@crowdin/app-project-module 0.72.0 → 0.73.0

package/out/middlewares/integration-credentials.js

@@ -53,7 +53,7 @@ function handle(config, integration, optional = false) {
             if (projectIntegrationCredentials.length) {
                 for (const credentials of projectIntegrationCredentials) {
                     ownerIds.push(crowdinAppFunctions.parseCrowdinId(credentials.id).userId);
-                    if (yield checkUserAccessToIntegration(credentials, `${userId}`)) {
+                    if (checkUserAccessToIntegration(credentials, `${userId}`)) {
                         integrationCredentials = credentials;
                         clientId = credentials.id;
                         req.crowdinContext.clientId = clientId;
@@ -99,14 +99,11 @@ function handle(config, integration, optional = false) {
 }
 exports.default = handle;
 function checkUserAccessToIntegration(integrationCredentials, userId) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const projectIntegrationConfig = yield (0, storage_1.getStorage)().getIntegrationConfig(integrationCredentials.id);
-        if (projectIntegrationConfig === null || projectIntegrationConfig === void 0 ? void 0 : projectIntegrationConfig.config) {
-            const appSettings = JSON.parse(projectIntegrationConfig.config);
-            return ((appSettings === null || appSettings === void 0 ? void 0 : appSettings.managers) || []).includes(userId);
-        }
-        return false;
-    });
+    if (integrationCredentials === null || integrationCredentials === void 0 ? void 0 : integrationCredentials.managers) {
+        const managers = JSON.parse(integrationCredentials.managers);
+        return (managers || []).includes(userId);
+    }
+    return false;
 }
 function getIntegrationManagedBy(ownerIds, req) {
     return __awaiter(this, void 0, void 0, function* () {

package/out/modules/integration/handlers/invite-users.d.ts

@@ -0,0 +1,3 @@
+/// <reference types="qs" />
+import { Response } from 'express';
+export default function handle(): (req: import("../../../types").CrowdinClientRequest | import("express").Request<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>, res: Response<any, Record<string, any>>, next: Function) => void;

package/out/modules/integration/handlers/invite-users.js

@@ -0,0 +1,268 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const util_1 = require("../../../util");
+const types_1 = require("../../../types");
+const storage_1 = require("../../../storage");
+const users_1 = require("./users");
+const CONSTANTS = {
+    MAX_EMAIL_LENGTH: 76,
+    MANAGER_ROLES: ['owner', 'manager'],
+    PROJECT_INTEGRATIONS_MODULE_TYPE: 'project-integrations',
+};
+function handle() {
+    return (0, util_1.runAsyncWrapper)((req, res) => __awaiter(this, void 0, void 0, function* () {
+        const onlyCheck = req.body.onlyCheck;
+        const usersToInvite = req.body.users;
+        if (!Array.isArray(usersToInvite)) {
+            return res.status(400).send('Invalid request');
+        }
+        const client = req.crowdinApiClient;
+        const projectId = req.crowdinContext.jwtPayload.context.project_id;
+        const userId = req.crowdinContext.jwtPayload.context.user_id;
+        const { projectMembers, organizationMembers } = yield (0, users_1.getUsers)({ client, projectId });
+        const integrationCredentials = yield (0, storage_1.getStorage)().getIntegrationCredentials(req.crowdinContext.clientId);
+        let applicationInstallation = null;
+        try {
+            applicationInstallation = yield client.applicationsApi.getApplicationInstallation(req.crowdinContext.appIdentifier);
+        }
+        catch (error) {
+            if (error.code !== 403) {
+                console.error('Failed to get application installation', error);
+            }
+        }
+        const isAdmin = organizationMembers.some((member) => member.id === +userId && member.isAdmin) ||
+            projectMembers.some((member) => member.id === +userId && 'role' in member && member.role === 'owner');
+        const hasManagerAccess = isAdmin ||
+            projectMembers.some((member) => member.id === +userId &&
+                ('role' in member ? CONSTANTS.MANAGER_ROLES.includes(member.role) : member.isManager));
+        if (!hasManagerAccess) {
+            return res.status(403).send({ error: 'Access denied' });
+        }
+        const usersWhoWillBeInvitedToOrganization = filterOrganizationUsers(usersToInvite);
+        const usersWhoWillBeInvitedToProject = filterProjectUsers({
+            usersToInvite,
+            projectMembers,
+            organizationMembers,
+        });
+        const usersWhoNotIssetInApplicationInstallation = filterNotIssetApplicationUsers({
+            usersToInvite,
+            applicationInstallation,
+            projectMembers,
+            organizationMembers,
+        });
+        const usersWhoNotIssetInIntegration = filterNotIssetIntegrationUsers({
+            usersToInvite,
+            integrationCredentials,
+            projectMembers,
+            organizationMembers,
+        });
+        if (onlyCheck) {
+            return res.send({
+                data: {
+                    isAdmin,
+                    editApplicationAvailable: applicationInstallation !== null,
+                    usersWhoWillBeInvitedToOrganization,
+                    usersWhoWillBeInvitedToProject,
+                    usersWhoNotIssetInApplicationInstallation,
+                    usersWhoNotIssetInIntegration,
+                },
+            });
+        }
+        const response = yield inviteUsers({
+            req,
+            projectId,
+            isAdmin,
+            usersToInvite,
+            applicationInstallation,
+            usersWhoWillBeInvitedToOrganization,
+            usersWhoWillBeInvitedToProject,
+            usersWhoNotIssetInApplicationInstallation,
+        });
+        return res.send(response);
+    }));
+}
+exports.default = handle;
+function filterOrganizationUsers(usersToInvite) {
+    return usersToInvite.filter((identifier) => (0, util_1.validateEmail)(identifier)).map((name) => ({ name: `${name}` }));
+}
+function filterProjectUsers({ usersToInvite, projectMembers, organizationMembers, }) {
+    return usersToInvite
+        .map((identifier) => {
+        if ((0, util_1.validateEmail)(identifier)) {
+            return { name: `${identifier}` };
+        }
+        const user = projectMembers.find((member) => member.id === +identifier);
+        if (!user) {
+            const organizationUser = organizationMembers.find((member) => member.id === +identifier);
+            return organizationUser && !organizationUser.isAdmin
+                ? { id: organizationUser.id, name: (0, users_1.getUserFullName)(organizationUser) }
+                : null;
+        }
+        return ('role' in user ? !CONSTANTS.MANAGER_ROLES.includes(user.role) : !user.isManager)
+            ? { id: user.id, name: (0, users_1.getUserFullName)(user) }
+            : null;
+    })
+        .filter(Boolean);
+}
+function filterNotIssetApplicationUsers({ usersToInvite, applicationInstallation, projectMembers, organizationMembers, }) {
+    let userIdentifiers = [];
+    if (!applicationInstallation) {
+        return [];
+    }
+    const projectIntegrationModules = applicationInstallation.data.modules.filter((module) => module.type === CONSTANTS.PROJECT_INTEGRATIONS_MODULE_TYPE);
+    if (!projectIntegrationModules.length) {
+        return [];
+    }
+    if (projectIntegrationModules.some((module) => module.permissions.user.value === types_1.UserPermissions.ALL_MEMBERS)) {
+        return [];
+    }
+    else {
+        userIdentifiers = usersToInvite.filter((userId) => projectIntegrationModules.every((module) => !module.permissions.user.ids.includes(+userId)));
+    }
+    return userIdentifiers
+        .map((identifier) => {
+        if ((0, util_1.validateEmail)(identifier)) {
+            return { name: `${identifier}` };
+        }
+        let user;
+        user = projectMembers.find((member) => member.id === +identifier);
+        if (!user) {
+            user = organizationMembers.find((member) => member.id === +identifier);
+        }
+        return user ? { id: user.id, name: (0, users_1.getUserFullName)(user) } : null;
+    })
+        .filter(Boolean);
+}
+function filterNotIssetIntegrationUsers({ usersToInvite, integrationCredentials, projectMembers, organizationMembers, }) {
+    let integrationManagers = [];
+    if (integrationCredentials === null || integrationCredentials === void 0 ? void 0 : integrationCredentials.managers) {
+        integrationManagers = JSON.parse(integrationCredentials.managers);
+    }
+    return usersToInvite
+        .map((identifier) => {
+        if (integrationManagers.includes(`${identifier}`)) {
+            return null;
+        }
+        if ((0, util_1.validateEmail)(identifier)) {
+            return { name: `${identifier}` };
+        }
+        let user;
+        user = projectMembers.find((member) => member.id === +identifier);
+        if (!user) {
+            user = organizationMembers.find((member) => member.id === +identifier);
+        }
+        return user ? { id: user.id, name: (0, users_1.getUserFullName)(user) } : null;
+    })
+        .filter(Boolean);
+}
+function inviteUsers({ req, projectId, isAdmin, usersToInvite, applicationInstallation, usersWhoWillBeInvitedToOrganization, usersWhoWillBeInvitedToProject, usersWhoNotIssetInApplicationInstallation, }) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const client = req.crowdinApiClient;
+        const alreadyAddedUserIds = yield inviteUsersToProject({
+            client,
+            projectId,
+            usersWhoWillBeInvitedToOrganization,
+            usersWhoWillBeInvitedToProject,
+        });
+        if (isAdmin) {
+            yield addUsersToApplicationInstallation({
+                client,
+                ownerId: req.integrationCredentials.ownerId,
+                applicationInstallation,
+                alreadyAddedUserIds,
+                usersWhoNotIssetInApplicationInstallation,
+            });
+        }
+        yield addUsersToIntegration({
+            clientId: req.crowdinContext.clientId,
+            alreadyAddedUserIds,
+            usersToInvite,
+        });
+        return { success: true };
+    });
+}
+function inviteUsersToProject({ client, projectId, usersWhoWillBeInvitedToOrganization, usersWhoWillBeInvitedToProject, }) {
+    return __awaiter(this, void 0, void 0, function* () {
+        let addedIds = [];
+        const emailInvites = usersWhoWillBeInvitedToOrganization.map((user) => user.name);
+        const userIdInvites = usersWhoWillBeInvitedToProject.map((user) => user.id).filter(Boolean);
+        try {
+            if (emailInvites.length) {
+                const inviteResponse = (yield client.usersApi.addProjectMember(projectId, {
+                    managerAccess: true,
+                    emails: emailInvites,
+                })); // TODO: fix typings in the @crowdin/crowdin-api-client
+                addedIds = inviteResponse.data.added.map((member) => member.id);
+            }
+        }
+        catch (error) {
+            console.error('Failed to invite users', error);
+        }
+        try {
+            if (userIdInvites.length) {
+                yield client.usersApi.addProjectMember(projectId, {
+                    managerAccess: true,
+                    userIds: userIdInvites,
+                }); // TODO: fix typings in the @crowdin/crowdin-api-client
+            }
+        }
+        catch (error) {
+            console.error('Failed to grant project manager access', error);
+        }
+        return addedIds;
+    });
+}
+function addUsersToApplicationInstallation({ client, ownerId, applicationInstallation, alreadyAddedUserIds, usersWhoNotIssetInApplicationInstallation, }) {
+    return __awaiter(this, void 0, void 0, function* () {
+        if (!applicationInstallation || !usersWhoNotIssetInApplicationInstallation.length) {
+            return;
+        }
+        const applicationInvites = [
+            ownerId,
+            ...alreadyAddedUserIds,
+            ...usersWhoNotIssetInApplicationInstallation.map((user) => user.id).filter(Boolean),
+        ];
+        const permissions = applicationInstallation.data.modules.filter((module) => module.type === CONSTANTS.PROJECT_INTEGRATIONS_MODULE_TYPE);
+        if (!permissions.length) {
+            return;
+        }
+        try {
+            for (const module of permissions) {
+                if (module.permissions.user.value === types_1.UserPermissions.ALL_MEMBERS) {
+                    continue;
+                }
+                const userIds = [...new Set([...module.permissions.user.ids, ...applicationInvites])];
+                client.applicationsApi.editApplicationInstallation(applicationInstallation.data.identifier, [
+                    {
+                        op: 'replace',
+                        path: `/modules/${module.key}/permissions`,
+                        value: {
+                            user: {
+                                value: types_1.UserPermissions.RESTRICTED,
+                                ids: userIds,
+                            },
+                        },
+                    },
+                ]);
+            }
+        }
+        catch (error) {
+            console.error('Failed to update application permissions', error);
+        }
+    });
+}
+function addUsersToIntegration({ clientId, alreadyAddedUserIds, usersToInvite, }) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const integrationInvites = [...alreadyAddedUserIds, ...usersToInvite.filter((identifier) => +identifier)];
+        yield (0, storage_1.getStorage)().updateIntegrationManagers(clientId, JSON.stringify(integrationInvites.map((id) => `${id}`)));
+    });
+}

package/out/modules/integration/handlers/main.js

@@ -39,7 +39,7 @@ const defaults_1 = require("../util/defaults");
 const crowdinAppFunctions = __importStar(require("@crowdin/crowdin-apps-functions"));
 function handle(config, integration) {
     return (0, util_1.runAsyncWrapper)((req, res) => __awaiter(this, void 0, void 0, function* () {
-        var _a, _b;
+        var _a, _b, _c;
         const logger = req.logInfo || logger_1.log;
         const installed = !!req.crowdinApiClient;
         const loggedIn = !!req.integrationCredentials;
@@ -66,12 +66,18 @@ function handle(config, integration) {
         }
         else if (integration.getConfiguration) {
             const { userId } = crowdinAppFunctions.parseCrowdinId(req.crowdinContext.clientId);
-            options.isOwner = +req.crowdinContext.jwtPayload.sub === userId;
-            const configurationFields = yield integration.getConfiguration(req.crowdinContext.jwtPayload.context.project_id, req.crowdinApiClient, req.integrationCredentials);
-            options.configurationFields = configurationFields;
+            options.hasOrganization = !!req.crowdinContext.jwtPayload.domain;
+            options.isOwner = req.integrationCredentials.ownerId === userId;
             options.config = JSON.stringify(req.integrationSettings || {});
             options.reloadOnConfigSave = !!integration.reloadOnConfigSave;
             options.integrationPagination = integration.integrationPagination;
+            if ((_b = req.query) === null || _b === void 0 ? void 0 : _b.parentUrl) {
+                const parentUrl = new URL(req.query.parentUrl);
+                parentUrl.searchParams.set('zen-mode', 'true');
+                options.zenModeUrl = parentUrl.toString();
+            }
+            const configurationFields = yield integration.getConfiguration(req.crowdinContext.jwtPayload.context.project_id, req.crowdinApiClient, req.integrationCredentials);
+            options.configurationFields = configurationFields;
             logger(`Adding configuration fields ${JSON.stringify(configurationFields, null, 2)}`);
         }
         options.infoModal = integration.infoModal;
@@ -96,7 +102,7 @@ function handle(config, integration) {
             : null;
         options.notice = integration.notice;
         options.asyncProgress = {
-            checkInterval: ((_b = integration.asyncProgress) === null || _b === void 0 ? void 0 : _b.checkInterval) || 1000,
+            checkInterval: ((_c = integration.asyncProgress) === null || _c === void 0 ? void 0 : _c.checkInterval) || 1000,
         };
         logger(`Routing user to ${view} view`);
         return res.render(view, options);

package/out/modules/integration/handlers/users.d.ts

@@ -0,0 +1,13 @@
+/// <reference types="qs" />
+import Crowdin, { UsersModel } from '@crowdin/crowdin-api-client';
+import { Response } from 'express';
+export type ProjectMember = UsersModel.ProjectMember | UsersModel.EnterpriseProjectMember;
+export default function handle(): (req: import("../../../types").CrowdinClientRequest | import("express").Request<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>, res: Response<any, Record<string, any>>, next: Function) => void;
+export declare function getUsers({ client, projectId }: {
+    client: Crowdin;
+    projectId: number;
+}): Promise<{
+    projectMembers: ProjectMember[];
+    organizationMembers: UsersModel.User[];
+}>;
+export declare function getUserFullName(user: UsersModel.User | ProjectMember): string;

package/out/modules/integration/handlers/users.js

@@ -0,0 +1,102 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getUserFullName = exports.getUsers = void 0;
+const util_1 = require("../../../util");
+const storage_1 = require("../../../storage");
+const crowdinAppFunctions = __importStar(require("@crowdin/crowdin-apps-functions"));
+function handle() {
+    return (0, util_1.runAsyncWrapper)((req, res) => __awaiter(this, void 0, void 0, function* () {
+        const client = req.crowdinApiClient;
+        const ownerId = req.integrationCredentials.ownerId;
+        const { projectId } = crowdinAppFunctions.parseCrowdinId(req.crowdinContext.clientId);
+        const { projectMembers, organizationMembers } = yield getUsers({ client, projectId });
+        const uniqueUsers = new Map();
+        [...projectMembers, ...organizationMembers].forEach((manager) => {
+            if (manager.id !== ownerId && !uniqueUsers.has(manager.id)) {
+                uniqueUsers.set(manager.id, manager);
+            }
+        });
+        const sortedUsers = Array.from(uniqueUsers.values())
+            .sort((a, b) => {
+            const aValue = a.firstName || a.username || '';
+            const bValue = b.firstName || b.username || '';
+            return aValue.localeCompare(bValue);
+        })
+            .map((user) => ({
+            id: user.id.toString(),
+            name: getUserFullName(user),
+        }));
+        let integrationManagers = [];
+        const integrationCredentials = yield (0, storage_1.getStorage)().getIntegrationCredentials(req.crowdinContext.clientId);
+        if (integrationCredentials === null || integrationCredentials === void 0 ? void 0 : integrationCredentials.managers) {
+            integrationManagers = JSON.parse(integrationCredentials.managers);
+        }
+        res.json({
+            data: {
+                users: sortedUsers,
+                managers: integrationManagers,
+            },
+        });
+    }));
+}
+exports.default = handle;
+function getUsers({ client, projectId }) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const users = {
+            projectMembers: [],
+            organizationMembers: [],
+        };
+        const projectMembers = (yield client.usersApi.withFetchAll().listProjectMembers(projectId)).data;
+        users.projectMembers = projectMembers.map((members) => members.data);
+        if (client.organization) {
+            try {
+                const admins = (yield client.usersApi.withFetchAll().listUsers()).data;
+                users.organizationMembers = admins.map((admin) => admin.data);
+            }
+            catch (error) {
+                console.error('Failed to get organization users', error);
+            }
+        }
+        return users;
+    });
+}
+exports.getUsers = getUsers;
+function getUserFullName(user) {
+    const ownerFullName = 'fullName' in user ? user.fullName : ((user.firstName || '') + ' ' + (user.lastName || '')).trim();
+    return !!ownerFullName && (user === null || user === void 0 ? void 0 : user.username) !== ownerFullName
+        ? `${ownerFullName} (${user === null || user === void 0 ? void 0 : user.username})`
+        : user === null || user === void 0 ? void 0 : user.username;
+}
+exports.getUserFullName = getUserFullName;

package/out/modules/integration/index.js

@@ -64,6 +64,8 @@ const subscription_info_1 = __importDefault(require("./handlers/subscription-inf
 const sync_settings_1 = __importDefault(require("./handlers/sync-settings"));
 const sync_settings_save_1 = __importDefault(require("./handlers/sync-settings-save"));
 const user_errors_1 = __importDefault(require("./handlers/user-errors"));
+const users_1 = __importDefault(require("./handlers/users"));
+const invite_users_1 = __importDefault(require("./handlers/invite-users"));
 const cron_1 = require("./util/cron");
 const storage_1 = require("../../storage");
 function register({ config, app }) {
@@ -222,6 +224,18 @@ function register({ config, app }) {
         checkSubscriptionExpiration: true,
         moduleKey: integrationLogic.key,
     }), (0, integration_credentials_1.default)(config, integrationLogic), (0, user_errors_1.default)());
+    app.get('/api/users', json_response_1.default, (0, crowdin_client_1.default)({
+        config,
+        optional: false,
+        checkSubscriptionExpiration: true,
+        moduleKey: integrationLogic.key,
+    }), (0, integration_credentials_1.default)(config, integrationLogic), (0, users_1.default)());
+    app.post('/api/invite-users', json_response_1.default, (0, crowdin_client_1.default)({
+        config,
+        optional: false,
+        checkSubscriptionExpiration: true,
+        moduleKey: integrationLogic.key,
+    }), (0, integration_credentials_1.default)(config, integrationLogic), (0, invite_users_1.default)());
     cron.schedule('0 0 1 * *', () => (0, cron_1.removeFinishedJobs)());
 }
 exports.register = register;

package/out/modules/integration/types.d.ts

@@ -355,6 +355,7 @@ export interface IntegrationCredentials {
     id: string;
     credentials: any;
     crowdinId: string;
+    managers?: any;
 }
 export interface IntegrationConfig {
     id: number;

package/out/modules/integration/util/defaults.js

@@ -147,27 +147,6 @@ function applyIntegrationModuleDefaults(config, integration) {
             fields = yield getUserSettings(projectId, crowdinClient, integrationCredentials);
         }
         const defaultSettings = [];
-        const mangers = yield getManagers(crowdinClient, projectId, integrationCredentials.ownerId);
-        if (mangers.length) {
-            defaultSettings.push({
-                key: 'managers',
-                label: 'Managers',
-                type: 'select',
-                isMulti: true,
-                isSearchable: true,
-                options: mangers.map((manager) => {
-                    const ownerFullName = 'fullName' in manager
-                        ? manager.fullName
-                        : ((manager.firstName || '') + ' ' + (manager.lastName || '')).trim();
-                    return {
-                        value: manager.id.toString(),
-                        label: !!ownerFullName && (manager === null || manager === void 0 ? void 0 : manager.username) !== ownerFullName
-                            ? `${ownerFullName} (${manager === null || manager === void 0 ? void 0 : manager.username})`
-                            : manager === null || manager === void 0 ? void 0 : manager.username,
-                    };
-                }),
-            });
-        }
         if (project.data.inContext) {
             defaultSettings.push({
                 key: 'inContext',
@@ -320,30 +299,3 @@ function getOAuthLoginFormId(clientId) {
     return `oauth_form_${clientId}`;
 }
 exports.getOAuthLoginFormId = getOAuthLoginFormId;
-function getManagers(client, projectId, ownerId) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const managers = [];
-        if (client.organization) {
-            try {
-                const admins = (yield client.usersApi.withFetchAll().listUsers()).data.filter((user) => user.data.isAdmin);
-                managers.push(...admins.map((admin) => admin.data));
-            }
-            catch (e) {
-                console.error('Failed to get organization users', e);
-            }
-        }
-        const projectMembers = (yield client.usersApi.withFetchAll().listProjectMembers(projectId)).data.filter((user) => 'role' in user.data ? ['owner', 'manager'].includes(user.data.role) : user.data.isManager);
-        managers.push(...projectMembers.map((members) => members.data));
-        const uniqueManagers = new Map();
-        managers.forEach((manager) => {
-            if (manager.id !== ownerId && !uniqueManagers.has(manager.id)) {
-                uniqueManagers.set(manager.id, manager);
-            }
-        });
-        return Array.from(uniqueManagers.values()).sort((a, b) => {
-            const aValue = a.firstName || a.username || '';
-            const bValue = b.firstName || b.username || '';
-            return aValue.localeCompare(bValue);
-        });
-    });
-}

package/out/modules/manifest.js

@@ -285,11 +285,14 @@ function handle(config) {
     if (!(0, subscription_1.isAppFree)(config)) {
         events['subscription_paid'] = '/subscription-paid';
     }
+    const defaultScopes = config.projectIntegration
+        ? [types_1.Scope.USERS, types_1.Scope.PROJECTS, types_1.Scope.APPLICATIONS]
+        : [types_1.Scope.PROJECTS];
     return (_req, res) => {
         const manifest = Object.assign(Object.assign(Object.assign(Object.assign({ identifier: config.identifier, name: config.name, logo: (0, util_1.getLogoUrl)(), baseUrl: config.baseUrl, authentication: {
                 type: config.authenticationType || types_1.AuthenticationType.APP,
                 clientId: config.clientId,
-            } }, (config.agent && { agent: config.agent })), { events, scopes: config.scopes ? config.scopes : [types_1.Scope.PROJECTS] }), (config.defaultPermissions && { default_permissions: config.defaultPermissions })), { modules });
+            } }, (config.agent && { agent: config.agent })), { events, scopes: config.scopes ? config.scopes : defaultScopes }), (config.defaultPermissions && { default_permissions: config.defaultPermissions })), { modules });
         res.send(manifest);
     };
 }

package/out/static/css/styles.css

@@ -67,6 +67,10 @@
     margin: 0;
 }
 
+.m-2 {
+    margin: 16px;
+}
+
 .info-text {
     max-width: 800px;
 }
@@ -259,3 +263,76 @@
         display: none;
     }
 }
+
+.confirm-users-block .flex > div {
+    width: 40%;
+    margin-bottom: 8px
+}
+
+.confirm-users-block crowdin-p {
+    line-height: 1;
+}
+
+table {
+    width: 100%;
+    border-collapse: separate;
+    border-spacing: 0;
+}
+th, td {
+    padding: 16px;
+    text-align: left;
+    border-bottom: 1px solid var(--crowdin-border-color);
+}
+th {
+    font-size: 14px;
+}
+.permission-description {
+    font-size: 12px;
+    color: var(--crowdin-text-muted);
+    margin-top: 4px;
+}
+.affected-users {
+    ul {
+        list-style: none;
+        padding: 0;
+        margin: 0;
+    }
+
+    li {
+        font-size: 14px;
+
+        &:not(:last-child) {
+            margin-bottom: 4px;
+        }
+    }
+}
+
+.badge {
+    display: inline-block;
+    padding: 4px 12px;
+    border-radius: 15px;
+    font-size: 12px;
+    font-weight: 500;
+    text-align: center;
+    position: relative;
+    cursor: default;
+}
+.badge-granted {
+    background-color: var(--crowdin-success);
+    color: var(--crowdin-white);
+}
+
+.badge-will-be-granted {
+    background-color: var(--crowdin-warning-bg);
+    color: var(--crowdin-warning);
+}
+
+.badge-not-available {
+    background-color: var(--crowdin-danger);
+    color: var(--crowdin-white);
+}
+
+.status {
+    position: relative;
+    text-align: right;
+}

package/out/storage/index.d.ts

@@ -11,6 +11,7 @@ export interface Storage {
     deleteCrowdinCredentials(id: string): Promise<void>;
     saveIntegrationCredentials(id: string, credentials: any, crowdinId: string): Promise<void>;
     updateIntegrationCredentials(id: string, credentials: any): Promise<void>;
+    updateIntegrationManagers(id: string, managers: any): Promise<void>;
     getIntegrationCredentials(id: string): Promise<IntegrationCredentials | undefined>;
     getAllIntegrationCredentials(crowdinId: string): Promise<IntegrationCredentials[]>;
     deleteIntegrationCredentials(id: string): Promise<void>;

package/out/storage/mysql.d.ts

@@ -28,6 +28,7 @@ export declare class MySQLStorage implements Storage {
     deleteCrowdinCredentials(id: string): Promise<void>;
     saveIntegrationCredentials(id: string, credentials: any, crowdinId: string): Promise<void>;
     updateIntegrationCredentials(id: string, credentials: any): Promise<void>;
+    updateIntegrationManagers(id: string, managers: any): Promise<void>;
     getIntegrationCredentials(id: string): Promise<IntegrationCredentials | undefined>;
     getAllIntegrationCredentials(crowdinId: string): Promise<IntegrationCredentials[]>;
     deleteIntegrationCredentials(id: string): Promise<void>;

package/out/storage/mysql.js

@@ -84,7 +84,8 @@ class MySQLStorage {
             (
                 id              varchar(255) primary key,
                 credentials     text,
-                crowdin_id      varchar(255) not null
+                crowdin_id      varchar(255) not null,
+                managers        text
             )
             `);
             yield connection.execute(`
@@ -266,11 +267,17 @@ class MySQLStorage {
             yield this.executeQuery((connection) => connection.execute('UPDATE integration_credentials SET credentials = ? WHERE id = ?', [credentials, id]));
         });
     }
+    updateIntegrationManagers(id, managers) {
+        return __awaiter(this, void 0, void 0, function* () {
+            yield this.dbPromise;
+            yield this.executeQuery((connection) => connection.execute('UPDATE integration_credentials SET managers = ? WHERE id = ?', [managers, id]));
+        });
+    }
     getIntegrationCredentials(id) {
         return __awaiter(this, void 0, void 0, function* () {
             yield this.dbPromise;
             return this.executeQuery((connection) => __awaiter(this, void 0, void 0, function* () {
-                const [rows] = yield connection.execute('SELECT id, credentials, crowdin_id as "crowdinId" FROM integration_credentials WHERE id = ?', [id]);
+                const [rows] = yield connection.execute('SELECT id, credentials, crowdin_id as "crowdinId", managers FROM integration_credentials WHERE id = ?', [id]);
                 return (rows || [])[0];
             }));
         });
@@ -279,7 +286,7 @@ class MySQLStorage {
         return __awaiter(this, void 0, void 0, function* () {
             yield this.dbPromise;
             return this.executeQuery((connection) => __awaiter(this, void 0, void 0, function* () {
-                const [rows] = yield connection.execute('SELECT id, credentials, crowdin_id as "crowdinId" FROM integration_credentials WHERE crowdin_id = ?', [crowdinId]);
+                const [rows] = yield connection.execute('SELECT id, credentials, crowdin_id as "crowdinId", managers FROM integration_credentials WHERE crowdin_id = ?', [crowdinId]);
                 return rows || [];
             }));
         });

package/out/storage/postgre.d.ts

@@ -35,6 +35,7 @@ export declare class PostgreStorage implements Storage {
     deleteCrowdinCredentials(id: string): Promise<void>;
     saveIntegrationCredentials(id: string, credentials: any, crowdinId: string): Promise<void>;
     updateIntegrationCredentials(id: string, credentials: any): Promise<void>;
+    updateIntegrationManagers(id: string, managers: any): Promise<void>;
     getIntegrationCredentials(id: string): Promise<IntegrationCredentials | undefined>;
     getAllIntegrationCredentials(crowdinId: string): Promise<IntegrationCredentials[]>;
     deleteIntegrationCredentials(id: string): Promise<void>;

package/out/storage/postgre.js

@@ -112,7 +112,8 @@ class PostgreStorage {
             (
                 id              varchar primary key,
                 credentials     varchar,
-                crowdin_id      varchar not null
+                crowdin_id      varchar not null,
+                managers        varchar
             )
             `);
             yield client.query(`
@@ -293,11 +294,17 @@ class PostgreStorage {
             yield this.executeQuery((client) => client.query('UPDATE integration_credentials SET credentials = $1 WHERE id = $2', [credentials, id]));
         });
     }
+    updateIntegrationManagers(id, managers) {
+        return __awaiter(this, void 0, void 0, function* () {
+            yield this.dbPromise;
+            yield this.executeQuery((client) => client.query('UPDATE integration_credentials SET managers = $1 WHERE id = $2', [managers, id]));
+        });
+    }
     getIntegrationCredentials(id) {
         return __awaiter(this, void 0, void 0, function* () {
             yield this.dbPromise;
             return this.executeQuery((client) => __awaiter(this, void 0, void 0, function* () {
-                const res = yield client.query('SELECT id, credentials, crowdin_id as "crowdinId" FROM integration_credentials WHERE id = $1', [id]);
+                const res = yield client.query('SELECT id, credentials, crowdin_id as "crowdinId", managers FROM integration_credentials WHERE id = $1', [id]);
                 return res === null || res === void 0 ? void 0 : res.rows[0];
             }));
         });
@@ -306,7 +313,7 @@ class PostgreStorage {
         return __awaiter(this, void 0, void 0, function* () {
             yield this.dbPromise;
             return this.executeQuery((client) => __awaiter(this, void 0, void 0, function* () {
-                const res = yield client.query('SELECT id, credentials, crowdin_id as "crowdinId" FROM integration_credentials WHERE crowdin_id = $1', [crowdinId]);
+                const res = yield client.query('SELECT id, credentials, crowdin_id as "crowdinId", managers FROM integration_credentials WHERE crowdin_id = $1', [crowdinId]);
                 return (res === null || res === void 0 ? void 0 : res.rows) || [];
             }));
         });

package/out/storage/sqlite.d.ts

@@ -22,6 +22,7 @@ export declare class SQLiteStorage implements Storage {
     private addColumn;
     private updateTables;
     private moveIntegrationSettings;
+    private migrateManagers;
     migrate(): Promise<void>;
     saveCrowdinCredentials(credentials: CrowdinCredentials): Promise<void>;
     updateCrowdinCredentials(credentials: CrowdinCredentials): Promise<void>;
@@ -30,6 +31,7 @@ export declare class SQLiteStorage implements Storage {
     deleteCrowdinCredentials(id: string): Promise<void>;
     saveIntegrationCredentials(id: string, credentials: any, crowdinId: string): Promise<void>;
     updateIntegrationCredentials(id: string, credentials: any): Promise<void>;
+    updateIntegrationManagers(id: string, managers: any): Promise<void>;
     getIntegrationCredentials(id: string): Promise<IntegrationCredentials | undefined>;
     getAllIntegrationCredentials(crowdinId: string): Promise<IntegrationCredentials[]>;
     deleteIntegrationCredentials(id: string): Promise<void>;

package/out/storage/sqlite.js

@@ -145,6 +145,26 @@ class SQLiteStorage {
             yield this.removeColumns('config', 'integration_credentials');
         });
     }
+    migrateManagers() {
+        return __awaiter(this, void 0, void 0, function* () {
+            const tableInfo = yield this.each('PRAGMA table_info(integration_credentials);', []);
+            const exists = tableInfo.some((columnInfo) => columnInfo.name === 'managers');
+            if (exists) {
+                return;
+            }
+            yield this.addColumn('integration_credentials', 'managers', 'null');
+            const integrationSettings = yield this.each('SELECT integration_id, config FROM integration_settings', []);
+            for (const settings of integrationSettings) {
+                const config = JSON.parse(settings.config);
+                if (config.managers) {
+                    yield this.run('UPDATE integration_credentials SET managers = ? WHERE id = ?', [
+                        JSON.stringify(config.managers),
+                        settings.integration_id,
+                    ]);
+                }
+            }
+        });
+    }
     migrate() {
         return __awaiter(this, void 0, void 0, function* () {
             let _connection_res;
@@ -186,7 +206,8 @@ class SQLiteStorage {
             (
                 id          varchar not null primary key,
                 credentials varchar not null,
-                crowdin_id  varchar not null
+                crowdin_id  varchar not null,
+                managers    varchar     null
             );
             `, []);
                 yield this._run(`
@@ -283,6 +304,7 @@ class SQLiteStorage {
                 // TODO: temporary code
                 yield this.updateTables();
                 yield this.moveIntegrationSettings();
+                yield this.migrateManagers();
             }
             catch (e) {
                 this._rej && this._rej(e);
@@ -353,16 +375,19 @@ class SQLiteStorage {
     updateIntegrationCredentials(id, credentials) {
         return this.run('UPDATE integration_credentials SET credentials = ? WHERE id = ?', [credentials, id]);
     }
+    updateIntegrationManagers(id, managers) {
+        return this.run('UPDATE integration_credentials SET managers = ? WHERE id = ?', [managers, id]);
+    }
     getIntegrationCredentials(id) {
         return __awaiter(this, void 0, void 0, function* () {
-            const row = yield this.get('SELECT id, credentials, crowdin_id as crowdinId FROM integration_credentials WHERE id = ?', [id]);
+            const row = yield this.get('SELECT id, credentials, crowdin_id as crowdinId, managers FROM integration_credentials WHERE id = ?', [id]);
             if (row) {
                 return row;
             }
         });
     }
     getAllIntegrationCredentials(crowdinId) {
-        return this.each('SELECT id, credentials, crowdin_id as crowdinId FROM integration_credentials WHERE crowdin_id = ?', [crowdinId]);
+        return this.each('SELECT id, credentials, crowdin_id as crowdinId, managers FROM integration_credentials WHERE crowdin_id = ?', [crowdinId]);
     }
     deleteIntegrationCredentials(id) {
         return __awaiter(this, void 0, void 0, function* () {

package/out/types.d.ts

@@ -281,7 +281,8 @@ export declare enum Scope {
     AI = "ai",
     AI_PROVIDERS = "ai.provider",
     AI_PROMPTS = "ai.prompt",
-    AI_PROXIES = "ai.proxy"
+    AI_PROXIES = "ai.proxy",
+    APPLICATIONS = "application"
 }
 export interface CrowdinClientRequest extends Request {
     crowdinApiClient: Crowdin;
@@ -423,7 +424,8 @@ export declare enum UserPermissions {
     OWNER = "owner",
     MANAGERS = "managers",
     ALL_MEMBERS = "all",
-    GUESTS = "guests"
+    GUESTS = "guests",
+    RESTRICTED = "restricted"
 }
 export declare enum ProjectPermissions {
     OWN = "own",

package/out/types.js

@@ -34,6 +34,7 @@ var Scope;
     Scope["AI_PROVIDERS"] = "ai.provider";
     Scope["AI_PROMPTS"] = "ai.prompt";
     Scope["AI_PROXIES"] = "ai.proxy";
+    Scope["APPLICATIONS"] = "application";
 })(Scope = exports.Scope || (exports.Scope = {}));
 var AccountType;
 (function (AccountType) {
@@ -58,6 +59,7 @@ var UserPermissions;
     UserPermissions["MANAGERS"] = "managers";
     UserPermissions["ALL_MEMBERS"] = "all";
     UserPermissions["GUESTS"] = "guests";
+    UserPermissions["RESTRICTED"] = "restricted";
 })(UserPermissions = exports.UserPermissions || (exports.UserPermissions = {}));
 var ProjectPermissions;
 (function (ProjectPermissions) {

package/out/util/index.d.ts

@@ -13,3 +13,4 @@ export declare function isAuthorizedConfig(config: Config | UnauthorizedConfig):
 export declare function isJson(string: string): boolean;
 export declare function getPreviousDate(days: number): Date;
 export declare function prepareFormDataMetadataId(req: CrowdinClientRequest, config: Config): Promise<string>;
+export declare function validateEmail(email: string | number): boolean;

package/out/util/index.js

@@ -32,7 +32,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     });
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.prepareFormDataMetadataId = exports.getPreviousDate = exports.isJson = exports.isAuthorizedConfig = exports.getLogoUrl = exports.executeWithRetry = exports.decryptData = exports.encryptData = exports.runAsyncWrapper = exports.CodeError = void 0;
+exports.validateEmail = exports.prepareFormDataMetadataId = exports.getPreviousDate = exports.isJson = exports.isAuthorizedConfig = exports.getLogoUrl = exports.executeWithRetry = exports.decryptData = exports.encryptData = exports.runAsyncWrapper = exports.CodeError = void 0;
 const crypto = __importStar(require("crypto-js"));
 const storage_1 = require("../storage");
 const types_1 = require("../types");
@@ -151,3 +151,14 @@ function prepareFormDataMetadataId(req, config) {
     });
 }
 exports.prepareFormDataMetadataId = prepareFormDataMetadataId;
+function validateEmail(email) {
+    if (!isNaN(+email)) {
+        return false;
+    }
+    if (`${email}`.trim().length > 76) {
+        return false;
+    }
+    const emailRegExp = /^(([^<>()[\]\\.,;:\s@"]+(\.[^<>()[\]\\.,;:\s@"]+)*)|(".+"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\])|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/;
+    return emailRegExp.test(String(email).toLowerCase());
+}
+exports.validateEmail = validateEmail;

package/out/views/main.handlebars

@@ -36,6 +36,7 @@
             <div id="buttons">
                 <crowdin-button id="show-integration-btn" class="hidden" icon-before="arrow_back" onclick="showIntegration();">Integration</crowdin-button>
                 <crowdin-button id="show-error-logs-btn" icon-before="list" onclick="showErrorLogs();">Error logs</crowdin-button>
+                <crowdin-button icon-before="manage_accounts" onclick="showPermissionsDialog()">Permissions</crowdin-button>
                 {{#if infoModal}}
                     <crowdin-button icon-before="info" onclick="openModal(infoModal);">{{infoModal.title}}</crowdin-button>
                 {{/if}}
@@ -115,19 +116,113 @@
              <crowdin-button class="ml-10" secondary onclick="integrationLogout()">Log out</crowdin-button>
          </div>
     </crowdin-modal>
-    {{#if infoModal}}
+
     <crowdin-modal
         style="display: none;"
-        id="info-modal"
-        modal-width="50"
-        modal-title="{{infoModal.title}}"
+        id="permissions-modal"
+        modal-title="Permissions"
         close-button-title="Close"
+        close-button
+        body-overflow-unset
     >
-         <div>
-             {{{infoModal.content}}}
-         </div>
+        <div class="loader hidden">
+            <crowdin-progress-indicator></crowdin-progress-indicator>
+        </div>
+        <div class="permissions-modal-content">
+            <div class="select-users-block">
+                <crowdin-users-select
+                    allow-new-options
+                    is-multi
+                    is-searchable
+                    id="users"
+                    key="users"
+                    label="Users"
+                    help-text="Search for members by name, username, email, or invite new ones using their email."
+                    is-position-fixed
+                    onchange="inviteUsers()"
+                    >
+                </crowdin-select>
+            </div>
+            <div class="select-users-info">
+                <div class="confirm-users-block mt-2 hidden">
+                    <table>
+                        <thead>
+                            <tr>
+                                <th style="width: 40%;">Permission Type (Upcoming changes)</th>
+                                <th style="width: 35%;">Users</th>
+                                <th class="status" style="width: 20%;">Status</th>
+                            </tr>
+                        </thead>
+                        <tbody>
+                            {{#if hasOrganization}}
+                                <tr class="organization-invite">
+                                    <td>
+                                        <crowdin-p>Registration in Organization</crowdin-p>
+                                    </td>
+                                    <td class="affected-users"></td>
+                                    <td class="status"></td>
+                                </tr>
+                            {{/if}}
+                            <tr class="project-invite">
+                                <td>
+                                    <crowdin-p>Project Manager Access</crowdin-p>
+                                </td>
+                                <td class="affected-users"></td>
+                                <td class="status"></td>
+                            </tr>
+                            <tr class="application-settings-invite">
+                                <td>
+                                    <crowdin-p>Application Access</crowdin-p>
+                                    <div class="permission-description">{{name}} installation settings will be updated.</div>
+                                </td>
+                                <td class="affected-users"></td>
+                                <td class="status"></td>
+                            </tr>
+                            <tr class="application-credentials-invite">
+                                <td>
+                                    <crowdin-p>Access to the Integration</crowdin-p>
+                                    <div class="permission-description">{{name}} settings will be updated.</div>
+                                </td>
+                                <td class="affected-users"></td>
+                                <td class="status"></td>
+                            </tr>
+                        </tbody>
+                    </table>
+                </div>
+                {{#if zenModeUrl}}
+                    <div class="mt-2">
+                        <crowdin-input
+                            with-fixed-height
+                            label="Zen Mode link"
+                            help-text="This focused view allows you to concentrate solely on the Integrations section, eliminating distractions and providing a streamlined experience for managing your project integrations."
+                            value="{{zenModeUrl}}"
+                            name="zenModeLink"
+                            with-copy-button
+                        ></crowdin-input>
+                    </div>
+                {{/if}}
+            </div>
+        </div>
+
+        <div slot="footer">
+            <crowdin-button id="confirm-users-btn" outlined onclick="inviteUsers(false)">Save</crowdin-button>
+        </div>
     </crowdin-modal>
+
+    {{#if infoModal}}
+        <crowdin-modal
+            style="display: none;"
+            id="info-modal"
+            modal-width="50"
+            modal-title="{{infoModal.title}}"
+            close-button-title="Close"
+        >
+             <div>
+                 {{{infoModal.content}}}
+             </div>
+        </crowdin-modal>
     {{/if}}
+
     {{#if configurationFields}}
         <crowdin-modal
             style="display: none;"
@@ -785,7 +880,7 @@
         }
 
         function saveSettings() {
-            setLoader();
+            setLoader('#settings-modal');
             const settingsElements = Array.from(document.getElementById('modal-content').children);
             const tags = ['crowdin-checkbox', 'crowdin-select', 'crowdin-input'];
             const configReq = {};
@@ -820,7 +915,7 @@
                 })
                 .catch(e => catchRejection(e, 'Can\'t save settings'))
                 .finally(() => {
-                    unsetLoader();
+                    unsetLoader('#settings-modal');
                     settingsSaveBtn.removeAttribute('disabled');
                     closeModal(settingsModal);
                     {{#if reloadOnConfigSave}}
@@ -830,13 +925,174 @@
                 });
         }
 
-        function setLoader() {
-            const loader = document.querySelector('#settings-modal .loader');
+        function showConfirmUsersBlock() {
+            const confirmUsersBlock = document.querySelector('.confirm-users-block');
+            confirmUsersBlock.classList.remove('hidden');
+
+            const permissionsModal = document.getElementById('permissions-modal');
+            permissionsModal.removeAttribute('body-overflow-unset')
+        }
+
+        function hideConfirmUsersBlock() {
+            const confirmUsersBlock = document.querySelector('.confirm-users-block');
+            confirmUsersBlock.classList.add('hidden');
+
+            const permissionsModal = document.getElementById('permissions-modal');
+            permissionsModal.setAttribute('body-overflow-unset', true)
+        }
+
+        function showPermissionsDialog() {
+            hideConfirmUsersBlock();
+            openModal(permissions)
+            setLoader('#permissions-modal');
+            const select = document.getElementById('users');
+
+            select.value = '[]';
+
+            checkOrigin()
+                .then(restParams => fetch('api/users' + restParams))
+                .then(checkResponse)
+                .then((res) => {
+                console.log(res)
+                    let userOptions = res.data.users.map(user => `<option value="${user.id}">${user.name}</option>`).join('');
+                    select.innerHTML = userOptions;
+                    select.value = JSON.stringify(res.data.managers);
+                })
+                .catch(e => catchRejection(e, 'Can\'t fetch users'))
+                .finally(() => unsetLoader('#permissions-modal'));
+        }
+
+        async function inviteUsers(onlyCheck = true) {
+            setLoader('#permissions-modal');
+
+            const select = document.getElementById('users');
+
+            if (onlyCheck && select.value === '[]') {
+                hideConfirmUsersBlock();
+                unsetLoader('#permissions-modal');
+                return;
+            }
+
+            const params = {
+                users: JSON.parse(select.value),
+                onlyCheck,
+            };
+
+            checkOrigin()
+                .then(restParams => fetch('api/invite-users' + restParams, {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/json' },
+                    body: JSON.stringify(params)
+                }))
+                .then(checkResponse)
+                .then((response) => {
+                    if (!onlyCheck) {
+                        showToast('Users successfully updated');
+                        hideConfirmUsersBlock();
+                        closeModal(permissions);
+                        return;
+                    }
+
+                    prepareUsersConfirmBlock(response.data);
+                })
+                .catch(e => {
+                    catchRejection(e, e?.error || 'Can\'t invite users')
+                })
+                .finally(() => unsetLoader('#permissions-modal'));
+        }
+
+        function prepareUsersConfirmBlock(usersData) {
+            showConfirmUsersBlock();
+
+            const organizationInvite = document.querySelector('.organization-invite');
+            const projectInvite = document.querySelector('.project-invite');
+            const applicationCredentialsInvite = document.querySelector('.application-credentials-invite');
+
+            const grantedElement = '<span class="badge badge-granted">Available</span>';
+            const willGrantedElement = '<span class="badge badge-will-be-granted">Will Be Granted</span>';
+            const notAvailableElement = '<span class="badge badge-not-available">Manual Action Required</span>';
+
+            // only in enterprise
+            if (organizationInvite) {
+                const organizationWillGrantElement = '<span class="badge badge-will-be-granted">Will be registered</span>';
+
+                processUsersWhoWillBeInvited(organizationInvite, usersData.usersWhoWillBeInvitedToOrganization, organizationWillGrantElement, grantedElement);
+            }
+
+            processUsersWhoWillBeInvited(projectInvite, usersData.usersWhoWillBeInvitedToProject, willGrantedElement, grantedElement);
+            processUsersWhoWillBeInvited(applicationCredentialsInvite, usersData.usersWhoNotIssetInIntegration, willGrantedElement, grantedElement);
+
+            processUsersWhoWillBeInvitedApplicationSettings(usersData, willGrantedElement, grantedElement, notAvailableElement);
+        }
+
+        function processUsersWhoWillBeInvited(element, users, grantMessage, alreadyGrantedMessage) {
+            const tooltip = element.querySelector('.status');
+            const userList = element.querySelector('.affected-users');
+
+            if (users.length) {
+                tooltip.innerHTML = grantMessage;
+
+                let affectedUsers = '<ul>';
+                for (const user of users) {
+                    affectedUsers += `<li><crowdin-p>${user.name}</crowdin-p></li>`;
+                }
+                affectedUsers += '</ul>';
+                userList.innerHTML = affectedUsers;
+            } else {
+                tooltip.innerHTML = alreadyGrantedMessage;
+                userList.innerHTML = '<crowdin-p>&horbar;</crowdin-p>';
+            }
+        }
+
+        function processUsersWhoWillBeInvitedApplicationSettings(usersData, willGrantedElement, grantedElement, notAvailableElement) {
+            const applicationSettingsInvite = document.querySelector('.application-settings-invite');
+
+            const tooltip = applicationSettingsInvite.querySelector('.status');
+            const userList = applicationSettingsInvite.querySelector('.affected-users');
+
+            let affectedUsers = '<ul>';
+
+            if (!usersData.editApplicationAvailable) {
+                tooltip.innerHTML = `<crowdin-tooltip
+                    position="left"
+                    tooltip=">The application doesn't have permission to update this setting.">
+                        ${notAvailableElement}
+                    </crowdin-tooltip>`;
+                for (const user of usersData.usersWhoNotIssetInApplicationInstallation) {
+                    affectedUsers += `<li><crowdin-p>${user.name}</crowdin-p></li>`;
+                }
+                userList.innerHTML = affectedUsers + '</ul>';
+            } else if (!usersData.usersWhoNotIssetInApplicationInstallation.length) {
+                tooltip.innerHTML = grantedElement;
+                userList.innerHTML = '<crowdin-p>&horbar;</crowdin-p>';
+            } else {
+                if (usersData.isAdmin) {
+                    tooltip.innerHTML = willGrantedElement;
+                    for (const user of usersData.usersWhoNotIssetInApplicationInstallation) {
+                        affectedUsers += `<li><crowdin-p>${user.name}</crowdin-p></li>`;
+                    }
+                    userList.innerHTML = affectedUsers + '</ul>';
+                } else {
+                    tooltip.innerHTML = `<crowdin-tooltip
+                        position="left"
+                        tooltip="Only organization admins have permission to update this setting.">
+                            ${notAvailableElement}
+                        </crowdin-tooltip>`;
+                    for (const user of usersData.usersWhoNotIssetInApplicationInstallation) {
+                        affectedUsers += `<li><crowdin-p>${user.name}</crowdin-p></li>`;
+                    }
+                    userList.innerHTML = affectedUsers + '</ul>';
+                }
+            }
+        }
+
+        function setLoader(id) {
+            const loader = document.querySelector(`${id} .loader`);
             loader.classList.remove('hidden');
         }
 
-        function unsetLoader() {
-            const loader = document.querySelector('#settings-modal .loader');
+        function unsetLoader(id) {
+            const loader = document.querySelector(`${id} .loader`);
             setTimeout(function() {
                 loader.classList.add('hidden');
             }, 500)
@@ -845,6 +1101,8 @@
          const settingsModal = undefined;
     {{/if}}
 
+    const permissions = document.getElementById('permissions-modal');
+
     {{#if infoModal}}
          const infoModal = document.getElementById('info-modal');
     {{else}}
@@ -853,7 +1111,9 @@
 
     document.addEventListener('keydown', (event) => {
         if (event.keyCode == 27) {
-
+            if (users) {
+                closeModal(permissions);
+            }
             if (infoModal) {
                 closeModal(infoModal);
             }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crowdin/app-project-module",
-  "version": "0.72.0",
+  "version": "0.73.0",
   "description": "Module that generates for you all common endpoints for serving standalone Crowdin App",
   "main": "out/index.js",
   "types": "out/index.d.ts",