@firecms/user_management 3.0.0-3.0.0-canary.27.0 → 3.0.0-beta.10

package/dist/index.es.js

@@ -1,322 +1,476 @@
-import A, { useRef as Ee, useEffect as Z, useCallback as k, useContext as Ae, useState as P } from "react";
-import { getFirestore as ee, onSnapshot as ae, collection as ne, setDoc as ce, doc as G, addDoc as Pe, deleteDoc as de } from "firebase/firestore";
-import { jsx as e, jsxs as l, Fragment as H } from "react/jsx-runtime";
-import { getColorSchemeForSeed as Fe, Chip as Te, Dialog as ue, DialogContent as me, Typography as O, TextField as K, Paper as Be, Table as re, TableHeader as oe, TableCell as a, TableBody as le, TableRow as q, Tooltip as V, Checkbox as E, Select as te, SelectItem as T, DialogActions as he, Button as Y, LoadingButton as fe, DoneIcon as ge, IconButton as pe, DeleteIcon as Ce, CenteredView as ve, Container as we, AddIcon as ye, MultiSelect as Le, MultiSelectItem as Ve } from "@firecms/ui";
-import * as _ from "yup";
-import { toSnakeCase as _e, FieldCaption as B, DeleteConfirmationDialog as be, useNavigationController as Oe, useSnackbarController as Ne, useAuthController as Re, useCustomizationController as $e, defaultDateFormat as Me } from "@firecms/core";
-import { useCreateFormex as xe, getIn as j, Formex as De } from "@firecms/formex";
-import { format as qe } from "date-fns";
-import * as Ye from "date-fns/locale";
-const pn = ["Admin"], We = {
-  read: !1,
-  edit: !1,
-  create: !1,
-  delete: !1
+import React, { useEffect, useCallback, useContext, useState } from "react";
+import equal from "react-fast-compare";
+import { removeUndefined, useAuthController, toSnakeCase, FieldCaption, ConfirmationDialog, useNavigationController, useSnackbarController, useCustomizationController, defaultDateFormat } from "@firecms/core";
+import { jsx, jsxs, Fragment } from "react/jsx-runtime";
+import { getColorSchemeForSeed, Chip, Dialog, DialogContent, Typography, TextField, Paper, Table, TableHeader, TableCell, TableBody, TableRow, Tooltip, Checkbox, Button, Select, SelectItem, DialogActions, LoadingButton, DoneIcon, IconButton, DeleteIcon, CenteredView, Container, AddIcon, MultiSelect, MultiSelectItem } from "@firecms/ui";
+import * as Yup from "yup";
+import { useCreateFormex, getIn, Formex } from "@firecms/formex";
+import { format } from "date-fns";
+import * as locales from "date-fns/locale";
+const RESERVED_GROUPS = ["Admin"];
+const DEFAULT_PERMISSIONS = {
+  read: false,
+  edit: false,
+  create: false,
+  delete: false
 };
-function je({
-  collection: t,
-  user: i
+function resolveUserRolePermissions({
+  collection,
+  user
 }) {
-  const n = i?.roles;
-  if (n) {
-    if (t.ownerId === i?.uid)
-      return {
-        read: !0,
-        create: !0,
-        edit: !0,
-        delete: !0
-      };
-    {
-      const c = {
-        read: !1,
-        create: !1,
-        edit: !1,
-        delete: !1
-      };
-      return n.map((r) => ze(r, t.id)).reduce(ie, c);
-    }
-  } else
-    return We;
+  const roles = user?.roles;
+  if (!roles) {
+    return DEFAULT_PERMISSIONS;
+  } else if (collection.ownerId === user?.uid) {
+    return {
+      read: true,
+      create: true,
+      edit: true,
+      delete: true
+    };
+  } else {
+    const basePermissions = {
+      read: false,
+      create: false,
+      edit: false,
+      delete: false
+    };
+    return roles.map((role) => resolveCollectionRole(role, collection.id)).reduce(mergePermissions, basePermissions);
+  }
 }
-function ze(t, i) {
-  const n = {
-    read: t.isAdmin || t.defaultPermissions?.read,
-    create: t.isAdmin || t.defaultPermissions?.create,
-    edit: t.isAdmin || t.defaultPermissions?.edit,
-    delete: t.isAdmin || t.defaultPermissions?.delete
+function resolveCollectionRole(role, id) {
+  const basePermissions = {
+    read: (role.isAdmin || role.defaultPermissions?.read) ?? false,
+    create: (role.isAdmin || role.defaultPermissions?.create) ?? false,
+    edit: (role.isAdmin || role.defaultPermissions?.edit) ?? false,
+    delete: (role.isAdmin || role.defaultPermissions?.delete) ?? false
   };
-  return t.collectionPermissions && t.collectionPermissions[i] ? ie(t.collectionPermissions[i], n) : t.defaultPermissions ? ie(t.defaultPermissions, n) : n;
+  const thisCollectionPermissions = role.collectionPermissions?.[id];
+  if (thisCollectionPermissions) {
+    return mergePermissions(thisCollectionPermissions, basePermissions);
+  } else if (role.defaultPermissions) {
+    return mergePermissions(role.defaultPermissions, basePermissions);
+  } else {
+    return basePermissions;
+  }
 }
-const ie = (t, i) => ({
-  read: t.read || i.read,
-  create: t.create || i.create,
-  edit: t.edit || i.edit,
-  delete: t.delete || i.delete
-});
-function Cn(t, i) {
-  return t ? i.roles ? i.roles.map((n) => t.find((c) => c.id === n.id)).filter(Boolean) : [] : void 0;
+const mergePermissions = (permA, permB) => {
+  return {
+    read: permA.read || permB.read,
+    create: permA.create || permB.create,
+    edit: permA.edit || permB.edit,
+    delete: permA.delete || permB.delete
+  };
+};
+function getUserRoles(roles, fireCMSUser) {
+  return !roles ? void 0 : fireCMSUser.roles ? fireCMSUser.roles.map((role) => roles.find((r) => r.id === role.id)).filter(Boolean) : [];
 }
-const Je = (t, i) => {
-  const n = t.map((r) => r.id), c = i.map((r) => r.id);
-  return n.length === i.length && n.every((r) => c.includes(r));
+const areRolesEqual = (rolesA, rolesB) => {
+  const rolesAIds = rolesA.map((r) => r.id);
+  const rolesBIds = rolesB.map((r) => r.id);
+  return rolesAIds.length === rolesB.length && rolesAIds.every((role) => rolesBIds.includes(role));
 };
-function vn(t, i) {
-  if (!i)
+function cacheDelegatedLoginToken(projectId, delegatedToken) {
+  if (!delegatedToken) {
     return;
-  const n = Ge(i), c = new Date(n.exp * 1e3);
-  localStorage.setItem(`auth_token::${t}`, JSON.stringify({
-    token: i,
-    expiry: c
+  }
+  const data = parseJwt(delegatedToken);
+  const expiry = new Date(data.exp * 1e3);
+  localStorage.setItem(`auth_token::${projectId}`, JSON.stringify({
+    token: delegatedToken,
+    expiry
   }));
 }
-function wn(t) {
-  const i = localStorage.getItem(`auth_token::${t}`);
-  if (i) {
-    const n = JSON.parse(i);
-    if (n.expiry = new Date(n.expiry), n.expiry > /* @__PURE__ */ new Date())
-      return n.token;
+function getDelegatedLoginTokenFromCache(projectId) {
+  const entry = localStorage.getItem(`auth_token::${projectId}`);
+  if (entry) {
+    const data = JSON.parse(entry);
+    data.expiry = new Date(data.expiry);
+    if (data.expiry > /* @__PURE__ */ new Date()) {
+      return data.token;
+    }
   }
+  return void 0;
 }
-function yn() {
-  for (let t = 0; t < localStorage.length; t++) {
-    const i = localStorage.key(t);
-    i?.startsWith("auth_token::") && localStorage.removeItem(i);
+function clearDelegatedLoginTokensCache() {
+  for (let i = 0; i < localStorage.length; i++) {
+    const key = localStorage.key(i);
+    if (key?.startsWith("auth_token::")) {
+      localStorage.removeItem(key);
+    }
   }
 }
-function Ge(t) {
-  if (!t)
+function parseJwt(token) {
+  if (!token) {
     throw new Error("No JWT token");
-  const n = t.split(".")[1].replace(/-/g, "+").replace(/_/g, "/"), c = decodeURIComponent(window.atob(n).split("").map(function(r) {
-    return "%" + ("00" + r.charCodeAt(0).toString(16)).slice(-2);
+  }
+  const base64Url = token.split(".")[1];
+  const base64 = base64Url.replace(/-/g, "+").replace(/_/g, "/");
+  const jsonPayload = decodeURIComponent(window.atob(base64).split("").map(function(c) {
+    return "%" + ("00" + c.charCodeAt(0).toString(16)).slice(-2);
   }).join(""));
-  return JSON.parse(c);
+  return JSON.parse(jsonPayload);
 }
-function bn(t, i = 10) {
-  if (!/^#([0-9A-Fa-f]{3}){1,2}$/.test(t))
+function darkenColor(hexColor, darkenBy = 10) {
+  if (!/^#([0-9A-Fa-f]{3}){1,2}$/.test(hexColor)) {
     throw new Error("Invalid color format");
-  let n = t.substring(1).split("");
-  n.length === 3 && (n = [n[0], n[0], n[1], n[1], n[2], n[2]]);
-  let c = parseInt(n[0] + n[1], 16), r = parseInt(n[2] + n[3], 16), h = parseInt(n[4] + n[5], 16);
-  return c = Math.floor(c * (1 - i / 100)), r = Math.floor(r * (1 - i / 100)), h = Math.floor(h * (1 - i / 100)), "#" + (c < 16 ? "0" : "") + c.toString(16) + (r < 16 ? "0" : "") + r.toString(16) + (h < 16 ? "0" : "") + h.toString(16);
+  }
+  let color = hexColor.substring(1).split("");
+  if (color.length === 3) {
+    color = [color[0], color[0], color[1], color[1], color[2], color[2]];
+  }
+  let r = parseInt(color[0] + color[1], 16);
+  let g = parseInt(color[2] + color[3], 16);
+  let b = parseInt(color[4] + color[5], 16);
+  r = Math.floor(r * (1 - darkenBy / 100));
+  g = Math.floor(g * (1 - darkenBy / 100));
+  b = Math.floor(b * (1 - darkenBy / 100));
+  return "#" + (r < 16 ? "0" : "") + r.toString(16) + (g < 16 ? "0" : "") + g.toString(16) + (b < 16 ? "0" : "") + b.toString(16);
 }
-function Nn(t, i = 10) {
-  if (!/^#([0-9A-Fa-f]{3}){1,2}$/.test(t))
+function hexToRgbaWithOpacity(hexColor, opacity = 10) {
+  if (!/^#([0-9A-Fa-f]{3}){1,2}$/.test(hexColor)) {
     throw new Error("Invalid color format");
-  let n = t.substring(1).split("");
-  n.length === 3 && (n = [n[0], n[0], n[1], n[1], n[2], n[2]]);
-  const c = parseInt(n[0] + n[1], 16), r = parseInt(n[2] + n[3], 16), h = parseInt(n[4] + n[5], 16), w = i / 100;
-  return `rgba(${c}, ${r}, ${h}, ${w})`;
+  }
+  let color = hexColor.substring(1).split("");
+  if (color.length === 3) {
+    color = [color[0], color[0], color[1], color[1], color[2], color[2]];
+  }
+  const r = parseInt(color[0] + color[1], 16);
+  const g = parseInt(color[2] + color[3], 16);
+  const b = parseInt(color[4] + color[5], 16);
+  const alpha = opacity / 100;
+  return `rgba(${r}, ${g}, ${b}, ${alpha})`;
 }
-function Rn({
-  firebaseApp: t,
-  usersPath: i = "__FIRECMS/config/users",
-  rolesPath: n = "__FIRECMS/config/roles",
-  usersLimit: c,
-  canEditRoles: r = !0,
-  allowDefaultRolesCreation: h,
-  includeCollectionConfigPermissions: w
+function useBuildUserManagement({
+  dataSourceDelegate,
+  usersPath = "__FIRECMS/config/users",
+  rolesPath = "__FIRECMS/config/roles",
+  usersLimit,
+  canEditRoles = true,
+  allowDefaultRolesCreation,
+  includeCollectionConfigPermissions
 }) {
-  const f = Ee(), [x, y] = A.useState(!0), [d, I] = A.useState(!0), [b, s] = A.useState([]), [C, D] = A.useState([]), p = C.map((m) => ({
-    ...m,
-    roles: b.filter((v) => m.roles?.includes(v.id))
-  })), [z, L] = A.useState(), [g, u] = A.useState(), N = x || d;
-  Z(() => {
-    t && (f.current = ee(t));
-  }, [t]), Z(() => {
-    if (!t || !n)
+  const [rolesLoading, setRolesLoading] = React.useState(true);
+  const [usersLoading, setUsersLoading] = React.useState(true);
+  const [roles, setRoles] = React.useState([]);
+  const [usersWithRoleIds, setUsersWithRoleIds] = React.useState([]);
+  const users = usersWithRoleIds.map((u) => ({
+    ...u,
+    roles: roles.filter((r) => u.roles?.includes(r.id))
+  }));
+  const [rolesError, setRolesError] = React.useState();
+  const [usersError, setUsersError] = React.useState();
+  const loading = rolesLoading || usersLoading;
+  useEffect(() => {
+    if (!dataSourceDelegate || !rolesPath) return;
+    if (dataSourceDelegate.initialised !== void 0 && !dataSourceDelegate.initialised) return;
+    if (dataSourceDelegate.authenticated !== void 0 && !dataSourceDelegate.authenticated) {
+      setRolesLoading(false);
       return;
-    const m = ee(t);
-    return ae(
-      ne(m, n),
-      {
-        next: (v) => {
-          L(void 0);
-          try {
-            const R = Ke(v.docs);
-            s(R);
-          } catch (R) {
-            L(R);
-          }
-          y(!1);
-        },
-        error: (v) => {
-          L(v), y(!1);
+    }
+    setRolesLoading(true);
+    return dataSourceDelegate.listenCollection?.({
+      path: rolesPath,
+      onUpdate(entities) {
+        setRolesError(void 0);
+        try {
+          const newRoles = entityToRoles(entities);
+          if (!equal(newRoles, roles))
+            setRoles(newRoles);
+        } catch (e) {
+          setRoles([]);
+          console.error("Error loading roles", e);
+          setRolesError(e);
         }
+        setRolesLoading(false);
+      },
+      onError(e) {
+        setRoles([]);
+        console.error("Error loading roles", e);
+        setRolesError(e);
+        setRolesLoading(false);
       }
-    );
-  }, [t, n]), Z(() => {
-    if (!t || !i)
+    });
+  }, [dataSourceDelegate?.initialised, dataSourceDelegate?.authenticated, rolesPath]);
+  useEffect(() => {
+    if (!dataSourceDelegate || !usersPath) return;
+    if (dataSourceDelegate.initialised !== void 0 && !dataSourceDelegate.initialised) return;
+    if (dataSourceDelegate.authenticated !== void 0 && !dataSourceDelegate.authenticated) {
+      setUsersLoading(false);
       return;
-    const m = ee(t);
-    return ae(
-      ne(m, i),
-      {
-        next: (v) => {
-          u(void 0);
-          try {
-            const R = He(v.docs);
-            D(R);
-          } catch (R) {
-            u(R);
-          }
-          I(!1);
-        },
-        error: (v) => {
-          u(v), I(!1);
+    }
+    setUsersLoading(true);
+    return dataSourceDelegate.listenCollection?.({
+      path: usersPath,
+      onUpdate(entities) {
+        setUsersError(void 0);
+        try {
+          const newUsers = entitiesToUsers(entities);
+          if (!equal(newUsers, usersWithRoleIds))
+            setUsersWithRoleIds(newUsers);
+        } catch (e) {
+          setUsersWithRoleIds([]);
+          console.error("Error loading users", e);
+          setUsersError(e);
         }
+        setUsersLoading(false);
+      },
+      onError(e) {
+        setUsersWithRoleIds([]);
+        console.error("Error loading users", e);
+        setUsersError(e);
+        setUsersLoading(false);
       }
-    );
-  }, [t, i]);
-  const U = k(async (m) => {
-    const v = f.current;
-    if (!v || !i)
-      throw Error("useFirestoreConfigurationPersistence Firestore not initialised");
-    console.debug("Persisting user", m);
-    const R = m.roles?.map((ke) => ke.id), {
-      uid: M,
-      ...X
-    } = m, se = {
-      ...X,
-      roles: R
+    });
+  }, [dataSourceDelegate?.initialised, dataSourceDelegate?.authenticated, usersPath]);
+  const saveUser = useCallback(async (user) => {
+    if (!dataSourceDelegate) throw Error("useBuildUserManagement Firebase not initialised");
+    if (!usersPath) throw Error("useBuildUserManagement Firestore not initialised");
+    console.debug("Persisting user", user);
+    const roleIds = user.roles?.map((r) => r.id);
+    const email = user.email?.toLowerCase().trim();
+    if (!email) throw Error("Email is required");
+    const userExists = users.find((u) => u.email?.toLowerCase() === email);
+    const data = {
+      ...user,
+      roles: roleIds ?? []
     };
-    return M ? ce(G(v, i, M), se, { merge: !0 }).then(() => m) : Pe(ne(v, i), se).then(() => m);
-  }, [i]), F = k((m) => {
-    const v = f.current;
-    if (!v || !n)
-      throw Error("useFirestoreConfigurationPersistence Firestore not initialised");
-    console.debug("Persisting role", m);
+    if (!userExists) {
+      data.created_on = /* @__PURE__ */ new Date();
+    }
+    return dataSourceDelegate.saveEntity({
+      status: "existing",
+      path: usersPath,
+      entityId: email,
+      values: removeUndefined(data)
+    }).then(() => user);
+  }, [usersPath, dataSourceDelegate?.initialised]);
+  const saveRole = useCallback((role) => {
+    if (!dataSourceDelegate) throw Error("useBuildUserManagement Firebase not initialised");
+    if (!rolesPath) throw Error("useBuildUserManagement Firestore not initialised");
+    console.debug("Persisting role", role);
     const {
-      id: R,
-      ...M
-    } = m, X = G(v, n, R);
-    return ce(X, M, { merge: !0 });
-  }, [n]), o = k(async (m) => {
-    const v = f.current;
-    if (!v || !i)
-      throw Error("useFirestoreConfigurationPersistence Firestore not initialised");
-    console.debug("Deleting", m);
-    const { uid: R } = m;
-    return de(G(v, i, R));
-  }, [i]), S = k((m) => {
-    const v = f.current;
-    if (!v || !n)
-      throw Error("useFirestoreConfigurationPersistence Firestore not initialised");
-    console.debug("Deleting", m);
-    const { id: R } = m, M = G(v, n, R);
-    return de(M);
-  }, [n]), $ = k(({
-    collection: m,
-    user: v
-  }) => je({
-    collection: m,
-    user: v
-  }), []), J = p.map((m) => m.uid), Se = k((m) => {
-    if (!p)
-      throw Error("Users not loaded");
-    return p.find((R) => R.email?.toLowerCase() === m?.email?.toLowerCase())?.roles;
-  }, [J]), Ie = k(({ user: m }) => {
-    if (console.log("Authenticating user", m), N)
-      return console.log("User management is still loading"), !1;
-    if (p.length === 0 || p.find((R) => R.email?.toLowerCase() === m?.email?.toLowerCase()))
-      return !0;
-    throw Error("Could not find a user with the provided email");
-  }, [N, p]);
+      id,
+      ...roleData
+    } = role;
+    return dataSourceDelegate.saveEntity({
+      status: "existing",
+      path: rolesPath,
+      entityId: id,
+      values: removeUndefined(roleData)
+    }).then(() => {
+      return;
+    });
+  }, [rolesPath, dataSourceDelegate?.initialised]);
+  const deleteUser = useCallback(async (user) => {
+    if (!dataSourceDelegate) throw Error("useBuildUserManagement Firebase not initialised");
+    if (!usersPath) throw Error("useBuildUserManagement Firestore not initialised");
+    console.debug("Deleting", user);
+    const { uid } = user;
+    const entity = {
+      path: usersPath,
+      id: uid,
+      values: {}
+    };
+    await dataSourceDelegate.deleteEntity({ entity });
+  }, [usersPath, dataSourceDelegate?.initialised]);
+  const deleteRole = useCallback(async (role) => {
+    if (!dataSourceDelegate) throw Error("useBuildUserManagement Firebase not initialised");
+    if (!rolesPath) throw Error("useBuildUserManagement Firestore not initialised");
+    console.debug("Deleting", role);
+    const { id } = role;
+    const entity = {
+      path: rolesPath,
+      id,
+      values: {}
+    };
+    await dataSourceDelegate.deleteEntity({ entity });
+  }, [rolesPath, dataSourceDelegate?.initialised]);
+  const collectionPermissions = useCallback(({
+    collection,
+    user
+  }) => resolveUserRolePermissions({
+    collection,
+    user
+  }), []);
+  const defineRolesFor = useCallback((user) => {
+    if (!users) throw Error("Users not loaded");
+    const mgmtUser = users.find((u) => u.email?.toLowerCase() === user?.email?.toLowerCase());
+    return mgmtUser?.roles;
+  }, [users]);
+  const authenticator = useCallback(({ user }) => {
+    console.debug("Authenticating user", user);
+    if (loading) {
+      console.warn("User management is still loading");
+      return false;
+    }
+    if (users.length === 0) {
+      return true;
+    }
+    const mgmtUser = users.find((u) => u.email?.toLowerCase() === user?.email?.toLowerCase());
+    if (mgmtUser) {
+      return true;
+    }
+    throw Error("Could not find a user with the provided email in the user management system.");
+  }, [loading, users, usersError, rolesError]);
+  const isAdmin = roles.some((r) => r.id === "admin");
   return {
-    loading: N,
-    roles: b,
-    users: p,
-    saveUser: U,
-    saveRole: F,
-    deleteUser: o,
-    deleteRole: S,
-    usersLimit: c,
-    canEditRoles: r === void 0 ? !0 : r,
-    allowDefaultRolesCreation: h === void 0 ? !0 : h,
-    includeCollectionConfigPermissions: !!w,
-    collectionPermissions: $,
-    defineRolesFor: Se,
-    authenticator: Ie
+    loading,
+    roles,
+    users,
+    saveUser,
+    saveRole,
+    rolesError,
+    deleteUser,
+    deleteRole,
+    usersLimit,
+    usersError,
+    isAdmin,
+    canEditRoles: canEditRoles === void 0 ? true : canEditRoles,
+    allowDefaultRolesCreation: allowDefaultRolesCreation === void 0 ? true : allowDefaultRolesCreation,
+    includeCollectionConfigPermissions: Boolean(includeCollectionConfigPermissions),
+    collectionPermissions,
+    defineRolesFor,
+    authenticator
   };
 }
-const He = (t) => t.map((i) => {
-  const n = i.data();
-  return {
-    uid: i.id,
-    ...n,
-    created_on: n?.created_on?.toDate(),
-    updated_on: n?.updated_on?.toDate()
-  };
-}), Ke = (t) => t.map((i) => ({
-  id: i.id,
-  ...i.data()
-})), Ue = A.createContext({});
-function Qe({
-  children: t,
-  userManagement: i
+const entitiesToUsers = (docs) => {
+  return docs.map((doc) => {
+    const data = doc.values;
+    const newVar = {
+      uid: doc.id,
+      ...data,
+      created_on: data?.created_on,
+      updated_on: data?.updated_on
+    };
+    return newVar;
+  });
+};
+const entityToRoles = (entities) => {
+  return entities.map((doc) => ({
+    id: doc.id,
+    ...doc.values
+  }));
+};
+const UserManagementContext = React.createContext({});
+function UserManagementProvider({
+  children,
+  userManagement
 }) {
-  return /* @__PURE__ */ e(Ue.Provider, { value: i, children: t });
+  return /* @__PURE__ */ jsx(UserManagementContext.Provider, { value: userManagement, children });
 }
-const W = () => Ae(Ue);
-function Q({ role: t }) {
-  let i;
-  return t.isAdmin ? i = "blueDarker" : t.id === "editor" ? i = "yellowLight" : t.id === "viewer" ? i = "grayLight" : i = Fe(t.id), /* @__PURE__ */ e(
-    Te,
+const useUserManagement = () => useContext(UserManagementContext);
+function RoleChip({ role }) {
+  let colorScheme;
+  if (role.isAdmin) {
+    colorScheme = "blueDarker";
+  } else if (role.id === "editor") {
+    colorScheme = "yellowLight";
+  } else if (role.id === "viewer") {
+    colorScheme = "grayLight";
+  } else {
+    colorScheme = getColorSchemeForSeed(role.id);
+  }
+  return /* @__PURE__ */ jsx(
+    Chip,
     {
-      colorScheme: i,
-      children: t.name
+      colorScheme,
+      children: role.name
     },
-    t.id
+    role.id
   );
 }
-const Xe = _.object().shape({
-  id: _.string().required("Required"),
-  name: _.string().required("Required")
+const RoleYupSchema = Yup.object().shape({
+  id: Yup.string().required("Required"),
+  name: Yup.string().required("Required")
 });
-function Ze({
-  open: t,
-  role: i,
-  editable: n,
-  handleClose: c,
-  collections: r
+function canRoleBeEdited(loggedUser) {
+  const loggedUserIsAdmin = loggedUser.roles?.map((r) => r.id).includes("admin");
+  if (!loggedUserIsAdmin) {
+    throw new Error("Only admins can edit roles");
+  }
+  return true;
+}
+function RolesDetailsForm({
+  open,
+  role,
+  editable,
+  handleClose,
+  collections
 }) {
-  const { saveRole: h } = W(), w = !i, [f, x] = P(), y = k((o) => (x(void 0), h(o)), [h]), d = xe({
-    initialValues: i ?? {
+  const { saveRole } = useUserManagement();
+  const isNewRole = !role;
+  const {
+    user: loggedInUser
+  } = useAuthController();
+  const [savingError, setSavingError] = useState();
+  const onRoleUpdated = useCallback((role2) => {
+    setSavingError(void 0);
+    if (!loggedInUser) throw new Error("User not found");
+    canRoleBeEdited(loggedInUser);
+    return saveRole(role2);
+  }, [saveRole, loggedInUser]);
+  const formex = useCreateFormex({
+    initialValues: role ?? {
       name: ""
     },
-    onSubmit: (o, S) => y(o).then(() => {
-      S.resetForm({
-        values: o
-      }), c();
-    }).catch(($) => x($)),
-    validation: (o) => Xe.validate(o, { abortEarly: !1 }).then(() => ({})).catch((S) => {
-      const $ = {};
-      return S.inner.forEach((J) => {
-        $[J.path] = J.message;
-      }), $;
-    })
-  }), {
-    isSubmitting: I,
-    touched: b,
-    values: s,
-    errors: C,
-    handleChange: D,
-    setFieldValue: p,
-    dirty: z,
-    setFieldTouched: L
-  } = d, g = s.isAdmin ?? !1, u = s.defaultPermissions?.create ?? !1, N = s.defaultPermissions?.read ?? !1, U = s.defaultPermissions?.edit ?? !1, F = s.defaultPermissions?.delete ?? !1;
-  return A.useEffect(() => {
-    !j(b, "id") && s.name && p("id", _e(s.name));
-  }, [b, s.name]), /* @__PURE__ */ e(
-    ue,
+    onSubmit: (role2, formexController) => {
+      try {
+        return onRoleUpdated(role2).then(() => {
+          formexController.resetForm({
+            values: role2
+          });
+          handleClose();
+        }).catch((e) => {
+          setSavingError(e);
+        });
+      } catch (e) {
+        setSavingError(e);
+        return Promise.resolve();
+      }
+    },
+    validation: (values2) => {
+      return RoleYupSchema.validate(values2, { abortEarly: false }).then(() => ({})).catch((e) => {
+        const errors2 = {};
+        e.inner.forEach((error) => {
+          errors2[error.path] = error.message;
+        });
+        return errors2;
+      });
+    }
+  });
+  const {
+    isSubmitting,
+    touched,
+    values,
+    errors,
+    handleChange,
+    setFieldValue,
+    dirty,
+    setFieldTouched
+  } = formex;
+  const isAdmin = values.isAdmin ?? false;
+  const defaultCreate = values.defaultPermissions?.create ?? false;
+  const defaultRead = values.defaultPermissions?.read ?? false;
+  const defaultEdit = values.defaultPermissions?.edit ?? false;
+  const defaultDelete = values.defaultPermissions?.delete ?? false;
+  React.useEffect(() => {
+    const idTouched = getIn(touched, "id");
+    if (!idTouched && values.name) {
+      setFieldValue("id", toSnakeCase(values.name));
+    }
+  }, [touched, values.name]);
+  return /* @__PURE__ */ jsx(
+    Dialog,
     {
-      open: t,
+      open,
       maxWidth: "4xl",
-      children: /* @__PURE__ */ e(De, { value: d, children: /* @__PURE__ */ l(
+      children: /* @__PURE__ */ jsx(Formex, { value: formex, children: /* @__PURE__ */ jsxs(
         "form",
         {
-          noValidate: !0,
+          noValidate: true,
           autoComplete: "off",
-          onSubmit: d.handleSubmit,
+          onSubmit: formex.handleSubmit,
           style: {
             display: "flex",
             flexDirection: "column",
@@ -324,13 +478,13 @@ function Ze({
             height: "100%"
           },
           children: [
-            /* @__PURE__ */ l(me, { className: "flex-grow", children: [
-              /* @__PURE__ */ e(
+            /* @__PURE__ */ jsxs(DialogContent, { className: "flex-grow", children: [
+              /* @__PURE__ */ jsx(
                 "div",
                 {
                   className: "flex flex-row pt-12 pb-8",
-                  children: /* @__PURE__ */ e(
-                    O,
+                  children: /* @__PURE__ */ jsx(
+                    Typography,
                     {
                       variant: "h4",
                       className: "flex-grow",
@@ -339,262 +493,296 @@ function Ze({
                   )
                 }
               ),
-              /* @__PURE__ */ l("div", { className: "grid grid-cols-12 gap-8", children: [
-                /* @__PURE__ */ l("div", { className: "col-span-12 md:col-span-8", children: [
-                  /* @__PURE__ */ e(
-                    K,
+              /* @__PURE__ */ jsxs("div", { className: "grid grid-cols-12 gap-8", children: [
+                /* @__PURE__ */ jsxs("div", { className: "col-span-12 md:col-span-8", children: [
+                  /* @__PURE__ */ jsx(
+                    TextField,
                     {
                       name: "name",
-                      required: !0,
-                      error: b.name && !!C.name,
-                      value: s.name,
-                      disabled: g || !n,
-                      onChange: D,
+                      required: true,
+                      error: touched.name && Boolean(errors.name),
+                      value: values.name,
+                      disabled: isAdmin || !editable,
+                      onChange: handleChange,
                       "aria-describedby": "name-helper-text",
                       label: "Name"
                     }
                   ),
-                  /* @__PURE__ */ e(B, { children: b.name && C.name ? C.name : "Name of this role" })
+                  /* @__PURE__ */ jsx(FieldCaption, { children: touched.name && Boolean(errors.name) ? errors.name : "Name of this role" })
                 ] }),
-                /* @__PURE__ */ l("div", { className: "col-span-12 md:col-span-4", children: [
-                  /* @__PURE__ */ e(
-                    K,
+                /* @__PURE__ */ jsxs("div", { className: "col-span-12 md:col-span-4", children: [
+                  /* @__PURE__ */ jsx(
+                    TextField,
                     {
                       name: "id",
-                      required: !0,
-                      error: b.id && !!C.id,
-                      value: s.id,
-                      disabled: !w || !n,
-                      onChange: (o) => {
-                        D(o), L("id", !0);
+                      required: true,
+                      error: touched.id && Boolean(errors.id),
+                      value: values.id,
+                      disabled: !isNewRole || !editable,
+                      onChange: (e) => {
+                        handleChange(e);
+                        setFieldTouched("id", true);
                       },
                       "aria-describedby": "id-helper-text",
                       label: "ID"
                     }
                   ),
-                  /* @__PURE__ */ e(B, { children: b.id && C.id ? C.id : "ID of this role" })
+                  /* @__PURE__ */ jsx(FieldCaption, { children: touched.id && Boolean(errors.id) ? errors.id : "ID of this role" })
                 ] }),
-                /* @__PURE__ */ l("div", { className: "col-span-12", children: [
-                  /* @__PURE__ */ e(
-                    Be,
-                    {
-                      className: "bg-inherit",
-                      children: /* @__PURE__ */ l(re, { children: [
-                        /* @__PURE__ */ l(oe, { children: [
-                          /* @__PURE__ */ e(a, {}),
-                          /* @__PURE__ */ e(
-                            a,
-                            {
-                              align: "center",
-                              children: "Create entities"
-                            }
-                          ),
-                          /* @__PURE__ */ e(
-                            a,
-                            {
-                              align: "center",
-                              children: "Read entities"
-                            }
-                          ),
-                          /* @__PURE__ */ e(
-                            a,
-                            {
-                              align: "center",
-                              children: "Update entities"
-                            }
-                          ),
-                          /* @__PURE__ */ e(
-                            a,
-                            {
-                              align: "center",
-                              children: "Delete entities"
-                            }
-                          )
-                        ] }),
-                        /* @__PURE__ */ l(le, { children: [
-                          /* @__PURE__ */ l(q, { children: [
-                            /* @__PURE__ */ e(
-                              a,
-                              {
-                                scope: "row",
-                                children: /* @__PURE__ */ e("strong", { children: "All collections" })
-                              }
-                            ),
-                            /* @__PURE__ */ e(
-                              a,
+                /* @__PURE__ */ jsxs("div", { className: "col-span-12", children: [
+                  /* @__PURE__ */ jsx(Paper, { className: "bg-inherit overflow-hidden", children: /* @__PURE__ */ jsxs(Table, { className: "w-full rounded-md", children: [
+                    /* @__PURE__ */ jsxs(TableHeader, { className: "rounded-md", children: [
+                      /* @__PURE__ */ jsx(TableCell, {}),
+                      /* @__PURE__ */ jsx(
+                        TableCell,
+                        {
+                          align: "center",
+                          children: "Create entities"
+                        }
+                      ),
+                      /* @__PURE__ */ jsx(
+                        TableCell,
+                        {
+                          align: "center",
+                          children: "Read entities"
+                        }
+                      ),
+                      /* @__PURE__ */ jsx(
+                        TableCell,
+                        {
+                          align: "center",
+                          children: "Update entities"
+                        }
+                      ),
+                      /* @__PURE__ */ jsx(
+                        TableCell,
+                        {
+                          align: "center",
+                          children: "Delete entities"
+                        }
+                      ),
+                      /* @__PURE__ */ jsx(
+                        TableCell,
+                        {
+                          align: "center"
+                        }
+                      )
+                    ] }),
+                    /* @__PURE__ */ jsxs(TableBody, { children: [
+                      /* @__PURE__ */ jsxs(TableRow, { children: [
+                        /* @__PURE__ */ jsx(
+                          TableCell,
+                          {
+                            scope: "row",
+                            children: /* @__PURE__ */ jsx("strong", { children: "All collections" })
+                          }
+                        ),
+                        /* @__PURE__ */ jsx(
+                          TableCell,
+                          {
+                            align: "center",
+                            children: /* @__PURE__ */ jsx(
+                              Tooltip,
                               {
-                                align: "center",
-                                children: /* @__PURE__ */ e(
-                                  V,
+                                title: "Create entities in collections",
+                                children: /* @__PURE__ */ jsx(
+                                  Checkbox,
                                   {
-                                    title: "Create entities in collections",
-                                    children: /* @__PURE__ */ e(
-                                      E,
-                                      {
-                                        disabled: g || !n,
-                                        checked: (g || u) ?? !1,
-                                        onCheckedChange: (o) => p("defaultPermissions.create", o)
-                                      }
-                                    )
+                                    disabled: isAdmin || !editable,
+                                    checked: (isAdmin || defaultCreate) ?? false,
+                                    onCheckedChange: (checked) => setFieldValue("defaultPermissions.create", checked)
                                   }
                                 )
                               }
-                            ),
-                            /* @__PURE__ */ e(
-                              a,
+                            )
+                          }
+                        ),
+                        /* @__PURE__ */ jsx(
+                          TableCell,
+                          {
+                            align: "center",
+                            children: /* @__PURE__ */ jsx(
+                              Tooltip,
                               {
-                                align: "center",
-                                children: /* @__PURE__ */ e(
-                                  V,
+                                title: "Access all data in every collection",
+                                children: /* @__PURE__ */ jsx(
+                                  Checkbox,
                                   {
-                                    title: "Access all data in every collection",
-                                    children: /* @__PURE__ */ e(
-                                      E,
-                                      {
-                                        disabled: g || !n,
-                                        checked: (g || N) ?? !1,
-                                        onCheckedChange: (o) => p("defaultPermissions.read", o)
-                                      }
-                                    )
+                                    disabled: isAdmin || !editable,
+                                    checked: (isAdmin || defaultRead) ?? false,
+                                    onCheckedChange: (checked) => setFieldValue("defaultPermissions.read", checked)
                                   }
                                 )
                               }
-                            ),
-                            /* @__PURE__ */ e(
-                              a,
+                            )
+                          }
+                        ),
+                        /* @__PURE__ */ jsx(
+                          TableCell,
+                          {
+                            align: "center",
+                            children: /* @__PURE__ */ jsx(
+                              Tooltip,
                               {
-                                align: "center",
-                                children: /* @__PURE__ */ e(
-                                  V,
+                                title: "Update data in any collection",
+                                children: /* @__PURE__ */ jsx(
+                                  Checkbox,
                                   {
-                                    title: "Update data in any collection",
-                                    children: /* @__PURE__ */ e(
-                                      E,
-                                      {
-                                        disabled: g || !n,
-                                        checked: (g || U) ?? !1,
-                                        onCheckedChange: (o) => p("defaultPermissions.edit", o)
-                                      }
-                                    )
+                                    disabled: isAdmin || !editable,
+                                    checked: (isAdmin || defaultEdit) ?? false,
+                                    onCheckedChange: (checked) => setFieldValue("defaultPermissions.edit", checked)
                                   }
                                 )
                               }
-                            ),
-                            /* @__PURE__ */ e(
-                              a,
+                            )
+                          }
+                        ),
+                        /* @__PURE__ */ jsx(
+                          TableCell,
+                          {
+                            align: "center",
+                            children: /* @__PURE__ */ jsx(
+                              Tooltip,
                               {
-                                align: "center",
-                                children: /* @__PURE__ */ e(
-                                  V,
+                                title: "Delete data in any collection",
+                                children: /* @__PURE__ */ jsx(
+                                  Checkbox,
                                   {
-                                    title: "Delete data in any collection",
-                                    children: /* @__PURE__ */ e(
-                                      E,
-                                      {
-                                        disabled: g || !n,
-                                        checked: (g || F) ?? !1,
-                                        onCheckedChange: (o) => p("defaultPermissions.delete", o)
-                                      }
-                                    )
+                                    disabled: isAdmin || !editable,
+                                    checked: (isAdmin || defaultDelete) ?? false,
+                                    onCheckedChange: (checked) => setFieldValue("defaultPermissions.delete", checked)
                                   }
                                 )
                               }
                             )
-                          ] }),
-                          r && r.map((o) => /* @__PURE__ */ l(q, { children: [
-                            /* @__PURE__ */ e(
-                              a,
+                          }
+                        ),
+                        /* @__PURE__ */ jsx(
+                          TableCell,
+                          {
+                            align: "center"
+                          }
+                        )
+                      ] }),
+                      collections && collections.map((col) => /* @__PURE__ */ jsxs(TableRow, { children: [
+                        /* @__PURE__ */ jsx(
+                          TableCell,
+                          {
+                            scope: "row",
+                            children: col.name
+                          }
+                        ),
+                        /* @__PURE__ */ jsx(
+                          TableCell,
+                          {
+                            align: "center",
+                            children: /* @__PURE__ */ jsx(
+                              Checkbox,
                               {
-                                scope: "row",
-                                children: o.name
+                                disabled: isAdmin || defaultCreate || !editable,
+                                checked: (isAdmin || defaultCreate || getIn(values, `collectionPermissions.${col.id}.create`)) ?? false,
+                                onCheckedChange: (checked) => setFieldValue(`collectionPermissions.${col.id}.create`, checked)
                               }
-                            ),
-                            /* @__PURE__ */ e(
-                              a,
+                            )
+                          }
+                        ),
+                        /* @__PURE__ */ jsx(
+                          TableCell,
+                          {
+                            align: "center",
+                            children: /* @__PURE__ */ jsx(
+                              Checkbox,
                               {
-                                align: "center",
-                                children: /* @__PURE__ */ e(
-                                  E,
-                                  {
-                                    disabled: g || u || !n,
-                                    checked: (g || u || j(s, `collectionPermissions.${o.path}.create`)) ?? !1,
-                                    onCheckedChange: (S) => p(`collectionPermissions.${o.path}.create`, S)
-                                  }
-                                )
+                                disabled: isAdmin || defaultRead || !editable,
+                                checked: (isAdmin || defaultRead || getIn(values, `collectionPermissions.${col.id}.read`)) ?? false,
+                                onCheckedChange: (checked) => setFieldValue(`collectionPermissions.${col.id}.read`, checked)
                               }
-                            ),
-                            /* @__PURE__ */ e(
-                              a,
+                            )
+                          }
+                        ),
+                        /* @__PURE__ */ jsx(
+                          TableCell,
+                          {
+                            align: "center",
+                            children: /* @__PURE__ */ jsx(
+                              Checkbox,
                               {
-                                align: "center",
-                                children: /* @__PURE__ */ e(
-                                  E,
-                                  {
-                                    disabled: g || N || !n,
-                                    checked: (g || N || j(s, `collectionPermissions.${o.path}.read`)) ?? !1,
-                                    onCheckedChange: (S) => p(`collectionPermissions.${o.path}.read`, S)
-                                  }
-                                )
+                                disabled: isAdmin || defaultEdit || !editable,
+                                checked: (isAdmin || defaultEdit || getIn(values, `collectionPermissions.${col.id}.edit`)) ?? false,
+                                onCheckedChange: (checked) => setFieldValue(`collectionPermissions.${col.id}.edit`, checked)
                               }
-                            ),
-                            /* @__PURE__ */ e(
-                              a,
+                            )
+                          }
+                        ),
+                        /* @__PURE__ */ jsx(
+                          TableCell,
+                          {
+                            align: "center",
+                            children: /* @__PURE__ */ jsx(
+                              Checkbox,
                               {
-                                align: "center",
-                                children: /* @__PURE__ */ e(
-                                  E,
-                                  {
-                                    disabled: g || U || !n,
-                                    checked: (g || U || j(s, `collectionPermissions.${o.path}.edit`)) ?? !1,
-                                    onCheckedChange: (S) => p(`collectionPermissions.${o.path}.edit`, S)
-                                  }
-                                )
+                                disabled: isAdmin || defaultDelete || !editable,
+                                checked: (isAdmin || defaultDelete || getIn(values, `collectionPermissions.${col.id}.delete`)) ?? false,
+                                onCheckedChange: (checked) => setFieldValue(`collectionPermissions.${col.id}.delete`, checked)
                               }
-                            ),
-                            /* @__PURE__ */ e(
-                              a,
+                            )
+                          }
+                        ),
+                        /* @__PURE__ */ jsx(
+                          TableCell,
+                          {
+                            align: "center",
+                            children: /* @__PURE__ */ jsx(
+                              Tooltip,
                               {
-                                align: "center",
-                                children: /* @__PURE__ */ e(
-                                  E,
+                                title: "Allow all permissions in this collections",
+                                children: /* @__PURE__ */ jsx(
+                                  Button,
                                   {
-                                    disabled: g || F || !n,
-                                    checked: (g || F || j(s, `collectionPermissions.${o.path}.delete`)) ?? !1,
-                                    onCheckedChange: (S) => p(`collectionPermissions.${o.path}.delete`, S)
+                                    className: "color-inherit",
+                                    onClick: () => {
+                                      setFieldValue(`collectionPermissions.${col.id}.create`, true);
+                                      setFieldValue(`collectionPermissions.${col.id}.read`, true);
+                                      setFieldValue(`collectionPermissions.${col.id}.edit`, true);
+                                      setFieldValue(`collectionPermissions.${col.id}.delete`, true);
+                                    },
+                                    disabled: isAdmin || !editable,
+                                    variant: "text",
+                                    children: "All"
                                   }
                                 )
                               }
                             )
-                          ] }, o.name))
-                        ] })
-                      ] })
-                    }
-                  ),
-                  /* @__PURE__ */ e(B, { children: "You can customise the permissions that the users related to this role can perform in the entities of each collection" })
+                          }
+                        )
+                      ] }, col.name))
+                    ] })
+                  ] }) }),
+                  /* @__PURE__ */ jsx(FieldCaption, { children: "You can customise the permissions that the users related to this role can perform in the entities of each collection" })
                 ] }),
-                /* @__PURE__ */ l("div", { className: "col-span-12 md:col-span-4", children: [
-                  /* @__PURE__ */ l(
-                    te,
+                /* @__PURE__ */ jsxs("div", { className: "col-span-12 md:col-span-4", children: [
+                  /* @__PURE__ */ jsxs(
+                    Select,
                     {
-                      error: b.config && !!C.config,
+                      error: touched.config && Boolean(errors.config),
                       id: "createCollections",
                       name: "createCollections",
                       label: "Create collections",
                       position: "item-aligned",
-                      disabled: g || !n,
-                      onChange: (o) => p("config.createCollections", o.target.value === "true"),
-                      value: g || s.config?.createCollections ? "true" : "false",
-                      renderValue: (o) => o === "true" ? "Yes" : "No",
+                      disabled: isAdmin || !editable,
+                      onChange: (event) => setFieldValue("config.createCollections", event.target.value === "true"),
+                      value: isAdmin || values.config?.createCollections ? "true" : "false",
+                      renderValue: (value) => value === "true" ? "Yes" : "No",
                       children: [
-                        /* @__PURE__ */ e(
-                          T,
+                        /* @__PURE__ */ jsx(
+                          SelectItem,
                           {
                             value: "true",
                             children: " Yes "
                           }
                         ),
-                        /* @__PURE__ */ e(
-                          T,
+                        /* @__PURE__ */ jsx(
+                          SelectItem,
                           {
                             value: "false",
                             children: " No "
@@ -603,38 +791,38 @@ function Ze({
                       ]
                     }
                   ),
-                  /* @__PURE__ */ e(B, { children: b.config && C.config ? C.config : "Can the user create collections" })
+                  /* @__PURE__ */ jsx(FieldCaption, { children: touched.config && Boolean(errors.config) ? errors.config : "Can the user create collections" })
                 ] }),
-                /* @__PURE__ */ l("div", { className: "col-span-12 md:col-span-4", children: [
-                  /* @__PURE__ */ l(
-                    te,
+                /* @__PURE__ */ jsxs("div", { className: "col-span-12 md:col-span-4", children: [
+                  /* @__PURE__ */ jsxs(
+                    Select,
                     {
-                      error: b.config && !!C.config,
+                      error: touched.config && Boolean(errors.config),
                       id: "editCollections",
                       name: "editCollections",
                       label: "Edit collections",
-                      disabled: g || !n,
+                      disabled: isAdmin || !editable,
                       position: "item-aligned",
-                      onChange: (o) => p("config.editCollections", o.target.value === "own" ? "own" : o.target.value === "true"),
-                      value: g ? "true" : s.config?.editCollections === "own" ? "own" : s.config?.editCollections ? "true" : "false",
-                      renderValue: (o) => o === "own" ? "Own" : o === "true" ? "Yes" : "No",
+                      onChange: (event) => setFieldValue("config.editCollections", event.target.value === "own" ? "own" : event.target.value === "true"),
+                      value: isAdmin ? "true" : values.config?.editCollections === "own" ? "own" : values.config?.editCollections ? "true" : "false",
+                      renderValue: (value) => value === "own" ? "Own" : value === "true" ? "Yes" : "No",
                       children: [
-                        /* @__PURE__ */ e(
-                          T,
+                        /* @__PURE__ */ jsx(
+                          SelectItem,
                           {
                             value: "true",
                             children: " Yes "
                           }
                         ),
-                        /* @__PURE__ */ e(
-                          T,
+                        /* @__PURE__ */ jsx(
+                          SelectItem,
                           {
                             value: "false",
                             children: " No "
                           }
                         ),
-                        /* @__PURE__ */ e(
-                          T,
+                        /* @__PURE__ */ jsx(
+                          SelectItem,
                           {
                             value: "own",
                             children: " Only his/her own "
@@ -643,38 +831,38 @@ function Ze({
                       ]
                     }
                   ),
-                  /* @__PURE__ */ e(B, { children: b.config && C.config ? C.config : "Can the user edit collections" })
+                  /* @__PURE__ */ jsx(FieldCaption, { children: touched.config && Boolean(errors.config) ? errors.config : "Can the user edit collections" })
                 ] }),
-                /* @__PURE__ */ l("div", { className: "col-span-12 md:col-span-4", children: [
-                  /* @__PURE__ */ l(
-                    te,
+                /* @__PURE__ */ jsxs("div", { className: "col-span-12 md:col-span-4", children: [
+                  /* @__PURE__ */ jsxs(
+                    Select,
                     {
-                      error: b.config && !!C.config,
+                      error: touched.config && Boolean(errors.config),
                       id: "deleteCollections",
                       name: "deleteCollections",
                       label: "Delete collections",
-                      disabled: g || !n,
+                      disabled: isAdmin || !editable,
                       position: "item-aligned",
-                      onChange: (o) => p("config.deleteCollections", o.target.value === "own" ? "own" : o.target.value === "true"),
-                      value: g ? "true" : s.config?.deleteCollections === "own" ? "own" : s.config?.deleteCollections ? "true" : "false",
-                      renderValue: (o) => o === "own" ? "Own" : o === "true" ? "Yes" : "No",
+                      onChange: (event) => setFieldValue("config.deleteCollections", event.target.value === "own" ? "own" : event.target.value === "true"),
+                      value: isAdmin ? "true" : values.config?.deleteCollections === "own" ? "own" : values.config?.deleteCollections ? "true" : "false",
+                      renderValue: (value) => value === "own" ? "Own" : value === "true" ? "Yes" : "No",
                       children: [
-                        /* @__PURE__ */ e(
-                          T,
+                        /* @__PURE__ */ jsx(
+                          SelectItem,
                           {
                             value: "true",
                             children: " Yes "
                           }
                         ),
-                        /* @__PURE__ */ e(
-                          T,
+                        /* @__PURE__ */ jsx(
+                          SelectItem,
                           {
                             value: "false",
                             children: " No "
                           }
                         ),
-                        /* @__PURE__ */ e(
-                          T,
+                        /* @__PURE__ */ jsx(
+                          SelectItem,
                           {
                             value: "own",
                             children: " Only his/her own "
@@ -683,32 +871,32 @@ function Ze({
                       ]
                     }
                   ),
-                  /* @__PURE__ */ e(B, { children: b.config && C.config ? C.config : "Can the user delete collections" })
+                  /* @__PURE__ */ jsx(FieldCaption, { children: touched.config && Boolean(errors.config) ? errors.config : "Can the user delete collections" })
                 ] })
               ] })
             ] }),
-            /* @__PURE__ */ l(he, { position: "sticky", children: [
-              f && /* @__PURE__ */ e(O, { className: "text-red-500", children: "There was an error saving this role" }),
-              /* @__PURE__ */ e(
-                Y,
+            /* @__PURE__ */ jsxs(DialogActions, { position: "sticky", children: [
+              savingError && /* @__PURE__ */ jsx(Typography, { className: "text-red-500 dark:text-red-500", children: savingError.message ?? "There was an error saving this role" }),
+              /* @__PURE__ */ jsx(
+                Button,
                 {
                   variant: "text",
                   onClick: () => {
-                    c();
+                    handleClose();
                   },
                   children: "Cancel"
                 }
               ),
-              /* @__PURE__ */ e(
-                fe,
+              /* @__PURE__ */ jsx(
+                LoadingButton,
                 {
                   variant: "filled",
                   color: "primary",
                   type: "submit",
-                  disabled: !z,
-                  loading: I,
-                  startIcon: /* @__PURE__ */ e(ge, {}),
-                  children: w ? "Create role" : "Update"
+                  disabled: !dirty,
+                  loading: isSubmitting,
+                  startIcon: /* @__PURE__ */ jsx(DoneIcon, {}),
+                  children: isNewRole ? "Create role" : "Update"
                 }
               )
             ] })
@@ -718,24 +906,24 @@ function Ze({
     }
   );
 }
-const en = [
+const DEFAULT_ROLES = [
   {
     id: "admin",
     name: "Admin",
-    isAdmin: !0
+    isAdmin: true
   },
   {
     id: "editor",
     name: "Editor",
-    isAdmin: !1,
+    isAdmin: false,
     defaultPermissions: {
-      read: !0,
-      create: !0,
-      edit: !0,
-      delete: !0
+      read: true,
+      create: true,
+      edit: true,
+      delete: true
     },
     config: {
-      createCollections: !0,
+      createCollections: true,
       editCollections: "own",
       deleteCollections: "own"
     }
@@ -743,78 +931,93 @@ const en = [
   {
     id: "viewer",
     name: "Viewer",
-    isAdmin: !1,
+    isAdmin: false,
     defaultPermissions: {
-      read: !0,
-      create: !1,
-      edit: !1,
-      delete: !1
+      read: true,
+      create: false,
+      edit: false,
+      delete: false
     }
   }
 ];
-function nn({
-  onRoleClicked: t,
-  editable: i
+function RolesTable({
+  onRoleClicked,
+  editable
 }) {
   const {
-    roles: n,
-    saveRole: c,
-    deleteRole: r,
-    allowDefaultRolesCreation: h
-  } = W(), [w, f] = P(void 0), [x, y] = P(!1);
-  return /* @__PURE__ */ l(
+    roles,
+    saveRole,
+    deleteRole,
+    allowDefaultRolesCreation
+  } = useUserManagement();
+  const [roleToBeDeleted, setRoleToBeDeleted] = useState(void 0);
+  const [deleteInProgress, setDeleteInProgress] = useState(false);
+  return /* @__PURE__ */ jsxs(
     "div",
     {
       className: "w-full overflow-auto",
       children: [
-        /* @__PURE__ */ l(re, { children: [
-          /* @__PURE__ */ l(oe, { children: [
-            /* @__PURE__ */ e(a, { header: !0, className: "w-16" }),
-            /* @__PURE__ */ e(a, { header: !0, children: "Role" }),
-            /* @__PURE__ */ e(a, { header: !0, className: "items-center", children: "Is Admin" }),
-            /* @__PURE__ */ e(a, { header: !0, children: "Default permissions" })
+        /* @__PURE__ */ jsxs(Table, { className: "w-full", children: [
+          /* @__PURE__ */ jsxs(TableHeader, { children: [
+            /* @__PURE__ */ jsx(TableCell, { header: true, className: "w-16" }),
+            /* @__PURE__ */ jsx(TableCell, { header: true, children: "Role" }),
+            /* @__PURE__ */ jsx(TableCell, { header: true, className: "items-center", children: "Is Admin" }),
+            /* @__PURE__ */ jsx(TableCell, { header: true, children: "Default permissions" })
           ] }),
-          /* @__PURE__ */ l(le, { children: [
-            n && n.map((d) => {
-              const I = d.isAdmin || d.defaultPermissions?.create, b = d.isAdmin || d.defaultPermissions?.read, s = d.isAdmin || d.defaultPermissions?.edit, C = d.isAdmin || d.defaultPermissions?.delete;
-              return /* @__PURE__ */ l(
-                q,
+          /* @__PURE__ */ jsxs(TableBody, { children: [
+            roles && roles.map((role) => {
+              const canCreateAll = role.isAdmin || role.defaultPermissions?.create;
+              const canReadAll = role.isAdmin || role.defaultPermissions?.read;
+              const canUpdateAll = role.isAdmin || role.defaultPermissions?.edit;
+              const canDeleteAll = role.isAdmin || role.defaultPermissions?.delete;
+              return /* @__PURE__ */ jsxs(
+                TableRow,
                 {
                   onClick: () => {
-                    t(d);
+                    onRoleClicked(role);
                   },
                   children: [
-                    /* @__PURE__ */ e(a, { style: { width: "64px" }, children: !d.isAdmin && /* @__PURE__ */ e(V, { title: "Delete this role", children: /* @__PURE__ */ e(
-                      pe,
+                    /* @__PURE__ */ jsx(TableCell, { style: { width: "64px" }, children: !role.isAdmin && /* @__PURE__ */ jsx(
+                      Tooltip,
                       {
-                        size: "small",
-                        disabled: !i,
-                        onClick: (D) => (D.stopPropagation(), f(d)),
-                        children: /* @__PURE__ */ e(Ce, {})
+                        asChild: true,
+                        title: "Delete this role",
+                        children: /* @__PURE__ */ jsx(
+                          IconButton,
+                          {
+                            size: "small",
+                            disabled: !editable,
+                            onClick: (event) => {
+                              event.stopPropagation();
+                              return setRoleToBeDeleted(role);
+                            },
+                            children: /* @__PURE__ */ jsx(DeleteIcon, {})
+                          }
+                        )
                       }
-                    ) }) }),
-                    /* @__PURE__ */ e(a, { children: /* @__PURE__ */ e(Q, { role: d }) }),
-                    /* @__PURE__ */ e(a, { className: "items-center", children: /* @__PURE__ */ e(E, { checked: d.isAdmin ?? !1 }) }),
-                    /* @__PURE__ */ e(a, { children: /* @__PURE__ */ l("ul", { children: [
-                      I && /* @__PURE__ */ e("li", { children: "Create" }),
-                      b && /* @__PURE__ */ e("li", { children: "Read" }),
-                      s && /* @__PURE__ */ e("li", { children: "Update" }),
-                      C && /* @__PURE__ */ e("li", { children: "Delete" })
+                    ) }),
+                    /* @__PURE__ */ jsx(TableCell, { children: /* @__PURE__ */ jsx(RoleChip, { role }) }),
+                    /* @__PURE__ */ jsx(TableCell, { className: "items-center", children: /* @__PURE__ */ jsx(Checkbox, { checked: role.isAdmin ?? false }) }),
+                    /* @__PURE__ */ jsx(TableCell, { children: /* @__PURE__ */ jsxs("ul", { children: [
+                      canCreateAll && /* @__PURE__ */ jsx("li", { children: "Create" }),
+                      canReadAll && /* @__PURE__ */ jsx("li", { children: "Read" }),
+                      canUpdateAll && /* @__PURE__ */ jsx("li", { children: "Update" }),
+                      canDeleteAll && /* @__PURE__ */ jsx("li", { children: "Delete" })
                     ] }) })
                   ]
                 },
-                d.name
+                role.name
               );
             }),
-            (!n || n.length === 0) && /* @__PURE__ */ e(q, { children: /* @__PURE__ */ e(a, { colspan: 4, children: /* @__PURE__ */ l(ve, { className: "flex flex-col gap-4 my-8 items-center", children: [
-              /* @__PURE__ */ e(O, { variant: "label", children: "You don't have any roles yet." }),
-              h && /* @__PURE__ */ e(
-                Y,
+            (!roles || roles.length === 0) && /* @__PURE__ */ jsx(TableRow, { children: /* @__PURE__ */ jsx(TableCell, { colspan: 4, children: /* @__PURE__ */ jsxs(CenteredView, { className: "flex flex-col gap-4 my-8 items-center", children: [
+              /* @__PURE__ */ jsx(Typography, { variant: "label", children: "You don't have any roles yet." }),
+              allowDefaultRolesCreation && /* @__PURE__ */ jsx(
+                Button,
                 {
                   variant: "outlined",
                   onClick: () => {
-                    en.forEach((d) => {
-                      c(d);
+                    DEFAULT_ROLES.forEach((role) => {
+                      saveRole(role);
                     });
                   },
                   children: "Create default roles"
@@ -823,146 +1026,189 @@ function nn({
             ] }) }) })
           ] })
         ] }),
-        /* @__PURE__ */ e(
-          be,
+        /* @__PURE__ */ jsx(
+          ConfirmationDialog,
           {
-            open: !!w,
-            loading: x,
+            open: Boolean(roleToBeDeleted),
+            loading: deleteInProgress,
             onAccept: () => {
-              w && (y(!0), r(w).then(() => {
-                f(void 0);
-              }).finally(() => {
-                y(!1);
-              }));
+              if (roleToBeDeleted) {
+                setDeleteInProgress(true);
+                deleteRole(roleToBeDeleted).then(() => {
+                  setRoleToBeDeleted(void 0);
+                }).finally(() => {
+                  setDeleteInProgress(false);
+                });
+              }
             },
             onCancel: () => {
-              f(void 0);
+              setRoleToBeDeleted(void 0);
             },
-            title: /* @__PURE__ */ e(H, { children: "Delete?" }),
-            body: /* @__PURE__ */ e(H, { children: "Are you sure you want to delete this role?" })
+            title: /* @__PURE__ */ jsx(Fragment, { children: "Delete?" }),
+            body: /* @__PURE__ */ jsx(Fragment, { children: "Are you sure you want to delete this role?" })
           }
         )
       ]
     }
   );
 }
-const tn = A.memo(
-  function({ children: i }) {
-    const { collections: n } = Oe(), [c, r] = P(!1), [h, w] = P(), { canEditRoles: f } = W(), x = k((d) => {
-      r(!0), w(d);
+const RolesView = React.memo(
+  function RolesView2({ children }) {
+    const { collections } = useNavigationController();
+    const [dialogOpen, setDialogOpen] = useState(false);
+    const [selectedRole, setSelectedRole] = useState();
+    const { canEditRoles } = useUserManagement();
+    const onRoleClicked = useCallback((user) => {
+      setDialogOpen(true);
+      setSelectedRole(user);
     }, []);
-    return /* @__PURE__ */ l(we, { className: "w-full flex flex-col py-4 gap-4", maxWidth: "6xl", children: [
-      i,
-      /* @__PURE__ */ l("div", { className: "flex items-center mt-12", children: [
-        /* @__PURE__ */ e(
-          O,
+    const handleClose = () => {
+      setSelectedRole(void 0);
+      setDialogOpen(false);
+    };
+    return /* @__PURE__ */ jsxs(Container, { className: "w-full flex flex-col py-4 gap-4", maxWidth: "6xl", children: [
+      children,
+      /* @__PURE__ */ jsxs("div", { className: "flex items-center mt-12", children: [
+        /* @__PURE__ */ jsx(
+          Typography,
           {
-            gutterBottom: !0,
+            gutterBottom: true,
             variant: "h4",
             className: "flex-grow",
             component: "h4",
             children: "Roles"
           }
         ),
-        /* @__PURE__ */ e(V, { title: f ? void 0 : "Update plans to customise roles", children: /* @__PURE__ */ e(
-          Y,
+        /* @__PURE__ */ jsx(
+          Tooltip,
           {
-            size: "large",
-            disabled: !f,
-            startIcon: /* @__PURE__ */ e(ye, {}),
-            onClick: () => r(!0),
-            children: "Add role"
+            asChild: true,
+            title: !canEditRoles ? "Update plans to customise roles" : void 0,
+            children: /* @__PURE__ */ jsx(
+              Button,
+              {
+                size: "large",
+                disabled: !canEditRoles,
+                startIcon: /* @__PURE__ */ jsx(AddIcon, {}),
+                onClick: () => setDialogOpen(true),
+                children: "Add role"
+              }
+            )
           }
-        ) })
+        )
       ] }),
-      /* @__PURE__ */ e(nn, { onRoleClicked: x, editable: !!f }),
-      /* @__PURE__ */ e(
-        Ze,
+      /* @__PURE__ */ jsx(RolesTable, { onRoleClicked, editable: Boolean(canEditRoles) }),
+      /* @__PURE__ */ jsx(
+        RolesDetailsForm,
         {
-          open: c,
-          role: h,
-          editable: f,
-          collections: n,
-          handleClose: () => {
-            w(void 0), r(!1);
-          }
+          open: dialogOpen,
+          role: selectedRole,
+          editable: canEditRoles,
+          collections,
+          handleClose
         },
-        h?.id ?? "new"
+        selectedRole?.id ?? "new"
       )
     ] });
   }
-), rn = _.object().shape({
-  displayName: _.string().required("Required"),
-  email: _.string().email().required("Required"),
-  roles: _.array().min(1)
+);
+const UserYupSchema = Yup.object().shape({
+  displayName: Yup.string().required("Required"),
+  email: Yup.string().email().required("Required"),
+  roles: Yup.array().min(1)
 });
-function on(t, i, n, c, r) {
-  const h = n.filter((y) => y.roles?.map((d) => d.id).includes("admin")), w = t.roles?.map((y) => y.id).includes("admin");
-  if ((!r || !Je(r.roles ?? [], i.roles ?? [])) && !w)
+function canUserBeEdited(loggedUser, user, users, roles, prevUser) {
+  const admins = users.filter((u) => u.roles?.map((r) => r.id).includes("admin"));
+  const loggedUserIsAdmin = loggedUser.roles?.map((r) => r.id).includes("admin");
+  const didRolesChange = !prevUser || !areRolesEqual(prevUser.roles ?? [], user.roles ?? []);
+  if (didRolesChange && !loggedUserIsAdmin) {
     throw new Error("Only admins can change roles");
-  if (r && r.roles?.map((y) => y.id).includes("admin") && !i.roles?.map((y) => y.id).includes("admin") && h.length === 1)
+  }
+  const adminRoleRemoved = prevUser && prevUser.roles?.map((r) => r.id).includes("admin") && !user.roles?.map((r) => r.id).includes("admin");
+  if (adminRoleRemoved && admins.length === 1) {
     throw new Error("There must be at least one admin");
-  return !0;
+  }
+  return true;
 }
-function ln({
-  open: t,
-  user: i,
-  handleClose: n
+function UserDetailsForm({
+  open,
+  user: userProp,
+  handleClose
 }) {
-  const c = Ne(), {
-    user: r
-  } = Re(), {
-    saveUser: h,
-    users: w,
-    roles: f
-  } = W(), x = !i, y = k((u) => {
-    if (!r)
+  const snackbarController = useSnackbarController();
+  const {
+    user: loggedInUser
+  } = useAuthController();
+  const {
+    saveUser,
+    users,
+    roles
+  } = useUserManagement();
+  const isNewUser = !userProp;
+  const onUserUpdated = useCallback((savedUser) => {
+    if (!loggedInUser) {
       throw new Error("Logged user not found");
+    }
     try {
-      return on(r, u, w, f, i), h(u);
-    } catch (N) {
-      return Promise.reject(N);
+      canUserBeEdited(loggedInUser, savedUser, users, roles, userProp);
+      return saveUser(savedUser);
+    } catch (e) {
+      return Promise.reject(e);
     }
-  }, [f, h, i, w, r]), d = xe({
-    initialValues: i ?? {
+  }, [roles, saveUser, userProp, users, loggedInUser]);
+  const formex = useCreateFormex({
+    initialValues: userProp ?? {
       displayName: "",
       email: "",
-      roles: f.filter((u) => u.id === "editor")
+      roles: roles.filter((r) => r.id === "editor")
     },
-    validation: (u) => rn.validate(u, { abortEarly: !1 }).then(() => ({})).catch((N) => N.inner.reduce((U, F) => (U[F.path] = F.message, U), {})),
-    onSubmit: (u, N) => y(u).then(() => {
-      n(), N.resetForm({
-        values: u
+    validation: (values2) => {
+      return UserYupSchema.validate(values2, { abortEarly: false }).then(() => {
+        return {};
+      }).catch((e) => {
+        return e.inner.reduce((acc, error) => {
+          acc[error.path] = error.message;
+          return acc;
+        }, {});
       });
-    }).catch((U) => {
-      c.open({
-        type: "error",
-        message: U.message
+    },
+    onSubmit: (user, formexController) => {
+      return onUserUpdated(user).then(() => {
+        handleClose();
+        formexController.resetForm({
+          values: user
+        });
+      }).catch((e) => {
+        snackbarController.open({
+          type: "error",
+          message: e.message
+        });
       });
-    })
-  }), {
-    isSubmitting: I,
-    touched: b,
-    handleChange: s,
-    values: C,
-    errors: D,
-    setFieldValue: p,
-    dirty: z,
-    handleSubmit: L,
-    submitCount: g
-  } = d;
-  return /* @__PURE__ */ e(
-    ue,
+    }
+  });
+  const {
+    isSubmitting,
+    touched,
+    handleChange,
+    values,
+    errors,
+    setFieldValue,
+    dirty,
+    handleSubmit,
+    submitCount
+  } = formex;
+  return /* @__PURE__ */ jsx(
+    Dialog,
     {
-      open: t,
-      onOpenChange: (u) => u ? void 0 : n(),
+      open,
+      onOpenChange: (open2) => !open2 ? handleClose() : void 0,
       maxWidth: "4xl",
-      children: /* @__PURE__ */ e(De, { value: d, children: /* @__PURE__ */ l(
+      children: /* @__PURE__ */ jsx(Formex, { value: formex, children: /* @__PURE__ */ jsxs(
         "form",
         {
-          onSubmit: L,
+          onSubmit: handleSubmit,
           autoComplete: "off",
-          noValidate: !0,
+          noValidate: true,
           style: {
             display: "flex",
             flexDirection: "column",
@@ -970,13 +1216,13 @@ function ln({
             height: "100%"
           },
           children: [
-            /* @__PURE__ */ l(me, { className: "h-full flex-grow", children: [
-              /* @__PURE__ */ e(
+            /* @__PURE__ */ jsxs(DialogContent, { className: "h-full flex-grow", children: [
+              /* @__PURE__ */ jsx(
                 "div",
                 {
                   className: "flex flex-row pt-4 pb-4",
-                  children: /* @__PURE__ */ e(
-                    O,
+                  children: /* @__PURE__ */ jsx(
+                    Typography,
                     {
                       variant: "h4",
                       className: "flex-grow",
@@ -985,80 +1231,77 @@ function ln({
                   )
                 }
               ),
-              /* @__PURE__ */ l("div", { className: "grid grid-cols-12 gap-8", children: [
-                /* @__PURE__ */ l("div", { className: "col-span-12", children: [
-                  /* @__PURE__ */ e(
-                    K,
+              /* @__PURE__ */ jsxs("div", { className: "grid grid-cols-12 gap-8", children: [
+                /* @__PURE__ */ jsxs("div", { className: "col-span-12", children: [
+                  /* @__PURE__ */ jsx(
+                    TextField,
                     {
                       name: "displayName",
-                      required: !0,
-                      error: g > 0 && !!D.displayName,
-                      value: C.displayName ?? "",
-                      onChange: s,
+                      required: true,
+                      error: submitCount > 0 && Boolean(errors.displayName),
+                      value: values.displayName ?? "",
+                      onChange: handleChange,
                       "aria-describedby": "name-helper-text",
                       label: "Name"
                     }
                   ),
-                  /* @__PURE__ */ e(B, { children: g > 0 && D.displayName ? D.displayName : "Name of this user" })
+                  /* @__PURE__ */ jsx(FieldCaption, { children: submitCount > 0 && Boolean(errors.displayName) ? errors.displayName : "Name of this user" })
                 ] }),
-                /* @__PURE__ */ l("div", { className: "col-span-12", children: [
-                  /* @__PURE__ */ e(
-                    K,
+                /* @__PURE__ */ jsxs("div", { className: "col-span-12", children: [
+                  /* @__PURE__ */ jsx(
+                    TextField,
                     {
-                      required: !0,
-                      error: g > 0 && !!D.email,
+                      required: true,
+                      error: submitCount > 0 && Boolean(errors.email),
                       name: "email",
-                      value: C.email ?? "",
-                      onChange: s,
+                      value: values.email ?? "",
+                      onChange: handleChange,
                       "aria-describedby": "email-helper-text",
                       label: "Email"
                     }
                   ),
-                  /* @__PURE__ */ e(B, { children: g > 0 && D.email ? D.email : "Email of this user" })
+                  /* @__PURE__ */ jsx(FieldCaption, { children: submitCount > 0 && Boolean(errors.email) ? errors.email : "Email of this user" })
                 ] }),
-                /* @__PURE__ */ e("div", { className: "col-span-12", children: /* @__PURE__ */ e(
-                  Le,
+                /* @__PURE__ */ jsx("div", { className: "col-span-12", children: /* @__PURE__ */ jsx(
+                  MultiSelect,
                   {
+                    className: "w-full",
                     label: "Roles",
-                    value: C.roles?.map((u) => u.id) ?? [],
-                    onMultiValueChange: (u) => p("roles", u.map((N) => f.find((U) => U.id === N))),
-                    renderValue: (u) => {
-                      const N = f.find((U) => U.id === u);
-                      return N ? /* @__PURE__ */ e("div", { className: "flex flex-wrap space-x-2 space-y-2", children: /* @__PURE__ */ e(Q, { role: N }, N?.id) }) : null;
-                    },
-                    children: f.map((u) => /* @__PURE__ */ e(
-                      Ve,
+                    value: values.roles?.map((r) => r.id) ?? [],
+                    onValueChange: (value) => setFieldValue("roles", value.map((id) => roles.find((r) => r.id === id))),
+                    children: roles.map((userRole) => /* @__PURE__ */ jsx(
+                      MultiSelectItem,
                       {
-                        value: u.id,
-                        children: /* @__PURE__ */ e(Q, { role: u }, u?.id)
+                        value: userRole.id,
+                        children: /* @__PURE__ */ jsx(RoleChip, { role: userRole }, userRole?.id)
                       },
-                      u.id
+                      userRole.id
                     ))
                   }
                 ) })
               ] })
             ] }),
-            /* @__PURE__ */ l(he, { children: [
-              /* @__PURE__ */ e(
-                Y,
+            /* @__PURE__ */ jsxs(DialogActions, { children: [
+              /* @__PURE__ */ jsx(
+                Button,
                 {
                   variant: "text",
                   onClick: () => {
-                    n();
+                    handleClose();
                   },
                   children: "Cancel"
                 }
               ),
-              /* @__PURE__ */ e(
-                fe,
+              /* @__PURE__ */ jsx(
+                LoadingButton,
                 {
                   variant: "filled",
                   color: "primary",
                   type: "submit",
-                  disabled: !z,
-                  loading: I,
-                  startIcon: /* @__PURE__ */ e(ge, {}),
-                  children: x ? "Create user" : "Update"
+                  disabled: !dirty,
+                  loading: isSubmitting,
+                  startIcon: /* @__PURE__ */ jsx(DoneIcon, {}),
+                  children: isNewUser ? "Create user" : "Update"
                 }
               )
             ] })
@@ -1068,79 +1311,98 @@ function ln({
     }
   );
 }
-function sn({ onUserClicked: t }) {
+function UsersTable({ onUserClicked }) {
   const {
-    users: i,
-    saveUser: n,
-    deleteUser: c
-  } = W(), r = Re(), h = Ne(), w = $e(), f = w?.locale ? Ye[w?.locale] : void 0, x = w?.dateTimeFormat ?? Me, [y, d] = P(void 0), [I, b] = P(!1);
-  return /* @__PURE__ */ l("div", { className: "overflow-auto", children: [
-    /* @__PURE__ */ l(re, { children: [
-      /* @__PURE__ */ l(oe, { children: [
-        /* @__PURE__ */ e(a, { className: "truncate w-16" }),
-        /* @__PURE__ */ e(a, { children: "ID" }),
-        /* @__PURE__ */ e(a, { children: "Email" }),
-        /* @__PURE__ */ e(a, { children: "Name" }),
-        /* @__PURE__ */ e(a, { children: "Roles" }),
-        /* @__PURE__ */ e(a, { children: "Created on" })
+    users,
+    saveUser,
+    deleteUser
+  } = useUserManagement();
+  const authController = useAuthController();
+  const snackbarController = useSnackbarController();
+  const customizationController = useCustomizationController();
+  const dateUtilsLocale = customizationController?.locale ? locales[customizationController?.locale] : void 0;
+  const dateFormat = customizationController?.dateTimeFormat ?? defaultDateFormat;
+  const [userToBeDeleted, setUserToBeDeleted] = useState(void 0);
+  const [deleteInProgress, setDeleteInProgress] = useState(false);
+  return /* @__PURE__ */ jsxs("div", { className: "overflow-auto", children: [
+    /* @__PURE__ */ jsxs(Table, { className: "w-full", children: [
+      /* @__PURE__ */ jsxs(TableHeader, { children: [
+        /* @__PURE__ */ jsx(TableCell, { className: "truncate w-16" }),
+        /* @__PURE__ */ jsx(TableCell, { children: "ID" }),
+        /* @__PURE__ */ jsx(TableCell, { children: "Email" }),
+        /* @__PURE__ */ jsx(TableCell, { children: "Name" }),
+        /* @__PURE__ */ jsx(TableCell, { children: "Roles" }),
+        /* @__PURE__ */ jsx(TableCell, { children: "Created on" })
       ] }),
-      /* @__PURE__ */ l(le, { children: [
-        i && i.map((s) => {
-          const C = s.roles, D = s.created_on ? qe(s.created_on, x, { locale: f }) : "";
-          return /* @__PURE__ */ l(
-            q,
+      /* @__PURE__ */ jsxs(TableBody, { children: [
+        users && users.map((user) => {
+          const userRoles = user.roles;
+          const formattedDate = user.created_on ? format(user.created_on, dateFormat, { locale: dateUtilsLocale }) : "";
+          return /* @__PURE__ */ jsxs(
+            TableRow,
             {
               onClick: () => {
-                t(s);
+                onUserClicked(user);
               },
               children: [
-                /* @__PURE__ */ e(a, { className: "w-10", children: /* @__PURE__ */ e(V, { title: "Delete this user", children: /* @__PURE__ */ e(
-                  pe,
+                /* @__PURE__ */ jsx(TableCell, { className: "w-10", children: /* @__PURE__ */ jsx(
+                  Tooltip,
                   {
-                    size: "small",
-                    onClick: (p) => (p.stopPropagation(), d(s)),
-                    children: /* @__PURE__ */ e(Ce, {})
+                    asChild: true,
+                    title: "Delete this user",
+                    children: /* @__PURE__ */ jsx(
+                      IconButton,
+                      {
+                        size: "small",
+                        onClick: (event) => {
+                          event.stopPropagation();
+                          return setUserToBeDeleted(user);
+                        },
+                        children: /* @__PURE__ */ jsx(DeleteIcon, {})
+                      }
+                    )
                   }
-                ) }) }),
-                /* @__PURE__ */ e(a, { children: s.uid }),
-                /* @__PURE__ */ e(a, { children: s.email }),
-                /* @__PURE__ */ e(a, { className: "font-medium align-left", children: s.displayName }),
-                /* @__PURE__ */ e(a, { className: "align-left", children: C ? /* @__PURE__ */ e("div", { className: "flex flex-wrap gap-2", children: C.map(
-                  (p) => /* @__PURE__ */ e(Q, { role: p }, p?.id)
+                ) }),
+                /* @__PURE__ */ jsx(TableCell, { children: user.uid }),
+                /* @__PURE__ */ jsx(TableCell, { children: user.email }),
+                /* @__PURE__ */ jsx(TableCell, { className: "font-medium align-left", children: user.displayName }),
+                /* @__PURE__ */ jsx(TableCell, { className: "align-left", children: userRoles ? /* @__PURE__ */ jsx("div", { className: "flex flex-wrap gap-2", children: userRoles.map(
+                  (userRole) => /* @__PURE__ */ jsx(RoleChip, { role: userRole }, userRole?.id)
                 ) }) : null }),
-                /* @__PURE__ */ e(a, { children: D })
+                /* @__PURE__ */ jsx(TableCell, { children: formattedDate })
               ]
             },
-            "row_" + s.uid
+            "row_" + user.uid
           );
         }),
-        (!i || i.length === 0) && /* @__PURE__ */ e(q, { children: /* @__PURE__ */ e(a, { colspan: 6, children: /* @__PURE__ */ l(ve, { className: "flex flex-col gap-4 my-8 items-center", children: [
-          /* @__PURE__ */ e(O, { variant: "label", children: "There are no users yet" }),
-          /* @__PURE__ */ e(
-            Y,
+        (!users || users.length === 0) && /* @__PURE__ */ jsx(TableRow, { children: /* @__PURE__ */ jsx(TableCell, { colspan: 6, children: /* @__PURE__ */ jsxs(CenteredView, { className: "flex flex-col gap-4 my-8 items-center", children: [
+          /* @__PURE__ */ jsx(Typography, { variant: "label", children: "There are no users yet" }),
+          /* @__PURE__ */ jsx(
+            Button,
             {
               variant: "outlined",
               onClick: () => {
-                if (!r.user?.uid)
+                if (!authController.user?.uid) {
                   throw Error("UsersTable, authController misconfiguration");
-                n({
-                  uid: r.user?.uid,
-                  email: r.user?.email,
-                  displayName: r.user?.displayName,
-                  photoURL: r.user?.photoURL,
-                  providerId: r.user?.providerId,
-                  isAnonymous: r.user?.isAnonymous,
+                }
+                saveUser({
+                  uid: authController.user?.uid,
+                  email: authController.user?.email,
+                  displayName: authController.user?.displayName,
+                  photoURL: authController.user?.photoURL,
+                  providerId: authController.user?.providerId,
+                  isAnonymous: authController.user?.isAnonymous,
                   roles: [{ id: "admin", name: "Admin" }],
                   created_on: /* @__PURE__ */ new Date()
                 }).then(() => {
-                  h.open({
+                  snackbarController.open({
                     type: "success",
                     message: "User added successfully"
                   });
-                }).catch((s) => {
-                  h.open({
+                }).catch((error) => {
+                  snackbarController.open({
                     type: "error",
-                    message: "Error adding user: " + s.message
+                    message: "Error adding user: " + error.message
                   });
                 });
               },
@@ -1150,132 +1412,212 @@ function sn({ onUserClicked: t }) {
         ] }) }) })
       ] })
     ] }),
-    /* @__PURE__ */ e(
-      be,
+    /* @__PURE__ */ jsx(
+      ConfirmationDialog,
       {
-        open: !!y,
-        loading: I,
+        open: Boolean(userToBeDeleted),
+        loading: deleteInProgress,
         onAccept: () => {
-          y && (b(!0), c(y).then(() => {
-            d(void 0);
-          }).catch((s) => {
-            h.open({
-              type: "error",
-              message: "Error deleting user: " + s.message
+          if (userToBeDeleted) {
+            setDeleteInProgress(true);
+            deleteUser(userToBeDeleted).then(() => {
+              setUserToBeDeleted(void 0);
+            }).catch((error) => {
+              snackbarController.open({
+                type: "error",
+                message: "Error deleting user: " + error.message
+              });
+            }).finally(() => {
+              setDeleteInProgress(false);
             });
-          }).finally(() => {
-            b(!1);
-          }));
+          }
         },
         onCancel: () => {
-          d(void 0);
+          setUserToBeDeleted(void 0);
         },
-        title: /* @__PURE__ */ e(H, { children: "Delete?" }),
-        body: /* @__PURE__ */ e(H, { children: "Are you sure you want to delete this user?" })
+        title: /* @__PURE__ */ jsx(Fragment, { children: "Delete?" }),
+        body: /* @__PURE__ */ jsx(Fragment, { children: "Are you sure you want to delete this user?" })
       }
     )
   ] });
 }
-const an = function({ children: i }) {
-  const [n, c] = P(), [r, h] = P(), { users: w, usersLimit: f } = W(), x = f !== void 0 && w && w.length >= f, y = k((I) => {
-    h(I), c(!0);
-  }, []), d = k(() => {
-    c(!1), h(void 0);
+const UsersView = function UsersView2({ children }) {
+  const [dialogOpen, setDialogOpen] = useState();
+  const [selectedUser, setSelectedUser] = useState();
+  const { users, usersLimit } = useUserManagement();
+  const reachedUsersLimit = usersLimit !== void 0 && (users && users.length >= usersLimit);
+  const onUserClicked = useCallback((user) => {
+    setSelectedUser(user);
+    setDialogOpen(true);
+  }, []);
+  const handleClose = useCallback(() => {
+    setDialogOpen(false);
+    setSelectedUser(void 0);
   }, []);
-  return /* @__PURE__ */ l(we, { className: "w-full flex flex-col py-4 gap-4", maxWidth: "6xl", children: [
-    i,
-    /* @__PURE__ */ l(
+  return /* @__PURE__ */ jsxs(Container, { className: "w-full flex flex-col py-4 gap-4", maxWidth: "6xl", children: [
+    children,
+    /* @__PURE__ */ jsxs(
       "div",
       {
         className: "flex items-center mt-12",
         children: [
-          /* @__PURE__ */ e(
-            O,
+          /* @__PURE__ */ jsx(
+            Typography,
             {
-              gutterBottom: !0,
+              gutterBottom: true,
               variant: "h4",
               className: "flex-grow",
               component: "h4",
               children: "Users"
             }
           ),
-          /* @__PURE__ */ e(
-            Y,
+          /* @__PURE__ */ jsx(
+            Button,
             {
               size: "large",
-              disabled: x,
-              startIcon: /* @__PURE__ */ e(ye, {}),
-              onClick: () => c(!0),
+              disabled: reachedUsersLimit,
+              startIcon: /* @__PURE__ */ jsx(AddIcon, {}),
+              onClick: () => setDialogOpen(true),
               children: "Add user"
             }
           )
         ]
       }
     ),
-    /* @__PURE__ */ e(sn, { onUserClicked: y }),
-    /* @__PURE__ */ e(
-      ln,
+    /* @__PURE__ */ jsx(UsersTable, { onUserClicked }),
+    /* @__PURE__ */ jsx(
+      UserDetailsForm,
       {
-        open: n ?? !1,
-        user: r,
-        handleClose: d
+        open: dialogOpen ?? false,
+        user: selectedUser,
+        handleClose
       },
-      r?.uid ?? "new"
+      selectedUser?.uid ?? "new"
     )
   ] });
 };
-function xn({ userManagement: t }) {
+function useUserManagementPlugin({ userManagement }) {
+  const noUsers = userManagement.users.length === 0;
+  const noRoles = userManagement.roles.length === 0;
   return {
     key: "user_management",
-    loading: t.loading,
+    loading: userManagement.loading,
+    homePage: {
+      additionalChildrenStart: noUsers || noRoles ? /* @__PURE__ */ jsx(
+        IntroWidget,
+        {
+          noUsers,
+          noRoles,
+          userManagement
+        }
+      ) : void 0
+    },
     provider: {
-      Component: Qe,
+      Component: UserManagementProvider,
       props: {
-        userManagement: t
+        userManagement
       }
     }
   };
 }
-const Dn = [
+function IntroWidget({
+  noUsers,
+  noRoles,
+  userManagement
+}) {
+  const authController = useAuthController();
+  const snackbarController = useSnackbarController();
+  const buttonLabel = noUsers && noRoles ? "Create default roles and add current user as admin" : noUsers ? "Add current user as admin" : noRoles ? "Create default roles" : void 0;
+  return /* @__PURE__ */ jsxs(
+    Paper,
+    {
+      className: "my-4 flex flex-col px-4 py-6 bg-white dark:bg-slate-800 gap-2",
+      children: [
+        /* @__PURE__ */ jsx(Typography, { variant: "subtitle2", className: "uppercase", children: "Create your users and roles" }),
+        /* @__PURE__ */ jsx(Typography, { children: "You have no users or roles defined. You can create default roles and add the current user as admin." }),
+        /* @__PURE__ */ jsxs(Button, { onClick: () => {
+          if (!authController.user?.uid) {
+            throw Error("UsersTable, authController misconfiguration");
+          }
+          if (noUsers) {
+            userManagement.saveUser({
+              uid: authController.user?.uid,
+              email: authController.user?.email,
+              displayName: authController.user?.displayName,
+              photoURL: authController.user?.photoURL,
+              providerId: authController.user?.providerId,
+              isAnonymous: authController.user?.isAnonymous,
+              roles: [{
+                id: "admin",
+                name: "Admin"
+              }],
+              created_on: /* @__PURE__ */ new Date()
+            }).then(() => {
+              snackbarController.open({
+                type: "success",
+                message: "User added successfully"
+              });
+            }).catch((error) => {
+              snackbarController.open({
+                type: "error",
+                message: "Error adding user: " + error.message
+              });
+            });
+          }
+          if (noRoles) {
+            DEFAULT_ROLES.forEach((role) => {
+              userManagement.saveRole(role);
+            });
+          }
+        }, children: [
+          /* @__PURE__ */ jsx(AddIcon, {}),
+          buttonLabel
+        ] })
+      ]
+    }
+  );
+}
+const userManagementAdminViews = [
   {
     path: "users",
     name: "CMS Users",
     group: "Admin",
     icon: "face",
-    view: /* @__PURE__ */ e(an, {})
+    view: /* @__PURE__ */ jsx(UsersView, {})
   },
   {
     path: "roles",
     name: "Roles",
     group: "Admin",
     icon: "gpp_good",
-    view: /* @__PURE__ */ e(tn, {})
+    view: /* @__PURE__ */ jsx(RolesView, {})
   }
 ];
 export {
-  pn as RESERVED_GROUPS,
-  Q as RoleChip,
-  Xe as RoleYupSchema,
-  Ze as RolesDetailsForm,
-  nn as RolesTable,
-  tn as RolesView,
-  ln as UserDetailsForm,
-  Ue as UserManagementContext,
-  Qe as UserManagementProvider,
-  rn as UserYupSchema,
-  sn as UsersTable,
-  an as UsersView,
-  Je as areRolesEqual,
-  vn as cacheDelegatedLoginToken,
-  yn as clearDelegatedLoginTokensCache,
-  bn as darkenColor,
-  wn as getDelegatedLoginTokenFromCache,
-  Cn as getUserRoles,
-  Nn as hexToRgbaWithOpacity,
-  je as resolveUserRolePermissions,
-  Rn as useBuildFirestoreUserManagement,
-  W as useUserManagement,
-  xn as useUserManagementPlugin,
-  Dn as userManagementAdminViews
+  IntroWidget,
+  RESERVED_GROUPS,
+  RoleChip,
+  RoleYupSchema,
+  RolesDetailsForm,
+  RolesTable,
+  RolesView,
+  UserDetailsForm,
+  UserManagementContext,
+  UserManagementProvider,
+  UserYupSchema,
+  UsersTable,
+  UsersView,
+  areRolesEqual,
+  cacheDelegatedLoginToken,
+  clearDelegatedLoginTokensCache,
+  darkenColor,
+  getDelegatedLoginTokenFromCache,
+  getUserRoles,
+  hexToRgbaWithOpacity,
+  resolveUserRolePermissions,
+  useBuildUserManagement,
+  useUserManagement,
+  useUserManagementPlugin,
+  userManagementAdminViews
 };
 //# sourceMappingURL=index.es.js.map