@campxdev/shared 1.11.6 → 1.11.7-0.alpha-22

package/src/permissions/ValidateAccess.tsx

@@ -1,21 +1,40 @@
 import React from 'react'
-import { Permission, PermissionsStore, SquarePermissions } from '../shared-state/PermissionsStore'
+import { UserStore } from '../shared-state'
+import {
+  EnrollPermissions,
+  Permission,
+  PermissionsStore,
+  SquarePermissions,
+} from '../shared-state/PermissionsStore'
 
 export default function ValidateAccess({
   accessKey,
   children,
   checkForMasterSlave = false,
+  checkIsMasterInstitution = false,
 }: {
-  accessKey: Permission | SquarePermissions
+  accessKey: Permission | SquarePermissions | EnrollPermissions
   children: React.ReactNode
   checkForMasterSlave?: boolean
+  checkIsMasterInstitution?: boolean
 }) {
-  const { permissions, institutionType } = PermissionsStore.useState((s) => s)
+  const {
+    permissions,
+    institutionType,
+    masterInstitutionUniqueId,
+    isMasterInstitution,
+  } = PermissionsStore.useState((s) => s)
+
+  const { user } = UserStore.useState((s) => s)
   const hasAccess = checkHasAccess(
     checkForMasterSlave,
     accessKey,
     institutionType,
     permissions,
+    checkIsMasterInstitution,
+    isMasterInstitution,
+    masterInstitutionUniqueId,
+    user,
   )
 
   if (hasAccess) {
@@ -29,12 +48,22 @@ const checkHasAccess = (
   accessKey,
   institutionType,
   permissions,
+  checkIsMasterInstitution,
+  isMasterInstitution,
+  masterInstitutionUniqueId,
+  user,
 ) => {
   if (checkForMasterSlave) {
-    return permissions[accessKey] && institutionType == 'MASTER_CHILD'
-      ? true
-      : false
-  } else {
-    return accessKey ? permissions[accessKey] : true
+    if (institutionType == 'MASTER_CHILD') {
+      if (checkIsMasterInstitution) {
+        return (
+          permissions[accessKey] &&
+          user.institutionIds.includes(masterInstitutionUniqueId) &&
+          isMasterInstitution
+        )
+      }
+      return accessKey ? permissions[accessKey] : true
+    }
   }
+  return accessKey ? permissions[accessKey] : true
 }