@epcare/esm-report-builder 0.1.1-pre.76 → 0.1.1-pre.78

package/src/components/data-visualizer/data-visualizer.resource.ts

@@ -3,6 +3,10 @@ import { openmrsFetch, restBaseUrl } from "@openmrs/esm-framework";
 import { CQIReportingCohort } from "./data-visualizer.component";
 import dayjs from "dayjs";
 import { indicatorIdsWithoutEndPoints } from "./constants";
+import { guardRejection } from "../../utils/api-error.utils";
+
+/** openmrsFetch with 401/403 rejections normalized to friendly errors. */
+const guardedFetch = (url: string) => guardRejection(openmrsFetch(url));
 
 type ReportRequest = {
   uuid: string;
@@ -103,9 +107,11 @@ export async function getReport(params: ReportRequest, signal?: AbortSignal) {
     });
   }
 
-  return openmrsFetch(
-    `${restBaseUrl}/reportbuilder/reportingDefinition?${query.toString()}`,
-    { signal },
+  return guardRejection(
+    openmrsFetch(
+      `${restBaseUrl}/reportbuilder/reportingDefinition?${query.toString()}`,
+      { signal },
+    ),
   );
 }
 
@@ -116,9 +122,11 @@ export function downloadReport(params: ReportDownloadParams) {
     apiUrl += `&cohortList=${params.reportingCohort}`;
   }
 
-  return openmrsFetch(apiUrl, {
-    signal: abortController.signal,
-  });
+  return guardRejection(
+    openmrsFetch(apiUrl, {
+      signal: abortController.signal,
+    }),
+  );
 }
 
 export async function getCategoryIndicator(id: string, type?: string) {
@@ -139,7 +147,7 @@ export async function getCategoryIndicator(id: string, type?: string) {
     }
   }
 
-  const { data } = await openmrsFetch(apiUrl);
+  const { data } = await guardRejection(openmrsFetch(apiUrl));
   return data;
 }
 
@@ -147,7 +155,7 @@ export function useGetEncounterType() {
   const apiUrl = `${restBaseUrl}/encountertype`;
   const { data, error, isLoading } = useSWR<{ data: { results: any } }, Error>(
     apiUrl,
-    openmrsFetch
+    guardedFetch
   );
   return {
     encounterTypes: data ? mapDataElements(data?.data["results"]) : [],
@@ -160,7 +168,7 @@ export function useGetOrderTypes() {
   const apiUrl = `${restBaseUrl}/ordertype?v=custom:(uuid,display,name)`;
   const { data, error, isLoading } = useSWR<{ data: { results: any } }, Error>(
     apiUrl,
-    openmrsFetch
+    guardedFetch
   );
   return {
     orderTypes: data
@@ -175,37 +183,41 @@ export async function saveReport(params: saveReportRequest) {
   const apiUrl = `${restBaseUrl}/dashboardReport`;
   const abortController = new AbortController();
 
-  return openmrsFetch(apiUrl, {
-    method: "POST",
-    signal: abortController.signal,
-    headers: {
-      "Content-Type": "application/json",
-    },
-    body: {
-      name: params.reportName,
-      description: params?.reportDescription,
-      type: params?.reportType,
-      columns: params?.columns,
-      rows: params?.rows,
-      report_request_object: params.report_request_object,
-    },
-  });
+  return guardRejection(
+    openmrsFetch(apiUrl, {
+      method: "POST",
+      signal: abortController.signal,
+      headers: {
+        "Content-Type": "application/json",
+      },
+      body: {
+        name: params.reportName,
+        description: params?.reportDescription,
+        type: params?.reportType,
+        columns: params?.columns,
+        rows: params?.rows,
+        report_request_object: params.report_request_object,
+      },
+    }),
+  );
 }
 
 export async function sendReportToDHIS2(report, dhis2Json) {
   const apiUrl = `${restBaseUrl}/sendreport?uuid=${report}`;
   const abortController = new AbortController();
 
-  return openmrsFetch(apiUrl, {
-    method: "POST",
-    signal: abortController.signal,
-    headers: {
-      "Content-Type": "application/json",
-    },
-    body: {
-      ...dhis2Json,
-    },
-  });
+  return guardRejection(
+    openmrsFetch(apiUrl, {
+      method: "POST",
+      signal: abortController.signal,
+      headers: {
+        "Content-Type": "application/json",
+      },
+      body: {
+        ...dhis2Json,
+      },
+    }),
+  );
 }
 
 export async function getCohortCategory(type: string) {
@@ -215,7 +227,7 @@ export async function getCohortCategory(type: string) {
   } else {
     apiUrl = `${restBaseUrl}/${type}?v=custom:(uuid,name)`;
   }
-  const { data } = await openmrsFetch(apiUrl);
+  const { data } = await guardRejection(openmrsFetch(apiUrl));
   return data;
 }
 
@@ -226,7 +238,7 @@ export function useGetReportLibrary() {
 
   const { data, error, isLoading, mutate } = useSWR<ReportLibraryResponse, Error>(
     apiUrl,
-    openmrsFetch
+    guardedFetch
   );
 
   return {
@@ -242,7 +254,7 @@ export function useGetReportCategories() {
 
   const { data, error, isLoading, mutate } = useSWR<ReportCategoryResponse, Error>(
     apiUrl,
-    openmrsFetch
+    guardedFetch
   );
 
   return {

package/src/components/etl-monitor/builder/etl-monitor-builder-page.component.tsx

@@ -14,6 +14,8 @@ import styles from './etl-monitor-builder-page.scss';
 import type { DisplayDensity } from '../../../types/etl-monitor/etl-monitor-v2.types';
 import { MonitorPreviewRenderer } from './monitor-preview';
 import { GeneratedConfigPanel } from './generated-config-panel.component';
+import { RB } from '../../../constants/privileges';
+import { useReportBuilderPrivileges } from '../../../hooks/use-report-builder-privileges';
 
 import {
   GeneralStep,
@@ -53,6 +55,7 @@ interface BuilderContentProps {
 
 function BuilderContent({ onClose, mode }: BuilderContentProps) {
   const { state, saveMonitor, updateState } = useBuilderContext();
+  const { has: hasPrivilege } = useReportBuilderPrivileges();
   const {
     currentStep,
     goToNextStep,
@@ -67,6 +70,7 @@ function BuilderContent({ onClose, mode }: BuilderContentProps) {
   const errors = getAllValidationErrors(state);
   const hasParseError = !!state.parseError;
 
+  const canSaveMonitor = hasPrivilege(RB.ETLMONITOR_ADD, RB.ETLMONITOR_EDIT);
   const handleSave = async () => {
     if (errors.length > 0) {
       setSaveError('Please fix validation errors before saving');
@@ -165,7 +169,8 @@ function BuilderContent({ onClose, mode }: BuilderContentProps) {
               size="sm"
               renderIcon={Save}
               onClick={handleSave}
-              disabled={isSaving || errors.length > 0}
+              disabled={isSaving || errors.length > 0 || !canSaveMonitor}
+              title={canSaveMonitor ? undefined : 'Requires ETL monitor privileges'}
             >
               {isSaving ? 'Saving…' : 'Save Monitor'}
             </Button>

package/src/components/etl-monitor/etl-monitors-page.component.tsx

@@ -26,6 +26,8 @@ import {
 } from '@carbon/react';
 import { Add, Edit, TrashCan } from '@carbon/icons-react';
 import Header from '../shared/header/header.component';
+import { RB } from '../../constants/privileges';
+import { useReportBuilderPrivileges } from '../../hooks/use-report-builder-privileges';
 import {
   createETLMonitor,
   deleteETLMonitor,
@@ -117,6 +119,9 @@ const authTypeOptions: { value: AuthType; label: string }[] = [
 
 export default function ETLMonitorsPage() {
   const navigate = useNavigate();
+  const { has: hasPrivilege } = useReportBuilderPrivileges();
+  const canEditMonitor = hasPrivilege(RB.ETLMONITOR_ADD, RB.ETLMONITOR_EDIT);
+  const canDeleteMonitor = hasPrivilege(RB.ETLMONITOR_PURGE);
   const [q, setQ] = React.useState('');
   const [rows, setRows] = React.useState<ETLMonitorDto[]>([]);
   const [loading, setLoading] = React.useState(false);
@@ -344,14 +349,16 @@ export default function ETLMonitorsPage() {
         title="ETL Monitors"
         subtitle="Configure and monitor external ETL processes. Set up API endpoints and define how to extract and display data."
         actions={
-          <Stack orientation="horizontal" gap={2}>
-            <Button size="sm" renderIcon={Add} onClick={() => navigate('/admin/etl-monitors/builder?mode=create')}>
-              New Monitor
-            </Button>
-            <Button size="sm" kind="ghost" onClick={openCreate}>
-              Advanced (JSON)
-            </Button>
-          </Stack>
+          canEditMonitor ? (
+            <Stack orientation="horizontal" gap={2}>
+              <Button size="sm" renderIcon={Add} onClick={() => navigate('/admin/etl-monitors/builder?mode=create')}>
+                New Monitor
+              </Button>
+              <Button size="sm" kind="ghost" onClick={openCreate}>
+                Advanced (JSON)
+              </Button>
+            </Stack>
+          ) : undefined
         }
       />
 
@@ -401,22 +408,26 @@ export default function ETLMonitorsPage() {
                           </TableCell>
                           <TableCell>
                             <div style={{ display: 'flex', gap: '0.5rem' }}>
-                              <Button
-                                kind="ghost"
-                                size="sm"
-                                renderIcon={Edit}
-                                iconDescription="Edit"
-                                hasIconOnly
-                                onClick={() => original && openEditWithBuilder(original)}
-                              />
-                              <Button
-                                kind="ghost"
-                                size="sm"
-                                renderIcon={TrashCan}
-                                iconDescription="Retire"
-                                hasIconOnly
-                                onClick={() => original && onDelete(original)}
-                              />
+                              {canEditMonitor && (
+                                <Button
+                                  kind="ghost"
+                                  size="sm"
+                                  renderIcon={Edit}
+                                  iconDescription="Edit"
+                                  hasIconOnly
+                                  onClick={() => original && openEditWithBuilder(original)}
+                                />
+                              )}
+                              {canDeleteMonitor && (
+                                <Button
+                                  kind="ghost"
+                                  size="sm"
+                                  renderIcon={TrashCan}
+                                  iconDescription="Retire"
+                                  hasIconOnly
+                                  onClick={() => original && onDelete(original)}
+                                />
+                              )}
                             </div>
                           </TableCell>
                         </TableRow>

package/src/components/import-export/import-export-page.component.tsx

@@ -23,6 +23,8 @@ import { type PackageInfo, getAvailablePackages } from '../../resources/report-i
 import ExportReportModal from './export-report-modal.component';
 import ImportPackageModal from './import-package-modal.component';
 import Header from '../shared/header/header.component';
+import { RB } from '../../constants/privileges';
+import { useReportBuilderPrivileges } from '../../hooks/use-report-builder-privileges';
 
 const PackageHeaders = [
   { key: 'name', header: 'Configuration' },
@@ -42,6 +44,10 @@ const TABS: Array<{ value: TabType; label: string }> = [
 ];
 
 const ImportExportPage: React.FC = () => {
+  const { has: hasPrivilege } = useReportBuilderPrivileges();
+  const canImport = hasPrivilege(RB.PACKAGE_IMPORT);
+  const canExport = hasPrivilege(RB.PACKAGE_EXPORT);
+
   // Modal states
   const [showExportModal, setShowExportModal] = React.useState(false);
   const [showImportModal, setShowImportModal] = React.useState(false);
@@ -179,16 +185,18 @@ const ImportExportPage: React.FC = () => {
                           if (headers[i].key === 'action' && pkg) {
                             return (
                               <TableCell key={cell.id}>
-                                <Button
-                                  kind="ghost"
-                                  size="sm"
-                                  onClick={() => {
-                                    setShowImportModal(true);
-                                  }}
-                                  disabled={pkg.status !== 'valid'}
-                                >
-                                  Import
-                                </Button>
+                                {canImport && (
+                                  <Button
+                                    kind="ghost"
+                                    size="sm"
+                                    onClick={() => {
+                                      setShowImportModal(true);
+                                    }}
+                                    disabled={pkg.status !== 'valid'}
+                                  >
+                                    Import
+                                  </Button>
+                                )}
                               </TableCell>
                             );
                           }
@@ -212,9 +220,11 @@ const ImportExportPage: React.FC = () => {
           <p style={{ color: 'var(--cds-text-02)', marginBottom: '1rem' }}>
             Extract artifacts to backup or distribute reporting configuration.
           </p>
-          <Button kind="primary" renderIcon={Download} onClick={() => setShowExportModal(true)}>
-            Extract Artifacts
-          </Button>
+          {canExport && (
+            <Button kind="primary" renderIcon={Download} onClick={() => setShowExportModal(true)}>
+              Extract Artifacts
+            </Button>
+          )}
         </Tile>
       )}
     </Stack>
@@ -229,9 +239,11 @@ const ImportExportPage: React.FC = () => {
         <p style={{ color: 'var(--cds-text-02)', marginBottom: '1rem' }}>
           Select individual artifacts to create custom distribution packages.
         </p>
-        <Button kind="primary" renderIcon={Download} onClick={() => setShowExportModal(true)}>
-          Export Artifacts
-        </Button>
+        {canExport && (
+          <Button kind="primary" renderIcon={Download} onClick={() => setShowExportModal(true)}>
+            Export Artifacts
+          </Button>
+        )}
       </Tile>
     </Stack>
   );
@@ -260,12 +272,16 @@ const ImportExportPage: React.FC = () => {
       <div style={{ display: 'flex', justifyContent: 'space-between', alignItems: 'end', gap: '1rem' }}>
         <div></div>
         <ButtonSet>
-          <Button kind="secondary" renderIcon={Upload} onClick={() => setShowImportModal(true)}>
-            Initialize Report Builder
-          </Button>
-          <Button kind="primary" renderIcon={Download} onClick={() => setShowExportModal(true)}>
-            Extract Artifacts
-          </Button>
+          {canImport && (
+            <Button kind="secondary" renderIcon={Upload} onClick={() => setShowImportModal(true)}>
+              Initialize Report Builder
+            </Button>
+          )}
+          {canExport && (
+            <Button kind="primary" renderIcon={Download} onClick={() => setShowExportModal(true)}>
+              Extract Artifacts
+            </Button>
+          )}
         </ButtonSet>
       </div>
 

package/src/components/indicators/indicators-page.component.tsx

@@ -17,6 +17,8 @@ import { useTranslation } from 'react-i18next';
 
 import Header from '../shared/header/header.component';
 import IndicatorsTable, { type IndicatorRow } from './indicators-table.component';
+import { RB } from '../../constants/privileges';
+import { useReportBuilderPrivileges } from '../../hooks/use-report-builder-privileges';
 
 import CreateBaseIndicatorModal from './create-base-indicator-modal.component';
 import type { QAUiState } from './types/condition-ui.types';
@@ -135,6 +137,12 @@ function normalizeAuthoring(ind: IndicatorDto | null | undefined): BaseIndicator
 export default function IndicatorsPage() {
     const { t } = useTranslation();
 
+    const { has: hasPrivilege } = useReportBuilderPrivileges();
+    const canAddIndicator = hasPrivilege(RB.INDICATOR_ADD);
+    const canEditIndicator = hasPrivilege(RB.INDICATOR_EDIT);
+    const canRunIndicator = hasPrivilege(RB.SQL_EXECUTE);
+    const canDeleteIndicator = hasPrivilege(RB.INDICATOR_PURGE);
+
     const [tab, setTab] = React.useState<TabKey>('base');
     const [q, setQ] = React.useState('');
     const [rows, setRows] = React.useState<IndicatorRow[]>([]);
@@ -461,7 +469,7 @@ export default function IndicatorsPage() {
                         CSV
                     </Button>
 
-                    {tab === 'base' ? (
+                    {canAddIndicator && (tab === 'base' ? (
                         <>
                             <Button
                                 size="sm"
@@ -484,8 +492,8 @@ export default function IndicatorsPage() {
                         <Button size="sm" kind="primary" renderIcon={Add} onClick={() => setOpenFinal(true)}>
                             Create Final Indicator
                         </Button>
-                    )}
-                    {tab === 'custom' && (
+                    ))}
+                    {canAddIndicator && tab === 'custom' && (
                         <Button size="sm" kind="primary" renderIcon={Add} onClick={() => setOpenCustom(true)}>
                             Create Custom Indicator
                         </Button>
@@ -509,21 +517,48 @@ export default function IndicatorsPage() {
                         {loading ? <InlineLoading description="Loading…" /> : null}
                         {!loading && error ? <div style={{ color: 'var(--cds-text-error, #da1e28)' }}>{error}</div> : null}
 
-                        <IndicatorsTable rows={filteredRows} onEdit={onEdit} onRun={onRun} onDelete={onDelete} onDuplicate={onDuplicate} />
+                        <IndicatorsTable
+                            rows={filteredRows}
+                            onEdit={onEdit}
+                            onRun={onRun}
+                            onDelete={onDelete}
+                            onDuplicate={onDuplicate}
+                            canEdit={canEditIndicator}
+                            canRun={canRunIndicator}
+                            canDelete={canDeleteIndicator}
+                        />
                     </TabPanel>
 
                     <TabPanel>
                         {loading ? <InlineLoading description="Loading…" /> : null}
                         {!loading && error ? <div style={{ color: 'var(--cds-text-error, #da1e28)' }}>{error}</div> : null}
 
-                        <IndicatorsTable rows={filteredRows} onEdit={onEdit} onRun={onRun} onDelete={onDelete} onDuplicate={onDuplicate} />
+                        <IndicatorsTable
+                            rows={filteredRows}
+                            onEdit={onEdit}
+                            onRun={onRun}
+                            onDelete={onDelete}
+                            onDuplicate={onDuplicate}
+                            canEdit={canEditIndicator}
+                            canRun={canRunIndicator}
+                            canDelete={canDeleteIndicator}
+                        />
                     </TabPanel>
 
                     <TabPanel>
                         {loading ? <InlineLoading description="Loading…" /> : null}
                         {!loading && error ? <div style={{ color: 'var(--cds-text-error, #da1e28)' }}>{error}</div> : null}
 
-                        <IndicatorsTable rows={filteredRows} onEdit={onEdit} onRun={onRun} onDelete={onDelete} onDuplicate={onDuplicate} />
+                        <IndicatorsTable
+                            rows={filteredRows}
+                            onEdit={onEdit}
+                            onRun={onRun}
+                            onDelete={onDelete}
+                            onDuplicate={onDuplicate}
+                            canEdit={canEditIndicator}
+                            canRun={canRunIndicator}
+                            canDelete={canDeleteIndicator}
+                        />
                     </TabPanel>
                 </TabPanels>
             </Tabs>

package/src/components/indicators/indicators-table.component.tsx

@@ -33,6 +33,10 @@ type Props = {
     onRun?: (id: string) => void;
     onDelete?: (id: string) => void;
     onDuplicate?: (id: string, kind: IndicatorRow['kind']) => void;
+    /** Row actions the signed-in user may see (privilege gating). */
+    canEdit?: boolean;
+    canRun?: boolean;
+    canDelete?: boolean;
 };
 
 function statusTag(status: string) {
@@ -70,7 +74,17 @@ function themePill(themeName?: string, themeColor?: string) {
     );
 }
 
-export default function IndicatorsTable({ rows, onOpen, onEdit, onRun, onDelete, onDuplicate }: Props) {
+export default function IndicatorsTable({
+    rows,
+    onOpen,
+    onEdit,
+    onRun,
+    onDelete,
+    onDuplicate,
+    canEdit = true,
+    canRun = true,
+    canDelete = true,
+}: Props) {
     const headers = [
         { key: 'code', header: 'Code' },
         { key: 'name', header: 'Name' },
@@ -150,10 +164,16 @@ export default function IndicatorsTable({ rows, onOpen, onEdit, onRun, onDelete,
 
                                         <TableCell onClick={(e) => e.stopPropagation()} style={{ width: 56 }}>
                                             <OverflowMenu size="sm" flipped>
-                                                <OverflowMenuItem itemText="Edit" onClick={() => onEdit?.(row.id, kind)} />
+                                                {canEdit && (
+                                                    <OverflowMenuItem itemText="Edit" onClick={() => onEdit?.(row.id, kind)} />
+                                                )}
                                                 <OverflowMenuItem itemText="Duplicate" onClick={() => onDuplicate?.(row.id, kind)} />
-                                                <OverflowMenuItem itemText="Run" onClick={() => onRun?.(row.id)} />
-                                                <OverflowMenuItem itemText="Delete" isDelete onClick={() => onDelete?.(row.id)} />
+                                                {canRun && (
+                                                    <OverflowMenuItem itemText="Run" onClick={() => onRun?.(row.id)} />
+                                                )}
+                                                {canDelete && (
+                                                    <OverflowMenuItem itemText="Delete" isDelete onClick={() => onDelete?.(row.id)} />
+                                                )}
                                             </OverflowMenu>
                                         </TableCell>
                                     </TableRow>

package/src/components/landing/report-builder-landing-page.component.tsx

@@ -1,15 +1,26 @@
 import React from 'react';
-import { Button, Tile } from '@carbon/react';
+import { Button, InlineNotification, Tile } from '@carbon/react';
 import { Add, ChartColumn, Play, Report, List, Folder } from '@carbon/icons-react';
 import { useTranslation } from 'react-i18next';
 import { useNavigate } from 'react-router-dom';
 
 import styles from './report-builder-landing-page.scss';
 import Header from '../shared/header/header.component';
+import { RB } from '../../constants/privileges';
+import { useReportBuilderPrivileges } from '../../hooks/use-report-builder-privileges';
 
 const ReportBuilderLandingPage: React.FC = () => {
   const { t } = useTranslation();
   const navigate = useNavigate();
+  const { has } = useReportBuilderPrivileges();
+
+  const canCreateReports = has(RB.REPORT_ADD);
+  const canViewIndicators = has(RB.INDICATOR_VIEW);
+  const canViewSections = has(RB.SECTION_VIEW);
+  const canRunReports = has(RB.REPORT_RUN);
+  const canViewLinelist = has(RB.REPORT_VIEW);
+  const noTilesVisible =
+    !canCreateReports && !canViewIndicators && !canViewSections && !canRunReports && !canViewLinelist;
 
   return (
       <div className={styles.page}>
@@ -21,6 +32,19 @@ const ReportBuilderLandingPage: React.FC = () => {
 
         {/* CARDS */}
         <div className={styles.cardsGrid}>
+          {noTilesVisible && (
+            <InlineNotification
+              lowContrast
+              kind="info"
+              title={t('noAccessTitle', 'No access')}
+              subtitle={t(
+                'noAccessSubtitle',
+                'You do not have access to any Report Builder features. Contact your administrator.',
+              )}
+              hideCloseButton
+            />
+          )}
+          {canCreateReports && (
           <Tile className={styles.card}>
             <div className={styles.cardIllustration} aria-hidden>
               <div className={styles.illCircle}>
@@ -45,7 +69,9 @@ const ReportBuilderLandingPage: React.FC = () => {
               </Button>
             </div>
           </Tile>
+          )}
 
+          {canViewIndicators && (
           <Tile className={styles.card}>
             <div className={styles.cardIllustration} aria-hidden>
               <div className={styles.illCircle}>
@@ -70,7 +96,9 @@ const ReportBuilderLandingPage: React.FC = () => {
               </Button>
             </div>
           </Tile>
+          )}
 
+          {canViewSections && (
           <Tile className={styles.card}>
             <div className={styles.cardIllustration} aria-hidden>
               <div className={styles.illCircle}>
@@ -95,7 +123,9 @@ const ReportBuilderLandingPage: React.FC = () => {
               </Button>
             </div>
           </Tile>
+          )}
 
+          {canRunReports && (
           <Tile className={styles.card}>
             <div className={styles.cardIllustration} aria-hidden>
               <div className={styles.illCircle}>
@@ -120,7 +150,9 @@ const ReportBuilderLandingPage: React.FC = () => {
               </Button>
             </div>
           </Tile>
+          )}
 
+          {canViewLinelist && (
           <Tile className={styles.card}>
             <div className={styles.cardIllustration} aria-hidden>
               <div className={styles.illCircle}>
@@ -145,6 +177,7 @@ const ReportBuilderLandingPage: React.FC = () => {
               </Button>
             </div>
           </Tile>
+          )}
         </div>
       </div>
   );

package/src/components/linelist/definition/linelist-definition-editor.component.tsx

@@ -84,6 +84,8 @@ import PreviewParameterModal from '../modals/preview-parameter-modal.component';
 import styles from './linelist-definition-editor.scss';
 import type { LinelistReportDefinitionConfig } from '../../../types/linelist-types';
 import CompileSetupModal, { type CompileSetupResult } from '../../shared/compile-setup-modal.component';
+import { RB } from '../../../constants/privileges';
+import { useReportBuilderPrivileges } from '../../../hooks/use-report-builder-privileges';
 
 type Props = {};
 
@@ -555,6 +557,7 @@ function extractParameterReferences(sql: string): string[] {
 const LinelistBuilderWorkspace: React.FC<Props> = () => {
   const navigate = useNavigate();
   const { reportId } = useParams();
+  const { has: hasPrivilege } = useReportBuilderPrivileges();
 
   // Report state
   const [draft, setDraft] = useState<LinelistReportDraft>(createEmptyDraft());
@@ -1398,7 +1401,12 @@ function getDefaultOperator(fieldType: FilterFieldType): FilterOperator {
               size="sm"
               renderIcon={Send}
               onClick={handleCompile}
-              disabled={compiling || !initialReport?.uuid}
+              disabled={compiling || !initialReport?.uuid || !hasPrivilege(RB.REPORT_COMPILE)}
+              title={
+                hasPrivilege(RB.REPORT_COMPILE)
+                  ? undefined
+                  : 'Requires the report compile privilege'
+              }
             >
               {compiling ? 'Compiling...' : 'Compile'}
             </Button>
@@ -1580,7 +1588,11 @@ function getDefaultOperator(fieldType: FilterFieldType): FilterOperator {
                 kind="primary"
                 size="sm"
                 onClick={handleRunPreview}
-                disabled={previewRunning || !initialReport?.compiledReportDefinitionUuid}
+                disabled={
+                  previewRunning ||
+                  !initialReport?.compiledReportDefinitionUuid ||
+                  !hasPrivilege(RB.SQL_EXECUTE)
+                }
                 tooltipAlignment="end"
                 tooltipPosition="bottom"
               >