@7365admin1/layer-common 4.97.1-staging.608 → 4.97.1-staging.609

package/components/FeedbackHandlingSettings.vue

@@ -266,8 +266,10 @@ const props = withDefaults(
     siteId: string;
     orgId?: string;
     canEdit?: boolean;
+    /** Member type of `orgId`'s staff (the app hosting this card). */
+    memberType?: string;
   }>(),
-  { orgId: "", canEdit: false },
+  { orgId: "", canEdit: false, memberType: "property_management_agency" },
 );
 
 const emit = defineEmits<{ saved: [] }>();
@@ -312,6 +314,22 @@ function notify(text: string, color: string) {
   snackbar.value = true;
 }
 
+/**
+ * Everyone on `orgId`'s staff, page by page. The server needs `type` and caps
+ * `limit` at 50 (without them the list came back 400 and stayed empty). Staff
+ * are org-wide, so no `siteId`: that only matches members pinned to the site.
+ */
+async function orgMembers() {
+  const items: any[] = [];
+  // ponytail: 10 pages = 500 staff; raise if an org ever has more.
+  for (let page = 1; page <= 10; page++) {
+    const res: any = await getMembers({ org: props.orgId, type: props.memberType, status: "active", page, limit: 50 });
+    items.push(...(res?.items ?? []));
+    if (!res?.pages || page >= res.pages) break;
+  }
+  return { items };
+}
+
 async function load() {
   loading.value = true;
   try {
@@ -320,7 +338,7 @@ async function load() {
     loaded.value = !!site;
     const [p, m] = await Promise.allSettled([
       getProviders({ siteId: props.siteId, limit: 100, status: "active" }),
-      getMembers({ siteId: props.siteId, org: props.orgId, limit: 100 }),
+      orgMembers(),
     ]);
     if (p.status === "fulfilled") {
       providers.value = (p.value?.items ?? []).map((i: any) => ({

package/components/SiteDataRetention.vue

@@ -48,6 +48,7 @@
     <div class="sdr-label mt-6">Data removal records</div>
     <div class="sdr-sub">Each removal, with a certificate you can give your DPO (data protection lead).</div>
     <div v-if="recordsLoading" class="sdr-sub">Loading...</div>
+    <div v-else-if="recordsDenied" class="sdr-sub" data-test="sdr-records-denied">Only the client that owns this site can see the removal records.</div>
     <div v-else-if="!records.length" class="sdr-sub" data-test="sdr-no-records">No records have been removed at this site.</div>
     <div v-for="r in records" :key="r._id" class="sdr-record" data-test="sdr-record">
       <div>
@@ -86,6 +87,8 @@ const { listDataPurgeRecords, downloadDataPurgeCertificate } = useDataRetention(
 
 const records = ref<Record<string, any>[]>([]);
 const recordsLoading = ref(false);
+/** 403: records are for the site's owner (and Seven365) only - not "nothing removed". */
+const recordsDenied = ref(false);
 const downloading = ref("");
 const error = ref("");
 
@@ -121,8 +124,9 @@ async function loadRecords() {
   recordsLoading.value = true;
   try {
     records.value = (await listDataPurgeRecords(props.siteId))?.items ?? [];
-  } catch {
+  } catch (e: any) {
     records.value = [];
+    recordsDenied.value = (e?.statusCode ?? e?.status ?? e?.response?.status) === 403;
   } finally {
     recordsLoading.value = false;
   }

package/package.json

@@ -2,7 +2,7 @@
   "name": "@7365admin1/layer-common",
   "license": "MIT",
   "type": "module",
-  "version": "4.97.1-staging.608",
+  "version": "4.97.1-staging.609",
   "author": "7365admin1",
   "main": "./nuxt.config.ts",
   "//files": "What a consumer extending this layer actually loads. Without this npm ships the whole working tree - the changesets, the CI workflows, the render harness in tools/ and any scratch directory that happened to exist at publish time. Nuxt resolves a layer by directory, so every runtime directory below has to stay listed; adding a new top-level runtime directory means adding it here too.",