@backstage-community/plugin-rbac 1.37.0 → 1.38.1

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 ### Dependencies
 
+## 1.38.1
+
+### Patch Changes
+
+- 152eb5f: In edit role form show selected permissions for a plugin based on resource-type and policy mapping if resource-type used in creation of simple permission policy via CLI/CSV file.
+- 3e35324: Updated dependency `start-server-and-test` to `2.0.10`.
+
+## 1.38.0
+
+### Minor Changes
+
+- a7730fc: Update shared react library @janus-idp/shared-react to version 2.16.0 with newer @kubernetes/client-node@1.0.0-rc7.
+
 ## 1.37.0
 
 ### Minor Changes

package/dist/components/CreateRole/PermissionPoliciesForm.esm.js

@@ -98,12 +98,12 @@ const PermissionPoliciesForm = ({
         {
           name: p.label,
           plugin: p.value,
-          permissionPolicies: permissionPoliciesData?.pluginsPermissions[p.value].permissions.map((perm) => ({
+          permissionPolicies: permissionPoliciesData?.pluginsPermissions[p.value]?.permissions?.map((perm) => ({
             permission: perm,
             actions: permissionPoliciesData?.pluginsPermissions[p.value].policies[perm].policies,
             isResourced: permissionPoliciesData?.pluginsPermissions[p.value].policies[perm].isResourced,
             resourceType: permissionPoliciesData?.pluginsPermissions[p.value].policies[perm].resourceType
-          }))
+          })) ?? []
         }
       ] : []
     ).flat();

package/dist/components/CreateRole/PermissionPoliciesForm.esm.js.map

@@ -1 +1 @@
-{"version":3,"file":"PermissionPoliciesForm.esm.js","sources":["../../../src/components/CreateRole/PermissionPoliciesForm.tsx"],"sourcesContent":["/*\n * Copyright 2024 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport React from 'react';\nimport { useAsync } from 'react-use';\n\nimport { Progress } from '@backstage/core-components';\nimport { useApi } from '@backstage/core-plugin-api';\n\nimport FormHelperText from '@mui/material/FormHelperText';\nimport { FormikErrors } from 'formik';\n\nimport { rbacApiRef } from '../../api/RBACBackendClient';\nimport { useConditionRules } from '../../hooks/useConditionRules';\nimport { PermissionsData, SelectedPlugin } from '../../types';\nimport { getPluginsPermissionPoliciesData } from '../../utils/create-role-utils';\nimport { ConditionsData } from '../ConditionalAccess/types';\nimport { RoleFormValues } from './types';\nimport PermissionPoliciesFormTable from './PermissionPoliciesFormTable';\nimport PluginsDropdown from './PluginsDropdown';\nimport Box from '@mui/material/Box';\n\ntype PermissionPoliciesFormProps = {\n  permissionPoliciesRows: PermissionsData[];\n  selectedPlugins: SelectedPlugin[];\n  setFieldValue: (\n    field: string,\n    value: any,\n    shouldValidate?: boolean,\n  ) => Promise<FormikErrors<RoleFormValues>> | Promise<void>;\n  setFieldError: (field: string, value: string | undefined) => void;\n  handleBlur: React.FocusEventHandler<HTMLInputElement | HTMLTextAreaElement>;\n  selectedPluginsError: string;\n};\n\nexport const PermissionPoliciesForm = ({\n  permissionPoliciesRows,\n  selectedPlugins,\n  setFieldValue,\n  setFieldError,\n  handleBlur,\n  selectedPluginsError,\n}: PermissionPoliciesFormProps) => {\n  const rbacApi = useApi(rbacApiRef);\n  const conditionRules = useConditionRules();\n\n  const { data: conditionRulesData } = conditionRules;\n\n  const {\n    value: permissionPolicies,\n    loading: permissionPoliciesLoading,\n    error: permissionPoliciesErr,\n  } = useAsync(async () => {\n    return await rbacApi.listPermissions();\n  });\n\n  const permissionPoliciesData =\n    !permissionPoliciesLoading && Array.isArray(permissionPolicies)\n      ? getPluginsPermissionPoliciesData(permissionPolicies)\n      : undefined;\n\n  const onSelectPermission = (\n    plugin: string,\n    permission: string,\n    isResourced: boolean,\n    policies: string[],\n    resourceType?: string,\n  ) => {\n    const ppr = {\n      plugin,\n      permission,\n      isResourced,\n      policies: policies.map(p => ({ policy: p, effect: 'allow' })),\n      resourceType,\n    };\n    setFieldValue(\n      'permissionPoliciesRows',\n      [...permissionPoliciesRows, ppr],\n      true,\n    );\n  };\n\n  const onRemovePermission = (index: number) => {\n    const finalPps = permissionPoliciesRows.filter(\n      (_ppr, pIndex) => index !== pIndex,\n    );\n    setFieldValue('permissionPoliciesRows', finalPps, true);\n    setFieldError(`permissionPoliciesRows[${index}]`, undefined);\n  };\n\n  const onSelectPolicy = (\n    isChecked: boolean,\n    policyIndex: number,\n    index: number,\n  ) => {\n    setFieldValue(\n      `permissionPoliciesRows[${index}].policies[${policyIndex}].effect`,\n      isChecked ? 'allow' : 'deny',\n      true,\n    );\n  };\n\n  const onAddConditions = (index: number, conditions?: ConditionsData) => {\n    setFieldValue(`permissionPoliciesRows[${index}].conditions`, conditions);\n    if (!conditions)\n      setFieldValue(`permissionPoliciesRows[${index}].id`, undefined);\n  };\n\n  const onRemoveAllPlugins = () => {\n    setFieldValue(`selectedPlugins`, [], true);\n    setFieldValue('permissionPoliciesRows', [], true);\n  };\n\n  const onRemovePlugin = (plugin: string) => {\n    const selPlugins = selectedPlugins.filter(\n      sp => sp.value && sp.value !== plugin,\n    );\n    const finalPps = permissionPoliciesRows.filter(\n      ppr => ppr.plugin !== plugin,\n    );\n    setFieldValue(`selectedPlugins`, selPlugins, true);\n    setFieldValue('permissionPoliciesRows', finalPps, true);\n  };\n\n  const getAllPlugins = () => {\n    let allPlugins: SelectedPlugin[] = [];\n    if (permissionPoliciesData?.plugins) {\n      allPlugins = permissionPoliciesData.plugins.map(p => ({\n        label: p.charAt(0).toLocaleUpperCase('en-US') + p.substring(1),\n        value: p,\n      }));\n    }\n    const allPluginsItem =\n      allPlugins.length > 0\n        ? [\n            {\n              label: `All plugins (${allPlugins.length})`,\n              value: '',\n            },\n          ]\n        : [];\n    return [...allPluginsItem, ...allPlugins];\n  };\n\n  const getPermissionPoliciesTableData = () => {\n    return selectedPlugins\n      .map(p =>\n        p.value\n          ? [\n              {\n                name: p.label,\n                plugin: p.value,\n                permissionPolicies: permissionPoliciesData?.pluginsPermissions[\n                  p.value\n                ].permissions.map(perm => ({\n                  permission: perm,\n                  actions:\n                    permissionPoliciesData?.pluginsPermissions[p.value]\n                      .policies[perm].policies,\n                  isResourced:\n                    permissionPoliciesData?.pluginsPermissions[p.value]\n                      .policies[perm].isResourced,\n                  resourceType:\n                    permissionPoliciesData?.pluginsPermissions[p.value]\n                      .policies[perm].resourceType,\n                })),\n              },\n            ]\n          : [],\n      )\n      .flat();\n  };\n\n  const getSelectedPluginsCount = () => {\n    if (selectedPlugins?.length > 0) {\n      if (selectedPlugins.findIndex(sp => sp.value === '') >= 0) {\n        return selectedPlugins.length - 1;\n      }\n      return selectedPlugins.length;\n    }\n    return 0;\n  };\n\n  return (\n    <div>\n      <FormHelperText>\n        By default, users are not granted access to any plugins. To grant user\n        access, select the plugins you want to enable. Then, select which\n        actions you would like to give user permission to.\n      </FormHelperText>\n      <br />\n      {permissionPoliciesLoading ? (\n        <Progress />\n      ) : (\n        <Box>\n          <PluginsDropdown\n            allPlugins={getAllPlugins()}\n            selectedPlugins={selectedPlugins}\n            setFieldValue={setFieldValue}\n            handleBlur={handleBlur}\n            onRemovePlugin={onRemovePlugin}\n            onRemoveAllPlugins={onRemoveAllPlugins}\n            selectedPluginsError={selectedPluginsError}\n          />\n          <br />\n          <br />\n          <PermissionPoliciesFormTable\n            selectedPluginsCount={getSelectedPluginsCount()}\n            data={getPermissionPoliciesTableData()}\n            permissionPoliciesRows={permissionPoliciesRows ?? []}\n            onSelectPermission={onSelectPermission}\n            onSelectPolicy={onSelectPolicy}\n            conditionRulesData={conditionRulesData}\n            onRemovePermission={onRemovePermission}\n            onRemovePlugin={onRemovePlugin}\n            onAddConditions={onAddConditions}\n          />\n        </Box>\n      )}\n      {!permissionPoliciesLoading &&\n        (permissionPoliciesErr?.message ||\n          !Array.isArray(permissionPolicies)) && (\n          <>\n            <br />\n            <FormHelperText error>\n              {`Error fetching the permission policies: ${\n                permissionPoliciesErr?.message ||\n                (permissionPolicies as Response)?.statusText\n              }`}\n            </FormHelperText>\n          </>\n        )}\n    </div>\n  );\n};\n"],"names":["React"],"mappings":";;;;;;;;;;;;AA+CO,MAAM,yBAAyB,CAAC;AAAA,EACrC,sBAAA;AAAA,EACA,eAAA;AAAA,EACA,aAAA;AAAA,EACA,aAAA;AAAA,EACA,UAAA;AAAA,EACA;AACF,CAAmC,KAAA;AACjC,EAAM,MAAA,OAAA,GAAU,OAAO,UAAU,CAAA;AACjC,EAAA,MAAM,iBAAiB,iBAAkB,EAAA;AAEzC,EAAM,MAAA,EAAE,IAAM,EAAA,kBAAA,EAAuB,GAAA,cAAA;AAErC,EAAM,MAAA;AAAA,IACJ,KAAO,EAAA,kBAAA;AAAA,IACP,OAAS,EAAA,yBAAA;AAAA,IACT,KAAO,EAAA;AAAA,GACT,GAAI,SAAS,YAAY;AACvB,IAAO,OAAA,MAAM,QAAQ,eAAgB,EAAA;AAAA,GACtC,CAAA;AAED,EAAM,MAAA,sBAAA,GACJ,CAAC,yBAA6B,IAAA,KAAA,CAAM,QAAQ,kBAAkB,CAAA,GAC1D,gCAAiC,CAAA,kBAAkB,CACnD,GAAA,SAAA;AAEN,EAAA,MAAM,qBAAqB,CACzB,MAAA,EACA,UACA,EAAA,WAAA,EACA,UACA,YACG,KAAA;AACH,IAAA,MAAM,GAAM,GAAA;AAAA,MACV,MAAA;AAAA,MACA,UAAA;AAAA,MACA,WAAA;AAAA,MACA,QAAA,EAAU,SAAS,GAAI,CAAA,CAAA,CAAA,MAAM,EAAE,MAAQ,EAAA,CAAA,EAAG,MAAQ,EAAA,OAAA,EAAU,CAAA,CAAA;AAAA,MAC5D;AAAA,KACF;AACA,IAAA,aAAA;AAAA,MACE,wBAAA;AAAA,MACA,CAAC,GAAG,sBAAA,EAAwB,GAAG,CAAA;AAAA,MAC/B;AAAA,KACF;AAAA,GACF;AAEA,EAAM,MAAA,kBAAA,GAAqB,CAAC,KAAkB,KAAA;AAC5C,IAAA,MAAM,WAAW,sBAAuB,CAAA,MAAA;AAAA,MACtC,CAAC,IAAM,EAAA,MAAA,KAAW,KAAU,KAAA;AAAA,KAC9B;AACA,IAAc,aAAA,CAAA,wBAAA,EAA0B,UAAU,IAAI,CAAA;AACtD,IAAc,aAAA,CAAA,CAAA,uBAAA,EAA0B,KAAK,CAAA,CAAA,CAAA,EAAK,SAAS,CAAA;AAAA,GAC7D;AAEA,EAAA,MAAM,cAAiB,GAAA,CACrB,SACA,EAAA,WAAA,EACA,KACG,KAAA;AACH,IAAA,aAAA;AAAA,MACE,CAAA,uBAAA,EAA0B,KAAK,CAAA,WAAA,EAAc,WAAW,CAAA,QAAA,CAAA;AAAA,MACxD,YAAY,OAAU,GAAA,MAAA;AAAA,MACtB;AAAA,KACF;AAAA,GACF;AAEA,EAAM,MAAA,eAAA,GAAkB,CAAC,KAAA,EAAe,UAAgC,KAAA;AACtE,IAAc,aAAA,CAAA,CAAA,uBAAA,EAA0B,KAAK,CAAA,YAAA,CAAA,EAAgB,UAAU,CAAA;AACvE,IAAA,IAAI,CAAC,UAAA;AACH,MAAc,aAAA,CAAA,CAAA,uBAAA,EAA0B,KAAK,CAAA,IAAA,CAAA,EAAQ,SAAS,CAAA;AAAA,GAClE;AAEA,EAAA,MAAM,qBAAqB,MAAM;AAC/B,IAAc,aAAA,CAAA,CAAA,eAAA,CAAA,EAAmB,EAAC,EAAG,IAAI,CAAA;AACzC,IAAc,aAAA,CAAA,wBAAA,EAA0B,EAAC,EAAG,IAAI,CAAA;AAAA,GAClD;AAEA,EAAM,MAAA,cAAA,GAAiB,CAAC,MAAmB,KAAA;AACzC,IAAA,MAAM,aAAa,eAAgB,CAAA,MAAA;AAAA,MACjC,CAAM,EAAA,KAAA,EAAA,CAAG,KAAS,IAAA,EAAA,CAAG,KAAU,KAAA;AAAA,KACjC;AACA,IAAA,MAAM,WAAW,sBAAuB,CAAA,MAAA;AAAA,MACtC,CAAA,GAAA,KAAO,IAAI,MAAW,KAAA;AAAA,KACxB;AACA,IAAc,aAAA,CAAA,CAAA,eAAA,CAAA,EAAmB,YAAY,IAAI,CAAA;AACjD,IAAc,aAAA,CAAA,wBAAA,EAA0B,UAAU,IAAI,CAAA;AAAA,GACxD;AAEA,EAAA,MAAM,gBAAgB,MAAM;AAC1B,IAAA,IAAI,aAA+B,EAAC;AACpC,IAAA,IAAI,wBAAwB,OAAS,EAAA;AACnC,MAAa,UAAA,GAAA,sBAAA,CAAuB,OAAQ,CAAA,GAAA,CAAI,CAAM,CAAA,MAAA;AAAA,QACpD,KAAA,EAAO,CAAE,CAAA,MAAA,CAAO,CAAC,CAAA,CAAE,kBAAkB,OAAO,CAAA,GAAI,CAAE,CAAA,SAAA,CAAU,CAAC,CAAA;AAAA,QAC7D,KAAO,EAAA;AAAA,OACP,CAAA,CAAA;AAAA;AAEJ,IAAM,MAAA,cAAA,GACJ,UAAW,CAAA,MAAA,GAAS,CAChB,GAAA;AAAA,MACE;AAAA,QACE,KAAA,EAAO,CAAgB,aAAA,EAAA,UAAA,CAAW,MAAM,CAAA,CAAA,CAAA;AAAA,QACxC,KAAO,EAAA;AAAA;AACT,QAEF,EAAC;AACP,IAAA,OAAO,CAAC,GAAG,cAAgB,EAAA,GAAG,UAAU,CAAA;AAAA,GAC1C;AAEA,EAAA,MAAM,iCAAiC,MAAM;AAC3C,IAAA,OAAO,eACJ,CAAA,GAAA;AAAA,MAAI,CAAA,CAAA,KACH,EAAE,KACE,GAAA;AAAA,QACE;AAAA,UACE,MAAM,CAAE,CAAA,KAAA;AAAA,UACR,QAAQ,CAAE,CAAA,KAAA;AAAA,UACV,kBAAA,EAAoB,wBAAwB,kBAC1C,CAAA,CAAA,CAAE,KACJ,CAAE,CAAA,WAAA,CAAY,IAAI,CAAS,IAAA,MAAA;AAAA,YACzB,UAAY,EAAA,IAAA;AAAA,YACZ,OAAA,EACE,wBAAwB,kBAAmB,CAAA,CAAA,CAAE,KAAK,CAC/C,CAAA,QAAA,CAAS,IAAI,CAAE,CAAA,QAAA;AAAA,YACpB,WAAA,EACE,wBAAwB,kBAAmB,CAAA,CAAA,CAAE,KAAK,CAC/C,CAAA,QAAA,CAAS,IAAI,CAAE,CAAA,WAAA;AAAA,YACpB,YAAA,EACE,wBAAwB,kBAAmB,CAAA,CAAA,CAAE,KAAK,CAC/C,CAAA,QAAA,CAAS,IAAI,CAAE,CAAA;AAAA,WACpB,CAAA;AAAA;AACJ,UAEF;AAAC,MAEN,IAAK,EAAA;AAAA,GACV;AAEA,EAAA,MAAM,0BAA0B,MAAM;AACpC,IAAI,IAAA,eAAA,EAAiB,SAAS,CAAG,EAAA;AAC/B,MAAA,IAAI,gBAAgB,SAAU,CAAA,CAAA,EAAA,KAAM,GAAG,KAAU,KAAA,EAAE,KAAK,CAAG,EAAA;AACzD,QAAA,OAAO,gBAAgB,MAAS,GAAA,CAAA;AAAA;AAElC,MAAA,OAAO,eAAgB,CAAA,MAAA;AAAA;AAEzB,IAAO,OAAA,CAAA;AAAA,GACT;AAEA,EAAA,uBACGA,cAAA,CAAA,aAAA,CAAA,KAAA,EAAA,IAAA,kBACEA,cAAA,CAAA,aAAA,CAAA,cAAA,EAAA,IAAA,EAAe,6LAIhB,CACA,kBAAAA,cAAA,CAAA,aAAA,CAAC,IAAG,EAAA,IAAA,CAAA,EACH,yBACC,mBAAAA,cAAA,CAAA,aAAA,CAAC,QAAS,EAAA,IAAA,CAAA,gDAET,GACC,EAAA,IAAA,kBAAAA,cAAA,CAAA,aAAA;AAAA,IAAC,eAAA;AAAA,IAAA;AAAA,MACC,YAAY,aAAc,EAAA;AAAA,MAC1B,eAAA;AAAA,MACA,aAAA;AAAA,MACA,UAAA;AAAA,MACA,cAAA;AAAA,MACA,kBAAA;AAAA,MACA;AAAA;AAAA,qBAEDA,cAAA,CAAA,aAAA,CAAA,IAAA,EAAA,IAAG,CACJ,kBAAAA,cAAA,CAAA,aAAA,CAAC,UAAG,CACJ,kBAAAA,cAAA,CAAA,aAAA;AAAA,IAAC,2BAAA;AAAA,IAAA;AAAA,MACC,sBAAsB,uBAAwB,EAAA;AAAA,MAC9C,MAAM,8BAA+B,EAAA;AAAA,MACrC,sBAAA,EAAwB,0BAA0B,EAAC;AAAA,MACnD,kBAAA;AAAA,MACA,cAAA;AAAA,MACA,kBAAA;AAAA,MACA,kBAAA;AAAA,MACA,cAAA;AAAA,MACA;AAAA;AAAA,GAEJ,CAED,EAAA,CAAC,yBACC,KAAA,qBAAA,EAAuB,OACtB,IAAA,CAAC,KAAM,CAAA,OAAA,CAAQ,kBAAkB,CAAA,CAAA,oBAE/BA,cAAA,CAAA,aAAA,CAAAA,cAAA,CAAA,QAAA,EAAA,IAAA,kBAAAA,cAAA,CAAA,aAAA,CAAC,UAAG,CACJ,kBAAAA,cAAA,CAAA,aAAA,CAAC,cAAe,EAAA,EAAA,KAAA,EAAK,IAClB,EAAA,EAAA,CAAA,wCAAA,EACC,qBAAuB,EAAA,OAAA,IACtB,kBAAiC,EAAA,UACpC,CACF,CAAA,CACF,CAEN,CAAA;AAEJ;;;;"}
+{"version":3,"file":"PermissionPoliciesForm.esm.js","sources":["../../../src/components/CreateRole/PermissionPoliciesForm.tsx"],"sourcesContent":["/*\n * Copyright 2024 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport React from 'react';\nimport { useAsync } from 'react-use';\n\nimport { Progress } from '@backstage/core-components';\nimport { useApi } from '@backstage/core-plugin-api';\n\nimport FormHelperText from '@mui/material/FormHelperText';\nimport { FormikErrors } from 'formik';\n\nimport { rbacApiRef } from '../../api/RBACBackendClient';\nimport { useConditionRules } from '../../hooks/useConditionRules';\nimport { PermissionsData, SelectedPlugin } from '../../types';\nimport { getPluginsPermissionPoliciesData } from '../../utils/create-role-utils';\nimport { ConditionsData } from '../ConditionalAccess/types';\nimport { RoleFormValues } from './types';\nimport PermissionPoliciesFormTable from './PermissionPoliciesFormTable';\nimport PluginsDropdown from './PluginsDropdown';\nimport Box from '@mui/material/Box';\n\ntype PermissionPoliciesFormProps = {\n  permissionPoliciesRows: PermissionsData[];\n  selectedPlugins: SelectedPlugin[];\n  setFieldValue: (\n    field: string,\n    value: any,\n    shouldValidate?: boolean,\n  ) => Promise<FormikErrors<RoleFormValues>> | Promise<void>;\n  setFieldError: (field: string, value: string | undefined) => void;\n  handleBlur: React.FocusEventHandler<HTMLInputElement | HTMLTextAreaElement>;\n  selectedPluginsError: string;\n};\n\nexport const PermissionPoliciesForm = ({\n  permissionPoliciesRows,\n  selectedPlugins,\n  setFieldValue,\n  setFieldError,\n  handleBlur,\n  selectedPluginsError,\n}: PermissionPoliciesFormProps) => {\n  const rbacApi = useApi(rbacApiRef);\n  const conditionRules = useConditionRules();\n\n  const { data: conditionRulesData } = conditionRules;\n\n  const {\n    value: permissionPolicies,\n    loading: permissionPoliciesLoading,\n    error: permissionPoliciesErr,\n  } = useAsync(async () => {\n    return await rbacApi.listPermissions();\n  });\n\n  const permissionPoliciesData =\n    !permissionPoliciesLoading && Array.isArray(permissionPolicies)\n      ? getPluginsPermissionPoliciesData(permissionPolicies)\n      : undefined;\n\n  const onSelectPermission = (\n    plugin: string,\n    permission: string,\n    isResourced: boolean,\n    policies: string[],\n    resourceType?: string,\n  ) => {\n    const ppr = {\n      plugin,\n      permission,\n      isResourced,\n      policies: policies.map(p => ({ policy: p, effect: 'allow' })),\n      resourceType,\n    };\n    setFieldValue(\n      'permissionPoliciesRows',\n      [...permissionPoliciesRows, ppr],\n      true,\n    );\n  };\n\n  const onRemovePermission = (index: number) => {\n    const finalPps = permissionPoliciesRows.filter(\n      (_ppr, pIndex) => index !== pIndex,\n    );\n    setFieldValue('permissionPoliciesRows', finalPps, true);\n    setFieldError(`permissionPoliciesRows[${index}]`, undefined);\n  };\n\n  const onSelectPolicy = (\n    isChecked: boolean,\n    policyIndex: number,\n    index: number,\n  ) => {\n    setFieldValue(\n      `permissionPoliciesRows[${index}].policies[${policyIndex}].effect`,\n      isChecked ? 'allow' : 'deny',\n      true,\n    );\n  };\n\n  const onAddConditions = (index: number, conditions?: ConditionsData) => {\n    setFieldValue(`permissionPoliciesRows[${index}].conditions`, conditions);\n    if (!conditions)\n      setFieldValue(`permissionPoliciesRows[${index}].id`, undefined);\n  };\n\n  const onRemoveAllPlugins = () => {\n    setFieldValue(`selectedPlugins`, [], true);\n    setFieldValue('permissionPoliciesRows', [], true);\n  };\n\n  const onRemovePlugin = (plugin: string) => {\n    const selPlugins = selectedPlugins.filter(\n      sp => sp.value && sp.value !== plugin,\n    );\n    const finalPps = permissionPoliciesRows.filter(\n      ppr => ppr.plugin !== plugin,\n    );\n    setFieldValue(`selectedPlugins`, selPlugins, true);\n    setFieldValue('permissionPoliciesRows', finalPps, true);\n  };\n\n  const getAllPlugins = () => {\n    let allPlugins: SelectedPlugin[] = [];\n    if (permissionPoliciesData?.plugins) {\n      allPlugins = permissionPoliciesData.plugins.map(p => ({\n        label: p.charAt(0).toLocaleUpperCase('en-US') + p.substring(1),\n        value: p,\n      }));\n    }\n    const allPluginsItem =\n      allPlugins.length > 0\n        ? [\n            {\n              label: `All plugins (${allPlugins.length})`,\n              value: '',\n            },\n          ]\n        : [];\n    return [...allPluginsItem, ...allPlugins];\n  };\n\n  const getPermissionPoliciesTableData = () => {\n    return selectedPlugins\n      .map(p =>\n        p.value\n          ? [\n              {\n                name: p.label,\n                plugin: p.value,\n                permissionPolicies:\n                  permissionPoliciesData?.pluginsPermissions[\n                    p.value\n                  ]?.permissions?.map(perm => ({\n                    permission: perm,\n                    actions:\n                      permissionPoliciesData?.pluginsPermissions[p.value]\n                        .policies[perm].policies,\n                    isResourced:\n                      permissionPoliciesData?.pluginsPermissions[p.value]\n                        .policies[perm].isResourced,\n                    resourceType:\n                      permissionPoliciesData?.pluginsPermissions[p.value]\n                        .policies[perm].resourceType,\n                  })) ?? [],\n              },\n            ]\n          : [],\n      )\n      .flat();\n  };\n\n  const getSelectedPluginsCount = () => {\n    if (selectedPlugins?.length > 0) {\n      if (selectedPlugins.findIndex(sp => sp.value === '') >= 0) {\n        return selectedPlugins.length - 1;\n      }\n      return selectedPlugins.length;\n    }\n    return 0;\n  };\n\n  return (\n    <div>\n      <FormHelperText>\n        By default, users are not granted access to any plugins. To grant user\n        access, select the plugins you want to enable. Then, select which\n        actions you would like to give user permission to.\n      </FormHelperText>\n      <br />\n      {permissionPoliciesLoading ? (\n        <Progress />\n      ) : (\n        <Box>\n          <PluginsDropdown\n            allPlugins={getAllPlugins()}\n            selectedPlugins={selectedPlugins}\n            setFieldValue={setFieldValue}\n            handleBlur={handleBlur}\n            onRemovePlugin={onRemovePlugin}\n            onRemoveAllPlugins={onRemoveAllPlugins}\n            selectedPluginsError={selectedPluginsError}\n          />\n          <br />\n          <br />\n          <PermissionPoliciesFormTable\n            selectedPluginsCount={getSelectedPluginsCount()}\n            data={getPermissionPoliciesTableData()}\n            permissionPoliciesRows={permissionPoliciesRows ?? []}\n            onSelectPermission={onSelectPermission}\n            onSelectPolicy={onSelectPolicy}\n            conditionRulesData={conditionRulesData}\n            onRemovePermission={onRemovePermission}\n            onRemovePlugin={onRemovePlugin}\n            onAddConditions={onAddConditions}\n          />\n        </Box>\n      )}\n      {!permissionPoliciesLoading &&\n        (permissionPoliciesErr?.message ||\n          !Array.isArray(permissionPolicies)) && (\n          <>\n            <br />\n            <FormHelperText error>\n              {`Error fetching the permission policies: ${\n                permissionPoliciesErr?.message ||\n                (permissionPolicies as Response)?.statusText\n              }`}\n            </FormHelperText>\n          </>\n        )}\n    </div>\n  );\n};\n"],"names":["React"],"mappings":";;;;;;;;;;;;AA+CO,MAAM,yBAAyB,CAAC;AAAA,EACrC,sBAAA;AAAA,EACA,eAAA;AAAA,EACA,aAAA;AAAA,EACA,aAAA;AAAA,EACA,UAAA;AAAA,EACA;AACF,CAAmC,KAAA;AACjC,EAAM,MAAA,OAAA,GAAU,OAAO,UAAU,CAAA;AACjC,EAAA,MAAM,iBAAiB,iBAAkB,EAAA;AAEzC,EAAM,MAAA,EAAE,IAAM,EAAA,kBAAA,EAAuB,GAAA,cAAA;AAErC,EAAM,MAAA;AAAA,IACJ,KAAO,EAAA,kBAAA;AAAA,IACP,OAAS,EAAA,yBAAA;AAAA,IACT,KAAO,EAAA;AAAA,GACT,GAAI,SAAS,YAAY;AACvB,IAAO,OAAA,MAAM,QAAQ,eAAgB,EAAA;AAAA,GACtC,CAAA;AAED,EAAM,MAAA,sBAAA,GACJ,CAAC,yBAA6B,IAAA,KAAA,CAAM,QAAQ,kBAAkB,CAAA,GAC1D,gCAAiC,CAAA,kBAAkB,CACnD,GAAA,SAAA;AAEN,EAAA,MAAM,qBAAqB,CACzB,MAAA,EACA,UACA,EAAA,WAAA,EACA,UACA,YACG,KAAA;AACH,IAAA,MAAM,GAAM,GAAA;AAAA,MACV,MAAA;AAAA,MACA,UAAA;AAAA,MACA,WAAA;AAAA,MACA,QAAA,EAAU,SAAS,GAAI,CAAA,CAAA,CAAA,MAAM,EAAE,MAAQ,EAAA,CAAA,EAAG,MAAQ,EAAA,OAAA,EAAU,CAAA,CAAA;AAAA,MAC5D;AAAA,KACF;AACA,IAAA,aAAA;AAAA,MACE,wBAAA;AAAA,MACA,CAAC,GAAG,sBAAA,EAAwB,GAAG,CAAA;AAAA,MAC/B;AAAA,KACF;AAAA,GACF;AAEA,EAAM,MAAA,kBAAA,GAAqB,CAAC,KAAkB,KAAA;AAC5C,IAAA,MAAM,WAAW,sBAAuB,CAAA,MAAA;AAAA,MACtC,CAAC,IAAM,EAAA,MAAA,KAAW,KAAU,KAAA;AAAA,KAC9B;AACA,IAAc,aAAA,CAAA,wBAAA,EAA0B,UAAU,IAAI,CAAA;AACtD,IAAc,aAAA,CAAA,CAAA,uBAAA,EAA0B,KAAK,CAAA,CAAA,CAAA,EAAK,SAAS,CAAA;AAAA,GAC7D;AAEA,EAAA,MAAM,cAAiB,GAAA,CACrB,SACA,EAAA,WAAA,EACA,KACG,KAAA;AACH,IAAA,aAAA;AAAA,MACE,CAAA,uBAAA,EAA0B,KAAK,CAAA,WAAA,EAAc,WAAW,CAAA,QAAA,CAAA;AAAA,MACxD,YAAY,OAAU,GAAA,MAAA;AAAA,MACtB;AAAA,KACF;AAAA,GACF;AAEA,EAAM,MAAA,eAAA,GAAkB,CAAC,KAAA,EAAe,UAAgC,KAAA;AACtE,IAAc,aAAA,CAAA,CAAA,uBAAA,EAA0B,KAAK,CAAA,YAAA,CAAA,EAAgB,UAAU,CAAA;AACvE,IAAA,IAAI,CAAC,UAAA;AACH,MAAc,aAAA,CAAA,CAAA,uBAAA,EAA0B,KAAK,CAAA,IAAA,CAAA,EAAQ,SAAS,CAAA;AAAA,GAClE;AAEA,EAAA,MAAM,qBAAqB,MAAM;AAC/B,IAAc,aAAA,CAAA,CAAA,eAAA,CAAA,EAAmB,EAAC,EAAG,IAAI,CAAA;AACzC,IAAc,aAAA,CAAA,wBAAA,EAA0B,EAAC,EAAG,IAAI,CAAA;AAAA,GAClD;AAEA,EAAM,MAAA,cAAA,GAAiB,CAAC,MAAmB,KAAA;AACzC,IAAA,MAAM,aAAa,eAAgB,CAAA,MAAA;AAAA,MACjC,CAAM,EAAA,KAAA,EAAA,CAAG,KAAS,IAAA,EAAA,CAAG,KAAU,KAAA;AAAA,KACjC;AACA,IAAA,MAAM,WAAW,sBAAuB,CAAA,MAAA;AAAA,MACtC,CAAA,GAAA,KAAO,IAAI,MAAW,KAAA;AAAA,KACxB;AACA,IAAc,aAAA,CAAA,CAAA,eAAA,CAAA,EAAmB,YAAY,IAAI,CAAA;AACjD,IAAc,aAAA,CAAA,wBAAA,EAA0B,UAAU,IAAI,CAAA;AAAA,GACxD;AAEA,EAAA,MAAM,gBAAgB,MAAM;AAC1B,IAAA,IAAI,aAA+B,EAAC;AACpC,IAAA,IAAI,wBAAwB,OAAS,EAAA;AACnC,MAAa,UAAA,GAAA,sBAAA,CAAuB,OAAQ,CAAA,GAAA,CAAI,CAAM,CAAA,MAAA;AAAA,QACpD,KAAA,EAAO,CAAE,CAAA,MAAA,CAAO,CAAC,CAAA,CAAE,kBAAkB,OAAO,CAAA,GAAI,CAAE,CAAA,SAAA,CAAU,CAAC,CAAA;AAAA,QAC7D,KAAO,EAAA;AAAA,OACP,CAAA,CAAA;AAAA;AAEJ,IAAM,MAAA,cAAA,GACJ,UAAW,CAAA,MAAA,GAAS,CAChB,GAAA;AAAA,MACE;AAAA,QACE,KAAA,EAAO,CAAgB,aAAA,EAAA,UAAA,CAAW,MAAM,CAAA,CAAA,CAAA;AAAA,QACxC,KAAO,EAAA;AAAA;AACT,QAEF,EAAC;AACP,IAAA,OAAO,CAAC,GAAG,cAAgB,EAAA,GAAG,UAAU,CAAA;AAAA,GAC1C;AAEA,EAAA,MAAM,iCAAiC,MAAM;AAC3C,IAAA,OAAO,eACJ,CAAA,GAAA;AAAA,MAAI,CAAA,CAAA,KACH,EAAE,KACE,GAAA;AAAA,QACE;AAAA,UACE,MAAM,CAAE,CAAA,KAAA;AAAA,UACR,QAAQ,CAAE,CAAA,KAAA;AAAA,UACV,kBAAA,EACE,wBAAwB,kBACtB,CAAA,CAAA,CAAE,KACJ,CAAG,EAAA,WAAA,EAAa,IAAI,CAAS,IAAA,MAAA;AAAA,YAC3B,UAAY,EAAA,IAAA;AAAA,YACZ,OAAA,EACE,wBAAwB,kBAAmB,CAAA,CAAA,CAAE,KAAK,CAC/C,CAAA,QAAA,CAAS,IAAI,CAAE,CAAA,QAAA;AAAA,YACpB,WAAA,EACE,wBAAwB,kBAAmB,CAAA,CAAA,CAAE,KAAK,CAC/C,CAAA,QAAA,CAAS,IAAI,CAAE,CAAA,WAAA;AAAA,YACpB,YAAA,EACE,wBAAwB,kBAAmB,CAAA,CAAA,CAAE,KAAK,CAC/C,CAAA,QAAA,CAAS,IAAI,CAAE,CAAA;AAAA,WACtB,CAAE,KAAK;AAAC;AACZ,UAEF;AAAC,MAEN,IAAK,EAAA;AAAA,GACV;AAEA,EAAA,MAAM,0BAA0B,MAAM;AACpC,IAAI,IAAA,eAAA,EAAiB,SAAS,CAAG,EAAA;AAC/B,MAAA,IAAI,gBAAgB,SAAU,CAAA,CAAA,EAAA,KAAM,GAAG,KAAU,KAAA,EAAE,KAAK,CAAG,EAAA;AACzD,QAAA,OAAO,gBAAgB,MAAS,GAAA,CAAA;AAAA;AAElC,MAAA,OAAO,eAAgB,CAAA,MAAA;AAAA;AAEzB,IAAO,OAAA,CAAA;AAAA,GACT;AAEA,EAAA,uBACGA,cAAA,CAAA,aAAA,CAAA,KAAA,EAAA,IAAA,kBACEA,cAAA,CAAA,aAAA,CAAA,cAAA,EAAA,IAAA,EAAe,6LAIhB,CACA,kBAAAA,cAAA,CAAA,aAAA,CAAC,IAAG,EAAA,IAAA,CAAA,EACH,yBACC,mBAAAA,cAAA,CAAA,aAAA,CAAC,QAAS,EAAA,IAAA,CAAA,gDAET,GACC,EAAA,IAAA,kBAAAA,cAAA,CAAA,aAAA;AAAA,IAAC,eAAA;AAAA,IAAA;AAAA,MACC,YAAY,aAAc,EAAA;AAAA,MAC1B,eAAA;AAAA,MACA,aAAA;AAAA,MACA,UAAA;AAAA,MACA,cAAA;AAAA,MACA,kBAAA;AAAA,MACA;AAAA;AAAA,qBAEDA,cAAA,CAAA,aAAA,CAAA,IAAA,EAAA,IAAG,CACJ,kBAAAA,cAAA,CAAA,aAAA,CAAC,UAAG,CACJ,kBAAAA,cAAA,CAAA,aAAA;AAAA,IAAC,2BAAA;AAAA,IAAA;AAAA,MACC,sBAAsB,uBAAwB,EAAA;AAAA,MAC9C,MAAM,8BAA+B,EAAA;AAAA,MACrC,sBAAA,EAAwB,0BAA0B,EAAC;AAAA,MACnD,kBAAA;AAAA,MACA,cAAA;AAAA,MACA,kBAAA;AAAA,MACA,kBAAA;AAAA,MACA,cAAA;AAAA,MACA;AAAA;AAAA,GAEJ,CAED,EAAA,CAAC,yBACC,KAAA,qBAAA,EAAuB,OACtB,IAAA,CAAC,KAAM,CAAA,OAAA,CAAQ,kBAAkB,CAAA,CAAA,oBAE/BA,cAAA,CAAA,aAAA,CAAAA,cAAA,CAAA,QAAA,EAAA,IAAA,kBAAAA,cAAA,CAAA,aAAA,CAAC,UAAG,CACJ,kBAAAA,cAAA,CAAA,aAAA,CAAC,cAAe,EAAA,EAAA,KAAA,EAAK,IAClB,EAAA,EAAA,CAAA,wCAAA,EACC,qBAAuB,EAAA,OAAA,IACtB,kBAAiC,EAAA,UACpC,CACF,CAAA,CACF,CAEN,CAAA;AAEJ;;;;"}

package/dist/hooks/useRoles.esm.js

@@ -4,7 +4,7 @@ import { useApi } from '@backstage/core-plugin-api';
 import { usePermission } from '@backstage/plugin-permission-react';
 import { policyEntityDeletePermission, policyEntityCreatePermission, policyEntityUpdatePermission } from '@backstage-community/plugin-rbac-common';
 import { rbacApiRef } from '../api/RBACBackendClient.esm.js';
-import { getPermissions, getPermissionsArray } from '../utils/rbac-utils.esm.js';
+import { getPermissions, getPermissionsArray, getPluginInfo } from '../utils/rbac-utils.esm.js';
 
 const useRoles = (pollInterval) => {
   const rbacApi = useApi(rbacApiRef);
@@ -99,9 +99,10 @@ const useRoles = (pollInterval) => {
             role.name,
             policies
           ).map(
-            (po) => permissionPolicies.find(
-              (pp) => pp.policies?.find((pol) => po.permission === pol.name)
-            )?.pluginId
+            (po) => getPluginInfo(
+              permissionPolicies,
+              po
+            ).pluginId
           );
           accPls = [...accPls, ...pls].filter((val) => !!val);
         }

package/dist/hooks/useRoles.esm.js.map

@@ -1 +1 @@
-{"version":3,"file":"useRoles.esm.js","sources":["../../src/hooks/useRoles.ts"],"sourcesContent":["/*\n * Copyright 2024 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport React from 'react';\nimport { useAsync, useAsyncRetry, useInterval } from 'react-use';\n\nimport { useApi } from '@backstage/core-plugin-api';\nimport { usePermission } from '@backstage/plugin-permission-react';\n\nimport {\n  PluginPermissionMetaData,\n  policyEntityCreatePermission,\n  policyEntityDeletePermission,\n  policyEntityUpdatePermission,\n  Role,\n  RoleBasedPolicy,\n} from '@backstage-community/plugin-rbac-common';\n\nimport { rbacApiRef } from '../api/RBACBackendClient';\nimport { RolesData } from '../types';\nimport { getPermissions, getPermissionsArray } from '../utils/rbac-utils';\n\ntype RoleWithConditionalPoliciesCount = Role & {\n  conditionalPoliciesCount: number;\n  accessiblePlugins: string[];\n};\n\nexport const useRoles = (\n  pollInterval?: number,\n): {\n  loading: boolean;\n  data: RolesData[];\n  createRoleLoading: boolean;\n  createRoleAllowed: boolean;\n  error: {\n    rolesError: string;\n    policiesError: string;\n    roleConditionError: string;\n  };\n  retry: { roleRetry: () => void; policiesRetry: () => void };\n} => {\n  const rbacApi = useApi(rbacApiRef);\n  const [newRoles, setNewRoles] = React.useState<\n    RoleWithConditionalPoliciesCount[]\n  >([]);\n  const [roleConditionError, setRoleConditionError] =\n    React.useState<string>('');\n  const {\n    value: roles,\n    retry: roleRetry,\n    error: rolesError,\n  } = useAsyncRetry(async () => await rbacApi.getRoles());\n\n  const {\n    value: policies,\n    retry: policiesRetry,\n    error: policiesError,\n  } = useAsyncRetry(async () => await rbacApi.getPolicies(), []);\n\n  const {\n    loading: membersLoading,\n    value: members,\n    error: membersError,\n  } = useAsync(async () => {\n    return await rbacApi.getMembers();\n  });\n\n  const {\n    value: permissionPolicies,\n    loading: loadingPermissionPolicies,\n    error: permissionPoliciesError,\n  } = useAsync(async () => {\n    return await rbacApi.listPermissions();\n  });\n\n  const canReadUsersAndGroups =\n    !membersLoading &&\n    !membersError &&\n    Array.isArray(members) &&\n    members.length > 0;\n\n  const deletePermissionResult = usePermission({\n    permission: policyEntityDeletePermission,\n    resourceRef: policyEntityDeletePermission.resourceType,\n  });\n\n  const policyEntityCreatePermissionResult = usePermission({\n    permission: policyEntityCreatePermission,\n    resourceRef: policyEntityCreatePermission.resourceType,\n  });\n\n  const createRoleLoading =\n    policyEntityCreatePermissionResult.loading || membersLoading;\n\n  const createRoleAllowed =\n    policyEntityCreatePermissionResult.allowed && canReadUsersAndGroups;\n\n  const editPermissionResult = usePermission({\n    permission: policyEntityUpdatePermission,\n    resourceRef: policyEntityUpdatePermission.resourceType,\n  });\n\n  React.useEffect(() => {\n    const fetchAllPermissionPolicies = async () => {\n      if (!Array.isArray(roles)) return;\n      const failedFetchConditionRoles: string[] = [];\n      const conditionPromises = roles.map(async role => {\n        try {\n          const conditionalPolicies = await rbacApi.getRoleConditions(\n            role.name,\n          );\n\n          if ((conditionalPolicies as any as Response)?.statusText) {\n            failedFetchConditionRoles.push(role.name);\n            throw new Error(\n              (conditionalPolicies as any as Response).statusText,\n            );\n          }\n          const accessiblePlugins =\n            Array.isArray(conditionalPolicies) && conditionalPolicies.length > 0\n              ? conditionalPolicies.map(c => c.pluginId)\n              : [];\n          return {\n            ...role,\n            conditionalPoliciesCount: Array.isArray(conditionalPolicies)\n              ? conditionalPolicies.length\n              : 0,\n            accessiblePlugins,\n          };\n        } catch (error) {\n          setRoleConditionError(\n            `Error fetching role conditions for ${\n              failedFetchConditionRoles.length > 1 ? 'roles' : 'role'\n            } ${failedFetchConditionRoles.join(', ')}, please try again later.`,\n          );\n          return {\n            ...role,\n            conditionalPoliciesCount: 0,\n            accessiblePlugins: [],\n          };\n        }\n      });\n\n      const updatedRoles = await Promise.all(conditionPromises);\n      setNewRoles(updatedRoles);\n    };\n\n    fetchAllPermissionPolicies();\n  }, [roles, rbacApi]);\n\n  const data: RolesData[] = React.useMemo(\n    () =>\n      Array.isArray(newRoles) && newRoles?.length > 0\n        ? newRoles.reduce(\n            (acc: RolesData[], role: RoleWithConditionalPoliciesCount) => {\n              const permissions = getPermissions(\n                role.name,\n                policies as RoleBasedPolicy[],\n              );\n\n              let accPls = role.accessiblePlugins;\n              if (\n                !loadingPermissionPolicies &&\n                !permissionPoliciesError &&\n                (permissionPolicies as PluginPermissionMetaData[])?.length > 0\n              ) {\n                const pls = getPermissionsArray(\n                  role.name,\n                  policies as RoleBasedPolicy[],\n                ).map(\n                  po =>\n                    (permissionPolicies as PluginPermissionMetaData[]).find(\n                      pp =>\n                        pp.policies?.find(pol => po.permission === pol.name),\n                    )?.pluginId,\n                );\n                accPls = [...accPls, ...pls].filter(val => !!val) as string[];\n              }\n              const accessiblePlugins = accPls\n                .filter((val, index, plugins) => plugins.indexOf(val) === index)\n                .sort();\n\n              return [\n                ...acc,\n                {\n                  id: role.name,\n                  name: role.name,\n                  description: role.metadata?.description ?? '-',\n                  members: role.memberReferences,\n                  permissions: role.conditionalPoliciesCount + permissions,\n                  modifiedBy: '-',\n                  lastModified: '-',\n                  actionsPermissionResults: {\n                    delete: deletePermissionResult,\n                    edit: {\n                      allowed:\n                        editPermissionResult.allowed && canReadUsersAndGroups,\n                      loading: editPermissionResult.loading,\n                    },\n                  },\n                  accessiblePlugins,\n                },\n              ];\n            },\n            [],\n          )\n        : [],\n    [\n      newRoles,\n      policies,\n      loadingPermissionPolicies,\n      permissionPoliciesError,\n      permissionPolicies,\n      deletePermissionResult,\n      editPermissionResult.allowed,\n      editPermissionResult.loading,\n      canReadUsersAndGroups,\n    ],\n  );\n  const loading = !rolesError && !policiesError && !roles && !policies;\n\n  useInterval(\n    () => {\n      roleRetry();\n      policiesRetry();\n    },\n    loading ? null : pollInterval || 10000,\n  );\n\n  return {\n    loading,\n    data,\n    error: {\n      rolesError: (rolesError?.message ||\n        (typeof roles === 'object'\n          ? (roles as any as Response)?.statusText\n          : '')) as string,\n      policiesError: (policiesError?.message ||\n        (typeof policies === 'object'\n          ? (policies as any as Response)?.statusText\n          : '')) as string,\n      roleConditionError,\n    },\n    createRoleLoading,\n    createRoleAllowed,\n    retry: { roleRetry, policiesRetry },\n  };\n};\n"],"names":["React"],"mappings":";;;;;;;;AAuCa,MAAA,QAAA,GAAW,CACtB,YAYG,KAAA;AACH,EAAM,MAAA,OAAA,GAAU,OAAO,UAAU,CAAA;AACjC,EAAA,MAAM,CAAC,QAAU,EAAA,WAAW,IAAIA,cAAM,CAAA,QAAA,CAEpC,EAAE,CAAA;AACJ,EAAA,MAAM,CAAC,kBAAoB,EAAA,qBAAqB,CAC9C,GAAAA,cAAA,CAAM,SAAiB,EAAE,CAAA;AAC3B,EAAM,MAAA;AAAA,IACJ,KAAO,EAAA,KAAA;AAAA,IACP,KAAO,EAAA,SAAA;AAAA,IACP,KAAO,EAAA;AAAA,MACL,aAAc,CAAA,YAAY,MAAM,OAAA,CAAQ,UAAU,CAAA;AAEtD,EAAM,MAAA;AAAA,IACJ,KAAO,EAAA,QAAA;AAAA,IACP,KAAO,EAAA,aAAA;AAAA,IACP,KAAO,EAAA;AAAA,GACT,GAAI,cAAc,YAAY,MAAM,QAAQ,WAAY,EAAA,EAAG,EAAE,CAAA;AAE7D,EAAM,MAAA;AAAA,IACJ,OAAS,EAAA,cAAA;AAAA,IACT,KAAO,EAAA,OAAA;AAAA,IACP,KAAO,EAAA;AAAA,GACT,GAAI,SAAS,YAAY;AACvB,IAAO,OAAA,MAAM,QAAQ,UAAW,EAAA;AAAA,GACjC,CAAA;AAED,EAAM,MAAA;AAAA,IACJ,KAAO,EAAA,kBAAA;AAAA,IACP,OAAS,EAAA,yBAAA;AAAA,IACT,KAAO,EAAA;AAAA,GACT,GAAI,SAAS,YAAY;AACvB,IAAO,OAAA,MAAM,QAAQ,eAAgB,EAAA;AAAA,GACtC,CAAA;AAED,EAAM,MAAA,qBAAA,GACJ,CAAC,cAAA,IACD,CAAC,YAAA,IACD,MAAM,OAAQ,CAAA,OAAO,CACrB,IAAA,OAAA,CAAQ,MAAS,GAAA,CAAA;AAEnB,EAAA,MAAM,yBAAyB,aAAc,CAAA;AAAA,IAC3C,UAAY,EAAA,4BAAA;AAAA,IACZ,aAAa,4BAA6B,CAAA;AAAA,GAC3C,CAAA;AAED,EAAA,MAAM,qCAAqC,aAAc,CAAA;AAAA,IACvD,UAAY,EAAA,4BAAA;AAAA,IACZ,aAAa,4BAA6B,CAAA;AAAA,GAC3C,CAAA;AAED,EAAM,MAAA,iBAAA,GACJ,mCAAmC,OAAW,IAAA,cAAA;AAEhD,EAAM,MAAA,iBAAA,GACJ,mCAAmC,OAAW,IAAA,qBAAA;AAEhD,EAAA,MAAM,uBAAuB,aAAc,CAAA;AAAA,IACzC,UAAY,EAAA,4BAAA;AAAA,IACZ,aAAa,4BAA6B,CAAA;AAAA,GAC3C,CAAA;AAED,EAAAA,cAAA,CAAM,UAAU,MAAM;AACpB,IAAA,MAAM,6BAA6B,YAAY;AAC7C,MAAA,IAAI,CAAC,KAAA,CAAM,OAAQ,CAAA,KAAK,CAAG,EAAA;AAC3B,MAAA,MAAM,4BAAsC,EAAC;AAC7C,MAAA,MAAM,iBAAoB,GAAA,KAAA,CAAM,GAAI,CAAA,OAAM,IAAQ,KAAA;AAChD,QAAI,IAAA;AACF,UAAM,MAAA,mBAAA,GAAsB,MAAM,OAAQ,CAAA,iBAAA;AAAA,YACxC,IAAK,CAAA;AAAA,WACP;AAEA,UAAA,IAAK,qBAAyC,UAAY,EAAA;AACxD,YAA0B,yBAAA,CAAA,IAAA,CAAK,KAAK,IAAI,CAAA;AACxC,YAAA,MAAM,IAAI,KAAA;AAAA,cACP,mBAAwC,CAAA;AAAA,aAC3C;AAAA;AAEF,UAAA,MAAM,iBACJ,GAAA,KAAA,CAAM,OAAQ,CAAA,mBAAmB,KAAK,mBAAoB,CAAA,MAAA,GAAS,CAC/D,GAAA,mBAAA,CAAoB,GAAI,CAAA,CAAA,CAAA,KAAK,CAAE,CAAA,QAAQ,IACvC,EAAC;AACP,UAAO,OAAA;AAAA,YACL,GAAG,IAAA;AAAA,YACH,0BAA0B,KAAM,CAAA,OAAA,CAAQ,mBAAmB,CAAA,GACvD,oBAAoB,MACpB,GAAA,CAAA;AAAA,YACJ;AAAA,WACF;AAAA,iBACO,KAAO,EAAA;AACd,UAAA,qBAAA;AAAA,YACE,CAAA,mCAAA,EACE,yBAA0B,CAAA,MAAA,GAAS,CAAI,GAAA,OAAA,GAAU,MACnD,CAAI,CAAA,EAAA,yBAAA,CAA0B,IAAK,CAAA,IAAI,CAAC,CAAA,yBAAA;AAAA,WAC1C;AACA,UAAO,OAAA;AAAA,YACL,GAAG,IAAA;AAAA,YACH,wBAA0B,EAAA,CAAA;AAAA,YAC1B,mBAAmB;AAAC,WACtB;AAAA;AACF,OACD,CAAA;AAED,MAAA,MAAM,YAAe,GAAA,MAAM,OAAQ,CAAA,GAAA,CAAI,iBAAiB,CAAA;AACxD,MAAA,WAAA,CAAY,YAAY,CAAA;AAAA,KAC1B;AAEA,IAA2B,0BAAA,EAAA;AAAA,GAC1B,EAAA,CAAC,KAAO,EAAA,OAAO,CAAC,CAAA;AAEnB,EAAA,MAAM,OAAoBA,cAAM,CAAA,OAAA;AAAA,IAC9B,MACE,MAAM,OAAQ,CAAA,QAAQ,KAAK,QAAU,EAAA,MAAA,GAAS,IAC1C,QAAS,CAAA,MAAA;AAAA,MACP,CAAC,KAAkB,IAA2C,KAAA;AAC5D,QAAA,MAAM,WAAc,GAAA,cAAA;AAAA,UAClB,IAAK,CAAA,IAAA;AAAA,UACL;AAAA,SACF;AAEA,QAAA,IAAI,SAAS,IAAK,CAAA,iBAAA;AAClB,QAAA,IACE,CAAC,yBACD,IAAA,CAAC,uBACA,IAAA,kBAAA,EAAmD,SAAS,CAC7D,EAAA;AACA,UAAA,MAAM,GAAM,GAAA,mBAAA;AAAA,YACV,IAAK,CAAA,IAAA;AAAA,YACL;AAAA,WACA,CAAA,GAAA;AAAA,YACA,QACG,kBAAkD,CAAA,IAAA;AAAA,cACjD,CAAA,EAAA,KACE,GAAG,QAAU,EAAA,IAAA,CAAK,SAAO,EAAG,CAAA,UAAA,KAAe,IAAI,IAAI;AAAA,aACpD,EAAA;AAAA,WACP;AACA,UAAS,MAAA,GAAA,CAAC,GAAG,MAAA,EAAQ,GAAG,GAAG,EAAE,MAAO,CAAA,CAAA,GAAA,KAAO,CAAC,CAAC,GAAG,CAAA;AAAA;AAElD,QAAA,MAAM,iBAAoB,GAAA,MAAA,CACvB,MAAO,CAAA,CAAC,GAAK,EAAA,KAAA,EAAO,OAAY,KAAA,OAAA,CAAQ,OAAQ,CAAA,GAAG,CAAM,KAAA,KAAK,EAC9D,IAAK,EAAA;AAER,QAAO,OAAA;AAAA,UACL,GAAG,GAAA;AAAA,UACH;AAAA,YACE,IAAI,IAAK,CAAA,IAAA;AAAA,YACT,MAAM,IAAK,CAAA,IAAA;AAAA,YACX,WAAA,EAAa,IAAK,CAAA,QAAA,EAAU,WAAe,IAAA,GAAA;AAAA,YAC3C,SAAS,IAAK,CAAA,gBAAA;AAAA,YACd,WAAA,EAAa,KAAK,wBAA2B,GAAA,WAAA;AAAA,YAC7C,UAAY,EAAA,GAAA;AAAA,YACZ,YAAc,EAAA,GAAA;AAAA,YACd,wBAA0B,EAAA;AAAA,cACxB,MAAQ,EAAA,sBAAA;AAAA,cACR,IAAM,EAAA;AAAA,gBACJ,OAAA,EACE,qBAAqB,OAAW,IAAA,qBAAA;AAAA,gBAClC,SAAS,oBAAqB,CAAA;AAAA;AAChC,aACF;AAAA,YACA;AAAA;AACF,SACF;AAAA,OACF;AAAA,MACA;AAAC,QAEH,EAAC;AAAA,IACP;AAAA,MACE,QAAA;AAAA,MACA,QAAA;AAAA,MACA,yBAAA;AAAA,MACA,uBAAA;AAAA,MACA,kBAAA;AAAA,MACA,sBAAA;AAAA,MACA,oBAAqB,CAAA,OAAA;AAAA,MACrB,oBAAqB,CAAA,OAAA;AAAA,MACrB;AAAA;AACF,GACF;AACA,EAAA,MAAM,UAAU,CAAC,UAAA,IAAc,CAAC,aAAiB,IAAA,CAAC,SAAS,CAAC,QAAA;AAE5D,EAAA,WAAA;AAAA,IACE,MAAM;AACJ,MAAU,SAAA,EAAA;AACV,MAAc,aAAA,EAAA;AAAA,KAChB;AAAA,IACA,OAAA,GAAU,OAAuB;AAAA,GACnC;AAEA,EAAO,OAAA;AAAA,IACL,OAAA;AAAA,IACA,IAAA;AAAA,IACA,KAAO,EAAA;AAAA,MACL,YAAa,UAAY,EAAA,OAAA,KACtB,OAAO,KAAU,KAAA,QAAA,GACb,OAA2B,UAC5B,GAAA,EAAA,CAAA;AAAA,MACN,eAAgB,aAAe,EAAA,OAAA,KAC5B,OAAO,QAAa,KAAA,QAAA,GAChB,UAA8B,UAC/B,GAAA,EAAA,CAAA;AAAA,MACN;AAAA,KACF;AAAA,IACA,iBAAA;AAAA,IACA,iBAAA;AAAA,IACA,KAAA,EAAO,EAAE,SAAA,EAAW,aAAc;AAAA,GACpC;AACF;;;;"}
+{"version":3,"file":"useRoles.esm.js","sources":["../../src/hooks/useRoles.ts"],"sourcesContent":["/*\n * Copyright 2024 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport React from 'react';\nimport { useAsync, useAsyncRetry, useInterval } from 'react-use';\n\nimport { useApi } from '@backstage/core-plugin-api';\nimport { usePermission } from '@backstage/plugin-permission-react';\n\nimport {\n  PluginPermissionMetaData,\n  policyEntityCreatePermission,\n  policyEntityDeletePermission,\n  policyEntityUpdatePermission,\n  Role,\n  RoleBasedPolicy,\n} from '@backstage-community/plugin-rbac-common';\n\nimport { rbacApiRef } from '../api/RBACBackendClient';\nimport { RolesData } from '../types';\nimport {\n  getPermissions,\n  getPermissionsArray,\n  getPluginInfo,\n} from '../utils/rbac-utils';\n\ntype RoleWithConditionalPoliciesCount = Role & {\n  conditionalPoliciesCount: number;\n  accessiblePlugins: string[];\n};\n\nexport const useRoles = (\n  pollInterval?: number,\n): {\n  loading: boolean;\n  data: RolesData[];\n  createRoleLoading: boolean;\n  createRoleAllowed: boolean;\n  error: {\n    rolesError: string;\n    policiesError: string;\n    roleConditionError: string;\n  };\n  retry: { roleRetry: () => void; policiesRetry: () => void };\n} => {\n  const rbacApi = useApi(rbacApiRef);\n  const [newRoles, setNewRoles] = React.useState<\n    RoleWithConditionalPoliciesCount[]\n  >([]);\n  const [roleConditionError, setRoleConditionError] =\n    React.useState<string>('');\n  const {\n    value: roles,\n    retry: roleRetry,\n    error: rolesError,\n  } = useAsyncRetry(async () => await rbacApi.getRoles());\n\n  const {\n    value: policies,\n    retry: policiesRetry,\n    error: policiesError,\n  } = useAsyncRetry(async () => await rbacApi.getPolicies(), []);\n\n  const {\n    loading: membersLoading,\n    value: members,\n    error: membersError,\n  } = useAsync(async () => {\n    return await rbacApi.getMembers();\n  });\n\n  const {\n    value: permissionPolicies,\n    loading: loadingPermissionPolicies,\n    error: permissionPoliciesError,\n  } = useAsync(async () => {\n    return await rbacApi.listPermissions();\n  });\n\n  const canReadUsersAndGroups =\n    !membersLoading &&\n    !membersError &&\n    Array.isArray(members) &&\n    members.length > 0;\n\n  const deletePermissionResult = usePermission({\n    permission: policyEntityDeletePermission,\n    resourceRef: policyEntityDeletePermission.resourceType,\n  });\n\n  const policyEntityCreatePermissionResult = usePermission({\n    permission: policyEntityCreatePermission,\n    resourceRef: policyEntityCreatePermission.resourceType,\n  });\n\n  const createRoleLoading =\n    policyEntityCreatePermissionResult.loading || membersLoading;\n\n  const createRoleAllowed =\n    policyEntityCreatePermissionResult.allowed && canReadUsersAndGroups;\n\n  const editPermissionResult = usePermission({\n    permission: policyEntityUpdatePermission,\n    resourceRef: policyEntityUpdatePermission.resourceType,\n  });\n\n  React.useEffect(() => {\n    const fetchAllPermissionPolicies = async () => {\n      if (!Array.isArray(roles)) return;\n      const failedFetchConditionRoles: string[] = [];\n      const conditionPromises = roles.map(async role => {\n        try {\n          const conditionalPolicies = await rbacApi.getRoleConditions(\n            role.name,\n          );\n\n          if ((conditionalPolicies as any as Response)?.statusText) {\n            failedFetchConditionRoles.push(role.name);\n            throw new Error(\n              (conditionalPolicies as any as Response).statusText,\n            );\n          }\n          const accessiblePlugins =\n            Array.isArray(conditionalPolicies) && conditionalPolicies.length > 0\n              ? conditionalPolicies.map(c => c.pluginId)\n              : [];\n          return {\n            ...role,\n            conditionalPoliciesCount: Array.isArray(conditionalPolicies)\n              ? conditionalPolicies.length\n              : 0,\n            accessiblePlugins,\n          };\n        } catch (error) {\n          setRoleConditionError(\n            `Error fetching role conditions for ${\n              failedFetchConditionRoles.length > 1 ? 'roles' : 'role'\n            } ${failedFetchConditionRoles.join(', ')}, please try again later.`,\n          );\n          return {\n            ...role,\n            conditionalPoliciesCount: 0,\n            accessiblePlugins: [],\n          };\n        }\n      });\n\n      const updatedRoles = await Promise.all(conditionPromises);\n      setNewRoles(updatedRoles);\n    };\n\n    fetchAllPermissionPolicies();\n  }, [roles, rbacApi]);\n\n  const data: RolesData[] = React.useMemo(\n    () =>\n      Array.isArray(newRoles) && newRoles?.length > 0\n        ? newRoles.reduce(\n            (acc: RolesData[], role: RoleWithConditionalPoliciesCount) => {\n              const permissions = getPermissions(\n                role.name,\n                policies as RoleBasedPolicy[],\n              );\n\n              let accPls = role.accessiblePlugins;\n              if (\n                !loadingPermissionPolicies &&\n                !permissionPoliciesError &&\n                (permissionPolicies as PluginPermissionMetaData[])?.length > 0\n              ) {\n                const pls = getPermissionsArray(\n                  role.name,\n                  policies as RoleBasedPolicy[],\n                ).map(\n                  po =>\n                    getPluginInfo(\n                      permissionPolicies as PluginPermissionMetaData[],\n                      po,\n                    ).pluginId,\n                );\n                accPls = [...accPls, ...pls].filter(val => !!val) as string[];\n              }\n              const accessiblePlugins = accPls\n                .filter((val, index, plugins) => plugins.indexOf(val) === index)\n                .sort();\n\n              return [\n                ...acc,\n                {\n                  id: role.name,\n                  name: role.name,\n                  description: role.metadata?.description ?? '-',\n                  members: role.memberReferences,\n                  permissions: role.conditionalPoliciesCount + permissions,\n                  modifiedBy: '-',\n                  lastModified: '-',\n                  actionsPermissionResults: {\n                    delete: deletePermissionResult,\n                    edit: {\n                      allowed:\n                        editPermissionResult.allowed && canReadUsersAndGroups,\n                      loading: editPermissionResult.loading,\n                    },\n                  },\n                  accessiblePlugins,\n                },\n              ];\n            },\n            [],\n          )\n        : [],\n    [\n      newRoles,\n      policies,\n      loadingPermissionPolicies,\n      permissionPoliciesError,\n      permissionPolicies,\n      deletePermissionResult,\n      editPermissionResult.allowed,\n      editPermissionResult.loading,\n      canReadUsersAndGroups,\n    ],\n  );\n  const loading = !rolesError && !policiesError && !roles && !policies;\n\n  useInterval(\n    () => {\n      roleRetry();\n      policiesRetry();\n    },\n    loading ? null : pollInterval || 10000,\n  );\n\n  return {\n    loading,\n    data,\n    error: {\n      rolesError: (rolesError?.message ||\n        (typeof roles === 'object'\n          ? (roles as any as Response)?.statusText\n          : '')) as string,\n      policiesError: (policiesError?.message ||\n        (typeof policies === 'object'\n          ? (policies as any as Response)?.statusText\n          : '')) as string,\n      roleConditionError,\n    },\n    createRoleLoading,\n    createRoleAllowed,\n    retry: { roleRetry, policiesRetry },\n  };\n};\n"],"names":["React"],"mappings":";;;;;;;;AA2Ca,MAAA,QAAA,GAAW,CACtB,YAYG,KAAA;AACH,EAAM,MAAA,OAAA,GAAU,OAAO,UAAU,CAAA;AACjC,EAAA,MAAM,CAAC,QAAU,EAAA,WAAW,IAAIA,cAAM,CAAA,QAAA,CAEpC,EAAE,CAAA;AACJ,EAAA,MAAM,CAAC,kBAAoB,EAAA,qBAAqB,CAC9C,GAAAA,cAAA,CAAM,SAAiB,EAAE,CAAA;AAC3B,EAAM,MAAA;AAAA,IACJ,KAAO,EAAA,KAAA;AAAA,IACP,KAAO,EAAA,SAAA;AAAA,IACP,KAAO,EAAA;AAAA,MACL,aAAc,CAAA,YAAY,MAAM,OAAA,CAAQ,UAAU,CAAA;AAEtD,EAAM,MAAA;AAAA,IACJ,KAAO,EAAA,QAAA;AAAA,IACP,KAAO,EAAA,aAAA;AAAA,IACP,KAAO,EAAA;AAAA,GACT,GAAI,cAAc,YAAY,MAAM,QAAQ,WAAY,EAAA,EAAG,EAAE,CAAA;AAE7D,EAAM,MAAA;AAAA,IACJ,OAAS,EAAA,cAAA;AAAA,IACT,KAAO,EAAA,OAAA;AAAA,IACP,KAAO,EAAA;AAAA,GACT,GAAI,SAAS,YAAY;AACvB,IAAO,OAAA,MAAM,QAAQ,UAAW,EAAA;AAAA,GACjC,CAAA;AAED,EAAM,MAAA;AAAA,IACJ,KAAO,EAAA,kBAAA;AAAA,IACP,OAAS,EAAA,yBAAA;AAAA,IACT,KAAO,EAAA;AAAA,GACT,GAAI,SAAS,YAAY;AACvB,IAAO,OAAA,MAAM,QAAQ,eAAgB,EAAA;AAAA,GACtC,CAAA;AAED,EAAM,MAAA,qBAAA,GACJ,CAAC,cAAA,IACD,CAAC,YAAA,IACD,MAAM,OAAQ,CAAA,OAAO,CACrB,IAAA,OAAA,CAAQ,MAAS,GAAA,CAAA;AAEnB,EAAA,MAAM,yBAAyB,aAAc,CAAA;AAAA,IAC3C,UAAY,EAAA,4BAAA;AAAA,IACZ,aAAa,4BAA6B,CAAA;AAAA,GAC3C,CAAA;AAED,EAAA,MAAM,qCAAqC,aAAc,CAAA;AAAA,IACvD,UAAY,EAAA,4BAAA;AAAA,IACZ,aAAa,4BAA6B,CAAA;AAAA,GAC3C,CAAA;AAED,EAAM,MAAA,iBAAA,GACJ,mCAAmC,OAAW,IAAA,cAAA;AAEhD,EAAM,MAAA,iBAAA,GACJ,mCAAmC,OAAW,IAAA,qBAAA;AAEhD,EAAA,MAAM,uBAAuB,aAAc,CAAA;AAAA,IACzC,UAAY,EAAA,4BAAA;AAAA,IACZ,aAAa,4BAA6B,CAAA;AAAA,GAC3C,CAAA;AAED,EAAAA,cAAA,CAAM,UAAU,MAAM;AACpB,IAAA,MAAM,6BAA6B,YAAY;AAC7C,MAAA,IAAI,CAAC,KAAA,CAAM,OAAQ,CAAA,KAAK,CAAG,EAAA;AAC3B,MAAA,MAAM,4BAAsC,EAAC;AAC7C,MAAA,MAAM,iBAAoB,GAAA,KAAA,CAAM,GAAI,CAAA,OAAM,IAAQ,KAAA;AAChD,QAAI,IAAA;AACF,UAAM,MAAA,mBAAA,GAAsB,MAAM,OAAQ,CAAA,iBAAA;AAAA,YACxC,IAAK,CAAA;AAAA,WACP;AAEA,UAAA,IAAK,qBAAyC,UAAY,EAAA;AACxD,YAA0B,yBAAA,CAAA,IAAA,CAAK,KAAK,IAAI,CAAA;AACxC,YAAA,MAAM,IAAI,KAAA;AAAA,cACP,mBAAwC,CAAA;AAAA,aAC3C;AAAA;AAEF,UAAA,MAAM,iBACJ,GAAA,KAAA,CAAM,OAAQ,CAAA,mBAAmB,KAAK,mBAAoB,CAAA,MAAA,GAAS,CAC/D,GAAA,mBAAA,CAAoB,GAAI,CAAA,CAAA,CAAA,KAAK,CAAE,CAAA,QAAQ,IACvC,EAAC;AACP,UAAO,OAAA;AAAA,YACL,GAAG,IAAA;AAAA,YACH,0BAA0B,KAAM,CAAA,OAAA,CAAQ,mBAAmB,CAAA,GACvD,oBAAoB,MACpB,GAAA,CAAA;AAAA,YACJ;AAAA,WACF;AAAA,iBACO,KAAO,EAAA;AACd,UAAA,qBAAA;AAAA,YACE,CAAA,mCAAA,EACE,yBAA0B,CAAA,MAAA,GAAS,CAAI,GAAA,OAAA,GAAU,MACnD,CAAI,CAAA,EAAA,yBAAA,CAA0B,IAAK,CAAA,IAAI,CAAC,CAAA,yBAAA;AAAA,WAC1C;AACA,UAAO,OAAA;AAAA,YACL,GAAG,IAAA;AAAA,YACH,wBAA0B,EAAA,CAAA;AAAA,YAC1B,mBAAmB;AAAC,WACtB;AAAA;AACF,OACD,CAAA;AAED,MAAA,MAAM,YAAe,GAAA,MAAM,OAAQ,CAAA,GAAA,CAAI,iBAAiB,CAAA;AACxD,MAAA,WAAA,CAAY,YAAY,CAAA;AAAA,KAC1B;AAEA,IAA2B,0BAAA,EAAA;AAAA,GAC1B,EAAA,CAAC,KAAO,EAAA,OAAO,CAAC,CAAA;AAEnB,EAAA,MAAM,OAAoBA,cAAM,CAAA,OAAA;AAAA,IAC9B,MACE,MAAM,OAAQ,CAAA,QAAQ,KAAK,QAAU,EAAA,MAAA,GAAS,IAC1C,QAAS,CAAA,MAAA;AAAA,MACP,CAAC,KAAkB,IAA2C,KAAA;AAC5D,QAAA,MAAM,WAAc,GAAA,cAAA;AAAA,UAClB,IAAK,CAAA,IAAA;AAAA,UACL;AAAA,SACF;AAEA,QAAA,IAAI,SAAS,IAAK,CAAA,iBAAA;AAClB,QAAA,IACE,CAAC,yBACD,IAAA,CAAC,uBACA,IAAA,kBAAA,EAAmD,SAAS,CAC7D,EAAA;AACA,UAAA,MAAM,GAAM,GAAA,mBAAA;AAAA,YACV,IAAK,CAAA,IAAA;AAAA,YACL;AAAA,WACA,CAAA,GAAA;AAAA,YACA,CACE,EAAA,KAAA,aAAA;AAAA,cACE,kBAAA;AAAA,cACA;AAAA,aACA,CAAA;AAAA,WACN;AACA,UAAS,MAAA,GAAA,CAAC,GAAG,MAAA,EAAQ,GAAG,GAAG,EAAE,MAAO,CAAA,CAAA,GAAA,KAAO,CAAC,CAAC,GAAG,CAAA;AAAA;AAElD,QAAA,MAAM,iBAAoB,GAAA,MAAA,CACvB,MAAO,CAAA,CAAC,GAAK,EAAA,KAAA,EAAO,OAAY,KAAA,OAAA,CAAQ,OAAQ,CAAA,GAAG,CAAM,KAAA,KAAK,EAC9D,IAAK,EAAA;AAER,QAAO,OAAA;AAAA,UACL,GAAG,GAAA;AAAA,UACH;AAAA,YACE,IAAI,IAAK,CAAA,IAAA;AAAA,YACT,MAAM,IAAK,CAAA,IAAA;AAAA,YACX,WAAA,EAAa,IAAK,CAAA,QAAA,EAAU,WAAe,IAAA,GAAA;AAAA,YAC3C,SAAS,IAAK,CAAA,gBAAA;AAAA,YACd,WAAA,EAAa,KAAK,wBAA2B,GAAA,WAAA;AAAA,YAC7C,UAAY,EAAA,GAAA;AAAA,YACZ,YAAc,EAAA,GAAA;AAAA,YACd,wBAA0B,EAAA;AAAA,cACxB,MAAQ,EAAA,sBAAA;AAAA,cACR,IAAM,EAAA;AAAA,gBACJ,OAAA,EACE,qBAAqB,OAAW,IAAA,qBAAA;AAAA,gBAClC,SAAS,oBAAqB,CAAA;AAAA;AAChC,aACF;AAAA,YACA;AAAA;AACF,SACF;AAAA,OACF;AAAA,MACA;AAAC,QAEH,EAAC;AAAA,IACP;AAAA,MACE,QAAA;AAAA,MACA,QAAA;AAAA,MACA,yBAAA;AAAA,MACA,uBAAA;AAAA,MACA,kBAAA;AAAA,MACA,sBAAA;AAAA,MACA,oBAAqB,CAAA,OAAA;AAAA,MACrB,oBAAqB,CAAA,OAAA;AAAA,MACrB;AAAA;AACF,GACF;AACA,EAAA,MAAM,UAAU,CAAC,UAAA,IAAc,CAAC,aAAiB,IAAA,CAAC,SAAS,CAAC,QAAA;AAE5D,EAAA,WAAA;AAAA,IACE,MAAM;AACJ,MAAU,SAAA,EAAA;AACV,MAAc,aAAA,EAAA;AAAA,KAChB;AAAA,IACA,OAAA,GAAU,OAAuB;AAAA,GACnC;AAEA,EAAO,OAAA;AAAA,IACL,OAAA;AAAA,IACA,IAAA;AAAA,IACA,KAAO,EAAA;AAAA,MACL,YAAa,UAAY,EAAA,OAAA,KACtB,OAAO,KAAU,KAAA,QAAA,GACb,OAA2B,UAC5B,GAAA,EAAA,CAAA;AAAA,MACN,eAAgB,aAAe,EAAA,OAAA,KAC5B,OAAO,QAAa,KAAA,QAAA,GAChB,UAA8B,UAC/B,GAAA,EAAA,CAAA;AAAA,MACN;AAAA,KACF;AAAA,IACA,iBAAA;AAAA,IACA,iBAAA;AAAA,IACA,KAAA,EAAO,EAAE,SAAA,EAAW,aAAc;AAAA,GACpC;AACF;;;;"}

package/dist/utils/create-role-utils.esm.js

@@ -115,7 +115,13 @@ const getPermissionPoliciesData = (values) => {
   const { kind, name, namespace, permissionPoliciesRows } = values;
   return permissionPoliciesRows.reduce(
     (acc, permissionPolicyRow) => {
-      const { permission, policies, conditions } = permissionPolicyRow;
+      const {
+        permission,
+        policies,
+        conditions,
+        resourceType,
+        usingResourceType
+      } = permissionPolicyRow;
       const permissionPoliciesData = policies.reduce(
         (pAcc, policy) => {
           if (policy.effect === "allow" && !conditions) {
@@ -123,7 +129,7 @@ const getPermissionPoliciesData = (values) => {
               ...pAcc,
               {
                 entityReference: `${kind}:${namespace}/${name}`,
-                permission: `${permission}`,
+                permission: resourceType && usingResourceType ? `${resourceType}` : `${permission}`,
                 policy: policy.policy.toLocaleLowerCase("en-US"),
                 effect: "allow"
               }

package/dist/utils/create-role-utils.esm.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-role-utils.esm.js","sources":["../../src/utils/create-role-utils.ts"],"sourcesContent":["/*\n * Copyright 2024 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { getTitleCase } from '@janus-idp/shared-react';\nimport * as yup from 'yup';\n\nimport {\n  isResourcedPolicy,\n  PluginPermissionMetaData,\n  PolicyDetails,\n  Role,\n  RoleBasedPolicy,\n} from '@backstage-community/plugin-rbac-common';\n\nimport { criterias } from '../components/ConditionalAccess/const';\nimport { ConditionsData } from '../components/ConditionalAccess/types';\nimport {\n  PermissionPolicies,\n  PluginsPermissionPoliciesData,\n  PluginsPermissions,\n  RoleFormValues,\n  SelectedMember,\n} from '../components/CreateRole/types';\nimport {\n  MemberEntity,\n  PermissionsData,\n  RoleBasedConditions,\n  UpdatedConditionsData,\n} from '../types';\n\nexport const uniqBy = (arr: string[], iteratee: (arg: string) => any) => {\n  return arr.filter(\n    (x, i, self) => i === self.findIndex(y => iteratee(x) === iteratee(y)),\n  );\n};\n\nexport const getRoleData = (values: RoleFormValues): Role => {\n  return {\n    memberReferences: values.selectedMembers.map(\n      (mem: SelectedMember) => mem.ref,\n    ),\n    name: `${values.kind}:${values.namespace}/${values.name}`,\n    metadata: {\n      description: values.description,\n    },\n  };\n};\n\nexport const validationSchema = yup.object({\n  name: yup.string().required('Name is required'),\n  selectedMembers: yup.array().min(1, 'No member selected'),\n  selectedPlugins: yup.array().min(1, 'No plugin selected'),\n  permissionPoliciesRows: yup\n    .array()\n    .of(\n      yup.object().shape({\n        plugin: yup.string().required('Plugin is required'),\n        permission: yup.string().required('Permission is required'),\n        policies: yup\n          .array()\n          .min(1)\n          .of(\n            yup\n              .object()\n              .shape({ policy: yup.string(), effect: yup.string() })\n              .test(p => p.effect === 'allow'),\n          ),\n      }),\n    )\n    .min(1),\n});\n\nexport const getMembersCount = (member: MemberEntity) => {\n  return member.kind === 'Group'\n    ? member.relations?.reduce((acc: any, relation: { type: string }) => {\n        let temp = acc;\n        if (relation.type === 'hasMember') {\n          temp++;\n        }\n        return temp;\n      }, 0)\n    : undefined;\n};\n\nexport const getParentGroupsCount = (member: MemberEntity) => {\n  return member.kind === 'Group'\n    ? member.relations?.reduce((acc: any, relation: { type: string }) => {\n        let temp = acc;\n        if (relation.type === 'childOf') {\n          temp++;\n        }\n        return temp;\n      }, 0)\n    : undefined;\n};\n\nexport const getChildGroupsCount = (member: MemberEntity) => {\n  return member.kind === 'Group'\n    ? member.relations?.reduce((acc: any, relation: { type: string }) => {\n        let temp = acc;\n        if (relation.type === 'parentOf') {\n          temp++;\n        }\n        return temp;\n      }, 0)\n    : undefined;\n};\n\nexport const getPermissionPolicies = (\n  policies: PolicyDetails[],\n): PermissionPolicies => {\n  return policies.reduce(\n    (ppsAcc: PermissionPolicies, policy: PolicyDetails) => {\n      const permission = policy.name;\n      return {\n        ...ppsAcc,\n        [permission]: policies.reduce(\n          (policiesAcc: { policies: string[]; isResourced: boolean }, pol) => {\n            const perm = pol.name;\n            if (permission === perm)\n              return {\n                policies: uniqBy(\n                  [...policiesAcc.policies, getTitleCase(pol.policy as string)],\n                  val => val,\n                ),\n                isResourced: isResourcedPolicy(pol),\n                resourceType: isResourcedPolicy(pol) ? pol.resourceType : '',\n              };\n            return policiesAcc;\n          },\n          { policies: [], isResourced: false },\n        ),\n      };\n    },\n    {},\n  );\n};\n\nexport const getPluginsPermissionPoliciesData = (\n  pluginsPermissionPolicies: PluginPermissionMetaData[],\n): PluginsPermissionPoliciesData => {\n  const plugins: string[] = pluginsPermissionPolicies.map(\n    pluginPp => pluginPp.pluginId,\n  );\n  const pluginsPermissions = pluginsPermissionPolicies.reduce(\n    (acc: PluginsPermissions, pp, index) => {\n      const permissions = pp.policies.reduce((plcAcc: string[], plc) => {\n        const permission = plc.name;\n        return [...plcAcc, permission];\n      }, []);\n      return {\n        ...acc,\n        [plugins[index]]: {\n          permissions: permissions ?? [],\n          policies: {\n            ...(pp.policies ? getPermissionPolicies(pp.policies) : {}),\n          },\n        },\n      };\n    },\n    {},\n  );\n  return { plugins, pluginsPermissions };\n};\n\nexport const getPermissionPoliciesData = (\n  values: RoleFormValues,\n): RoleBasedPolicy[] => {\n  const { kind, name, namespace, permissionPoliciesRows } = values;\n\n  return permissionPoliciesRows.reduce(\n    (acc: RoleBasedPolicy[], permissionPolicyRow) => {\n      const { permission, policies, conditions } = permissionPolicyRow;\n      const permissionPoliciesData = policies.reduce(\n        (pAcc: RoleBasedPolicy[], policy) => {\n          if (policy.effect === 'allow' && !conditions) {\n            return [\n              ...pAcc,\n              {\n                entityReference: `${kind}:${namespace}/${name}`,\n                permission: `${permission}`,\n                policy: policy.policy.toLocaleLowerCase('en-US'),\n                effect: 'allow',\n              },\n            ];\n          }\n          return pAcc;\n        },\n        [],\n      );\n      return [...acc, ...permissionPoliciesData];\n    },\n    [],\n  );\n};\n\nexport const getConditionalPermissionPoliciesData = (\n  values: RoleFormValues,\n) => {\n  const { kind, name, namespace, permissionPoliciesRows } = values;\n\n  return permissionPoliciesRows.reduce(\n    (acc: RoleBasedConditions[], permissionPolicyRow: PermissionsData) => {\n      const { policies, isResourced, plugin, conditions, resourceType } =\n        permissionPolicyRow;\n      const permissionMapping = policies.reduce((pAcc: string[], policy) => {\n        if (policy.effect === 'allow') {\n          return [...pAcc, policy.policy.toLocaleLowerCase('en-US')];\n        }\n        return pAcc;\n      }, []);\n      return isResourced && conditions\n        ? [\n            ...acc,\n            {\n              result: 'CONDITIONAL',\n              roleEntityRef: `${kind}:${namespace}/${name}`,\n              pluginId: `${plugin}`,\n              resourceType: `${resourceType}`,\n              permissionMapping,\n              conditions:\n                Object.keys(conditions)[0] === criterias.condition\n                  ? { ...conditions.condition }\n                  : conditions,\n            } as RoleBasedConditions,\n          ]\n        : acc;\n    },\n    [] as RoleBasedConditions[],\n  );\n};\n\nexport const getUpdatedConditionalPolicies = (\n  values: RoleFormValues,\n  initialValues: RoleFormValues,\n): UpdatedConditionsData => {\n  const initialConditionsWithId = initialValues.permissionPoliciesRows.filter(\n    ppr => ppr.id,\n  );\n\n  const conditionsWithId = values.permissionPoliciesRows.filter(ppr => ppr.id);\n\n  return conditionsWithId.length > 0\n    ? conditionsWithId.reduce(\n        (\n          acc: { id: number; updateCondition: RoleBasedConditions }[],\n          condition: PermissionsData,\n        ) => {\n          const conditionExists = initialConditionsWithId.find(\n            c => c.id === condition.id,\n          );\n\n          if (conditionExists && condition.id)\n            return [\n              ...acc,\n              {\n                id: condition.id,\n                updateCondition: getConditionalPermissionPoliciesData({\n                  ...values,\n                  permissionPoliciesRows: [condition],\n                })[0],\n              },\n            ];\n          return acc;\n        },\n        [],\n      )\n    : [];\n};\n\nexport const getNewConditionalPolicies = (values: RoleFormValues) => {\n  const newValues = { ...values };\n  const newPermissionPolicies = values.permissionPoliciesRows.filter(\n    ppr => !ppr.id,\n  );\n  newValues.permissionPoliciesRows = newPermissionPolicies;\n  return getConditionalPermissionPoliciesData(newValues);\n};\n\nexport const getRemovedConditionalPoliciesIds = (\n  values: RoleFormValues,\n  initialValues: RoleFormValues,\n) => {\n  const initialConditionsIds = initialValues.permissionPoliciesRows\n    .map(ppr => ppr.id)\n    .filter(id => id);\n\n  const newConditionsIds = values.permissionPoliciesRows\n    .map(ppr => ppr.id)\n    .filter(id => id);\n\n  return initialConditionsIds.length > 0\n    ? initialConditionsIds.reduce((acc: number[], oldId) => {\n        const conditionExists = newConditionsIds.includes(oldId);\n        if (conditionExists) return acc;\n        return oldId ? [...acc, oldId] : acc;\n      }, [])\n    : [];\n};\n\nexport const getPermissionsNumber = (values: RoleFormValues) => {\n  return (\n    getPermissionPoliciesData(values).length +\n    getConditionalPermissionPoliciesData(values).length\n  );\n};\n\nexport const getConditionsNumber = (values: RoleFormValues) => {\n  return getConditionalPermissionPoliciesData(values)?.length ?? 0;\n};\n\nexport const getRulesNumber = (conditions?: ConditionsData) => {\n  if (!conditions) return 0;\n  let rulesNumber = 0;\n\n  if (conditions.allOf) {\n    rulesNumber += conditions.allOf.reduce((acc, condition) => {\n      return acc + getRulesNumber(condition as ConditionsData);\n    }, 0);\n  }\n\n  if (conditions.anyOf) {\n    rulesNumber += conditions.anyOf.reduce((acc, condition) => {\n      return acc + getRulesNumber(condition as ConditionsData);\n    }, 0);\n  }\n\n  if (conditions.not) {\n    rulesNumber += getRulesNumber(conditions.not as ConditionsData);\n  }\n\n  if (conditions.condition || Object.keys(conditions).includes('rule')) {\n    rulesNumber += 1;\n  }\n\n  return rulesNumber;\n};\n"],"names":[],"mappings":";;;;;AA0Ca,MAAA,MAAA,GAAS,CAAC,GAAA,EAAe,QAAmC,KAAA;AACvE,EAAA,OAAO,GAAI,CAAA,MAAA;AAAA,IACT,CAAC,CAAA,EAAG,CAAG,EAAA,IAAA,KAAS,CAAM,KAAA,IAAA,CAAK,SAAU,CAAA,CAAA,CAAA,KAAK,QAAS,CAAA,CAAC,CAAM,KAAA,QAAA,CAAS,CAAC,CAAC;AAAA,GACvE;AACF;AAEa,MAAA,WAAA,GAAc,CAAC,MAAiC,KAAA;AAC3D,EAAO,OAAA;AAAA,IACL,gBAAA,EAAkB,OAAO,eAAgB,CAAA,GAAA;AAAA,MACvC,CAAC,QAAwB,GAAI,CAAA;AAAA,KAC/B;AAAA,IACA,IAAA,EAAM,GAAG,MAAO,CAAA,IAAI,IAAI,MAAO,CAAA,SAAS,CAAI,CAAA,EAAA,MAAA,CAAO,IAAI,CAAA,CAAA;AAAA,IACvD,QAAU,EAAA;AAAA,MACR,aAAa,MAAO,CAAA;AAAA;AACtB,GACF;AACF;AAEa,MAAA,gBAAA,GAAmB,IAAI,MAAO,CAAA;AAAA,EACzC,IAAM,EAAA,GAAA,CAAI,MAAO,EAAA,CAAE,SAAS,kBAAkB,CAAA;AAAA,EAC9C,iBAAiB,GAAI,CAAA,KAAA,EAAQ,CAAA,GAAA,CAAI,GAAG,oBAAoB,CAAA;AAAA,EACxD,iBAAiB,GAAI,CAAA,KAAA,EAAQ,CAAA,GAAA,CAAI,GAAG,oBAAoB,CAAA;AAAA,EACxD,sBAAA,EAAwB,GACrB,CAAA,KAAA,EACA,CAAA,EAAA;AAAA,IACC,GAAA,CAAI,MAAO,EAAA,CAAE,KAAM,CAAA;AAAA,MACjB,MAAQ,EAAA,GAAA,CAAI,MAAO,EAAA,CAAE,SAAS,oBAAoB,CAAA;AAAA,MAClD,UAAY,EAAA,GAAA,CAAI,MAAO,EAAA,CAAE,SAAS,wBAAwB,CAAA;AAAA,MAC1D,UAAU,GACP,CAAA,KAAA,EACA,CAAA,GAAA,CAAI,CAAC,CACL,CAAA,EAAA;AAAA,QACC,IACG,MAAO,EAAA,CACP,MAAM,EAAE,MAAA,EAAQ,IAAI,MAAO,EAAA,EAAG,QAAQ,GAAI,CAAA,MAAA,IAAU,CAAA,CACpD,KAAK,CAAK,CAAA,KAAA,CAAA,CAAE,WAAW,OAAO;AAAA;AACnC,KACH;AAAA,GACH,CACC,IAAI,CAAC;AACV,CAAC;AAEY,MAAA,eAAA,GAAkB,CAAC,MAAyB,KAAA;AACvD,EAAO,OAAA,MAAA,CAAO,SAAS,OACnB,GAAA,MAAA,CAAO,WAAW,MAAO,CAAA,CAAC,KAAU,QAA+B,KAAA;AACjE,IAAA,IAAI,IAAO,GAAA,GAAA;AACX,IAAI,IAAA,QAAA,CAAS,SAAS,WAAa,EAAA;AACjC,MAAA,IAAA,EAAA;AAAA;AAEF,IAAO,OAAA,IAAA;AAAA,GACT,EAAG,CAAC,CACJ,GAAA,SAAA;AACN;AAEa,MAAA,oBAAA,GAAuB,CAAC,MAAyB,KAAA;AAC5D,EAAO,OAAA,MAAA,CAAO,SAAS,OACnB,GAAA,MAAA,CAAO,WAAW,MAAO,CAAA,CAAC,KAAU,QAA+B,KAAA;AACjE,IAAA,IAAI,IAAO,GAAA,GAAA;AACX,IAAI,IAAA,QAAA,CAAS,SAAS,SAAW,EAAA;AAC/B,MAAA,IAAA,EAAA;AAAA;AAEF,IAAO,OAAA,IAAA;AAAA,GACT,EAAG,CAAC,CACJ,GAAA,SAAA;AACN;AAEa,MAAA,mBAAA,GAAsB,CAAC,MAAyB,KAAA;AAC3D,EAAO,OAAA,MAAA,CAAO,SAAS,OACnB,GAAA,MAAA,CAAO,WAAW,MAAO,CAAA,CAAC,KAAU,QAA+B,KAAA;AACjE,IAAA,IAAI,IAAO,GAAA,GAAA;AACX,IAAI,IAAA,QAAA,CAAS,SAAS,UAAY,EAAA;AAChC,MAAA,IAAA,EAAA;AAAA;AAEF,IAAO,OAAA,IAAA;AAAA,GACT,EAAG,CAAC,CACJ,GAAA,SAAA;AACN;AAEa,MAAA,qBAAA,GAAwB,CACnC,QACuB,KAAA;AACvB,EAAA,OAAO,QAAS,CAAA,MAAA;AAAA,IACd,CAAC,QAA4B,MAA0B,KAAA;AACrD,MAAA,MAAM,aAAa,MAAO,CAAA,IAAA;AAC1B,MAAO,OAAA;AAAA,QACL,GAAG,MAAA;AAAA,QACH,CAAC,UAAU,GAAG,QAAS,CAAA,MAAA;AAAA,UACrB,CAAC,aAA2D,GAAQ,KAAA;AAClE,YAAA,MAAM,OAAO,GAAI,CAAA,IAAA;AACjB,YAAA,IAAI,UAAe,KAAA,IAAA;AACjB,cAAO,OAAA;AAAA,gBACL,QAAU,EAAA,MAAA;AAAA,kBACR,CAAC,GAAG,WAAA,CAAY,UAAU,YAAa,CAAA,GAAA,CAAI,MAAgB,CAAC,CAAA;AAAA,kBAC5D,CAAO,GAAA,KAAA;AAAA,iBACT;AAAA,gBACA,WAAA,EAAa,kBAAkB,GAAG,CAAA;AAAA,gBAClC,YAAc,EAAA,iBAAA,CAAkB,GAAG,CAAA,GAAI,IAAI,YAAe,GAAA;AAAA,eAC5D;AACF,YAAO,OAAA,WAAA;AAAA,WACT;AAAA,UACA,EAAE,QAAA,EAAU,EAAC,EAAG,aAAa,KAAM;AAAA;AACrC,OACF;AAAA,KACF;AAAA,IACA;AAAC,GACH;AACF;AAEa,MAAA,gCAAA,GAAmC,CAC9C,yBACkC,KAAA;AAClC,EAAA,MAAM,UAAoB,yBAA0B,CAAA,GAAA;AAAA,IAClD,cAAY,QAAS,CAAA;AAAA,GACvB;AACA,EAAA,MAAM,qBAAqB,yBAA0B,CAAA,MAAA;AAAA,IACnD,CAAC,GAAyB,EAAA,EAAA,EAAI,KAAU,KAAA;AACtC,MAAA,MAAM,cAAc,EAAG,CAAA,QAAA,CAAS,MAAO,CAAA,CAAC,QAAkB,GAAQ,KAAA;AAChE,QAAA,MAAM,aAAa,GAAI,CAAA,IAAA;AACvB,QAAO,OAAA,CAAC,GAAG,MAAA,EAAQ,UAAU,CAAA;AAAA,OAC/B,EAAG,EAAE,CAAA;AACL,MAAO,OAAA;AAAA,QACL,GAAG,GAAA;AAAA,QACH,CAAC,OAAA,CAAQ,KAAK,CAAC,GAAG;AAAA,UAChB,WAAA,EAAa,eAAe,EAAC;AAAA,UAC7B,QAAU,EAAA;AAAA,YACR,GAAI,EAAG,CAAA,QAAA,GAAW,sBAAsB,EAAG,CAAA,QAAQ,IAAI;AAAC;AAC1D;AACF,OACF;AAAA,KACF;AAAA,IACA;AAAC,GACH;AACA,EAAO,OAAA,EAAE,SAAS,kBAAmB,EAAA;AACvC;AAEa,MAAA,yBAAA,GAA4B,CACvC,MACsB,KAAA;AACtB,EAAA,MAAM,EAAE,IAAA,EAAM,IAAM,EAAA,SAAA,EAAW,wBAA2B,GAAA,MAAA;AAE1D,EAAA,OAAO,sBAAuB,CAAA,MAAA;AAAA,IAC5B,CAAC,KAAwB,mBAAwB,KAAA;AAC/C,MAAA,MAAM,EAAE,UAAA,EAAY,QAAU,EAAA,UAAA,EAAe,GAAA,mBAAA;AAC7C,MAAA,MAAM,yBAAyB,QAAS,CAAA,MAAA;AAAA,QACtC,CAAC,MAAyB,MAAW,KAAA;AACnC,UAAA,IAAI,MAAO,CAAA,MAAA,KAAW,OAAW,IAAA,CAAC,UAAY,EAAA;AAC5C,YAAO,OAAA;AAAA,cACL,GAAG,IAAA;AAAA,cACH;AAAA,gBACE,iBAAiB,CAAG,EAAA,IAAI,CAAI,CAAA,EAAA,SAAS,IAAI,IAAI,CAAA,CAAA;AAAA,gBAC7C,UAAA,EAAY,GAAG,UAAU,CAAA,CAAA;AAAA,gBACzB,MAAQ,EAAA,MAAA,CAAO,MAAO,CAAA,iBAAA,CAAkB,OAAO,CAAA;AAAA,gBAC/C,MAAQ,EAAA;AAAA;AACV,aACF;AAAA;AAEF,UAAO,OAAA,IAAA;AAAA,SACT;AAAA,QACA;AAAC,OACH;AACA,MAAA,OAAO,CAAC,GAAG,GAAK,EAAA,GAAG,sBAAsB,CAAA;AAAA,KAC3C;AAAA,IACA;AAAC,GACH;AACF;AAEa,MAAA,oCAAA,GAAuC,CAClD,MACG,KAAA;AACH,EAAA,MAAM,EAAE,IAAA,EAAM,IAAM,EAAA,SAAA,EAAW,wBAA2B,GAAA,MAAA;AAE1D,EAAA,OAAO,sBAAuB,CAAA,MAAA;AAAA,IAC5B,CAAC,KAA4B,mBAAyC,KAAA;AACpE,MAAA,MAAM,EAAE,QAAU,EAAA,WAAA,EAAa,MAAQ,EAAA,UAAA,EAAY,cACjD,GAAA,mBAAA;AACF,MAAA,MAAM,iBAAoB,GAAA,QAAA,CAAS,MAAO,CAAA,CAAC,MAAgB,MAAW,KAAA;AACpE,QAAI,IAAA,MAAA,CAAO,WAAW,OAAS,EAAA;AAC7B,UAAA,OAAO,CAAC,GAAG,IAAA,EAAM,OAAO,MAAO,CAAA,iBAAA,CAAkB,OAAO,CAAC,CAAA;AAAA;AAE3D,QAAO,OAAA,IAAA;AAAA,OACT,EAAG,EAAE,CAAA;AACL,MAAA,OAAO,eAAe,UAClB,GAAA;AAAA,QACE,GAAG,GAAA;AAAA,QACH;AAAA,UACE,MAAQ,EAAA,aAAA;AAAA,UACR,eAAe,CAAG,EAAA,IAAI,CAAI,CAAA,EAAA,SAAS,IAAI,IAAI,CAAA,CAAA;AAAA,UAC3C,QAAA,EAAU,GAAG,MAAM,CAAA,CAAA;AAAA,UACnB,YAAA,EAAc,GAAG,YAAY,CAAA,CAAA;AAAA,UAC7B,iBAAA;AAAA,UACA,UACE,EAAA,MAAA,CAAO,IAAK,CAAA,UAAU,CAAE,CAAA,CAAC,CAAM,KAAA,SAAA,CAAU,SACrC,GAAA,EAAE,GAAG,UAAA,CAAW,WAChB,GAAA;AAAA;AACR,OAEF,GAAA,GAAA;AAAA,KACN;AAAA,IACA;AAAC,GACH;AACF;AAEa,MAAA,6BAAA,GAAgC,CAC3C,MAAA,EACA,aAC0B,KAAA;AAC1B,EAAM,MAAA,uBAAA,GAA0B,cAAc,sBAAuB,CAAA,MAAA;AAAA,IACnE,SAAO,GAAI,CAAA;AAAA,GACb;AAEA,EAAA,MAAM,mBAAmB,MAAO,CAAA,sBAAA,CAAuB,MAAO,CAAA,CAAA,GAAA,KAAO,IAAI,EAAE,CAAA;AAE3E,EAAO,OAAA,gBAAA,CAAiB,MAAS,GAAA,CAAA,GAC7B,gBAAiB,CAAA,MAAA;AAAA,IACf,CACE,KACA,SACG,KAAA;AACH,MAAA,MAAM,kBAAkB,uBAAwB,CAAA,IAAA;AAAA,QAC9C,CAAA,CAAA,KAAK,CAAE,CAAA,EAAA,KAAO,SAAU,CAAA;AAAA,OAC1B;AAEA,MAAA,IAAI,mBAAmB,SAAU,CAAA,EAAA;AAC/B,QAAO,OAAA;AAAA,UACL,GAAG,GAAA;AAAA,UACH;AAAA,YACE,IAAI,SAAU,CAAA,EAAA;AAAA,YACd,iBAAiB,oCAAqC,CAAA;AAAA,cACpD,GAAG,MAAA;AAAA,cACH,sBAAA,EAAwB,CAAC,SAAS;AAAA,aACnC,EAAE,CAAC;AAAA;AACN,SACF;AACF,MAAO,OAAA,GAAA;AAAA,KACT;AAAA,IACA;AAAC,MAEH,EAAC;AACP;AAEa,MAAA,yBAAA,GAA4B,CAAC,MAA2B,KAAA;AACnE,EAAM,MAAA,SAAA,GAAY,EAAE,GAAG,MAAO,EAAA;AAC9B,EAAM,MAAA,qBAAA,GAAwB,OAAO,sBAAuB,CAAA,MAAA;AAAA,IAC1D,CAAA,GAAA,KAAO,CAAC,GAAI,CAAA;AAAA,GACd;AACA,EAAA,SAAA,CAAU,sBAAyB,GAAA,qBAAA;AACnC,EAAA,OAAO,qCAAqC,SAAS,CAAA;AACvD;AAEa,MAAA,gCAAA,GAAmC,CAC9C,MAAA,EACA,aACG,KAAA;AACH,EAAM,MAAA,oBAAA,GAAuB,aAAc,CAAA,sBAAA,CACxC,GAAI,CAAA,CAAA,GAAA,KAAO,IAAI,EAAE,CAAA,CACjB,MAAO,CAAA,CAAA,EAAA,KAAM,EAAE,CAAA;AAElB,EAAM,MAAA,gBAAA,GAAmB,MAAO,CAAA,sBAAA,CAC7B,GAAI,CAAA,CAAA,GAAA,KAAO,IAAI,EAAE,CAAA,CACjB,MAAO,CAAA,CAAA,EAAA,KAAM,EAAE,CAAA;AAElB,EAAA,OAAO,qBAAqB,MAAS,GAAA,CAAA,GACjC,qBAAqB,MAAO,CAAA,CAAC,KAAe,KAAU,KAAA;AACpD,IAAM,MAAA,eAAA,GAAkB,gBAAiB,CAAA,QAAA,CAAS,KAAK,CAAA;AACvD,IAAA,IAAI,iBAAwB,OAAA,GAAA;AAC5B,IAAA,OAAO,KAAQ,GAAA,CAAC,GAAG,GAAA,EAAK,KAAK,CAAI,GAAA,GAAA;AAAA,GAChC,EAAA,EAAE,CAAA,GACL,EAAC;AACP;AAEa,MAAA,oBAAA,GAAuB,CAAC,MAA2B,KAAA;AAC9D,EAAA,OACE,0BAA0B,MAAM,CAAA,CAAE,MAClC,GAAA,oCAAA,CAAqC,MAAM,CAAE,CAAA,MAAA;AAEjD;AAMa,MAAA,cAAA,GAAiB,CAAC,UAAgC,KAAA;AAC7D,EAAI,IAAA,CAAC,YAAmB,OAAA,CAAA;AACxB,EAAA,IAAI,WAAc,GAAA,CAAA;AAElB,EAAA,IAAI,WAAW,KAAO,EAAA;AACpB,IAAA,WAAA,IAAe,UAAW,CAAA,KAAA,CAAM,MAAO,CAAA,CAAC,KAAK,SAAc,KAAA;AACzD,MAAO,OAAA,GAAA,GAAM,eAAe,SAA2B,CAAA;AAAA,OACtD,CAAC,CAAA;AAAA;AAGN,EAAA,IAAI,WAAW,KAAO,EAAA;AACpB,IAAA,WAAA,IAAe,UAAW,CAAA,KAAA,CAAM,MAAO,CAAA,CAAC,KAAK,SAAc,KAAA;AACzD,MAAO,OAAA,GAAA,GAAM,eAAe,SAA2B,CAAA;AAAA,OACtD,CAAC,CAAA;AAAA;AAGN,EAAA,IAAI,WAAW,GAAK,EAAA;AAClB,IAAe,WAAA,IAAA,cAAA,CAAe,WAAW,GAAqB,CAAA;AAAA;AAGhE,EAAI,IAAA,UAAA,CAAW,aAAa,MAAO,CAAA,IAAA,CAAK,UAAU,CAAE,CAAA,QAAA,CAAS,MAAM,CAAG,EAAA;AACpE,IAAe,WAAA,IAAA,CAAA;AAAA;AAGjB,EAAO,OAAA,WAAA;AACT;;;;"}
+{"version":3,"file":"create-role-utils.esm.js","sources":["../../src/utils/create-role-utils.ts"],"sourcesContent":["/*\n * Copyright 2024 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { getTitleCase } from '@janus-idp/shared-react';\nimport * as yup from 'yup';\n\nimport {\n  isResourcedPolicy,\n  PluginPermissionMetaData,\n  PolicyDetails,\n  Role,\n  RoleBasedPolicy,\n} from '@backstage-community/plugin-rbac-common';\n\nimport { criterias } from '../components/ConditionalAccess/const';\nimport { ConditionsData } from '../components/ConditionalAccess/types';\nimport {\n  PermissionPolicies,\n  PluginsPermissionPoliciesData,\n  PluginsPermissions,\n  RoleFormValues,\n  SelectedMember,\n} from '../components/CreateRole/types';\nimport {\n  MemberEntity,\n  PermissionsData,\n  RoleBasedConditions,\n  UpdatedConditionsData,\n} from '../types';\n\nexport const uniqBy = (arr: string[], iteratee: (arg: string) => any) => {\n  return arr.filter(\n    (x, i, self) => i === self.findIndex(y => iteratee(x) === iteratee(y)),\n  );\n};\n\nexport const getRoleData = (values: RoleFormValues): Role => {\n  return {\n    memberReferences: values.selectedMembers.map(\n      (mem: SelectedMember) => mem.ref,\n    ),\n    name: `${values.kind}:${values.namespace}/${values.name}`,\n    metadata: {\n      description: values.description,\n    },\n  };\n};\n\nexport const validationSchema = yup.object({\n  name: yup.string().required('Name is required'),\n  selectedMembers: yup.array().min(1, 'No member selected'),\n  selectedPlugins: yup.array().min(1, 'No plugin selected'),\n  permissionPoliciesRows: yup\n    .array()\n    .of(\n      yup.object().shape({\n        plugin: yup.string().required('Plugin is required'),\n        permission: yup.string().required('Permission is required'),\n        policies: yup\n          .array()\n          .min(1)\n          .of(\n            yup\n              .object()\n              .shape({ policy: yup.string(), effect: yup.string() })\n              .test(p => p.effect === 'allow'),\n          ),\n      }),\n    )\n    .min(1),\n});\n\nexport const getMembersCount = (member: MemberEntity) => {\n  return member.kind === 'Group'\n    ? member.relations?.reduce((acc: any, relation: { type: string }) => {\n        let temp = acc;\n        if (relation.type === 'hasMember') {\n          temp++;\n        }\n        return temp;\n      }, 0)\n    : undefined;\n};\n\nexport const getParentGroupsCount = (member: MemberEntity) => {\n  return member.kind === 'Group'\n    ? member.relations?.reduce((acc: any, relation: { type: string }) => {\n        let temp = acc;\n        if (relation.type === 'childOf') {\n          temp++;\n        }\n        return temp;\n      }, 0)\n    : undefined;\n};\n\nexport const getChildGroupsCount = (member: MemberEntity) => {\n  return member.kind === 'Group'\n    ? member.relations?.reduce((acc: any, relation: { type: string }) => {\n        let temp = acc;\n        if (relation.type === 'parentOf') {\n          temp++;\n        }\n        return temp;\n      }, 0)\n    : undefined;\n};\n\nexport const getPermissionPolicies = (\n  policies: PolicyDetails[],\n): PermissionPolicies => {\n  return policies.reduce(\n    (ppsAcc: PermissionPolicies, policy: PolicyDetails) => {\n      const permission = policy.name;\n      return {\n        ...ppsAcc,\n        [permission]: policies.reduce(\n          (policiesAcc: { policies: string[]; isResourced: boolean }, pol) => {\n            const perm = pol.name;\n            if (permission === perm)\n              return {\n                policies: uniqBy(\n                  [...policiesAcc.policies, getTitleCase(pol.policy as string)],\n                  val => val,\n                ),\n                isResourced: isResourcedPolicy(pol),\n                resourceType: isResourcedPolicy(pol) ? pol.resourceType : '',\n              };\n            return policiesAcc;\n          },\n          { policies: [], isResourced: false },\n        ),\n      };\n    },\n    {},\n  );\n};\n\nexport const getPluginsPermissionPoliciesData = (\n  pluginsPermissionPolicies: PluginPermissionMetaData[],\n): PluginsPermissionPoliciesData => {\n  const plugins: string[] = pluginsPermissionPolicies.map(\n    pluginPp => pluginPp.pluginId,\n  );\n  const pluginsPermissions = pluginsPermissionPolicies.reduce(\n    (acc: PluginsPermissions, pp, index) => {\n      const permissions = pp.policies.reduce((plcAcc: string[], plc) => {\n        const permission = plc.name;\n        return [...plcAcc, permission];\n      }, []);\n      return {\n        ...acc,\n        [plugins[index]]: {\n          permissions: permissions ?? [],\n          policies: {\n            ...(pp.policies ? getPermissionPolicies(pp.policies) : {}),\n          },\n        },\n      };\n    },\n    {},\n  );\n  return { plugins, pluginsPermissions };\n};\n\nexport const getPermissionPoliciesData = (\n  values: RoleFormValues,\n): RoleBasedPolicy[] => {\n  const { kind, name, namespace, permissionPoliciesRows } = values;\n\n  return permissionPoliciesRows.reduce(\n    (acc: RoleBasedPolicy[], permissionPolicyRow) => {\n      const {\n        permission,\n        policies,\n        conditions,\n        resourceType,\n        usingResourceType,\n      } = permissionPolicyRow;\n      const permissionPoliciesData = policies.reduce(\n        (pAcc: RoleBasedPolicy[], policy) => {\n          if (policy.effect === 'allow' && !conditions) {\n            return [\n              ...pAcc,\n              {\n                entityReference: `${kind}:${namespace}/${name}`,\n                permission:\n                  resourceType && usingResourceType\n                    ? `${resourceType}`\n                    : `${permission}`,\n                policy: policy.policy.toLocaleLowerCase('en-US'),\n                effect: 'allow',\n              },\n            ];\n          }\n          return pAcc;\n        },\n        [],\n      );\n      return [...acc, ...permissionPoliciesData];\n    },\n    [],\n  );\n};\n\nexport const getConditionalPermissionPoliciesData = (\n  values: RoleFormValues,\n) => {\n  const { kind, name, namespace, permissionPoliciesRows } = values;\n\n  return permissionPoliciesRows.reduce(\n    (acc: RoleBasedConditions[], permissionPolicyRow: PermissionsData) => {\n      const { policies, isResourced, plugin, conditions, resourceType } =\n        permissionPolicyRow;\n      const permissionMapping = policies.reduce((pAcc: string[], policy) => {\n        if (policy.effect === 'allow') {\n          return [...pAcc, policy.policy.toLocaleLowerCase('en-US')];\n        }\n        return pAcc;\n      }, []);\n      return isResourced && conditions\n        ? [\n            ...acc,\n            {\n              result: 'CONDITIONAL',\n              roleEntityRef: `${kind}:${namespace}/${name}`,\n              pluginId: `${plugin}`,\n              resourceType: `${resourceType}`,\n              permissionMapping,\n              conditions:\n                Object.keys(conditions)[0] === criterias.condition\n                  ? { ...conditions.condition }\n                  : conditions,\n            } as RoleBasedConditions,\n          ]\n        : acc;\n    },\n    [] as RoleBasedConditions[],\n  );\n};\n\nexport const getUpdatedConditionalPolicies = (\n  values: RoleFormValues,\n  initialValues: RoleFormValues,\n): UpdatedConditionsData => {\n  const initialConditionsWithId = initialValues.permissionPoliciesRows.filter(\n    ppr => ppr.id,\n  );\n\n  const conditionsWithId = values.permissionPoliciesRows.filter(ppr => ppr.id);\n\n  return conditionsWithId.length > 0\n    ? conditionsWithId.reduce(\n        (\n          acc: { id: number; updateCondition: RoleBasedConditions }[],\n          condition: PermissionsData,\n        ) => {\n          const conditionExists = initialConditionsWithId.find(\n            c => c.id === condition.id,\n          );\n\n          if (conditionExists && condition.id)\n            return [\n              ...acc,\n              {\n                id: condition.id,\n                updateCondition: getConditionalPermissionPoliciesData({\n                  ...values,\n                  permissionPoliciesRows: [condition],\n                })[0],\n              },\n            ];\n          return acc;\n        },\n        [],\n      )\n    : [];\n};\n\nexport const getNewConditionalPolicies = (values: RoleFormValues) => {\n  const newValues = { ...values };\n  const newPermissionPolicies = values.permissionPoliciesRows.filter(\n    ppr => !ppr.id,\n  );\n  newValues.permissionPoliciesRows = newPermissionPolicies;\n  return getConditionalPermissionPoliciesData(newValues);\n};\n\nexport const getRemovedConditionalPoliciesIds = (\n  values: RoleFormValues,\n  initialValues: RoleFormValues,\n) => {\n  const initialConditionsIds = initialValues.permissionPoliciesRows\n    .map(ppr => ppr.id)\n    .filter(id => id);\n\n  const newConditionsIds = values.permissionPoliciesRows\n    .map(ppr => ppr.id)\n    .filter(id => id);\n\n  return initialConditionsIds.length > 0\n    ? initialConditionsIds.reduce((acc: number[], oldId) => {\n        const conditionExists = newConditionsIds.includes(oldId);\n        if (conditionExists) return acc;\n        return oldId ? [...acc, oldId] : acc;\n      }, [])\n    : [];\n};\n\nexport const getPermissionsNumber = (values: RoleFormValues) => {\n  return (\n    getPermissionPoliciesData(values).length +\n    getConditionalPermissionPoliciesData(values).length\n  );\n};\n\nexport const getConditionsNumber = (values: RoleFormValues) => {\n  return getConditionalPermissionPoliciesData(values)?.length ?? 0;\n};\n\nexport const getRulesNumber = (conditions?: ConditionsData) => {\n  if (!conditions) return 0;\n  let rulesNumber = 0;\n\n  if (conditions.allOf) {\n    rulesNumber += conditions.allOf.reduce((acc, condition) => {\n      return acc + getRulesNumber(condition as ConditionsData);\n    }, 0);\n  }\n\n  if (conditions.anyOf) {\n    rulesNumber += conditions.anyOf.reduce((acc, condition) => {\n      return acc + getRulesNumber(condition as ConditionsData);\n    }, 0);\n  }\n\n  if (conditions.not) {\n    rulesNumber += getRulesNumber(conditions.not as ConditionsData);\n  }\n\n  if (conditions.condition || Object.keys(conditions).includes('rule')) {\n    rulesNumber += 1;\n  }\n\n  return rulesNumber;\n};\n"],"names":[],"mappings":";;;;;AA0Ca,MAAA,MAAA,GAAS,CAAC,GAAA,EAAe,QAAmC,KAAA;AACvE,EAAA,OAAO,GAAI,CAAA,MAAA;AAAA,IACT,CAAC,CAAA,EAAG,CAAG,EAAA,IAAA,KAAS,CAAM,KAAA,IAAA,CAAK,SAAU,CAAA,CAAA,CAAA,KAAK,QAAS,CAAA,CAAC,CAAM,KAAA,QAAA,CAAS,CAAC,CAAC;AAAA,GACvE;AACF;AAEa,MAAA,WAAA,GAAc,CAAC,MAAiC,KAAA;AAC3D,EAAO,OAAA;AAAA,IACL,gBAAA,EAAkB,OAAO,eAAgB,CAAA,GAAA;AAAA,MACvC,CAAC,QAAwB,GAAI,CAAA;AAAA,KAC/B;AAAA,IACA,IAAA,EAAM,GAAG,MAAO,CAAA,IAAI,IAAI,MAAO,CAAA,SAAS,CAAI,CAAA,EAAA,MAAA,CAAO,IAAI,CAAA,CAAA;AAAA,IACvD,QAAU,EAAA;AAAA,MACR,aAAa,MAAO,CAAA;AAAA;AACtB,GACF;AACF;AAEa,MAAA,gBAAA,GAAmB,IAAI,MAAO,CAAA;AAAA,EACzC,IAAM,EAAA,GAAA,CAAI,MAAO,EAAA,CAAE,SAAS,kBAAkB,CAAA;AAAA,EAC9C,iBAAiB,GAAI,CAAA,KAAA,EAAQ,CAAA,GAAA,CAAI,GAAG,oBAAoB,CAAA;AAAA,EACxD,iBAAiB,GAAI,CAAA,KAAA,EAAQ,CAAA,GAAA,CAAI,GAAG,oBAAoB,CAAA;AAAA,EACxD,sBAAA,EAAwB,GACrB,CAAA,KAAA,EACA,CAAA,EAAA;AAAA,IACC,GAAA,CAAI,MAAO,EAAA,CAAE,KAAM,CAAA;AAAA,MACjB,MAAQ,EAAA,GAAA,CAAI,MAAO,EAAA,CAAE,SAAS,oBAAoB,CAAA;AAAA,MAClD,UAAY,EAAA,GAAA,CAAI,MAAO,EAAA,CAAE,SAAS,wBAAwB,CAAA;AAAA,MAC1D,UAAU,GACP,CAAA,KAAA,EACA,CAAA,GAAA,CAAI,CAAC,CACL,CAAA,EAAA;AAAA,QACC,IACG,MAAO,EAAA,CACP,MAAM,EAAE,MAAA,EAAQ,IAAI,MAAO,EAAA,EAAG,QAAQ,GAAI,CAAA,MAAA,IAAU,CAAA,CACpD,KAAK,CAAK,CAAA,KAAA,CAAA,CAAE,WAAW,OAAO;AAAA;AACnC,KACH;AAAA,GACH,CACC,IAAI,CAAC;AACV,CAAC;AAEY,MAAA,eAAA,GAAkB,CAAC,MAAyB,KAAA;AACvD,EAAO,OAAA,MAAA,CAAO,SAAS,OACnB,GAAA,MAAA,CAAO,WAAW,MAAO,CAAA,CAAC,KAAU,QAA+B,KAAA;AACjE,IAAA,IAAI,IAAO,GAAA,GAAA;AACX,IAAI,IAAA,QAAA,CAAS,SAAS,WAAa,EAAA;AACjC,MAAA,IAAA,EAAA;AAAA;AAEF,IAAO,OAAA,IAAA;AAAA,GACT,EAAG,CAAC,CACJ,GAAA,SAAA;AACN;AAEa,MAAA,oBAAA,GAAuB,CAAC,MAAyB,KAAA;AAC5D,EAAO,OAAA,MAAA,CAAO,SAAS,OACnB,GAAA,MAAA,CAAO,WAAW,MAAO,CAAA,CAAC,KAAU,QAA+B,KAAA;AACjE,IAAA,IAAI,IAAO,GAAA,GAAA;AACX,IAAI,IAAA,QAAA,CAAS,SAAS,SAAW,EAAA;AAC/B,MAAA,IAAA,EAAA;AAAA;AAEF,IAAO,OAAA,IAAA;AAAA,GACT,EAAG,CAAC,CACJ,GAAA,SAAA;AACN;AAEa,MAAA,mBAAA,GAAsB,CAAC,MAAyB,KAAA;AAC3D,EAAO,OAAA,MAAA,CAAO,SAAS,OACnB,GAAA,MAAA,CAAO,WAAW,MAAO,CAAA,CAAC,KAAU,QAA+B,KAAA;AACjE,IAAA,IAAI,IAAO,GAAA,GAAA;AACX,IAAI,IAAA,QAAA,CAAS,SAAS,UAAY,EAAA;AAChC,MAAA,IAAA,EAAA;AAAA;AAEF,IAAO,OAAA,IAAA;AAAA,GACT,EAAG,CAAC,CACJ,GAAA,SAAA;AACN;AAEa,MAAA,qBAAA,GAAwB,CACnC,QACuB,KAAA;AACvB,EAAA,OAAO,QAAS,CAAA,MAAA;AAAA,IACd,CAAC,QAA4B,MAA0B,KAAA;AACrD,MAAA,MAAM,aAAa,MAAO,CAAA,IAAA;AAC1B,MAAO,OAAA;AAAA,QACL,GAAG,MAAA;AAAA,QACH,CAAC,UAAU,GAAG,QAAS,CAAA,MAAA;AAAA,UACrB,CAAC,aAA2D,GAAQ,KAAA;AAClE,YAAA,MAAM,OAAO,GAAI,CAAA,IAAA;AACjB,YAAA,IAAI,UAAe,KAAA,IAAA;AACjB,cAAO,OAAA;AAAA,gBACL,QAAU,EAAA,MAAA;AAAA,kBACR,CAAC,GAAG,WAAA,CAAY,UAAU,YAAa,CAAA,GAAA,CAAI,MAAgB,CAAC,CAAA;AAAA,kBAC5D,CAAO,GAAA,KAAA;AAAA,iBACT;AAAA,gBACA,WAAA,EAAa,kBAAkB,GAAG,CAAA;AAAA,gBAClC,YAAc,EAAA,iBAAA,CAAkB,GAAG,CAAA,GAAI,IAAI,YAAe,GAAA;AAAA,eAC5D;AACF,YAAO,OAAA,WAAA;AAAA,WACT;AAAA,UACA,EAAE,QAAA,EAAU,EAAC,EAAG,aAAa,KAAM;AAAA;AACrC,OACF;AAAA,KACF;AAAA,IACA;AAAC,GACH;AACF;AAEa,MAAA,gCAAA,GAAmC,CAC9C,yBACkC,KAAA;AAClC,EAAA,MAAM,UAAoB,yBAA0B,CAAA,GAAA;AAAA,IAClD,cAAY,QAAS,CAAA;AAAA,GACvB;AACA,EAAA,MAAM,qBAAqB,yBAA0B,CAAA,MAAA;AAAA,IACnD,CAAC,GAAyB,EAAA,EAAA,EAAI,KAAU,KAAA;AACtC,MAAA,MAAM,cAAc,EAAG,CAAA,QAAA,CAAS,MAAO,CAAA,CAAC,QAAkB,GAAQ,KAAA;AAChE,QAAA,MAAM,aAAa,GAAI,CAAA,IAAA;AACvB,QAAO,OAAA,CAAC,GAAG,MAAA,EAAQ,UAAU,CAAA;AAAA,OAC/B,EAAG,EAAE,CAAA;AACL,MAAO,OAAA;AAAA,QACL,GAAG,GAAA;AAAA,QACH,CAAC,OAAA,CAAQ,KAAK,CAAC,GAAG;AAAA,UAChB,WAAA,EAAa,eAAe,EAAC;AAAA,UAC7B,QAAU,EAAA;AAAA,YACR,GAAI,EAAG,CAAA,QAAA,GAAW,sBAAsB,EAAG,CAAA,QAAQ,IAAI;AAAC;AAC1D;AACF,OACF;AAAA,KACF;AAAA,IACA;AAAC,GACH;AACA,EAAO,OAAA,EAAE,SAAS,kBAAmB,EAAA;AACvC;AAEa,MAAA,yBAAA,GAA4B,CACvC,MACsB,KAAA;AACtB,EAAA,MAAM,EAAE,IAAA,EAAM,IAAM,EAAA,SAAA,EAAW,wBAA2B,GAAA,MAAA;AAE1D,EAAA,OAAO,sBAAuB,CAAA,MAAA;AAAA,IAC5B,CAAC,KAAwB,mBAAwB,KAAA;AAC/C,MAAM,MAAA;AAAA,QACJ,UAAA;AAAA,QACA,QAAA;AAAA,QACA,UAAA;AAAA,QACA,YAAA;AAAA,QACA;AAAA,OACE,GAAA,mBAAA;AACJ,MAAA,MAAM,yBAAyB,QAAS,CAAA,MAAA;AAAA,QACtC,CAAC,MAAyB,MAAW,KAAA;AACnC,UAAA,IAAI,MAAO,CAAA,MAAA,KAAW,OAAW,IAAA,CAAC,UAAY,EAAA;AAC5C,YAAO,OAAA;AAAA,cACL,GAAG,IAAA;AAAA,cACH;AAAA,gBACE,iBAAiB,CAAG,EAAA,IAAI,CAAI,CAAA,EAAA,SAAS,IAAI,IAAI,CAAA,CAAA;AAAA,gBAC7C,YACE,YAAgB,IAAA,iBAAA,GACZ,GAAG,YAAY,CAAA,CAAA,GACf,GAAG,UAAU,CAAA,CAAA;AAAA,gBACnB,MAAQ,EAAA,MAAA,CAAO,MAAO,CAAA,iBAAA,CAAkB,OAAO,CAAA;AAAA,gBAC/C,MAAQ,EAAA;AAAA;AACV,aACF;AAAA;AAEF,UAAO,OAAA,IAAA;AAAA,SACT;AAAA,QACA;AAAC,OACH;AACA,MAAA,OAAO,CAAC,GAAG,GAAK,EAAA,GAAG,sBAAsB,CAAA;AAAA,KAC3C;AAAA,IACA;AAAC,GACH;AACF;AAEa,MAAA,oCAAA,GAAuC,CAClD,MACG,KAAA;AACH,EAAA,MAAM,EAAE,IAAA,EAAM,IAAM,EAAA,SAAA,EAAW,wBAA2B,GAAA,MAAA;AAE1D,EAAA,OAAO,sBAAuB,CAAA,MAAA;AAAA,IAC5B,CAAC,KAA4B,mBAAyC,KAAA;AACpE,MAAA,MAAM,EAAE,QAAU,EAAA,WAAA,EAAa,MAAQ,EAAA,UAAA,EAAY,cACjD,GAAA,mBAAA;AACF,MAAA,MAAM,iBAAoB,GAAA,QAAA,CAAS,MAAO,CAAA,CAAC,MAAgB,MAAW,KAAA;AACpE,QAAI,IAAA,MAAA,CAAO,WAAW,OAAS,EAAA;AAC7B,UAAA,OAAO,CAAC,GAAG,IAAA,EAAM,OAAO,MAAO,CAAA,iBAAA,CAAkB,OAAO,CAAC,CAAA;AAAA;AAE3D,QAAO,OAAA,IAAA;AAAA,OACT,EAAG,EAAE,CAAA;AACL,MAAA,OAAO,eAAe,UAClB,GAAA;AAAA,QACE,GAAG,GAAA;AAAA,QACH;AAAA,UACE,MAAQ,EAAA,aAAA;AAAA,UACR,eAAe,CAAG,EAAA,IAAI,CAAI,CAAA,EAAA,SAAS,IAAI,IAAI,CAAA,CAAA;AAAA,UAC3C,QAAA,EAAU,GAAG,MAAM,CAAA,CAAA;AAAA,UACnB,YAAA,EAAc,GAAG,YAAY,CAAA,CAAA;AAAA,UAC7B,iBAAA;AAAA,UACA,UACE,EAAA,MAAA,CAAO,IAAK,CAAA,UAAU,CAAE,CAAA,CAAC,CAAM,KAAA,SAAA,CAAU,SACrC,GAAA,EAAE,GAAG,UAAA,CAAW,WAChB,GAAA;AAAA;AACR,OAEF,GAAA,GAAA;AAAA,KACN;AAAA,IACA;AAAC,GACH;AACF;AAEa,MAAA,6BAAA,GAAgC,CAC3C,MAAA,EACA,aAC0B,KAAA;AAC1B,EAAM,MAAA,uBAAA,GAA0B,cAAc,sBAAuB,CAAA,MAAA;AAAA,IACnE,SAAO,GAAI,CAAA;AAAA,GACb;AAEA,EAAA,MAAM,mBAAmB,MAAO,CAAA,sBAAA,CAAuB,MAAO,CAAA,CAAA,GAAA,KAAO,IAAI,EAAE,CAAA;AAE3E,EAAO,OAAA,gBAAA,CAAiB,MAAS,GAAA,CAAA,GAC7B,gBAAiB,CAAA,MAAA;AAAA,IACf,CACE,KACA,SACG,KAAA;AACH,MAAA,MAAM,kBAAkB,uBAAwB,CAAA,IAAA;AAAA,QAC9C,CAAA,CAAA,KAAK,CAAE,CAAA,EAAA,KAAO,SAAU,CAAA;AAAA,OAC1B;AAEA,MAAA,IAAI,mBAAmB,SAAU,CAAA,EAAA;AAC/B,QAAO,OAAA;AAAA,UACL,GAAG,GAAA;AAAA,UACH;AAAA,YACE,IAAI,SAAU,CAAA,EAAA;AAAA,YACd,iBAAiB,oCAAqC,CAAA;AAAA,cACpD,GAAG,MAAA;AAAA,cACH,sBAAA,EAAwB,CAAC,SAAS;AAAA,aACnC,EAAE,CAAC;AAAA;AACN,SACF;AACF,MAAO,OAAA,GAAA;AAAA,KACT;AAAA,IACA;AAAC,MAEH,EAAC;AACP;AAEa,MAAA,yBAAA,GAA4B,CAAC,MAA2B,KAAA;AACnE,EAAM,MAAA,SAAA,GAAY,EAAE,GAAG,MAAO,EAAA;AAC9B,EAAM,MAAA,qBAAA,GAAwB,OAAO,sBAAuB,CAAA,MAAA;AAAA,IAC1D,CAAA,GAAA,KAAO,CAAC,GAAI,CAAA;AAAA,GACd;AACA,EAAA,SAAA,CAAU,sBAAyB,GAAA,qBAAA;AACnC,EAAA,OAAO,qCAAqC,SAAS,CAAA;AACvD;AAEa,MAAA,gCAAA,GAAmC,CAC9C,MAAA,EACA,aACG,KAAA;AACH,EAAM,MAAA,oBAAA,GAAuB,aAAc,CAAA,sBAAA,CACxC,GAAI,CAAA,CAAA,GAAA,KAAO,IAAI,EAAE,CAAA,CACjB,MAAO,CAAA,CAAA,EAAA,KAAM,EAAE,CAAA;AAElB,EAAM,MAAA,gBAAA,GAAmB,MAAO,CAAA,sBAAA,CAC7B,GAAI,CAAA,CAAA,GAAA,KAAO,IAAI,EAAE,CAAA,CACjB,MAAO,CAAA,CAAA,EAAA,KAAM,EAAE,CAAA;AAElB,EAAA,OAAO,qBAAqB,MAAS,GAAA,CAAA,GACjC,qBAAqB,MAAO,CAAA,CAAC,KAAe,KAAU,KAAA;AACpD,IAAM,MAAA,eAAA,GAAkB,gBAAiB,CAAA,QAAA,CAAS,KAAK,CAAA;AACvD,IAAA,IAAI,iBAAwB,OAAA,GAAA;AAC5B,IAAA,OAAO,KAAQ,GAAA,CAAC,GAAG,GAAA,EAAK,KAAK,CAAI,GAAA,GAAA;AAAA,GAChC,EAAA,EAAE,CAAA,GACL,EAAC;AACP;AAEa,MAAA,oBAAA,GAAuB,CAAC,MAA2B,KAAA;AAC9D,EAAA,OACE,0BAA0B,MAAM,CAAA,CAAE,MAClC,GAAA,oCAAA,CAAqC,MAAM,CAAE,CAAA,MAAA;AAEjD;AAMa,MAAA,cAAA,GAAiB,CAAC,UAAgC,KAAA;AAC7D,EAAI,IAAA,CAAC,YAAmB,OAAA,CAAA;AACxB,EAAA,IAAI,WAAc,GAAA,CAAA;AAElB,EAAA,IAAI,WAAW,KAAO,EAAA;AACpB,IAAA,WAAA,IAAe,UAAW,CAAA,KAAA,CAAM,MAAO,CAAA,CAAC,KAAK,SAAc,KAAA;AACzD,MAAO,OAAA,GAAA,GAAM,eAAe,SAA2B,CAAA;AAAA,OACtD,CAAC,CAAA;AAAA;AAGN,EAAA,IAAI,WAAW,KAAO,EAAA;AACpB,IAAA,WAAA,IAAe,UAAW,CAAA,KAAA,CAAM,MAAO,CAAA,CAAC,KAAK,SAAc,KAAA;AACzD,MAAO,OAAA,GAAA,GAAM,eAAe,SAA2B,CAAA;AAAA,OACtD,CAAC,CAAA;AAAA;AAGN,EAAA,IAAI,WAAW,GAAK,EAAA;AAClB,IAAe,WAAA,IAAA,cAAA,CAAe,WAAW,GAAqB,CAAA;AAAA;AAGhE,EAAI,IAAA,UAAA,CAAW,aAAa,MAAO,CAAA,IAAA,CAAK,UAAU,CAAE,CAAA,QAAA,CAAS,MAAM,CAAG,EAAA;AACpE,IAAe,WAAA,IAAA,CAAA;AAAA;AAGjB,EAAO,OAAA,WAAA;AACT;;;;"}

package/dist/utils/rbac-utils.esm.js

@@ -64,24 +64,33 @@ const getMembersFromGroup = (group) => {
   }, 0);
   return membersList ?? 0;
 };
-const getPluginInfo = (permissions, permissionName) => permissions.reduce(
+const getPluginInfo = (permissions, policy) => permissions.reduce(
   (acc, p) => {
-    const policy = p.policies.find((pol) => {
-      if (pol.name === permissionName) {
-        return true;
+    const policyData = p.policies.find((pol) => {
+      if (pol.policy === policy.policy) {
+        if (isResourcedPolicy(pol)) {
+          if (pol.resourceType === policy.permission) {
+            return true;
+          }
+        }
+        if (pol.name === policy.permission) {
+          return true;
+        }
       }
       return false;
     });
-    if (policy) {
+    if (policyData) {
       return {
         pluginId: p.pluginId || "-",
-        isResourced: isResourcedPolicy(policy) || false,
-        resourceType: isResourcedPolicy(policy) ? policy.resourceType : ""
+        permissionName: policyData.name || "-",
+        isResourced: isResourcedPolicy(policyData) || false,
+        resourceType: isResourcedPolicy(policyData) ? policyData.resourceType : "",
+        usingResourceType: isResourcedPolicy(policyData) && policyData.resourceType === policy.permission
       };
     }
     return acc;
   },
-  { pluginId: "-", isResourced: false }
+  { pluginId: "-", isResourced: false, permissionName: "-" }
 );
 const getPolicy = (str) => {
   const arr = str.split(".");
@@ -108,35 +117,27 @@ const getPermissionsData = (policies, permissionPolicies) => {
       if (policy?.effect === "allow") {
         const policyStr = policy?.policy ?? getPolicy(policy.permission);
         const policyTitleCase = getTitleCase(policyStr);
-        const permission = acc.find(
-          (plugin) => plugin.permission === policy.permission && !plugin.policies.has({
-            policy: policyTitleCase || "Use",
-            effect: "allow"
-          })
-        );
-        if (permission) {
-          permission.policyString?.add(
-            policyTitleCase ? `, ${policyTitleCase}` : ", Use"
-          );
-          permission.policies.add({
+        const policyString = /* @__PURE__ */ new Set();
+        const policiesSet = /* @__PURE__ */ new Set();
+        const {
+          pluginId,
+          isResourced,
+          resourceType,
+          permissionName,
+          usingResourceType
+        } = getPluginInfo(permissionPolicies, policy);
+        acc.push({
+          permission: permissionName,
+          plugin: pluginId,
+          policyString: policyString.add(policyTitleCase || "Use"),
+          policies: policiesSet.add({
             policy: policyTitleCase || "Use",
             effect: policy.effect
-          });
-        } else {
-          const policyString = /* @__PURE__ */ new Set();
-          const policiesSet = /* @__PURE__ */ new Set();
-          acc.push({
-            permission: policy.permission ?? "-",
-            plugin: getPluginInfo(permissionPolicies, policy?.permission).pluginId,
-            policyString: policyString.add(policyTitleCase || "Use"),
-            policies: policiesSet.add({
-              policy: policyTitleCase || "Use",
-              effect: policy.effect
-            }),
-            isResourced: getPluginInfo(permissionPolicies, policy?.permission).isResourced,
-            resourceType: getPluginInfo(permissionPolicies, policy?.permission).resourceType
-          });
-        }
+          }),
+          isResourced,
+          resourceType,
+          usingResourceType
+        });
       }
       return acc;
     },

package/dist/utils/rbac-utils.esm.js.map

@@ -1 +1 @@
-{"version":3,"file":"rbac-utils.esm.js","sources":["../../src/utils/rbac-utils.ts"],"sourcesContent":["/*\n * Copyright 2024 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport {\n  GroupEntity,\n  isUserEntity,\n  parseEntityRef,\n  stringifyEntityRef,\n} from '@backstage/catalog-model';\nimport {\n  AllOfCriteria,\n  AnyOfCriteria,\n  NotCriteria,\n  PermissionCondition,\n  PermissionCriteria,\n} from '@backstage/plugin-permission-common';\n\nimport { getTitleCase } from '@janus-idp/shared-react';\n\nimport {\n  isResourcedPolicy,\n  PermissionAction,\n  PluginPermissionMetaData,\n  PolicyDetails,\n  RoleBasedPolicy,\n  RoleConditionalPolicyDecision,\n} from '@backstage-community/plugin-rbac-common';\n\nimport { criterias } from '../components/ConditionalAccess/const';\nimport { ConditionsData } from '../components/ConditionalAccess/types';\nimport {\n  PluginsPermissionPoliciesData,\n  RowPolicy,\n  SelectedMember,\n} from '../components/CreateRole/types';\nimport {\n  MemberEntity,\n  MembersData,\n  PermissionsData,\n  PermissionsDataSet,\n} from '../types';\nimport { getMembersCount } from './create-role-utils';\n\nexport const getPermissionsArray = (\n  role: string,\n  policies: RoleBasedPolicy[],\n): RoleBasedPolicy[] => {\n  if (!policies || policies?.length === 0 || !Array.isArray(policies)) {\n    return [];\n  }\n  return policies.filter(\n    (policy: RoleBasedPolicy) =>\n      policy.entityReference === role && policy.effect !== 'deny',\n  );\n};\n\nexport const getPermissions = (\n  role: string,\n  policies: RoleBasedPolicy[],\n): number => {\n  return getPermissionsArray(role, policies).length;\n};\n\nexport const getMembersString = (res: {\n  users: number;\n  groups: number;\n}): string => {\n  let membersString = '';\n  if (res.groups > 0) {\n    membersString = `${res.groups} ${res.groups > 1 ? 'groups' : 'group'}`;\n  }\n  if (res.users > 0) {\n    membersString = membersString.concat(\n      membersString.length > 0 ? ', ' : '',\n      `${res.users} ${res.users > 1 ? 'users' : 'user'}`,\n    );\n  }\n  return membersString;\n};\n\nexport const getMembers = (\n  members: (string | MembersData | SelectedMember)[],\n): string => {\n  if (!members || members.length === 0) {\n    return 'No members';\n  }\n\n  const res = members.reduce(\n    (acc, member) => {\n      if (typeof member === 'object') {\n        if (member.type === 'User' || member.type === 'user') {\n          acc.users++;\n        } else {\n          acc.groups++;\n        }\n      } else {\n        const entity = parseEntityRef(member) as any;\n        if (isUserEntity(entity)) {\n          acc.users++;\n        } else {\n          acc.groups++;\n        }\n      }\n      return acc;\n    },\n    { users: 0, groups: 0 },\n  );\n\n  return getMembersString(res);\n};\n\nexport const getMembersFromGroup = (group: GroupEntity): number => {\n  const membersList = group.relations?.reduce((acc, relation) => {\n    let temp = acc;\n    if (relation.type === 'hasMember') {\n      temp++;\n    }\n    return temp;\n  }, 0);\n  return membersList ?? 0;\n};\n\nexport const getPluginInfo = (\n  permissions: PluginPermissionMetaData[],\n  permissionName?: string,\n): { pluginId: string; isResourced: boolean; resourceType?: string } =>\n  permissions.reduce(\n    (\n      acc: { pluginId: string; isResourced: boolean; resourceType?: string },\n      p: PluginPermissionMetaData,\n    ) => {\n      const policy = p.policies.find(pol => {\n        if (pol.name === permissionName) {\n          return true;\n        }\n        return false;\n      });\n      if (policy) {\n        return {\n          pluginId: p.pluginId || '-',\n          isResourced: isResourcedPolicy(policy) || false,\n          resourceType: isResourcedPolicy(policy) ? policy.resourceType : '',\n        };\n      }\n      return acc;\n    },\n    { pluginId: '-', isResourced: false },\n  );\n\nconst getPolicy = (str: string) => {\n  const arr = str.split('.');\n  return arr[arr.length - 1];\n};\n\nconst getAllPolicies = (\n  permission: string,\n  allowedPolicies: RowPolicy[],\n  policies: PolicyDetails[],\n) => {\n  const deniedPolicies = policies?.reduce((acc, p) => {\n    const perm = p.name;\n    if (\n      permission === perm &&\n      !allowedPolicies.find(\n        allowedPolicy =>\n          allowedPolicy.policy.toLocaleLowerCase('en-US') ===\n          p.policy?.toLocaleLowerCase('en-US'),\n      )\n    ) {\n      acc.push({\n        policy: getTitleCase(p.policy) || 'Use',\n        effect: 'deny',\n      });\n    }\n    return acc;\n  }, [] as RowPolicy[]);\n  return [...(allowedPolicies || []), ...(deniedPolicies || [])];\n};\n\nexport const getPermissionsData = (\n  policies: RoleBasedPolicy[],\n  permissionPolicies: PluginPermissionMetaData[],\n): PermissionsData[] => {\n  const data = policies.reduce(\n    (acc: PermissionsDataSet[], policy: RoleBasedPolicy) => {\n      if (policy?.effect === 'allow') {\n        const policyStr =\n          policy?.policy ?? getPolicy(policy.permission as string);\n        const policyTitleCase = getTitleCase(policyStr);\n        const permission = acc.find(\n          plugin =>\n            plugin.permission === policy.permission &&\n            !plugin.policies.has({\n              policy: policyTitleCase || 'Use',\n              effect: 'allow',\n            }),\n        );\n        if (permission) {\n          permission.policyString?.add(\n            policyTitleCase ? `, ${policyTitleCase}` : ', Use',\n          );\n          permission.policies.add({\n            policy: policyTitleCase || 'Use',\n            effect: policy.effect,\n          });\n        } else {\n          const policyString = new Set<string>();\n          const policiesSet = new Set<{ policy: string; effect: string }>();\n          acc.push({\n            permission: policy.permission ?? '-',\n            plugin: getPluginInfo(permissionPolicies, policy?.permission)\n              .pluginId,\n            policyString: policyString.add(policyTitleCase || 'Use'),\n            policies: policiesSet.add({\n              policy: policyTitleCase || 'Use',\n              effect: policy.effect,\n            }),\n            isResourced: getPluginInfo(permissionPolicies, policy?.permission)\n              .isResourced,\n            resourceType: getPluginInfo(permissionPolicies, policy?.permission)\n              .resourceType,\n          });\n        }\n      }\n      return acc;\n    },\n    [],\n  );\n  return data.map((p: PermissionsDataSet) => ({\n    ...p,\n    ...(p.policyString ? { policyString: Array.from(p.policyString) } : {}),\n    policies: getAllPolicies(\n      p.permission,\n      Array.from(p.policies),\n      permissionPolicies.find(pp => pp.pluginId === p.plugin)\n        ?.policies as PolicyDetails[],\n    ),\n  })) as PermissionsData[];\n};\n\nexport const getConditionUpperCriteria = (\n  conditions: PermissionCriteria<PermissionCondition> | string,\n): string | undefined => {\n  return Object.keys(conditions).find(key =>\n    [criterias.allOf, criterias.anyOf, criterias.not].includes(\n      key as keyof ConditionsData,\n    ),\n  );\n};\n\nexport const getConditionsData = (\n  conditions: PermissionCriteria<PermissionCondition>,\n): ConditionsData | undefined => {\n  const upperCriteria =\n    getConditionUpperCriteria(conditions) ?? criterias.condition;\n\n  switch (upperCriteria) {\n    case criterias.allOf: {\n      const allOfConditions = (conditions as AllOfCriteria<PermissionCondition>)\n        .allOf;\n      allOfConditions.map(aoc => {\n        if (getConditionUpperCriteria(aoc)) {\n          return getConditionsData(aoc);\n        }\n        return aoc;\n      });\n      return { allOf: allOfConditions as PermissionCondition[] };\n    }\n    case criterias.anyOf: {\n      const anyOfConditions = (conditions as AnyOfCriteria<PermissionCondition>)\n        .anyOf;\n      anyOfConditions.map(aoc => {\n        if (getConditionUpperCriteria(aoc)) {\n          return getConditionsData(aoc);\n        }\n        return aoc;\n      });\n      return { anyOf: anyOfConditions as PermissionCondition[] };\n    }\n    case criterias.not: {\n      const notCondition = (conditions as NotCriteria<PermissionCondition>).not;\n      const nestedCondition = getConditionUpperCriteria(notCondition)\n        ? getConditionsData(notCondition)\n        : notCondition;\n      return { not: nestedCondition as PermissionCondition };\n    }\n    default:\n      return { condition: conditions as PermissionCondition };\n  }\n};\n\nexport const getPoliciesData = (\n  allowedPermissions: string[],\n  policies: string[],\n): RowPolicy[] => {\n  return policies.map(p => ({\n    policy: p,\n    ...(allowedPermissions.includes(p.toLocaleLowerCase('en-US'))\n      ? { effect: 'allow' }\n      : { effect: 'deny' }),\n  }));\n};\n\nexport const getConditionalPermissionsData = (\n  conditionalPermissions: RoleConditionalPolicyDecision<PermissionAction>[],\n  permissionPolicies: PluginsPermissionPoliciesData,\n  allPermissionPolicies: PluginPermissionMetaData[],\n): PermissionsData[] => {\n  return conditionalPermissions.reduce((acc: any, cp) => {\n    const conditions = getConditionsData(cp.conditions);\n    const allowedPermissions = cp.permissionMapping.map(action =>\n      action.toLocaleLowerCase('en-US'),\n    );\n\n    const perm = allPermissionPolicies\n      .map(app => {\n        if (app.pluginId === cp.pluginId) {\n          return (\n            app.policies.find(\n              po =>\n                isResourcedPolicy(po) &&\n                po.resourceType === cp.resourceType &&\n                po.policy === cp.permissionMapping[0],\n            )?.name ?? ''\n          );\n        }\n        return '';\n      })\n      .filter(v => !!v);\n\n    const allPolicies = (pm: string) =>\n      permissionPolicies.pluginsPermissions?.[cp.pluginId]?.policies?.[pm]\n        ?.policies ?? [];\n    const policyString = allowedPermissions\n      .map(p => p[0].toLocaleUpperCase('en-US') + p.slice(1))\n      .join(', ');\n\n    return [\n      ...acc,\n      ...(conditions\n        ? [\n            {\n              plugin: cp.pluginId,\n              permission: perm[0],\n              resourceType: cp.resourceType,\n              isResourced: true,\n              policies: getPoliciesData(\n                allowedPermissions,\n                allPolicies(perm[0]),\n              ),\n              policyString,\n              conditions,\n              id: cp.id,\n            },\n          ]\n        : []),\n    ];\n  }, []);\n};\n\nexport const getSelectedMember = (\n  memberResource: MemberEntity | undefined,\n  ref: string,\n): SelectedMember => {\n  if (memberResource) {\n    return {\n      id: memberResource.metadata.etag as string,\n      ref: stringifyEntityRef(memberResource),\n      label:\n        memberResource.spec.profile?.displayName ??\n        memberResource.metadata.name,\n      etag: memberResource.metadata.etag as string,\n      type: memberResource.kind,\n      namespace: memberResource.metadata.namespace as string,\n      members: getMembersCount(memberResource),\n    };\n  } else if (ref) {\n    const { kind, namespace, name } = parseEntityRef(ref);\n    return {\n      id: `${kind}-${namespace}-${name}`,\n      ref,\n      label: name,\n      etag: `${kind}-${namespace}-${name}`,\n      type: kind,\n      namespace: namespace,\n      members: kind === 'group' ? 0 : undefined,\n    };\n  }\n  return {} as SelectedMember;\n};\n\nexport const isSamePermissionPolicy = (\n  a: RoleBasedPolicy,\n  b: RoleBasedPolicy,\n) =>\n  a.entityReference === b.entityReference &&\n  a.permission === b.permission &&\n  a.policy === b.policy &&\n  a.effect === b.effect;\n\nexport const onlyInLeft = (\n  left: RoleBasedPolicy[],\n  right: RoleBasedPolicy[],\n  compareFunction: (a: RoleBasedPolicy, b: RoleBasedPolicy) => boolean,\n) =>\n  left.filter(\n    leftValue =>\n      !right.some(rightValue => compareFunction(leftValue, rightValue)),\n  );\n"],"names":[],"mappings":";;;;;;AAuDa,MAAA,mBAAA,GAAsB,CACjC,IAAA,EACA,QACsB,KAAA;AACtB,EAAI,IAAA,CAAC,YAAY,QAAU,EAAA,MAAA,KAAW,KAAK,CAAC,KAAA,CAAM,OAAQ,CAAA,QAAQ,CAAG,EAAA;AACnE,IAAA,OAAO,EAAC;AAAA;AAEV,EAAA,OAAO,QAAS,CAAA,MAAA;AAAA,IACd,CAAC,MACC,KAAA,MAAA,CAAO,eAAoB,KAAA,IAAA,IAAQ,OAAO,MAAW,KAAA;AAAA,GACzD;AACF;AAEa,MAAA,cAAA,GAAiB,CAC5B,IAAA,EACA,QACW,KAAA;AACX,EAAO,OAAA,mBAAA,CAAoB,IAAM,EAAA,QAAQ,CAAE,CAAA,MAAA;AAC7C;AAEa,MAAA,gBAAA,GAAmB,CAAC,GAGnB,KAAA;AACZ,EAAA,IAAI,aAAgB,GAAA,EAAA;AACpB,EAAI,IAAA,GAAA,CAAI,SAAS,CAAG,EAAA;AAClB,IAAgB,aAAA,GAAA,CAAA,EAAG,IAAI,MAAM,CAAA,CAAA,EAAI,IAAI,MAAS,GAAA,CAAA,GAAI,WAAW,OAAO,CAAA,CAAA;AAAA;AAEtE,EAAI,IAAA,GAAA,CAAI,QAAQ,CAAG,EAAA;AACjB,IAAA,aAAA,GAAgB,aAAc,CAAA,MAAA;AAAA,MAC5B,aAAA,CAAc,MAAS,GAAA,CAAA,GAAI,IAAO,GAAA,EAAA;AAAA,MAClC,CAAA,EAAG,IAAI,KAAK,CAAA,CAAA,EAAI,IAAI,KAAQ,GAAA,CAAA,GAAI,UAAU,MAAM,CAAA;AAAA,KAClD;AAAA;AAEF,EAAO,OAAA,aAAA;AACT;AAEa,MAAA,UAAA,GAAa,CACxB,OACW,KAAA;AACX,EAAA,IAAI,CAAC,OAAA,IAAW,OAAQ,CAAA,MAAA,KAAW,CAAG,EAAA;AACpC,IAAO,OAAA,YAAA;AAAA;AAGT,EAAA,MAAM,MAAM,OAAQ,CAAA,MAAA;AAAA,IAClB,CAAC,KAAK,MAAW,KAAA;AACf,MAAI,IAAA,OAAO,WAAW,QAAU,EAAA;AAC9B,QAAA,IAAI,MAAO,CAAA,IAAA,KAAS,MAAU,IAAA,MAAA,CAAO,SAAS,MAAQ,EAAA;AACpD,UAAI,GAAA,CAAA,KAAA,EAAA;AAAA,SACC,MAAA;AACL,UAAI,GAAA,CAAA,MAAA,EAAA;AAAA;AACN,OACK,MAAA;AACL,QAAM,MAAA,MAAA,GAAS,eAAe,MAAM,CAAA;AACpC,QAAI,IAAA,YAAA,CAAa,MAAM,CAAG,EAAA;AACxB,UAAI,GAAA,CAAA,KAAA,EAAA;AAAA,SACC,MAAA;AACL,UAAI,GAAA,CAAA,MAAA,EAAA;AAAA;AACN;AAEF,MAAO,OAAA,GAAA;AAAA,KACT;AAAA,IACA,EAAE,KAAA,EAAO,CAAG,EAAA,MAAA,EAAQ,CAAE;AAAA,GACxB;AAEA,EAAA,OAAO,iBAAiB,GAAG,CAAA;AAC7B;AAEa,MAAA,mBAAA,GAAsB,CAAC,KAA+B,KAAA;AACjE,EAAA,MAAM,cAAc,KAAM,CAAA,SAAA,EAAW,MAAO,CAAA,CAAC,KAAK,QAAa,KAAA;AAC7D,IAAA,IAAI,IAAO,GAAA,GAAA;AACX,IAAI,IAAA,QAAA,CAAS,SAAS,WAAa,EAAA;AACjC,MAAA,IAAA,EAAA;AAAA;AAEF,IAAO,OAAA,IAAA;AAAA,KACN,CAAC,CAAA;AACJ,EAAA,OAAO,WAAe,IAAA,CAAA;AACxB;AAEO,MAAM,aAAgB,GAAA,CAC3B,WACA,EAAA,cAAA,KAEA,WAAY,CAAA,MAAA;AAAA,EACV,CACE,KACA,CACG,KAAA;AACH,IAAA,MAAM,MAAS,GAAA,CAAA,CAAE,QAAS,CAAA,IAAA,CAAK,CAAO,GAAA,KAAA;AACpC,MAAI,IAAA,GAAA,CAAI,SAAS,cAAgB,EAAA;AAC/B,QAAO,OAAA,IAAA;AAAA;AAET,MAAO,OAAA,KAAA;AAAA,KACR,CAAA;AACD,IAAA,IAAI,MAAQ,EAAA;AACV,MAAO,OAAA;AAAA,QACL,QAAA,EAAU,EAAE,QAAY,IAAA,GAAA;AAAA,QACxB,WAAA,EAAa,iBAAkB,CAAA,MAAM,CAAK,IAAA,KAAA;AAAA,QAC1C,YAAc,EAAA,iBAAA,CAAkB,MAAM,CAAA,GAAI,OAAO,YAAe,GAAA;AAAA,OAClE;AAAA;AAEF,IAAO,OAAA,GAAA;AAAA,GACT;AAAA,EACA,EAAE,QAAA,EAAU,GAAK,EAAA,WAAA,EAAa,KAAM;AACtC;AAEF,MAAM,SAAA,GAAY,CAAC,GAAgB,KAAA;AACjC,EAAM,MAAA,GAAA,GAAM,GAAI,CAAA,KAAA,CAAM,GAAG,CAAA;AACzB,EAAO,OAAA,GAAA,CAAI,GAAI,CAAA,MAAA,GAAS,CAAC,CAAA;AAC3B,CAAA;AAEA,MAAM,cAAiB,GAAA,CACrB,UACA,EAAA,eAAA,EACA,QACG,KAAA;AACH,EAAA,MAAM,cAAiB,GAAA,QAAA,EAAU,MAAO,CAAA,CAAC,KAAK,CAAM,KAAA;AAClD,IAAA,MAAM,OAAO,CAAE,CAAA,IAAA;AACf,IACE,IAAA,UAAA,KAAe,IACf,IAAA,CAAC,eAAgB,CAAA,IAAA;AAAA,MACf,CAAA,aAAA,KACE,cAAc,MAAO,CAAA,iBAAA,CAAkB,OAAO,CAC9C,KAAA,CAAA,CAAE,MAAQ,EAAA,iBAAA,CAAkB,OAAO;AAAA,KAEvC,EAAA;AACA,MAAA,GAAA,CAAI,IAAK,CAAA;AAAA,QACP,MAAQ,EAAA,YAAA,CAAa,CAAE,CAAA,MAAM,CAAK,IAAA,KAAA;AAAA,QAClC,MAAQ,EAAA;AAAA,OACT,CAAA;AAAA;AAEH,IAAO,OAAA,GAAA;AAAA,GACT,EAAG,EAAiB,CAAA;AACpB,EAAO,OAAA,CAAC,GAAI,eAAmB,IAAA,IAAK,GAAI,cAAA,IAAkB,EAAG,CAAA;AAC/D,CAAA;AAEa,MAAA,kBAAA,GAAqB,CAChC,QAAA,EACA,kBACsB,KAAA;AACtB,EAAA,MAAM,OAAO,QAAS,CAAA,MAAA;AAAA,IACpB,CAAC,KAA2B,MAA4B,KAAA;AACtD,MAAI,IAAA,MAAA,EAAQ,WAAW,OAAS,EAAA;AAC9B,QAAA,MAAM,SACJ,GAAA,MAAA,EAAQ,MAAU,IAAA,SAAA,CAAU,OAAO,UAAoB,CAAA;AACzD,QAAM,MAAA,eAAA,GAAkB,aAAa,SAAS,CAAA;AAC9C,QAAA,MAAM,aAAa,GAAI,CAAA,IAAA;AAAA,UACrB,CAAA,MAAA,KACE,OAAO,UAAe,KAAA,MAAA,CAAO,cAC7B,CAAC,MAAA,CAAO,SAAS,GAAI,CAAA;AAAA,YACnB,QAAQ,eAAmB,IAAA,KAAA;AAAA,YAC3B,MAAQ,EAAA;AAAA,WACT;AAAA,SACL;AACA,QAAA,IAAI,UAAY,EAAA;AACd,UAAA,UAAA,CAAW,YAAc,EAAA,GAAA;AAAA,YACvB,eAAA,GAAkB,CAAK,EAAA,EAAA,eAAe,CAAK,CAAA,GAAA;AAAA,WAC7C;AACA,UAAA,UAAA,CAAW,SAAS,GAAI,CAAA;AAAA,YACtB,QAAQ,eAAmB,IAAA,KAAA;AAAA,YAC3B,QAAQ,MAAO,CAAA;AAAA,WAChB,CAAA;AAAA,SACI,MAAA;AACL,UAAM,MAAA,YAAA,uBAAmB,GAAY,EAAA;AACrC,UAAM,MAAA,WAAA,uBAAkB,GAAwC,EAAA;AAChE,UAAA,GAAA,CAAI,IAAK,CAAA;AAAA,YACP,UAAA,EAAY,OAAO,UAAc,IAAA,GAAA;AAAA,YACjC,MAAQ,EAAA,aAAA,CAAc,kBAAoB,EAAA,MAAA,EAAQ,UAAU,CACzD,CAAA,QAAA;AAAA,YACH,YAAc,EAAA,YAAA,CAAa,GAAI,CAAA,eAAA,IAAmB,KAAK,CAAA;AAAA,YACvD,QAAA,EAAU,YAAY,GAAI,CAAA;AAAA,cACxB,QAAQ,eAAmB,IAAA,KAAA;AAAA,cAC3B,QAAQ,MAAO,CAAA;AAAA,aAChB,CAAA;AAAA,YACD,WAAa,EAAA,aAAA,CAAc,kBAAoB,EAAA,MAAA,EAAQ,UAAU,CAC9D,CAAA,WAAA;AAAA,YACH,YAAc,EAAA,aAAA,CAAc,kBAAoB,EAAA,MAAA,EAAQ,UAAU,CAC/D,CAAA;AAAA,WACJ,CAAA;AAAA;AACH;AAEF,MAAO,OAAA,GAAA;AAAA,KACT;AAAA,IACA;AAAC,GACH;AACA,EAAO,OAAA,IAAA,CAAK,GAAI,CAAA,CAAC,CAA2B,MAAA;AAAA,IAC1C,GAAG,CAAA;AAAA,IACH,GAAI,CAAE,CAAA,YAAA,GAAe,EAAE,YAAA,EAAc,KAAM,CAAA,IAAA,CAAK,CAAE,CAAA,YAAY,CAAE,EAAA,GAAI,EAAC;AAAA,IACrE,QAAU,EAAA,cAAA;AAAA,MACR,CAAE,CAAA,UAAA;AAAA,MACF,KAAA,CAAM,IAAK,CAAA,CAAA,CAAE,QAAQ,CAAA;AAAA,MACrB,mBAAmB,IAAK,CAAA,CAAA,EAAA,KAAM,GAAG,QAAa,KAAA,CAAA,CAAE,MAAM,CAClD,EAAA;AAAA;AACN,GACA,CAAA,CAAA;AACJ;AAEa,MAAA,yBAAA,GAA4B,CACvC,UACuB,KAAA;AACvB,EAAO,OAAA,MAAA,CAAO,IAAK,CAAA,UAAU,CAAE,CAAA,IAAA;AAAA,IAAK,CAAA,GAAA,KAClC,CAAC,SAAU,CAAA,KAAA,EAAO,UAAU,KAAO,EAAA,SAAA,CAAU,GAAG,CAAE,CAAA,QAAA;AAAA,MAChD;AAAA;AACF,GACF;AACF;AAEa,MAAA,iBAAA,GAAoB,CAC/B,UAC+B,KAAA;AAC/B,EAAA,MAAM,aACJ,GAAA,yBAAA,CAA0B,UAAU,CAAA,IAAK,SAAU,CAAA,SAAA;AAErD,EAAA,QAAQ,aAAe;AAAA,IACrB,KAAK,UAAU,KAAO,EAAA;AACpB,MAAA,MAAM,kBAAmB,UACtB,CAAA,KAAA;AACH,MAAA,eAAA,CAAgB,IAAI,CAAO,GAAA,KAAA;AACzB,QAAI,IAAA,yBAAA,CAA0B,GAAG,CAAG,EAAA;AAClC,UAAA,OAAO,kBAAkB,GAAG,CAAA;AAAA;AAE9B,QAAO,OAAA,GAAA;AAAA,OACR,CAAA;AACD,MAAO,OAAA,EAAE,OAAO,eAAyC,EAAA;AAAA;AAC3D,IACA,KAAK,UAAU,KAAO,EAAA;AACpB,MAAA,MAAM,kBAAmB,UACtB,CAAA,KAAA;AACH,MAAA,eAAA,CAAgB,IAAI,CAAO,GAAA,KAAA;AACzB,QAAI,IAAA,yBAAA,CAA0B,GAAG,CAAG,EAAA;AAClC,UAAA,OAAO,kBAAkB,GAAG,CAAA;AAAA;AAE9B,QAAO,OAAA,GAAA;AAAA,OACR,CAAA;AACD,MAAO,OAAA,EAAE,OAAO,eAAyC,EAAA;AAAA;AAC3D,IACA,KAAK,UAAU,GAAK,EAAA;AAClB,MAAA,MAAM,eAAgB,UAAgD,CAAA,GAAA;AACtE,MAAA,MAAM,kBAAkB,yBAA0B,CAAA,YAAY,CAC1D,GAAA,iBAAA,CAAkB,YAAY,CAC9B,GAAA,YAAA;AACJ,MAAO,OAAA,EAAE,KAAK,eAAuC,EAAA;AAAA;AACvD,IACA;AACE,MAAO,OAAA,EAAE,WAAW,UAAkC,EAAA;AAAA;AAE5D;AAEa,MAAA,eAAA,GAAkB,CAC7B,kBAAA,EACA,QACgB,KAAA;AAChB,EAAO,OAAA,QAAA,CAAS,IAAI,CAAM,CAAA,MAAA;AAAA,IACxB,MAAQ,EAAA,CAAA;AAAA,IACR,GAAI,kBAAA,CAAmB,QAAS,CAAA,CAAA,CAAE,kBAAkB,OAAO,CAAC,CACxD,GAAA,EAAE,MAAQ,EAAA,OAAA,EACV,GAAA,EAAE,QAAQ,MAAO;AAAA,GACrB,CAAA,CAAA;AACJ;AAEO,MAAM,6BAAgC,GAAA,CAC3C,sBACA,EAAA,kBAAA,EACA,qBACsB,KAAA;AACtB,EAAA,OAAO,sBAAuB,CAAA,MAAA,CAAO,CAAC,GAAA,EAAU,EAAO,KAAA;AACrD,IAAM,MAAA,UAAA,GAAa,iBAAkB,CAAA,EAAA,CAAG,UAAU,CAAA;AAClD,IAAM,MAAA,kBAAA,GAAqB,GAAG,iBAAkB,CAAA,GAAA;AAAA,MAAI,CAAA,MAAA,KAClD,MAAO,CAAA,iBAAA,CAAkB,OAAO;AAAA,KAClC;AAEA,IAAM,MAAA,IAAA,GAAO,qBACV,CAAA,GAAA,CAAI,CAAO,GAAA,KAAA;AACV,MAAI,IAAA,GAAA,CAAI,QAAa,KAAA,EAAA,CAAG,QAAU,EAAA;AAChC,QAAA,OACE,IAAI,QAAS,CAAA,IAAA;AAAA,UACX,CACE,EAAA,KAAA,iBAAA,CAAkB,EAAE,CAAA,IACpB,EAAG,CAAA,YAAA,KAAiB,EAAG,CAAA,YAAA,IACvB,EAAG,CAAA,MAAA,KAAW,EAAG,CAAA,iBAAA,CAAkB,CAAC;AAAA,WACrC,IAAQ,IAAA,EAAA;AAAA;AAGf,MAAO,OAAA,EAAA;AAAA,KACR,CACA,CAAA,MAAA,CAAO,CAAK,CAAA,KAAA,CAAC,CAAC,CAAC,CAAA;AAElB,IAAA,MAAM,WAAc,GAAA,CAAC,EACnB,KAAA,kBAAA,CAAmB,kBAAqB,GAAA,EAAA,CAAG,QAAQ,CAAA,EAAG,QAAW,GAAA,EAAE,CAC/D,EAAA,QAAA,IAAY,EAAC;AACnB,IAAA,MAAM,eAAe,kBAClB,CAAA,GAAA,CAAI,CAAK,CAAA,KAAA,CAAA,CAAE,CAAC,CAAE,CAAA,iBAAA,CAAkB,OAAO,CAAA,GAAI,EAAE,KAAM,CAAA,CAAC,CAAC,CAAA,CACrD,KAAK,IAAI,CAAA;AAEZ,IAAO,OAAA;AAAA,MACL,GAAG,GAAA;AAAA,MACH,GAAI,UACA,GAAA;AAAA,QACE;AAAA,UACE,QAAQ,EAAG,CAAA,QAAA;AAAA,UACX,UAAA,EAAY,KAAK,CAAC,CAAA;AAAA,UAClB,cAAc,EAAG,CAAA,YAAA;AAAA,UACjB,WAAa,EAAA,IAAA;AAAA,UACb,QAAU,EAAA,eAAA;AAAA,YACR,kBAAA;AAAA,YACA,WAAA,CAAY,IAAK,CAAA,CAAC,CAAC;AAAA,WACrB;AAAA,UACA,YAAA;AAAA,UACA,UAAA;AAAA,UACA,IAAI,EAAG,CAAA;AAAA;AACT,UAEF;AAAC,KACP;AAAA,GACF,EAAG,EAAE,CAAA;AACP;AAEa,MAAA,iBAAA,GAAoB,CAC/B,cAAA,EACA,GACmB,KAAA;AACnB,EAAA,IAAI,cAAgB,EAAA;AAClB,IAAO,OAAA;AAAA,MACL,EAAA,EAAI,eAAe,QAAS,CAAA,IAAA;AAAA,MAC5B,GAAA,EAAK,mBAAmB,cAAc,CAAA;AAAA,MACtC,OACE,cAAe,CAAA,IAAA,CAAK,OAAS,EAAA,WAAA,IAC7B,eAAe,QAAS,CAAA,IAAA;AAAA,MAC1B,IAAA,EAAM,eAAe,QAAS,CAAA,IAAA;AAAA,MAC9B,MAAM,cAAe,CAAA,IAAA;AAAA,MACrB,SAAA,EAAW,eAAe,QAAS,CAAA,SAAA;AAAA,MACnC,OAAA,EAAS,gBAAgB,cAAc;AAAA,KACzC;AAAA,aACS,GAAK,EAAA;AACd,IAAA,MAAM,EAAE,IAAM,EAAA,SAAA,EAAW,IAAK,EAAA,GAAI,eAAe,GAAG,CAAA;AACpD,IAAO,OAAA;AAAA,MACL,IAAI,CAAG,EAAA,IAAI,CAAI,CAAA,EAAA,SAAS,IAAI,IAAI,CAAA,CAAA;AAAA,MAChC,GAAA;AAAA,MACA,KAAO,EAAA,IAAA;AAAA,MACP,MAAM,CAAG,EAAA,IAAI,CAAI,CAAA,EAAA,SAAS,IAAI,IAAI,CAAA,CAAA;AAAA,MAClC,IAAM,EAAA,IAAA;AAAA,MACN,SAAA;AAAA,MACA,OAAA,EAAS,IAAS,KAAA,OAAA,GAAU,CAAI,GAAA;AAAA,KAClC;AAAA;AAEF,EAAA,OAAO,EAAC;AACV;AAEO,MAAM,yBAAyB,CACpC,CAAA,EACA,MAEA,CAAE,CAAA,eAAA,KAAoB,EAAE,eACxB,IAAA,CAAA,CAAE,UAAe,KAAA,CAAA,CAAE,cACnB,CAAE,CAAA,MAAA,KAAW,EAAE,MACf,IAAA,CAAA,CAAE,WAAW,CAAE,CAAA;AAEV,MAAM,UAAa,GAAA,CACxB,IACA,EAAA,KAAA,EACA,oBAEA,IAAK,CAAA,MAAA;AAAA,EACH,CAAA,SAAA,KACE,CAAC,KAAM,CAAA,IAAA,CAAK,gBAAc,eAAgB,CAAA,SAAA,EAAW,UAAU,CAAC;AACpE;;;;"}
+{"version":3,"file":"rbac-utils.esm.js","sources":["../../src/utils/rbac-utils.ts"],"sourcesContent":["/*\n * Copyright 2024 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport {\n  GroupEntity,\n  isUserEntity,\n  parseEntityRef,\n  stringifyEntityRef,\n} from '@backstage/catalog-model';\nimport {\n  AllOfCriteria,\n  AnyOfCriteria,\n  NotCriteria,\n  PermissionCondition,\n  PermissionCriteria,\n} from '@backstage/plugin-permission-common';\n\nimport { getTitleCase } from '@janus-idp/shared-react';\n\nimport {\n  isResourcedPolicy,\n  PermissionAction,\n  PluginPermissionMetaData,\n  PolicyDetails,\n  RoleBasedPolicy,\n  RoleConditionalPolicyDecision,\n} from '@backstage-community/plugin-rbac-common';\n\nimport { criterias } from '../components/ConditionalAccess/const';\nimport { ConditionsData } from '../components/ConditionalAccess/types';\nimport {\n  PluginsPermissionPoliciesData,\n  RowPolicy,\n  SelectedMember,\n} from '../components/CreateRole/types';\nimport {\n  MemberEntity,\n  MembersData,\n  PermissionsData,\n  PermissionsDataSet,\n} from '../types';\nimport { getMembersCount } from './create-role-utils';\n\nexport const getPermissionsArray = (\n  role: string,\n  policies: RoleBasedPolicy[],\n): RoleBasedPolicy[] => {\n  if (!policies || policies?.length === 0 || !Array.isArray(policies)) {\n    return [];\n  }\n  return policies.filter(\n    (policy: RoleBasedPolicy) =>\n      policy.entityReference === role && policy.effect !== 'deny',\n  );\n};\n\nexport const getPermissions = (\n  role: string,\n  policies: RoleBasedPolicy[],\n): number => {\n  return getPermissionsArray(role, policies).length;\n};\n\nexport const getMembersString = (res: {\n  users: number;\n  groups: number;\n}): string => {\n  let membersString = '';\n  if (res.groups > 0) {\n    membersString = `${res.groups} ${res.groups > 1 ? 'groups' : 'group'}`;\n  }\n  if (res.users > 0) {\n    membersString = membersString.concat(\n      membersString.length > 0 ? ', ' : '',\n      `${res.users} ${res.users > 1 ? 'users' : 'user'}`,\n    );\n  }\n  return membersString;\n};\n\nexport const getMembers = (\n  members: (string | MembersData | SelectedMember)[],\n): string => {\n  if (!members || members.length === 0) {\n    return 'No members';\n  }\n\n  const res = members.reduce(\n    (acc, member) => {\n      if (typeof member === 'object') {\n        if (member.type === 'User' || member.type === 'user') {\n          acc.users++;\n        } else {\n          acc.groups++;\n        }\n      } else {\n        const entity = parseEntityRef(member) as any;\n        if (isUserEntity(entity)) {\n          acc.users++;\n        } else {\n          acc.groups++;\n        }\n      }\n      return acc;\n    },\n    { users: 0, groups: 0 },\n  );\n\n  return getMembersString(res);\n};\n\nexport const getMembersFromGroup = (group: GroupEntity): number => {\n  const membersList = group.relations?.reduce((acc, relation) => {\n    let temp = acc;\n    if (relation.type === 'hasMember') {\n      temp++;\n    }\n    return temp;\n  }, 0);\n  return membersList ?? 0;\n};\n\nexport const getPluginInfo = (\n  permissions: PluginPermissionMetaData[],\n  policy: RoleBasedPolicy,\n): {\n  pluginId: string;\n  isResourced: boolean;\n  resourceType?: string;\n  permissionName: string;\n  usingResourceType?: boolean;\n} =>\n  permissions.reduce(\n    (\n      acc: {\n        pluginId: string;\n        isResourced: boolean;\n        resourceType?: string;\n        permissionName: string;\n        usingResourceType?: boolean;\n      },\n      p: PluginPermissionMetaData,\n    ) => {\n      const policyData = p.policies.find(pol => {\n        if (pol.policy === policy.policy) {\n          if (isResourcedPolicy(pol)) {\n            if (pol.resourceType === policy.permission) {\n              return true;\n            }\n          }\n          if (pol.name === policy.permission) {\n            return true;\n          }\n        }\n        return false;\n      });\n      if (policyData) {\n        return {\n          pluginId: p.pluginId || '-',\n          permissionName: policyData.name || '-',\n          isResourced: isResourcedPolicy(policyData) || false,\n          resourceType: isResourcedPolicy(policyData)\n            ? policyData.resourceType\n            : '',\n          usingResourceType:\n            isResourcedPolicy(policyData) &&\n            policyData.resourceType === policy.permission,\n        };\n      }\n      return acc;\n    },\n    { pluginId: '-', isResourced: false, permissionName: '-' },\n  );\n\nconst getPolicy = (str: string) => {\n  const arr = str.split('.');\n  return arr[arr.length - 1];\n};\n\nconst getAllPolicies = (\n  permission: string,\n  allowedPolicies: RowPolicy[],\n  policies: PolicyDetails[],\n) => {\n  const deniedPolicies = policies?.reduce((acc, p) => {\n    const perm = p.name;\n    if (\n      permission === perm &&\n      !allowedPolicies.find(\n        allowedPolicy =>\n          allowedPolicy.policy.toLocaleLowerCase('en-US') ===\n          p.policy?.toLocaleLowerCase('en-US'),\n      )\n    ) {\n      acc.push({\n        policy: getTitleCase(p.policy) || 'Use',\n        effect: 'deny',\n      });\n    }\n    return acc;\n  }, [] as RowPolicy[]);\n  return [...(allowedPolicies || []), ...(deniedPolicies || [])];\n};\n\nexport const getPermissionsData = (\n  policies: RoleBasedPolicy[],\n  permissionPolicies: PluginPermissionMetaData[],\n): PermissionsData[] => {\n  const data = policies.reduce(\n    (acc: PermissionsDataSet[], policy: RoleBasedPolicy) => {\n      if (policy?.effect === 'allow') {\n        const policyStr =\n          policy?.policy ?? getPolicy(policy.permission as string);\n        const policyTitleCase = getTitleCase(policyStr);\n        const policyString = new Set<string>();\n        const policiesSet = new Set<{ policy: string; effect: string }>();\n        const {\n          pluginId,\n          isResourced,\n          resourceType,\n          permissionName,\n          usingResourceType,\n        } = getPluginInfo(permissionPolicies, policy);\n        acc.push({\n          permission: permissionName,\n          plugin: pluginId,\n          policyString: policyString.add(policyTitleCase || 'Use'),\n          policies: policiesSet.add({\n            policy: policyTitleCase || 'Use',\n            effect: policy.effect,\n          }),\n          isResourced,\n          resourceType,\n          usingResourceType,\n        });\n      }\n      return acc;\n    },\n    [],\n  );\n  return data.map((p: PermissionsDataSet) => ({\n    ...p,\n    ...(p.policyString ? { policyString: Array.from(p.policyString) } : {}),\n    policies: getAllPolicies(\n      p.permission,\n      Array.from(p.policies),\n      permissionPolicies.find(pp => pp.pluginId === p.plugin)\n        ?.policies as PolicyDetails[],\n    ),\n  })) as PermissionsData[];\n};\n\nexport const getConditionUpperCriteria = (\n  conditions: PermissionCriteria<PermissionCondition> | string,\n): string | undefined => {\n  return Object.keys(conditions).find(key =>\n    [criterias.allOf, criterias.anyOf, criterias.not].includes(\n      key as keyof ConditionsData,\n    ),\n  );\n};\n\nexport const getConditionsData = (\n  conditions: PermissionCriteria<PermissionCondition>,\n): ConditionsData | undefined => {\n  const upperCriteria =\n    getConditionUpperCriteria(conditions) ?? criterias.condition;\n\n  switch (upperCriteria) {\n    case criterias.allOf: {\n      const allOfConditions = (conditions as AllOfCriteria<PermissionCondition>)\n        .allOf;\n      allOfConditions.map(aoc => {\n        if (getConditionUpperCriteria(aoc)) {\n          return getConditionsData(aoc);\n        }\n        return aoc;\n      });\n      return { allOf: allOfConditions as PermissionCondition[] };\n    }\n    case criterias.anyOf: {\n      const anyOfConditions = (conditions as AnyOfCriteria<PermissionCondition>)\n        .anyOf;\n      anyOfConditions.map(aoc => {\n        if (getConditionUpperCriteria(aoc)) {\n          return getConditionsData(aoc);\n        }\n        return aoc;\n      });\n      return { anyOf: anyOfConditions as PermissionCondition[] };\n    }\n    case criterias.not: {\n      const notCondition = (conditions as NotCriteria<PermissionCondition>).not;\n      const nestedCondition = getConditionUpperCriteria(notCondition)\n        ? getConditionsData(notCondition)\n        : notCondition;\n      return { not: nestedCondition as PermissionCondition };\n    }\n    default:\n      return { condition: conditions as PermissionCondition };\n  }\n};\n\nexport const getPoliciesData = (\n  allowedPermissions: string[],\n  policies: string[],\n): RowPolicy[] => {\n  return policies.map(p => ({\n    policy: p,\n    ...(allowedPermissions.includes(p.toLocaleLowerCase('en-US'))\n      ? { effect: 'allow' }\n      : { effect: 'deny' }),\n  }));\n};\n\nexport const getConditionalPermissionsData = (\n  conditionalPermissions: RoleConditionalPolicyDecision<PermissionAction>[],\n  permissionPolicies: PluginsPermissionPoliciesData,\n  allPermissionPolicies: PluginPermissionMetaData[],\n): PermissionsData[] => {\n  return conditionalPermissions.reduce((acc: any, cp) => {\n    const conditions = getConditionsData(cp.conditions);\n    const allowedPermissions = cp.permissionMapping.map(action =>\n      action.toLocaleLowerCase('en-US'),\n    );\n\n    const perm = allPermissionPolicies\n      .map(app => {\n        if (app.pluginId === cp.pluginId) {\n          return (\n            app.policies.find(\n              po =>\n                isResourcedPolicy(po) &&\n                po.resourceType === cp.resourceType &&\n                po.policy === cp.permissionMapping[0],\n            )?.name ?? ''\n          );\n        }\n        return '';\n      })\n      .filter(v => !!v);\n\n    const allPolicies = (pm: string) =>\n      permissionPolicies.pluginsPermissions?.[cp.pluginId]?.policies?.[pm]\n        ?.policies ?? [];\n    const policyString = allowedPermissions\n      .map(p => p[0].toLocaleUpperCase('en-US') + p.slice(1))\n      .join(', ');\n\n    return [\n      ...acc,\n      ...(conditions\n        ? [\n            {\n              plugin: cp.pluginId,\n              permission: perm[0],\n              resourceType: cp.resourceType,\n              isResourced: true,\n              policies: getPoliciesData(\n                allowedPermissions,\n                allPolicies(perm[0]),\n              ),\n              policyString,\n              conditions,\n              id: cp.id,\n            },\n          ]\n        : []),\n    ];\n  }, []);\n};\n\nexport const getSelectedMember = (\n  memberResource: MemberEntity | undefined,\n  ref: string,\n): SelectedMember => {\n  if (memberResource) {\n    return {\n      id: memberResource.metadata.etag as string,\n      ref: stringifyEntityRef(memberResource),\n      label:\n        memberResource.spec.profile?.displayName ??\n        memberResource.metadata.name,\n      etag: memberResource.metadata.etag as string,\n      type: memberResource.kind,\n      namespace: memberResource.metadata.namespace as string,\n      members: getMembersCount(memberResource),\n    };\n  } else if (ref) {\n    const { kind, namespace, name } = parseEntityRef(ref);\n    return {\n      id: `${kind}-${namespace}-${name}`,\n      ref,\n      label: name,\n      etag: `${kind}-${namespace}-${name}`,\n      type: kind,\n      namespace: namespace,\n      members: kind === 'group' ? 0 : undefined,\n    };\n  }\n  return {} as SelectedMember;\n};\n\nexport const isSamePermissionPolicy = (\n  a: RoleBasedPolicy,\n  b: RoleBasedPolicy,\n) =>\n  a.entityReference === b.entityReference &&\n  a.permission === b.permission &&\n  a.policy === b.policy &&\n  a.effect === b.effect;\n\nexport const onlyInLeft = (\n  left: RoleBasedPolicy[],\n  right: RoleBasedPolicy[],\n  compareFunction: (a: RoleBasedPolicy, b: RoleBasedPolicy) => boolean,\n) =>\n  left.filter(\n    leftValue =>\n      !right.some(rightValue => compareFunction(leftValue, rightValue)),\n  );\n"],"names":[],"mappings":";;;;;;AAuDa,MAAA,mBAAA,GAAsB,CACjC,IAAA,EACA,QACsB,KAAA;AACtB,EAAI,IAAA,CAAC,YAAY,QAAU,EAAA,MAAA,KAAW,KAAK,CAAC,KAAA,CAAM,OAAQ,CAAA,QAAQ,CAAG,EAAA;AACnE,IAAA,OAAO,EAAC;AAAA;AAEV,EAAA,OAAO,QAAS,CAAA,MAAA;AAAA,IACd,CAAC,MACC,KAAA,MAAA,CAAO,eAAoB,KAAA,IAAA,IAAQ,OAAO,MAAW,KAAA;AAAA,GACzD;AACF;AAEa,MAAA,cAAA,GAAiB,CAC5B,IAAA,EACA,QACW,KAAA;AACX,EAAO,OAAA,mBAAA,CAAoB,IAAM,EAAA,QAAQ,CAAE,CAAA,MAAA;AAC7C;AAEa,MAAA,gBAAA,GAAmB,CAAC,GAGnB,KAAA;AACZ,EAAA,IAAI,aAAgB,GAAA,EAAA;AACpB,EAAI,IAAA,GAAA,CAAI,SAAS,CAAG,EAAA;AAClB,IAAgB,aAAA,GAAA,CAAA,EAAG,IAAI,MAAM,CAAA,CAAA,EAAI,IAAI,MAAS,GAAA,CAAA,GAAI,WAAW,OAAO,CAAA,CAAA;AAAA;AAEtE,EAAI,IAAA,GAAA,CAAI,QAAQ,CAAG,EAAA;AACjB,IAAA,aAAA,GAAgB,aAAc,CAAA,MAAA;AAAA,MAC5B,aAAA,CAAc,MAAS,GAAA,CAAA,GAAI,IAAO,GAAA,EAAA;AAAA,MAClC,CAAA,EAAG,IAAI,KAAK,CAAA,CAAA,EAAI,IAAI,KAAQ,GAAA,CAAA,GAAI,UAAU,MAAM,CAAA;AAAA,KAClD;AAAA;AAEF,EAAO,OAAA,aAAA;AACT;AAEa,MAAA,UAAA,GAAa,CACxB,OACW,KAAA;AACX,EAAA,IAAI,CAAC,OAAA,IAAW,OAAQ,CAAA,MAAA,KAAW,CAAG,EAAA;AACpC,IAAO,OAAA,YAAA;AAAA;AAGT,EAAA,MAAM,MAAM,OAAQ,CAAA,MAAA;AAAA,IAClB,CAAC,KAAK,MAAW,KAAA;AACf,MAAI,IAAA,OAAO,WAAW,QAAU,EAAA;AAC9B,QAAA,IAAI,MAAO,CAAA,IAAA,KAAS,MAAU,IAAA,MAAA,CAAO,SAAS,MAAQ,EAAA;AACpD,UAAI,GAAA,CAAA,KAAA,EAAA;AAAA,SACC,MAAA;AACL,UAAI,GAAA,CAAA,MAAA,EAAA;AAAA;AACN,OACK,MAAA;AACL,QAAM,MAAA,MAAA,GAAS,eAAe,MAAM,CAAA;AACpC,QAAI,IAAA,YAAA,CAAa,MAAM,CAAG,EAAA;AACxB,UAAI,GAAA,CAAA,KAAA,EAAA;AAAA,SACC,MAAA;AACL,UAAI,GAAA,CAAA,MAAA,EAAA;AAAA;AACN;AAEF,MAAO,OAAA,GAAA;AAAA,KACT;AAAA,IACA,EAAE,KAAA,EAAO,CAAG,EAAA,MAAA,EAAQ,CAAE;AAAA,GACxB;AAEA,EAAA,OAAO,iBAAiB,GAAG,CAAA;AAC7B;AAEa,MAAA,mBAAA,GAAsB,CAAC,KAA+B,KAAA;AACjE,EAAA,MAAM,cAAc,KAAM,CAAA,SAAA,EAAW,MAAO,CAAA,CAAC,KAAK,QAAa,KAAA;AAC7D,IAAA,IAAI,IAAO,GAAA,GAAA;AACX,IAAI,IAAA,QAAA,CAAS,SAAS,WAAa,EAAA;AACjC,MAAA,IAAA,EAAA;AAAA;AAEF,IAAO,OAAA,IAAA;AAAA,KACN,CAAC,CAAA;AACJ,EAAA,OAAO,WAAe,IAAA,CAAA;AACxB;AAEO,MAAM,aAAgB,GAAA,CAC3B,WACA,EAAA,MAAA,KAQA,WAAY,CAAA,MAAA;AAAA,EACV,CACE,KAOA,CACG,KAAA;AACH,IAAA,MAAM,UAAa,GAAA,CAAA,CAAE,QAAS,CAAA,IAAA,CAAK,CAAO,GAAA,KAAA;AACxC,MAAI,IAAA,GAAA,CAAI,MAAW,KAAA,MAAA,CAAO,MAAQ,EAAA;AAChC,QAAI,IAAA,iBAAA,CAAkB,GAAG,CAAG,EAAA;AAC1B,UAAI,IAAA,GAAA,CAAI,YAAiB,KAAA,MAAA,CAAO,UAAY,EAAA;AAC1C,YAAO,OAAA,IAAA;AAAA;AACT;AAEF,QAAI,IAAA,GAAA,CAAI,IAAS,KAAA,MAAA,CAAO,UAAY,EAAA;AAClC,UAAO,OAAA,IAAA;AAAA;AACT;AAEF,MAAO,OAAA,KAAA;AAAA,KACR,CAAA;AACD,IAAA,IAAI,UAAY,EAAA;AACd,MAAO,OAAA;AAAA,QACL,QAAA,EAAU,EAAE,QAAY,IAAA,GAAA;AAAA,QACxB,cAAA,EAAgB,WAAW,IAAQ,IAAA,GAAA;AAAA,QACnC,WAAA,EAAa,iBAAkB,CAAA,UAAU,CAAK,IAAA,KAAA;AAAA,QAC9C,YAAc,EAAA,iBAAA,CAAkB,UAAU,CAAA,GACtC,WAAW,YACX,GAAA,EAAA;AAAA,QACJ,mBACE,iBAAkB,CAAA,UAAU,CAC5B,IAAA,UAAA,CAAW,iBAAiB,MAAO,CAAA;AAAA,OACvC;AAAA;AAEF,IAAO,OAAA,GAAA;AAAA,GACT;AAAA,EACA,EAAE,QAAU,EAAA,GAAA,EAAK,WAAa,EAAA,KAAA,EAAO,gBAAgB,GAAI;AAC3D;AAEF,MAAM,SAAA,GAAY,CAAC,GAAgB,KAAA;AACjC,EAAM,MAAA,GAAA,GAAM,GAAI,CAAA,KAAA,CAAM,GAAG,CAAA;AACzB,EAAO,OAAA,GAAA,CAAI,GAAI,CAAA,MAAA,GAAS,CAAC,CAAA;AAC3B,CAAA;AAEA,MAAM,cAAiB,GAAA,CACrB,UACA,EAAA,eAAA,EACA,QACG,KAAA;AACH,EAAA,MAAM,cAAiB,GAAA,QAAA,EAAU,MAAO,CAAA,CAAC,KAAK,CAAM,KAAA;AAClD,IAAA,MAAM,OAAO,CAAE,CAAA,IAAA;AACf,IACE,IAAA,UAAA,KAAe,IACf,IAAA,CAAC,eAAgB,CAAA,IAAA;AAAA,MACf,CAAA,aAAA,KACE,cAAc,MAAO,CAAA,iBAAA,CAAkB,OAAO,CAC9C,KAAA,CAAA,CAAE,MAAQ,EAAA,iBAAA,CAAkB,OAAO;AAAA,KAEvC,EAAA;AACA,MAAA,GAAA,CAAI,IAAK,CAAA;AAAA,QACP,MAAQ,EAAA,YAAA,CAAa,CAAE,CAAA,MAAM,CAAK,IAAA,KAAA;AAAA,QAClC,MAAQ,EAAA;AAAA,OACT,CAAA;AAAA;AAEH,IAAO,OAAA,GAAA;AAAA,GACT,EAAG,EAAiB,CAAA;AACpB,EAAO,OAAA,CAAC,GAAI,eAAmB,IAAA,IAAK,GAAI,cAAA,IAAkB,EAAG,CAAA;AAC/D,CAAA;AAEa,MAAA,kBAAA,GAAqB,CAChC,QAAA,EACA,kBACsB,KAAA;AACtB,EAAA,MAAM,OAAO,QAAS,CAAA,MAAA;AAAA,IACpB,CAAC,KAA2B,MAA4B,KAAA;AACtD,MAAI,IAAA,MAAA,EAAQ,WAAW,OAAS,EAAA;AAC9B,QAAA,MAAM,SACJ,GAAA,MAAA,EAAQ,MAAU,IAAA,SAAA,CAAU,OAAO,UAAoB,CAAA;AACzD,QAAM,MAAA,eAAA,GAAkB,aAAa,SAAS,CAAA;AAC9C,QAAM,MAAA,YAAA,uBAAmB,GAAY,EAAA;AACrC,QAAM,MAAA,WAAA,uBAAkB,GAAwC,EAAA;AAChE,QAAM,MAAA;AAAA,UACJ,QAAA;AAAA,UACA,WAAA;AAAA,UACA,YAAA;AAAA,UACA,cAAA;AAAA,UACA;AAAA,SACF,GAAI,aAAc,CAAA,kBAAA,EAAoB,MAAM,CAAA;AAC5C,QAAA,GAAA,CAAI,IAAK,CAAA;AAAA,UACP,UAAY,EAAA,cAAA;AAAA,UACZ,MAAQ,EAAA,QAAA;AAAA,UACR,YAAc,EAAA,YAAA,CAAa,GAAI,CAAA,eAAA,IAAmB,KAAK,CAAA;AAAA,UACvD,QAAA,EAAU,YAAY,GAAI,CAAA;AAAA,YACxB,QAAQ,eAAmB,IAAA,KAAA;AAAA,YAC3B,QAAQ,MAAO,CAAA;AAAA,WAChB,CAAA;AAAA,UACD,WAAA;AAAA,UACA,YAAA;AAAA,UACA;AAAA,SACD,CAAA;AAAA;AAEH,MAAO,OAAA,GAAA;AAAA,KACT;AAAA,IACA;AAAC,GACH;AACA,EAAO,OAAA,IAAA,CAAK,GAAI,CAAA,CAAC,CAA2B,MAAA;AAAA,IAC1C,GAAG,CAAA;AAAA,IACH,GAAI,CAAE,CAAA,YAAA,GAAe,EAAE,YAAA,EAAc,KAAM,CAAA,IAAA,CAAK,CAAE,CAAA,YAAY,CAAE,EAAA,GAAI,EAAC;AAAA,IACrE,QAAU,EAAA,cAAA;AAAA,MACR,CAAE,CAAA,UAAA;AAAA,MACF,KAAA,CAAM,IAAK,CAAA,CAAA,CAAE,QAAQ,CAAA;AAAA,MACrB,mBAAmB,IAAK,CAAA,CAAA,EAAA,KAAM,GAAG,QAAa,KAAA,CAAA,CAAE,MAAM,CAClD,EAAA;AAAA;AACN,GACA,CAAA,CAAA;AACJ;AAEa,MAAA,yBAAA,GAA4B,CACvC,UACuB,KAAA;AACvB,EAAO,OAAA,MAAA,CAAO,IAAK,CAAA,UAAU,CAAE,CAAA,IAAA;AAAA,IAAK,CAAA,GAAA,KAClC,CAAC,SAAU,CAAA,KAAA,EAAO,UAAU,KAAO,EAAA,SAAA,CAAU,GAAG,CAAE,CAAA,QAAA;AAAA,MAChD;AAAA;AACF,GACF;AACF;AAEa,MAAA,iBAAA,GAAoB,CAC/B,UAC+B,KAAA;AAC/B,EAAA,MAAM,aACJ,GAAA,yBAAA,CAA0B,UAAU,CAAA,IAAK,SAAU,CAAA,SAAA;AAErD,EAAA,QAAQ,aAAe;AAAA,IACrB,KAAK,UAAU,KAAO,EAAA;AACpB,MAAA,MAAM,kBAAmB,UACtB,CAAA,KAAA;AACH,MAAA,eAAA,CAAgB,IAAI,CAAO,GAAA,KAAA;AACzB,QAAI,IAAA,yBAAA,CAA0B,GAAG,CAAG,EAAA;AAClC,UAAA,OAAO,kBAAkB,GAAG,CAAA;AAAA;AAE9B,QAAO,OAAA,GAAA;AAAA,OACR,CAAA;AACD,MAAO,OAAA,EAAE,OAAO,eAAyC,EAAA;AAAA;AAC3D,IACA,KAAK,UAAU,KAAO,EAAA;AACpB,MAAA,MAAM,kBAAmB,UACtB,CAAA,KAAA;AACH,MAAA,eAAA,CAAgB,IAAI,CAAO,GAAA,KAAA;AACzB,QAAI,IAAA,yBAAA,CAA0B,GAAG,CAAG,EAAA;AAClC,UAAA,OAAO,kBAAkB,GAAG,CAAA;AAAA;AAE9B,QAAO,OAAA,GAAA;AAAA,OACR,CAAA;AACD,MAAO,OAAA,EAAE,OAAO,eAAyC,EAAA;AAAA;AAC3D,IACA,KAAK,UAAU,GAAK,EAAA;AAClB,MAAA,MAAM,eAAgB,UAAgD,CAAA,GAAA;AACtE,MAAA,MAAM,kBAAkB,yBAA0B,CAAA,YAAY,CAC1D,GAAA,iBAAA,CAAkB,YAAY,CAC9B,GAAA,YAAA;AACJ,MAAO,OAAA,EAAE,KAAK,eAAuC,EAAA;AAAA;AACvD,IACA;AACE,MAAO,OAAA,EAAE,WAAW,UAAkC,EAAA;AAAA;AAE5D;AAEa,MAAA,eAAA,GAAkB,CAC7B,kBAAA,EACA,QACgB,KAAA;AAChB,EAAO,OAAA,QAAA,CAAS,IAAI,CAAM,CAAA,MAAA;AAAA,IACxB,MAAQ,EAAA,CAAA;AAAA,IACR,GAAI,kBAAA,CAAmB,QAAS,CAAA,CAAA,CAAE,kBAAkB,OAAO,CAAC,CACxD,GAAA,EAAE,MAAQ,EAAA,OAAA,EACV,GAAA,EAAE,QAAQ,MAAO;AAAA,GACrB,CAAA,CAAA;AACJ;AAEO,MAAM,6BAAgC,GAAA,CAC3C,sBACA,EAAA,kBAAA,EACA,qBACsB,KAAA;AACtB,EAAA,OAAO,sBAAuB,CAAA,MAAA,CAAO,CAAC,GAAA,EAAU,EAAO,KAAA;AACrD,IAAM,MAAA,UAAA,GAAa,iBAAkB,CAAA,EAAA,CAAG,UAAU,CAAA;AAClD,IAAM,MAAA,kBAAA,GAAqB,GAAG,iBAAkB,CAAA,GAAA;AAAA,MAAI,CAAA,MAAA,KAClD,MAAO,CAAA,iBAAA,CAAkB,OAAO;AAAA,KAClC;AAEA,IAAM,MAAA,IAAA,GAAO,qBACV,CAAA,GAAA,CAAI,CAAO,GAAA,KAAA;AACV,MAAI,IAAA,GAAA,CAAI,QAAa,KAAA,EAAA,CAAG,QAAU,EAAA;AAChC,QAAA,OACE,IAAI,QAAS,CAAA,IAAA;AAAA,UACX,CACE,EAAA,KAAA,iBAAA,CAAkB,EAAE,CAAA,IACpB,EAAG,CAAA,YAAA,KAAiB,EAAG,CAAA,YAAA,IACvB,EAAG,CAAA,MAAA,KAAW,EAAG,CAAA,iBAAA,CAAkB,CAAC;AAAA,WACrC,IAAQ,IAAA,EAAA;AAAA;AAGf,MAAO,OAAA,EAAA;AAAA,KACR,CACA,CAAA,MAAA,CAAO,CAAK,CAAA,KAAA,CAAC,CAAC,CAAC,CAAA;AAElB,IAAA,MAAM,WAAc,GAAA,CAAC,EACnB,KAAA,kBAAA,CAAmB,kBAAqB,GAAA,EAAA,CAAG,QAAQ,CAAA,EAAG,QAAW,GAAA,EAAE,CAC/D,EAAA,QAAA,IAAY,EAAC;AACnB,IAAA,MAAM,eAAe,kBAClB,CAAA,GAAA,CAAI,CAAK,CAAA,KAAA,CAAA,CAAE,CAAC,CAAE,CAAA,iBAAA,CAAkB,OAAO,CAAA,GAAI,EAAE,KAAM,CAAA,CAAC,CAAC,CAAA,CACrD,KAAK,IAAI,CAAA;AAEZ,IAAO,OAAA;AAAA,MACL,GAAG,GAAA;AAAA,MACH,GAAI,UACA,GAAA;AAAA,QACE;AAAA,UACE,QAAQ,EAAG,CAAA,QAAA;AAAA,UACX,UAAA,EAAY,KAAK,CAAC,CAAA;AAAA,UAClB,cAAc,EAAG,CAAA,YAAA;AAAA,UACjB,WAAa,EAAA,IAAA;AAAA,UACb,QAAU,EAAA,eAAA;AAAA,YACR,kBAAA;AAAA,YACA,WAAA,CAAY,IAAK,CAAA,CAAC,CAAC;AAAA,WACrB;AAAA,UACA,YAAA;AAAA,UACA,UAAA;AAAA,UACA,IAAI,EAAG,CAAA;AAAA;AACT,UAEF;AAAC,KACP;AAAA,GACF,EAAG,EAAE,CAAA;AACP;AAEa,MAAA,iBAAA,GAAoB,CAC/B,cAAA,EACA,GACmB,KAAA;AACnB,EAAA,IAAI,cAAgB,EAAA;AAClB,IAAO,OAAA;AAAA,MACL,EAAA,EAAI,eAAe,QAAS,CAAA,IAAA;AAAA,MAC5B,GAAA,EAAK,mBAAmB,cAAc,CAAA;AAAA,MACtC,OACE,cAAe,CAAA,IAAA,CAAK,OAAS,EAAA,WAAA,IAC7B,eAAe,QAAS,CAAA,IAAA;AAAA,MAC1B,IAAA,EAAM,eAAe,QAAS,CAAA,IAAA;AAAA,MAC9B,MAAM,cAAe,CAAA,IAAA;AAAA,MACrB,SAAA,EAAW,eAAe,QAAS,CAAA,SAAA;AAAA,MACnC,OAAA,EAAS,gBAAgB,cAAc;AAAA,KACzC;AAAA,aACS,GAAK,EAAA;AACd,IAAA,MAAM,EAAE,IAAM,EAAA,SAAA,EAAW,IAAK,EAAA,GAAI,eAAe,GAAG,CAAA;AACpD,IAAO,OAAA;AAAA,MACL,IAAI,CAAG,EAAA,IAAI,CAAI,CAAA,EAAA,SAAS,IAAI,IAAI,CAAA,CAAA;AAAA,MAChC,GAAA;AAAA,MACA,KAAO,EAAA,IAAA;AAAA,MACP,MAAM,CAAG,EAAA,IAAI,CAAI,CAAA,EAAA,SAAS,IAAI,IAAI,CAAA,CAAA;AAAA,MAClC,IAAM,EAAA,IAAA;AAAA,MACN,SAAA;AAAA,MACA,OAAA,EAAS,IAAS,KAAA,OAAA,GAAU,CAAI,GAAA;AAAA,KAClC;AAAA;AAEF,EAAA,OAAO,EAAC;AACV;AAEO,MAAM,yBAAyB,CACpC,CAAA,EACA,MAEA,CAAE,CAAA,eAAA,KAAoB,EAAE,eACxB,IAAA,CAAA,CAAE,UAAe,KAAA,CAAA,CAAE,cACnB,CAAE,CAAA,MAAA,KAAW,EAAE,MACf,IAAA,CAAA,CAAE,WAAW,CAAE,CAAA;AAEV,MAAM,UAAa,GAAA,CACxB,IACA,EAAA,KAAA,EACA,oBAEA,IAAK,CAAA,MAAA;AAAA,EACH,CAAA,SAAA,KACE,CAAC,KAAM,CAAA,IAAA,CAAK,gBAAc,eAAgB,CAAA,SAAA,EAAW,UAAU,CAAC;AACpE;;;;"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@backstage-community/plugin-rbac",
-  "version": "1.37.0",
+  "version": "1.38.1",
   "main": "dist/index.esm.js",
   "types": "dist/index.d.ts",
   "license": "Apache-2.0",
@@ -45,7 +45,7 @@
     "@backstage/plugin-permission-common": "^0.8.4",
     "@backstage/plugin-permission-react": "^0.4.30",
     "@backstage/theme": "^0.6.3",
-    "@janus-idp/shared-react": "^2.13.1",
+    "@janus-idp/shared-react": "^2.16.0",
     "@mui/icons-material": "5.16.4",
     "@mui/material": "^5.14.18",
     "@mui/styles": "^6.1.7",
@@ -83,7 +83,7 @@
     "react": "^16.13.1 || ^17.0.0 || ^18.0.0",
     "react-dom": "^16.13.1 || ^17.0.0 || ^18.0.0",
     "react-router-dom": "^6.0.0",
-    "start-server-and-test": "2.0.9"
+    "start-server-and-test": "2.0.10"
   },
   "files": [
     "app-config.dynamic.yaml",