProvider,
+    canViewServiceProviders,
+  };
+}

package/package.json

@@ -2,7 +2,7 @@
   "name": "@7365admin1/layer-common",
   "license": "MIT",
   "type": "module",
-  "version": "4.0.3-staging.229",
+  "version": "4.0.3-staging.230",
   "author": "7365admin1",
   "main": "./nuxt.config.ts",
   "//files": "What a consumer extending this layer actually loads. Without this npm ships the whole working tree - the changesets, the CI workflows, the render harness in tools/ and any scratch directory that happened to exist at publish time. Nuxt resolves a layer by directory, so every runtime directory below has to stay listed; adding a new top-level runtime directory means adding it here too.",