@7365admin1/layer-common 4.90.2-staging.491 → 4.90.3

package/components/HidAccessPermissions.vue

@@ -1,424 +0,0 @@
-<template>
-  <v-dialog v-model="open" max-width="760" scrollable>
-    <v-card class="hid-access-permissions">
-      <v-card-title class="hid-access-permissions__title">
-        <div>
-          <div class="text-h6">Access Permissions</div>
-          <div class="text-caption text-medium-emphasis">{{ readerLabel }}</div>
-        </div>
-      </v-card-title>
-
-      <v-divider />
-
-      <!-- The one precondition the server enforces before it will talk about
-           permissions at all. Saying it here beats letting the first request
-           fail with the same sentence in a snackbar. -->
-      <v-alert
-        v-if="!readerLocation"
-        type="warning"
-        variant="tonal"
-        density="compact"
-        class="ma-4"
-      >
-        Set a location on this HID Face Reader before managing permissions.
-      </v-alert>
-
-      <template v-else>
-        <div class="hid-access-permissions__intro">
-          <p class="text-body-2 text-medium-emphasis mb-0">
-            Residents enrolled on this reader. Enrolling already grants access — switch
-            somebody off to close the door to them without removing their face, card
-            or PIN.
-          </p>
-        </div>
-
-        <v-card-text class="hid-access-permissions__body">
-          <TableMain
-            :headers="headers"
-            :items="rows"
-            :loading="loading"
-            :items-per-page="-1"
-            :page="page"
-            :pages="pages"
-            :page-range="pageRange"
-            item-value="rowKey"
-            @refresh="loadEnrolled"
-            @update:page="goToPage"
-          >
-            <template #extension>
-              <div class="app-filter-row">
-                <AppField
-                  v-model="search"
-                  search
-                  placeholder="Search name, unit or registration"
-                  @keyup.enter="searchFromFirstPage"
-                />
-              </div>
-            </template>
-
-            <template #[`item.name`]="{ item }">
-              <div class="hid-access-permissions__person">
-                <div>{{ item.name || "—" }}</div>
-                <div class="text-caption text-medium-emphasis">{{ item.subtitle || "—" }}</div>
-              </div>
-            </template>
-
-            <template #[`item.selected`]="{ item }">
-              <div v-if="!item.assignable" class="hid-access-permissions__toggle">
-                <span class="text-caption text-medium-emphasis">{{ item.reason }}</span>
-              </div>
-              <div v-else class="hid-access-permissions__toggle">
-                <v-switch
-                  :model-value="item.selected"
-                  :disabled="saving"
-                  color="primary"
-                  density="compact"
-                  hide-details
-                  :aria-label="`Door access for ${item.name}`"
-                  @update:model-value="(value) => toggle(item, value === true)"
-                />
-                <span
-                  class="text-caption"
-                  :class="item.selected ? 'text-success' : 'text-medium-emphasis'"
-                >
-                  {{ item.selected ? "Has access" : "No access" }}
-                </span>
-              </div>
-            </template>
-          </TableMain>
-        </v-card-text>
-      </template>
-
-      <v-divider />
-
-      <v-card-actions class="hid-access-permissions__actions">
-        <span v-if="readerLocation" class="text-caption text-medium-emphasis">
-          {{ assignedTotal }} with access on this reader
-        </span>
-        <v-spacer />
-        <AppButton variant="ghost" :disabled="saving" @click="open = false">Cancel</AppButton>
-        <AppButton
-          icon="mdi-content-save-outline"
-          :loading="saving"
-          :disabled="!readerLocation || !dirty || saving"
-          @click="save"
-        >
-          Save Permissions
-        </AppButton>
-      </v-card-actions>
-    </v-card>
-
-    <v-snackbar v-model="snackbar.show" :color="snackbar.color" timeout="3500">
-      {{ snackbar.message }}
-    </v-snackbar>
-  </v-dialog>
-</template>
-
-<script setup lang="ts">
-import {
-  applySelection,
-  hasChanges,
-  readCandidatePage,
-  seedAssignments,
-  setAssignment,
-  toAssignmentPayload,
-  type HidAssignmentState,
-} from "../utils/hid-permission-assignments";
-
-/**
- * WHO MAY PASS THIS READER — a review and revoke screen, not a picker.
- *
- * Enrolling somebody now grants them access: `createIdentity` writes the
- * assignment, and the reconcile puts them in the reader's group in the same
- * pass. A property manager therefore has ONE thing to do, and this screen
- * exists for the other direction — taking access away again.
- *
- * So it lists the people ENROLLED on this reader rather than everybody at the
- * site. Switching somebody off removes their assignment, and the reconcile then
- * deletes their `user_groups` row; their identity, face, card and PIN are left
- * alone, so they stay recognisable at the door and are simply refused.
- *
- * The editing model lives in `utils/hid-permission-assignments.ts`, because the
- * save is whole-reader while the list is one page at a time — and getting that
- * wrong silently revokes everybody who is not on screen. See the tests there.
- */
-const props = defineProps<{
-  modelValue: boolean;
-  site: string;
-  org: string;
-  reader: Record<string, unknown> | null;
-}>();
-
-const emit = defineEmits<{
-  (event: "update:modelValue", value: boolean): void;
-  (event: "saved"): void;
-}>();
-
-const { getSitePermissions, getIdentities, updateSitePermissions } = useHidAmico();
-
-/* Name over unit in one cell rather than a "Unit" column — see `subtitleOf`. */
-const headers = [
-  { title: "Resident", value: "name", sortable: false },
-  { title: "Door access", value: "selected", sortable: false, width: 190 },
-];
-
-const search = ref("");
-const page = ref(1);
-const pages = ref(1);
-const pageRange = ref("");
-const loading = ref(false);
-const saving = ref(false);
-const enrolled = ref<THidPermissionCandidate[]>([]);
-const snackbar = reactive({ show: false, color: "success", message: "" });
-
-/** What the server holds, and the working copy. The pair drives `dirty`. */
-const savedState = ref<HidAssignmentState>(new Map());
-const draft = ref<HidAssignmentState>(new Map());
-
-const open = computed({
-  get: () => props.modelValue,
-  set: (value: boolean) => emit("update:modelValue", value),
-});
-
-const readerId = computed(() => String(props.reader?._id ?? ""));
-const readerLocation = computed(() => String(props.reader?.location ?? "").trim());
-const readerLabel = computed(() => {
-  const name = String(props.reader?.name ?? "").trim() || "HID Face Reader";
-  return readerLocation.value ? `${name} · ${readerLocation.value}` : name;
-});
-
-const assignedTotal = computed(() => draft.value.size);
-const dirty = computed(() => hasChanges(savedState.value, draft.value));
-/* The draft is the truth once the dialog is open, so `selected` is recomputed
-   on every render rather than trusted from the row. */
-const rows = computed(() => applySelection(enrolled.value, draft.value));
-
-watch(
-  () => [props.modelValue, readerId.value] as const,
-  ([isOpen]) => {
-    if (!isOpen || !readerId.value) return;
-    search.value = "";
-    page.value = 1;
-    void loadAll();
-  },
-  { immediate: true },
-);
-
-async function loadAll() {
-  if (!readerLocation.value) return;
-  await loadAssignments();
-  await loadEnrolled();
-}
-
-/**
- * `getSitePermissions` returns the reader's assignments across ALL categories.
- * That is what makes a whole-reader payload possible from a paged view, so it
- * is loaded once per opening rather than once per page.
- */
-async function loadAssignments() {
-  try {
-    const response = await getSitePermissions(props.site, props.org, readerId.value);
-    const assignments = response?.data?.assignments ?? [];
-    savedState.value = seedAssignments(assignments);
-    draft.value = seedAssignments(assignments);
-  } catch (error) {
-    showToast(getErrorMessage(error, "Unable to load this reader's permissions."), "error");
-  }
-}
-
-function toRecord(value: unknown): Record<string, unknown> {
-  return value && typeof value === "object" ? (value as Record<string, unknown>) : {};
-}
-
-/**
- * The subject an identity names, in the order `createIdentity` validates them.
- *
- * A visitor returns null and is left out of the list: visitor access comes from
- * `user_access_rules`, not from a group, so there is nothing here to switch
- * off. An identity linked to nobody — a device user the reader holds that was
- * never tied to a person — is dropped for the same reason.
- */
-function subjectOf(identity: Record<string, unknown>) {
-  if (identity.person) {
-    return { subjectId: String(identity.person), category: "resident" as const };
-  }
-  if (identity.member) {
-    return { subjectId: String(identity.member), category: "property_management" as const };
-  }
-  if (identity.serviceProvider) {
-    return { subjectId: String(identity.serviceProvider), category: "service_provider" as const };
-  }
-  return null;
-}
-
-/**
- * Why a row cannot be switched, in words the reader of the screen can act on.
- *
- * The row is still DRAWN. Dropping one silently is what made the pager say
- * "1-9 of 9" over seven rows: the count comes from the server and the rows came
- * from a filtered list, so people vanished with nothing to say they had.
- *
- * What lands here is a resident identity holding only an account link - no
- * person, member or service-provider record - which leaves no subject to
- * assign. Visitors never reach it: they are excluded by the query above,
- * because their access comes from `user_access_rules` rather than a group and
- * there would be nothing here to switch.
- */
-function unassignableReason() {
-  return "Not linked to a person";
-}
-
-/**
- * The unit, when the enrolment captured one.
- *
- * `unitLabel` and NOT `block`/`level`/`unit`: those three hold ObjectIds, and
- * the enrolment form resolves them through the occupancy tree before storing
- * the readable label beside them. `buildUnitLabel` carries the warning this
- * ignored once already — joining the raw values stamps
- * "665f.../665f.../665f..." into the column.
- *
- * Falls back to the registration number, which is what the rows created by an
- * assignment rather than an enrolment carry instead of a unit.
- */
-function subtitleOf(identity: Record<string, unknown>) {
-  const metadata = toRecord(identity.metadata);
-  return String(metadata.unitLabel ?? "").trim()
-    || String(identity.registration ?? "").trim();
-}
-
-async function loadEnrolled() {
-  if (!readerId.value || !readerLocation.value) return;
-  loading.value = true;
-  try {
-    const response = await getIdentities(readerId.value, {
-      page: page.value,
-      limit: 10,
-      search: search.value.trim(),
-      // Residents only, and filtered by the SERVER rather than here. The pager's
-      // count comes back from the same query, so narrowing the list on this side
-      // would print a total that never matched the rows under it.
-      type: "resident",
-    });
-    const result = readCandidatePage(response);
-    /*
-     * EVERY row the server returned, including the ones this screen cannot act
-     * on. A visitor's access comes from `user_access_rules` rather than a group,
-     * and an identity linked to nobody has no subject to assign - but both are
-     * still enrolled on this reader, and the count in the pager counts them. They
-     * are drawn with the switch disabled and a reason, instead of disappearing.
-     */
-    enrolled.value = result.items.map((row) => {
-      const identity = toRecord(row);
-      const subject = subjectOf(identity);
-      const metadata = toRecord(identity.metadata);
-      return {
-        subjectId: subject?.subjectId ?? "",
-        category: subject?.category ?? "resident",
-        // The row's own key. `subjectId` is empty for the rows below, and two
-        // empty keys would collapse into one row in the table.
-        rowKey: String(identity._id ?? identity.hidUserId ?? Math.random()),
-        assignable: Boolean(subject),
-        reason: subject ? "" : unassignableReason(),
-        name: String(metadata.name ?? "").trim()
-          || String(identity.registration ?? "").trim()
-          || "—",
-        subtitle: subtitleOf(identity),
-        intercom: false,
-        selected: false,
-      } as THidPermissionCandidate;
-    });
-    // `pages` only. The page number stays whatever the pager set — this
-    // endpoint's `paginate` never echoes it back, so reading one here pinned
-    // the screen to page one on every fetch.
-    pages.value = result.pages;
-    pageRange.value = result.pageRange;
-  } catch (error) {
-    enrolled.value = [];
-    pages.value = 1;
-    pageRange.value = "";
-    showToast(getErrorMessage(error, "Unable to load the people enrolled on this reader."), "error");
-  } finally {
-    loading.value = false;
-  }
-}
-
-function goToPage(value: number) {
-  page.value = Number(value) || 1;
-  void loadEnrolled();
-}
-
-function searchFromFirstPage() {
-  page.value = 1;
-  void loadEnrolled();
-}
-
-function toggle(item: THidPermissionCandidate, selected: boolean) {
-  if (!String(item.subjectId ?? "")) return;
-  draft.value = setAssignment(
-    draft.value,
-    savedState.value,
-    String(item.subjectId ?? ""),
-    item.category,
-    selected,
-  );
-}
-
-async function save() {
-  if (!dirty.value || saving.value) return;
-  saving.value = true;
-  try {
-    await updateSitePermissions(
-      props.site,
-      props.org,
-      readerId.value,
-      toAssignmentPayload(draft.value),
-    );
-    // The server reconciles the device inside this call: anybody switched off
-    // loses their `user_groups` row before it returns, so a success here means
-    // the door has already been updated.
-    savedState.value = new Map(draft.value);
-    showToast("HID permissions updated.");
-    emit("saved");
-    open.value = false;
-  } catch (error) {
-    showToast(getErrorMessage(error, "Unable to update HID permissions."), "error");
-  } finally {
-    saving.value = false;
-  }
-}
-
-function showToast(message: string, color = "success") {
-  snackbar.message = message;
-  snackbar.color = color;
-  snackbar.show = true;
-}
-
-function getErrorMessage(error: unknown, fallback: string) {
-  const record = toRecord(error);
-  const data = toRecord(record.data);
-  return String(data.message ?? "") || String(record.message ?? "") || fallback;
-}
-</script>
-
-<style scoped lang="scss">
-.hid-access-permissions {
-  &__title { padding-block: 16px; }
-
-  &__intro { padding: 12px 16px 0; }
-
-  &__body {
-    padding-top: 8px;
-    min-height: 320px;
-  }
-
-  &__actions { padding: 12px 16px; }
-
-  &__person > div:first-child { font-weight: 500; }
-
-  &__toggle {
-    display: flex;
-    align-items: center;
-    gap: 8px;
-  }
-}
-</style>