@btst/stack 3.0.0-rc.1 → 3.0.0-rc.3

package/dist/packages/stack/src/plugins/kanban/client/components/pages/board-page.internal.cjs

@@ -16,6 +16,9 @@ const boardForm = require('../forms/board-form.cjs');
 const taskForm = require('../forms/task-form.cjs');
 const pageWrapper = require('../shared/page-wrapper.cjs');
 const emptyState = require('../shared/empty-state.cjs');
+const plugins_kanban_permissions = require('../../../../../../../../plugins/kanban/permissions.cjs');
+const permissionAccessAny = require('../shared/permission-access-any.cjs');
+const constants = require('../../constants.cjs');
 
 function BoardPage({ boardId }) {
   const t = context.useTranslate();
@@ -24,44 +27,11 @@ function BoardPage({ boardId }) {
   if (error && !isFetching) {
     throw error;
   }
-  const { taskDetailBottomSlot, localization } = context.usePluginOverrides("kanban");
-  const { router } = context.useStack();
-  const navigate = router?.navigate || ((path) => {
-    window.location.href = path;
-  });
-  const Link = router?.Link ?? "a";
+  const { taskDetailBottomSlot, localization } = context.usePluginOverrides(constants.KANBAN_PLUGIN_ID);
+  const { Link, navigate, resolve } = context.usePluginSiteNavigation(constants.KANBAN_PLUGIN_ID);
   const { deleteBoard, isDeleting } = kanbanHooks.useBoardMutations();
   const { deleteColumn, reorderColumns } = kanbanHooks.useColumnMutations();
   const { deleteTask, moveTask, reorderTasks } = kanbanHooks.useTaskMutations();
-  const { can: canMoveColumns, isPending: isCheckingColumnMove } = context.useCan({
-    resource: "kanban:column",
-    action: "update",
-    params: { boardId }
-  });
-  const { can: canMoveTasks, isPending: isCheckingTaskMove } = context.useCan({
-    resource: "kanban:task",
-    action: "update",
-    params: { boardId }
-  });
-  const { can: canCreateColumn, isPending: isCheckingCreateColumn } = context.useCan({
-    resource: "kanban:column",
-    action: "create",
-    params: { boardId }
-  });
-  const { can: canUpdateBoard, isPending: isCheckingUpdateBoard } = context.useCan({
-    resource: "kanban:board",
-    action: "update",
-    params: { id: boardId }
-  });
-  const { can: canDeleteBoard, isPending: isCheckingDeleteBoard } = context.useCan({
-    resource: "kanban:board",
-    action: "delete",
-    params: { id: boardId }
-  });
-  const showCreateColumn = !isCheckingCreateColumn && canCreateColumn;
-  const showUpdateBoard = !isCheckingUpdateBoard && canUpdateBoard;
-  const showDeleteBoard = !isCheckingDeleteBoard && canDeleteBoard;
-  const hasBoardActions = showCreateColumn || showUpdateBoard || showDeleteBoard;
   const [modalState, setModalState] = React.useState({ type: "none" });
   const computeKanbanData = React.useCallback(
     (columns) => {
@@ -91,11 +61,11 @@ function BoardPage({ boardId }) {
     try {
       await deleteBoard(boardId);
       closeModal();
-      navigate("/pages/kanban");
+      void navigate("kanban");
       if (typeof window !== "undefined") {
         setTimeout(() => {
           if (window.location.pathname.includes(boardId)) {
-            window.location.href = "/pages/kanban";
+            window.location.assign(resolve("kanban").href);
           }
         }, 100);
       }
@@ -107,6 +77,7 @@ function BoardPage({ boardId }) {
     deleteBoard,
     boardId,
     navigate,
+    resolve,
     closeModal,
     localization?.deleteBoardError,
     notify,
@@ -162,15 +133,6 @@ function BoardPage({ boardId }) {
           for (const [columnId, taskIds] of columnsToReorder) {
             await reorderTasks(columnId, taskIds);
           }
-          for (const targetColumnId of targetColumnsOfCrossMove) {
-            const tasks = newData[targetColumnId];
-            if (tasks) {
-              await reorderTasks(
-                targetColumnId,
-                tasks.map((t2) => t2.id)
-              );
-            }
-          }
         }
         refetch();
       } catch (error2) {
@@ -203,13 +165,34 @@ function BoardPage({ boardId }) {
           "kanban.list.boardNotFoundDescription",
           "The board you're looking for doesn't exist or you don't have access to it."
         ),
-        action: /* @__PURE__ */ jsxRuntime.jsxs(button.Button, { onClick: () => navigate("/pages/kanban"), children: [
+        action: /* @__PURE__ */ jsxRuntime.jsxs(button.Button, { onClick: () => navigate("kanban"), children: [
           /* @__PURE__ */ jsxRuntime.jsx(LucideIcons.ArrowLeft, { className: "mr-2 h-4 w-4" }),
           localization?.backToBoards ?? t("kanban.common.backToBoards", "Back to Boards")
         ] })
       }
     );
   }
+  const boardFacts = {
+    boardId: board.id,
+    ...board.ownerId ? { ownerId: board.ownerId } : {},
+    ...board.organizationId ? { organizationId: board.organizationId } : {}
+  };
+  ({
+    id: board.id,
+    ...board.ownerId ? { ownerId: board.ownerId } : {},
+    ...board.organizationId ? { organizationId: board.organizationId } : {}
+  });
+  const boardActionChecks = [
+    {
+      permission: plugins_kanban_permissions.kanbanPermissions.column.create(boardFacts)
+    },
+    {
+      permission: plugins_kanban_permissions.kanbanPermissions.board.update(boardFacts)
+    },
+    {
+      permission: plugins_kanban_permissions.kanbanPermissions.board.delete(boardFacts)
+    }
+  ];
   return /* @__PURE__ */ jsxRuntime.jsxs(
     pageWrapper.PageWrapper,
     {
@@ -221,7 +204,7 @@ function BoardPage({ boardId }) {
             /* @__PURE__ */ jsxRuntime.jsx(
               Link,
               {
-                href: "/pages/kanban",
+                href: resolve("kanban").href,
                 className: "text-muted-foreground hover:text-foreground",
                 children: /* @__PURE__ */ jsxRuntime.jsx(LucideIcons.ArrowLeft, { className: "h-5 w-5" })
               }
@@ -231,55 +214,75 @@ function BoardPage({ boardId }) {
               board.description && /* @__PURE__ */ jsxRuntime.jsx("p", { className: "text-muted-foreground mt-1", children: board.description })
             ] })
           ] }),
-          hasBoardActions && /* @__PURE__ */ jsxRuntime.jsxs(dropdownMenu.DropdownMenu, { children: [
+          /* @__PURE__ */ jsxRuntime.jsx(permissionAccessAny.PermissionAccessAny, { checks: boardActionChecks, children: /* @__PURE__ */ jsxRuntime.jsxs(dropdownMenu.DropdownMenu, { children: [
             /* @__PURE__ */ jsxRuntime.jsx(dropdownMenu.DropdownMenuTrigger, { asChild: true, children: /* @__PURE__ */ jsxRuntime.jsxs(button.Button, { variant: "outline", children: [
               /* @__PURE__ */ jsxRuntime.jsx(LucideIcons.Settings, { className: "mr-2 h-4 w-4" }),
               localization?.actions ?? t("kanban.common.actions", "Actions")
             ] }) }),
             /* @__PURE__ */ jsxRuntime.jsxs(dropdownMenu.DropdownMenuContent, { align: "end", children: [
-              showCreateColumn && /* @__PURE__ */ jsxRuntime.jsxs(
-                dropdownMenu.DropdownMenuItem,
+              /* @__PURE__ */ jsxRuntime.jsx(
+                context.PermissionAccess,
                 {
-                  onClick: () => setModalState({ type: "addColumn" }),
-                  children: [
-                    /* @__PURE__ */ jsxRuntime.jsx(LucideIcons.Plus, { className: "mr-2 h-4 w-4" }),
-                    localization?.addColumn ?? t("kanban.list.addColumn", "Add Column")
-                  ]
+                  permission: plugins_kanban_permissions.kanbanPermissions.column.create(boardFacts),
+                  children: /* @__PURE__ */ jsxRuntime.jsxs(
+                    dropdownMenu.DropdownMenuItem,
+                    {
+                      onClick: () => setModalState({ type: "addColumn" }),
+                      children: [
+                        /* @__PURE__ */ jsxRuntime.jsx(LucideIcons.Plus, { className: "mr-2 h-4 w-4" }),
+                        localization?.addColumn ?? t("kanban.list.addColumn", "Add Column")
+                      ]
+                    }
+                  )
                 }
               ),
-              showUpdateBoard && /* @__PURE__ */ jsxRuntime.jsxs(
-                dropdownMenu.DropdownMenuItem,
+              /* @__PURE__ */ jsxRuntime.jsx(
+                context.PermissionAccess,
                 {
-                  onClick: () => setModalState({ type: "editBoard" }),
-                  children: [
-                    /* @__PURE__ */ jsxRuntime.jsx(LucideIcons.Pencil, { className: "mr-2 h-4 w-4" }),
-                    localization?.editBoard ?? t("kanban.list.editBoard", "Edit Board")
-                  ]
+                  permission: plugins_kanban_permissions.kanbanPermissions.board.update(boardFacts),
+                  children: /* @__PURE__ */ jsxRuntime.jsxs(
+                    dropdownMenu.DropdownMenuItem,
+                    {
+                      onClick: () => setModalState({ type: "editBoard" }),
+                      children: [
+                        /* @__PURE__ */ jsxRuntime.jsx(LucideIcons.Pencil, { className: "mr-2 h-4 w-4" }),
+                        localization?.editBoard ?? t("kanban.list.editBoard", "Edit Board")
+                      ]
+                    }
+                  )
                 }
               ),
-              showDeleteBoard && (showCreateColumn || showUpdateBoard) && /* @__PURE__ */ jsxRuntime.jsx(dropdownMenu.DropdownMenuSeparator, {}),
-              showDeleteBoard && /* @__PURE__ */ jsxRuntime.jsxs(
-                dropdownMenu.DropdownMenuItem,
+              /* @__PURE__ */ jsxRuntime.jsxs(
+                context.PermissionAccess,
                 {
-                  onClick: () => setModalState({ type: "deleteBoard" }),
-                  className: "text-red-600 focus:text-red-600",
+                  permission: plugins_kanban_permissions.kanbanPermissions.board.delete(boardFacts),
                   children: [
-                    /* @__PURE__ */ jsxRuntime.jsx(LucideIcons.Trash2, { className: "mr-2 h-4 w-4" }),
-                    localization?.deleteBoard ?? t("kanban.forms.deleteBoard", "Delete Board")
+                    /* @__PURE__ */ jsxRuntime.jsx(dropdownMenu.DropdownMenuSeparator, {}),
+                    /* @__PURE__ */ jsxRuntime.jsxs(
+                      dropdownMenu.DropdownMenuItem,
+                      {
+                        onClick: () => setModalState({ type: "deleteBoard" }),
+                        className: "text-red-600 focus:text-red-600",
+                        children: [
+                          /* @__PURE__ */ jsxRuntime.jsx(LucideIcons.Trash2, { className: "mr-2 h-4 w-4" }),
+                          localization?.deleteBoard ?? t("kanban.forms.deleteBoard", "Delete Board")
+                        ]
+                      }
+                    )
                   ]
                 }
               )
             ] })
-          ] })
+          ] }) })
         ] }),
         orderedColumns.length > 0 ? /* @__PURE__ */ jsxRuntime.jsx(
           kanbanBoard.KanbanBoard,
           {
             boardId,
+            ownerId: board.ownerId,
+            organizationId: board.organizationId,
             columns: orderedColumns,
             kanbanState,
-            canMoveColumns: !isCheckingColumnMove && canMoveColumns,
-            canMoveTasks: !isCheckingTaskMove && canMoveTasks,
             onKanbanChange: handleKanbanChange,
             onAddTask: (columnId) => setModalState({ type: "addTask", columnId }),
             onEditTask: (columnId, taskId) => setModalState({ type: "editTask", columnId, taskId }),
@@ -295,11 +298,9 @@ function BoardPage({ boardId }) {
               "Create your first column to start organizing tasks."
             ),
             action: /* @__PURE__ */ jsxRuntime.jsx(
-              context.CanAccess,
+              context.PermissionAccess,
               {
-                resource: "kanban:column",
-                action: "create",
-                params: { boardId },
+                permission: plugins_kanban_permissions.kanbanPermissions.column.create(boardFacts),
                 children: /* @__PURE__ */ jsxRuntime.jsxs(button.Button, { onClick: () => setModalState({ type: "addColumn" }), children: [
                   /* @__PURE__ */ jsxRuntime.jsx(LucideIcons.Plus, { className: "mr-2 h-4 w-4" }),
                   localization?.addColumn ?? t("kanban.list.addColumn", "Add Column")
@@ -462,6 +463,8 @@ function BoardPage({ boardId }) {
                 {
                   columnId: modalState.columnId,
                   boardId,
+                  ownerId: board.ownerId,
+                  organizationId: board.organizationId,
                   columns: board.columns || [],
                   onClose: closeModal,
                   onSuccess: closeModal
@@ -486,6 +489,8 @@ function BoardPage({ boardId }) {
                   {
                     columnId: modalState.columnId,
                     boardId,
+                    ownerId: board.ownerId,
+                    organizationId: board.organizationId,
                     taskId: modalState.taskId,
                     task: board.columns?.find((c) => c.id === modalState.columnId)?.tasks?.find((t2) => t2.id === modalState.taskId),
                     columns: board.columns || [],

package/dist/packages/stack/src/plugins/kanban/client/components/pages/board-page.internal.mjs

@@ -7,13 +7,16 @@ import { DropdownMenu, DropdownMenuTrigger, DropdownMenuContent, DropdownMenuIte
 import { Dialog, DialogContent, DialogHeader, DialogTitle, DialogDescription } from '../../../../../../../ui/src/components/dialog.mjs';
 import { AlertDialog, AlertDialogContent, AlertDialogHeader, AlertDialogTitle, AlertDialogDescription, AlertDialogFooter, AlertDialogCancel, AlertDialogAction } from '../../../../../../../ui/src/components/alert-dialog.mjs';
 import { useSuspenseBoard, useBoardMutations, useColumnMutations, useTaskMutations } from '../../hooks/kanban-hooks.mjs';
-import { useTranslate, useNotify, usePluginOverrides, useStack, useCan, CanAccess } from '@btst/stack/context';
+import { useTranslate, useNotify, usePluginOverrides, usePluginSiteNavigation, PermissionAccess } from '@btst/stack/context';
 import { KanbanBoard } from '../shared/kanban-board.mjs';
 import { ColumnForm } from '../forms/column-form.mjs';
 import { BoardForm } from '../forms/board-form.mjs';
 import { TaskForm } from '../forms/task-form.mjs';
 import { PageWrapper } from '../shared/page-wrapper.mjs';
 import { EmptyState } from '../shared/empty-state.mjs';
+import { kanbanPermissions } from '../../../../../../../../plugins/kanban/permissions.mjs';
+import { PermissionAccessAny } from '../shared/permission-access-any.mjs';
+import { KANBAN_PLUGIN_ID } from '../../constants.mjs';
 
 function BoardPage({ boardId }) {
   const t = useTranslate();
@@ -22,44 +25,11 @@ function BoardPage({ boardId }) {
   if (error && !isFetching) {
     throw error;
   }
-  const { taskDetailBottomSlot, localization } = usePluginOverrides("kanban");
-  const { router } = useStack();
-  const navigate = router?.navigate || ((path) => {
-    window.location.href = path;
-  });
-  const Link = router?.Link ?? "a";
+  const { taskDetailBottomSlot, localization } = usePluginOverrides(KANBAN_PLUGIN_ID);
+  const { Link, navigate, resolve } = usePluginSiteNavigation(KANBAN_PLUGIN_ID);
   const { deleteBoard, isDeleting } = useBoardMutations();
   const { deleteColumn, reorderColumns } = useColumnMutations();
   const { deleteTask, moveTask, reorderTasks } = useTaskMutations();
-  const { can: canMoveColumns, isPending: isCheckingColumnMove } = useCan({
-    resource: "kanban:column",
-    action: "update",
-    params: { boardId }
-  });
-  const { can: canMoveTasks, isPending: isCheckingTaskMove } = useCan({
-    resource: "kanban:task",
-    action: "update",
-    params: { boardId }
-  });
-  const { can: canCreateColumn, isPending: isCheckingCreateColumn } = useCan({
-    resource: "kanban:column",
-    action: "create",
-    params: { boardId }
-  });
-  const { can: canUpdateBoard, isPending: isCheckingUpdateBoard } = useCan({
-    resource: "kanban:board",
-    action: "update",
-    params: { id: boardId }
-  });
-  const { can: canDeleteBoard, isPending: isCheckingDeleteBoard } = useCan({
-    resource: "kanban:board",
-    action: "delete",
-    params: { id: boardId }
-  });
-  const showCreateColumn = !isCheckingCreateColumn && canCreateColumn;
-  const showUpdateBoard = !isCheckingUpdateBoard && canUpdateBoard;
-  const showDeleteBoard = !isCheckingDeleteBoard && canDeleteBoard;
-  const hasBoardActions = showCreateColumn || showUpdateBoard || showDeleteBoard;
   const [modalState, setModalState] = useState({ type: "none" });
   const computeKanbanData = useCallback(
     (columns) => {
@@ -89,11 +59,11 @@ function BoardPage({ boardId }) {
     try {
       await deleteBoard(boardId);
       closeModal();
-      navigate("/pages/kanban");
+      void navigate("kanban");
       if (typeof window !== "undefined") {
         setTimeout(() => {
           if (window.location.pathname.includes(boardId)) {
-            window.location.href = "/pages/kanban";
+            window.location.assign(resolve("kanban").href);
           }
         }, 100);
       }
@@ -105,6 +75,7 @@ function BoardPage({ boardId }) {
     deleteBoard,
     boardId,
     navigate,
+    resolve,
     closeModal,
     localization?.deleteBoardError,
     notify,
@@ -160,15 +131,6 @@ function BoardPage({ boardId }) {
           for (const [columnId, taskIds] of columnsToReorder) {
             await reorderTasks(columnId, taskIds);
           }
-          for (const targetColumnId of targetColumnsOfCrossMove) {
-            const tasks = newData[targetColumnId];
-            if (tasks) {
-              await reorderTasks(
-                targetColumnId,
-                tasks.map((t2) => t2.id)
-              );
-            }
-          }
         }
         refetch();
       } catch (error2) {
@@ -201,13 +163,34 @@ function BoardPage({ boardId }) {
           "kanban.list.boardNotFoundDescription",
           "The board you're looking for doesn't exist or you don't have access to it."
         ),
-        action: /* @__PURE__ */ jsxs(Button, { onClick: () => navigate("/pages/kanban"), children: [
+        action: /* @__PURE__ */ jsxs(Button, { onClick: () => navigate("kanban"), children: [
           /* @__PURE__ */ jsx(ArrowLeft, { className: "mr-2 h-4 w-4" }),
           localization?.backToBoards ?? t("kanban.common.backToBoards", "Back to Boards")
         ] })
       }
     );
   }
+  const boardFacts = {
+    boardId: board.id,
+    ...board.ownerId ? { ownerId: board.ownerId } : {},
+    ...board.organizationId ? { organizationId: board.organizationId } : {}
+  };
+  ({
+    id: board.id,
+    ...board.ownerId ? { ownerId: board.ownerId } : {},
+    ...board.organizationId ? { organizationId: board.organizationId } : {}
+  });
+  const boardActionChecks = [
+    {
+      permission: kanbanPermissions.column.create(boardFacts)
+    },
+    {
+      permission: kanbanPermissions.board.update(boardFacts)
+    },
+    {
+      permission: kanbanPermissions.board.delete(boardFacts)
+    }
+  ];
   return /* @__PURE__ */ jsxs(
     PageWrapper,
     {
@@ -219,7 +202,7 @@ function BoardPage({ boardId }) {
             /* @__PURE__ */ jsx(
               Link,
               {
-                href: "/pages/kanban",
+                href: resolve("kanban").href,
                 className: "text-muted-foreground hover:text-foreground",
                 children: /* @__PURE__ */ jsx(ArrowLeft, { className: "h-5 w-5" })
               }
@@ -229,55 +212,75 @@ function BoardPage({ boardId }) {
               board.description && /* @__PURE__ */ jsx("p", { className: "text-muted-foreground mt-1", children: board.description })
             ] })
           ] }),
-          hasBoardActions && /* @__PURE__ */ jsxs(DropdownMenu, { children: [
+          /* @__PURE__ */ jsx(PermissionAccessAny, { checks: boardActionChecks, children: /* @__PURE__ */ jsxs(DropdownMenu, { children: [
             /* @__PURE__ */ jsx(DropdownMenuTrigger, { asChild: true, children: /* @__PURE__ */ jsxs(Button, { variant: "outline", children: [
               /* @__PURE__ */ jsx(Settings, { className: "mr-2 h-4 w-4" }),
               localization?.actions ?? t("kanban.common.actions", "Actions")
             ] }) }),
             /* @__PURE__ */ jsxs(DropdownMenuContent, { align: "end", children: [
-              showCreateColumn && /* @__PURE__ */ jsxs(
-                DropdownMenuItem,
+              /* @__PURE__ */ jsx(
+                PermissionAccess,
                 {
-                  onClick: () => setModalState({ type: "addColumn" }),
-                  children: [
-                    /* @__PURE__ */ jsx(Plus, { className: "mr-2 h-4 w-4" }),
-                    localization?.addColumn ?? t("kanban.list.addColumn", "Add Column")
-                  ]
+                  permission: kanbanPermissions.column.create(boardFacts),
+                  children: /* @__PURE__ */ jsxs(
+                    DropdownMenuItem,
+                    {
+                      onClick: () => setModalState({ type: "addColumn" }),
+                      children: [
+                        /* @__PURE__ */ jsx(Plus, { className: "mr-2 h-4 w-4" }),
+                        localization?.addColumn ?? t("kanban.list.addColumn", "Add Column")
+                      ]
+                    }
+                  )
                 }
               ),
-              showUpdateBoard && /* @__PURE__ */ jsxs(
-                DropdownMenuItem,
+              /* @__PURE__ */ jsx(
+                PermissionAccess,
                 {
-                  onClick: () => setModalState({ type: "editBoard" }),
-                  children: [
-                    /* @__PURE__ */ jsx(Pencil, { className: "mr-2 h-4 w-4" }),
-                    localization?.editBoard ?? t("kanban.list.editBoard", "Edit Board")
-                  ]
+                  permission: kanbanPermissions.board.update(boardFacts),
+                  children: /* @__PURE__ */ jsxs(
+                    DropdownMenuItem,
+                    {
+                      onClick: () => setModalState({ type: "editBoard" }),
+                      children: [
+                        /* @__PURE__ */ jsx(Pencil, { className: "mr-2 h-4 w-4" }),
+                        localization?.editBoard ?? t("kanban.list.editBoard", "Edit Board")
+                      ]
+                    }
+                  )
                 }
               ),
-              showDeleteBoard && (showCreateColumn || showUpdateBoard) && /* @__PURE__ */ jsx(DropdownMenuSeparator, {}),
-              showDeleteBoard && /* @__PURE__ */ jsxs(
-                DropdownMenuItem,
+              /* @__PURE__ */ jsxs(
+                PermissionAccess,
                 {
-                  onClick: () => setModalState({ type: "deleteBoard" }),
-                  className: "text-red-600 focus:text-red-600",
+                  permission: kanbanPermissions.board.delete(boardFacts),
                   children: [
-                    /* @__PURE__ */ jsx(Trash2, { className: "mr-2 h-4 w-4" }),
-                    localization?.deleteBoard ?? t("kanban.forms.deleteBoard", "Delete Board")
+                    /* @__PURE__ */ jsx(DropdownMenuSeparator, {}),
+                    /* @__PURE__ */ jsxs(
+                      DropdownMenuItem,
+                      {
+                        onClick: () => setModalState({ type: "deleteBoard" }),
+                        className: "text-red-600 focus:text-red-600",
+                        children: [
+                          /* @__PURE__ */ jsx(Trash2, { className: "mr-2 h-4 w-4" }),
+                          localization?.deleteBoard ?? t("kanban.forms.deleteBoard", "Delete Board")
+                        ]
+                      }
+                    )
                   ]
                 }
               )
             ] })
-          ] })
+          ] }) })
         ] }),
         orderedColumns.length > 0 ? /* @__PURE__ */ jsx(
           KanbanBoard,
           {
             boardId,
+            ownerId: board.ownerId,
+            organizationId: board.organizationId,
             columns: orderedColumns,
             kanbanState,
-            canMoveColumns: !isCheckingColumnMove && canMoveColumns,
-            canMoveTasks: !isCheckingTaskMove && canMoveTasks,
             onKanbanChange: handleKanbanChange,
             onAddTask: (columnId) => setModalState({ type: "addTask", columnId }),
             onEditTask: (columnId, taskId) => setModalState({ type: "editTask", columnId, taskId }),
@@ -293,11 +296,9 @@ function BoardPage({ boardId }) {
               "Create your first column to start organizing tasks."
             ),
             action: /* @__PURE__ */ jsx(
-              CanAccess,
+              PermissionAccess,
               {
-                resource: "kanban:column",
-                action: "create",
-                params: { boardId },
+                permission: kanbanPermissions.column.create(boardFacts),
                 children: /* @__PURE__ */ jsxs(Button, { onClick: () => setModalState({ type: "addColumn" }), children: [
                   /* @__PURE__ */ jsx(Plus, { className: "mr-2 h-4 w-4" }),
                   localization?.addColumn ?? t("kanban.list.addColumn", "Add Column")
@@ -460,6 +461,8 @@ function BoardPage({ boardId }) {
                 {
                   columnId: modalState.columnId,
                   boardId,
+                  ownerId: board.ownerId,
+                  organizationId: board.organizationId,
                   columns: board.columns || [],
                   onClose: closeModal,
                   onSuccess: closeModal
@@ -484,6 +487,8 @@ function BoardPage({ boardId }) {
                   {
                     columnId: modalState.columnId,
                     boardId,
+                    ownerId: board.ownerId,
+                    organizationId: board.organizationId,
                     taskId: modalState.taskId,
                     task: board.columns?.find((c) => c.id === modalState.columnId)?.tasks?.find((t2) => t2.id === modalState.taskId),
                     columns: board.columns || [],

package/dist/packages/stack/src/plugins/kanban/client/components/pages/board-page.mjs

@@ -1,10 +1,12 @@
 "use client";
 import { jsx } from 'react/jsx-runtime';
 import { lazy } from 'react';
-import { ComposedRoute } from '@btst/stack/client/components';
+import { ComposedRoute, PermissionRouteAccess } from '@btst/stack/client/components';
 import { DefaultError } from '../shared/default-error.mjs';
 import { BoardSkeleton } from '../loading/board-skeleton.mjs';
 import { NotFoundPage } from './404-page.mjs';
+import { useSuspenseBoard } from '../../hooks/kanban-hooks.mjs';
+import { kanbanPermissions } from '../../../../../../../../plugins/kanban/permissions.mjs';
 
 const BoardPage = lazy(
   () => import('./board-page.internal.mjs').then((m) => ({
@@ -16,12 +18,7 @@ function BoardPageComponent({ boardId }) {
     ComposedRoute,
     {
       path: `/kanban/${boardId}`,
-      permission: {
-        resource: "kanban:board",
-        action: "read",
-        params: { id: boardId }
-      },
-      PageComponent: BoardPage,
+      PageComponent: AuthorizedBoardPage,
       ErrorComponent: DefaultError,
       LoadingComponent: BoardSkeleton,
       NotFoundComponent: NotFoundPage,
@@ -30,5 +27,24 @@ function BoardPageComponent({ boardId }) {
     }
   );
 }
+function AuthorizedBoardPage({ boardId }) {
+  const { data: board, error, isFetching } = useSuspenseBoard(boardId);
+  if (error && !isFetching) throw error;
+  if (!board) return /* @__PURE__ */ jsx(NotFoundPage, {});
+  return /* @__PURE__ */ jsx(
+    PermissionRouteAccess,
+    {
+      permission: kanbanPermissions.board.read({
+        scope: "record",
+        boardId: board.id,
+        ...board.ownerId ? { ownerId: board.ownerId } : {},
+        ...board.organizationId ? { organizationId: board.organizationId } : {},
+        exists: true
+      }),
+      LoadingComponent: BoardSkeleton,
+      children: /* @__PURE__ */ jsx(BoardPage, { boardId })
+    }
+  );
+}
 
 export { BoardPageComponent };

package/dist/packages/stack/src/plugins/kanban/client/components/pages/boards-list-page.cjs

@@ -7,6 +7,7 @@ const components = require('@btst/stack/client/components');
 const defaultError = require('../shared/default-error.cjs');
 const boardsListSkeleton = require('../loading/boards-list-skeleton.cjs');
 const _404Page = require('./404-page.cjs');
+const plugins_kanban_permissions = require('../../../../../../../../plugins/kanban/permissions.cjs');
 
 const BoardsListPage = React.lazy(
   () => import('./boards-list-page.internal.cjs').then((m) => ({
@@ -18,7 +19,7 @@ function BoardsListPageComponent() {
     components.ComposedRoute,
     {
       path: "/kanban",
-      permission: { resource: "kanban:board", action: "read" },
+      permission: plugins_kanban_permissions.kanbanPermissions.board.read({ scope: "collection" }),
       PageComponent: BoardsListPage,
       ErrorComponent: defaultError.DefaultError,
       LoadingComponent: boardsListSkeleton.BoardsListSkeleton,