@dloizides/ui-access-admin 1.2.2 → 1.4.0

package/CHANGELOG.md

@@ -5,7 +5,24 @@ All notable changes to `@dloizides/ui-access-admin` are documented here.
 The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and the
 project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [1.2.1]
+## [1.4.0]
+
+### Changed
+
+- `UserManagementApi.createUser` and `resetPassword` are optional. Without `createUser` the panel hides Create; without `resetPassword` it hides each row's Reset password (FINREG-FUNDS-1 "Tenant funds, deal gate, blocking and roles"). Non-breaking.
+
+## [1.3.0]
+
+### Added
+
+- `PermissionMatrix`: read-only roles x permissions view (FINREG-FUNDS-1 "Tenant funds, deal gate, blocking and roles", AC-R2). Data injected; one card per role below `LAYOUT_COLLAPSE_BREAKPOINT`, a table above it.
+- `UserManagementPanel` edit modal: a required block reason when Active is off, sent as `blockedReason` (AC-B1). New `UserManagementPatch` type; `UserManagementUser.blockedReason`.
+
+### Changed
+
+- Peer `@dloizides/ui-layout` raised to `>=1.27.0` (needs `LAYOUT_COLLAPSE_BREAKPOINT`).
+
+## [1.2.2]
 
 ### Fixed
 

package/dist/index.d.mts

@@ -336,26 +336,29 @@ interface UserManagementUser {
     /** The tenant this user belongs to, or null for a platform-level account. */
     tenantId: string | null;
     active: boolean;
+    blockedReason?: string | null;
     /** ISO timestamp the user was created, when the directory reports it. */
     createdAt?: string;
 }
+interface UserManagementPatch {
+    displayName?: string;
+    role?: string;
+    tenantId?: string | null;
+    active?: boolean;
+    blockedReason?: string;
+}
 /** What the host is asked to do. Each rejects with an `Error` on failure. */
 interface UserManagementApi {
     listUsers(): Promise<UserManagementUser[]>;
-    createUser(input: {
+    createUser?(input: {
         email: string;
         password: string;
         displayName: string;
         role: string;
         tenantId: string | null;
     }): Promise<void>;
-    updateUser(id: string, patch: {
-        displayName?: string;
-        role?: string;
-        tenantId?: string | null;
-        active?: boolean;
-    }): Promise<void>;
-    resetPassword(id: string, password: string): Promise<void>;
+    updateUser(id: string, patch: UserManagementPatch): Promise<void>;
+    resetPassword?(id: string, password: string): Promise<void>;
 }
 /** One selectable tenant for the platform-admin tenant picker. */
 interface UserManagementTenant {
@@ -403,6 +406,37 @@ interface UserManagementPanelProps {
 
 declare const UserManagementPanel: ({ api, isPlatformAdmin, assignableRoles, tenants, t, testID, }: UserManagementPanelProps) => React.ReactElement;
 
+type PermissionMatrixTranslate = (key: string, p1?: string, p2?: string, p3?: string) => string;
+interface PermissionMatrixRole {
+    readonly id: string;
+    readonly label: string;
+}
+interface PermissionMatrixPermission {
+    readonly id: string;
+    readonly label: string;
+}
+type PermissionMatrixGrants = Readonly<Record<string, readonly string[] | undefined>>;
+interface PermissionMatrixCell {
+    readonly permission: PermissionMatrixPermission;
+    readonly granted: boolean;
+}
+interface PermissionMatrixColumn {
+    readonly role: PermissionMatrixRole;
+    readonly cells: readonly PermissionMatrixCell[];
+    readonly grantedCount: number;
+}
+interface PermissionMatrixProps {
+    readonly roles: readonly PermissionMatrixRole[];
+    readonly permissions: readonly PermissionMatrixPermission[];
+    readonly grants: PermissionMatrixGrants;
+    readonly t: PermissionMatrixTranslate;
+    readonly testID?: string;
+}
+
+declare const PermissionMatrix: ({ roles, permissions, grants, t, testID, }: PermissionMatrixProps) => React.ReactElement;
+
+declare function buildPermissionMatrix(roles: readonly PermissionMatrixRole[], permissions: readonly PermissionMatrixPermission[], grants: PermissionMatrixGrants): PermissionMatrixColumn[];
+
 /** Translate function — mirrors the fleet's `FM(key, p1?, p2?, p3?)` shape. */
 type AccessTranslate = (key: string, p1?: string, p2?: string, p3?: string) => string;
 interface UseCapabilityLinkMintOptions {
@@ -702,6 +736,18 @@ declare const ACCESS_ADMIN_I18N: {
     readonly usersUpdateFailed: "accessAdmin.users.updateFailed";
     readonly usersResetSuccess: "accessAdmin.users.resetSuccess";
     readonly usersResetFailed: "accessAdmin.users.resetFailed";
+    readonly usersFieldBlockedReason: "accessAdmin.users.fieldBlockedReason";
+    readonly usersBlockedReasonPlaceholder: "accessAdmin.users.blockedReasonPlaceholder";
+    readonly usersBlockedReasonHint: "accessAdmin.users.blockedReasonHint";
+    readonly permissionsHeading: "accessAdmin.permissions.heading";
+    readonly permissionsNote: "accessAdmin.permissions.note";
+    readonly permissionsColPermission: "accessAdmin.permissions.colPermission";
+    readonly permissionsGranted: "accessAdmin.permissions.granted";
+    readonly permissionsNotGranted: "accessAdmin.permissions.notGranted";
+    readonly permissionsCellLabel: "accessAdmin.permissions.cellLabel";
+    readonly permissionsReadOnlyHint: "accessAdmin.permissions.readOnlyHint";
+    readonly permissionsRoleCount: "accessAdmin.permissions.roleCount";
+    readonly permissionsEmpty: "accessAdmin.permissions.empty";
 };
 /** The shape of {@link ACCESS_ADMIN_I18N} — useful for typing an override map. */
 type AccessAdminI18n = typeof ACCESS_ADMIN_I18N;
@@ -714,6 +760,7 @@ declare const ACCESS_ADMIN_TEST_IDS: {
     readonly linkPanel: "access-link-panel";
     readonly accountPanel: "account-link-panel";
     readonly usersPanel: "user-management-panel";
+    readonly permissionMatrix: "permission-matrix";
 };
 
-export { ACCESS_ADMIN_I18N, ACCESS_ADMIN_TEST_IDS, type AccessAdminI18n, type AccessAdminPalette, AccessLinkPanel, type AccessLinkPanelProps, type AccessResultReporter, AccessResultTone, type AccessSubject, type AccessTranslate, AccountLinkPanel, type AccountLinkPanelProps, type CapabilityLink, type CapabilityLinkMintState, type DescribeError, type ExpiryPolicy, type LinkSubjectAccount, type LinkableAccount, type MintCapabilityLink, type MintCapabilityLinkInput, type SubjectAccountLinkState, type UseCapabilityLinkMintOptions, type UseSubjectAccountLinkOptions, type UserManagementApi, UserManagementPanel, type UserManagementPanelProps, type UserManagementTenant, type UserManagementTranslate, type UserManagementUser, accountDisplayLabel, activeLinksForSubject, buildAccountOptions, buildCapabilityLinkMailto, capabilityExpiryDate, capabilityExpiryDays, daysUntilAnchor, formatLinkDate, linksForSubject, useAccessAdminPalette, useCapabilityLinkMint, useSubjectAccountLink };
+export { ACCESS_ADMIN_I18N, ACCESS_ADMIN_TEST_IDS, type AccessAdminI18n, type AccessAdminPalette, AccessLinkPanel, type AccessLinkPanelProps, type AccessResultReporter, AccessResultTone, type AccessSubject, type AccessTranslate, AccountLinkPanel, type AccountLinkPanelProps, type CapabilityLink, type CapabilityLinkMintState, type DescribeError, type ExpiryPolicy, type LinkSubjectAccount, type LinkableAccount, type MintCapabilityLink, type MintCapabilityLinkInput, PermissionMatrix, type PermissionMatrixColumn, type PermissionMatrixGrants, type PermissionMatrixPermission, type PermissionMatrixProps, type PermissionMatrixRole, type PermissionMatrixTranslate, type SubjectAccountLinkState, type UseCapabilityLinkMintOptions, type UseSubjectAccountLinkOptions, type UserManagementApi, UserManagementPanel, type UserManagementPanelProps, type UserManagementPatch, type UserManagementTenant, type UserManagementTranslate, type UserManagementUser, accountDisplayLabel, activeLinksForSubject, buildAccountOptions, buildCapabilityLinkMailto, buildPermissionMatrix, capabilityExpiryDate, capabilityExpiryDays, daysUntilAnchor, formatLinkDate, linksForSubject, useAccessAdminPalette, useCapabilityLinkMint, useSubjectAccountLink };

package/dist/index.d.ts

@@ -336,26 +336,29 @@ interface UserManagementUser {
     /** The tenant this user belongs to, or null for a platform-level account. */
     tenantId: string | null;
     active: boolean;
+    blockedReason?: string | null;
     /** ISO timestamp the user was created, when the directory reports it. */
     createdAt?: string;
 }
+interface UserManagementPatch {
+    displayName?: string;
+    role?: string;
+    tenantId?: string | null;
+    active?: boolean;
+    blockedReason?: string;
+}
 /** What the host is asked to do. Each rejects with an `Error` on failure. */
 interface UserManagementApi {
     listUsers(): Promise<UserManagementUser[]>;
-    createUser(input: {
+    createUser?(input: {
         email: string;
         password: string;
         displayName: string;
         role: string;
         tenantId: string | null;
     }): Promise<void>;
-    updateUser(id: string, patch: {
-        displayName?: string;
-        role?: string;
-        tenantId?: string | null;
-        active?: boolean;
-    }): Promise<void>;
-    resetPassword(id: string, password: string): Promise<void>;
+    updateUser(id: string, patch: UserManagementPatch): Promise<void>;
+    resetPassword?(id: string, password: string): Promise<void>;
 }
 /** One selectable tenant for the platform-admin tenant picker. */
 interface UserManagementTenant {
@@ -403,6 +406,37 @@ interface UserManagementPanelProps {
 
 declare const UserManagementPanel: ({ api, isPlatformAdmin, assignableRoles, tenants, t, testID, }: UserManagementPanelProps) => React.ReactElement;
 
+type PermissionMatrixTranslate = (key: string, p1?: string, p2?: string, p3?: string) => string;
+interface PermissionMatrixRole {
+    readonly id: string;
+    readonly label: string;
+}
+interface PermissionMatrixPermission {
+    readonly id: string;
+    readonly label: string;
+}
+type PermissionMatrixGrants = Readonly<Record<string, readonly string[] | undefined>>;
+interface PermissionMatrixCell {
+    readonly permission: PermissionMatrixPermission;
+    readonly granted: boolean;
+}
+interface PermissionMatrixColumn {
+    readonly role: PermissionMatrixRole;
+    readonly cells: readonly PermissionMatrixCell[];
+    readonly grantedCount: number;
+}
+interface PermissionMatrixProps {
+    readonly roles: readonly PermissionMatrixRole[];
+    readonly permissions: readonly PermissionMatrixPermission[];
+    readonly grants: PermissionMatrixGrants;
+    readonly t: PermissionMatrixTranslate;
+    readonly testID?: string;
+}
+
+declare const PermissionMatrix: ({ roles, permissions, grants, t, testID, }: PermissionMatrixProps) => React.ReactElement;
+
+declare function buildPermissionMatrix(roles: readonly PermissionMatrixRole[], permissions: readonly PermissionMatrixPermission[], grants: PermissionMatrixGrants): PermissionMatrixColumn[];
+
 /** Translate function — mirrors the fleet's `FM(key, p1?, p2?, p3?)` shape. */
 type AccessTranslate = (key: string, p1?: string, p2?: string, p3?: string) => string;
 interface UseCapabilityLinkMintOptions {
@@ -702,6 +736,18 @@ declare const ACCESS_ADMIN_I18N: {
     readonly usersUpdateFailed: "accessAdmin.users.updateFailed";
     readonly usersResetSuccess: "accessAdmin.users.resetSuccess";
     readonly usersResetFailed: "accessAdmin.users.resetFailed";
+    readonly usersFieldBlockedReason: "accessAdmin.users.fieldBlockedReason";
+    readonly usersBlockedReasonPlaceholder: "accessAdmin.users.blockedReasonPlaceholder";
+    readonly usersBlockedReasonHint: "accessAdmin.users.blockedReasonHint";
+    readonly permissionsHeading: "accessAdmin.permissions.heading";
+    readonly permissionsNote: "accessAdmin.permissions.note";
+    readonly permissionsColPermission: "accessAdmin.permissions.colPermission";
+    readonly permissionsGranted: "accessAdmin.permissions.granted";
+    readonly permissionsNotGranted: "accessAdmin.permissions.notGranted";
+    readonly permissionsCellLabel: "accessAdmin.permissions.cellLabel";
+    readonly permissionsReadOnlyHint: "accessAdmin.permissions.readOnlyHint";
+    readonly permissionsRoleCount: "accessAdmin.permissions.roleCount";
+    readonly permissionsEmpty: "accessAdmin.permissions.empty";
 };
 /** The shape of {@link ACCESS_ADMIN_I18N} — useful for typing an override map. */
 type AccessAdminI18n = typeof ACCESS_ADMIN_I18N;
@@ -714,6 +760,7 @@ declare const ACCESS_ADMIN_TEST_IDS: {
     readonly linkPanel: "access-link-panel";
     readonly accountPanel: "account-link-panel";
     readonly usersPanel: "user-management-panel";
+    readonly permissionMatrix: "permission-matrix";
 };
 
-export { ACCESS_ADMIN_I18N, ACCESS_ADMIN_TEST_IDS, type AccessAdminI18n, type AccessAdminPalette, AccessLinkPanel, type AccessLinkPanelProps, type AccessResultReporter, AccessResultTone, type AccessSubject, type AccessTranslate, AccountLinkPanel, type AccountLinkPanelProps, type CapabilityLink, type CapabilityLinkMintState, type DescribeError, type ExpiryPolicy, type LinkSubjectAccount, type LinkableAccount, type MintCapabilityLink, type MintCapabilityLinkInput, type SubjectAccountLinkState, type UseCapabilityLinkMintOptions, type UseSubjectAccountLinkOptions, type UserManagementApi, UserManagementPanel, type UserManagementPanelProps, type UserManagementTenant, type UserManagementTranslate, type UserManagementUser, accountDisplayLabel, activeLinksForSubject, buildAccountOptions, buildCapabilityLinkMailto, capabilityExpiryDate, capabilityExpiryDays, daysUntilAnchor, formatLinkDate, linksForSubject, useAccessAdminPalette, useCapabilityLinkMint, useSubjectAccountLink };
+export { ACCESS_ADMIN_I18N, ACCESS_ADMIN_TEST_IDS, type AccessAdminI18n, type AccessAdminPalette, AccessLinkPanel, type AccessLinkPanelProps, type AccessResultReporter, AccessResultTone, type AccessSubject, type AccessTranslate, AccountLinkPanel, type AccountLinkPanelProps, type CapabilityLink, type CapabilityLinkMintState, type DescribeError, type ExpiryPolicy, type LinkSubjectAccount, type LinkableAccount, type MintCapabilityLink, type MintCapabilityLinkInput, PermissionMatrix, type PermissionMatrixColumn, type PermissionMatrixGrants, type PermissionMatrixPermission, type PermissionMatrixProps, type PermissionMatrixRole, type PermissionMatrixTranslate, type SubjectAccountLinkState, type UseCapabilityLinkMintOptions, type UseSubjectAccountLinkOptions, type UserManagementApi, UserManagementPanel, type UserManagementPanelProps, type UserManagementPatch, type UserManagementTenant, type UserManagementTranslate, type UserManagementUser, accountDisplayLabel, activeLinksForSubject, buildAccountOptions, buildCapabilityLinkMailto, buildPermissionMatrix, capabilityExpiryDate, capabilityExpiryDays, daysUntilAnchor, formatLinkDate, linksForSubject, useAccessAdminPalette, useCapabilityLinkMint, useSubjectAccountLink };