@firecms/user_management 3.0.0-canary.15 → 3.0.0-canary.151

package/dist/index.es.js

@@ -1,315 +1,494 @@
-import P, { useRef as Ie, useEffect as Z, useCallback as k, useContext as ke, useState as A } from "react";
-import { getFirestore as ee, onSnapshot as le, collection as se, setDoc as ae, doc as G, deleteDoc as ce } from "firebase/firestore";
-import { jsx as e, jsxs as l, Fragment as H } from "react/jsx-runtime";
-import { getColorSchemeForSeed as Ee, Chip as Pe, Dialog as de, DialogContent as ue, Typography as O, TextField as K, Paper as Ae, Table as ie, TableHeader as re, TableCell as a, TableBody as oe, TableRow as M, Tooltip as V, Checkbox as E, Select as ne, SelectItem as T, DialogActions as me, Button as q, LoadingButton as he, DoneIcon as fe, IconButton as ge, DeleteIcon as pe, CenteredView as Ce, Container as ve, AddIcon as we, MultiSelect as Fe, MultiSelectItem as Te } from "@firecms/ui";
-import * as _ from "yup";
-import { toSnakeCase as Be, FieldCaption as B, DeleteConfirmationDialog as ye, useNavigationController as Le, useSnackbarController as be, useAuthController as Ne, useCustomizationController as Ve, defaultDateFormat as _e } from "@firecms/core";
-import { useCreateFormex as Re, getIn as j, Formex as xe } from "@firecms/formex";
-import { format as Oe } from "date-fns";
-import * as $e from "date-fns/locale";
-const hn = ["Admin"], Me = {
-  read: !1,
-  edit: !1,
-  create: !1,
-  delete: !1
+import React, { useEffect, useCallback, useContext, useState } from "react";
+import equal from "react-fast-compare";
+import { removeUndefined, useAuthController, toSnakeCase, FieldCaption, ConfirmationDialog, useNavigationController, useSnackbarController, useCustomizationController, defaultDateFormat } from "@firecms/core";
+import { jsx, jsxs, Fragment } from "react/jsx-runtime";
+import { getColorSchemeForSeed, Chip, Dialog, DialogContent, Typography, TextField, Paper, Table, TableHeader, TableCell, TableBody, TableRow, Tooltip, Checkbox, Button, Select, SelectItem, DialogActions, LoadingButton, DoneIcon, IconButton, DeleteIcon, CenteredView, Container, AddIcon, MultiSelect, MultiSelectItem } from "@firecms/ui";
+import * as Yup from "yup";
+import { useCreateFormex, getIn, Formex } from "@firecms/formex";
+import { format } from "date-fns";
+import * as locales from "date-fns/locale";
+const RESERVED_GROUPS = ["Admin"];
+const DEFAULT_PERMISSIONS = {
+  read: false,
+  edit: false,
+  create: false,
+  delete: false
 };
-function qe({
-  collection: t,
-  user: i
+function resolveUserRolePermissions({
+  collection,
+  user
 }) {
-  const n = i?.roles;
-  if (n) {
-    if (t.ownerId === i?.uid)
-      return {
-        read: !0,
-        create: !0,
-        edit: !0,
-        delete: !0
-      };
-    {
-      const c = {
-        read: !1,
-        create: !1,
-        edit: !1,
-        delete: !1
-      };
-      return n.map((r) => Ye(r, t.id)).reduce(te, c);
-    }
-  } else
-    return Me;
+  const roles = user?.roles;
+  if (!roles) {
+    return DEFAULT_PERMISSIONS;
+  } else if (collection.ownerId === user?.uid) {
+    return {
+      read: true,
+      create: true,
+      edit: true,
+      delete: true
+    };
+  } else {
+    const basePermissions = {
+      read: false,
+      create: false,
+      edit: false,
+      delete: false
+    };
+    return roles.map((role) => resolveCollectionRole(role, collection.id)).reduce(mergePermissions, basePermissions);
+  }
 }
-function Ye(t, i) {
-  const n = {
-    read: t.isAdmin || t.defaultPermissions?.read,
-    create: t.isAdmin || t.defaultPermissions?.create,
-    edit: t.isAdmin || t.defaultPermissions?.edit,
-    delete: t.isAdmin || t.defaultPermissions?.delete
+function resolveCollectionRole(role, id) {
+  const basePermissions = {
+    read: (role.isAdmin || role.defaultPermissions?.read) ?? false,
+    create: (role.isAdmin || role.defaultPermissions?.create) ?? false,
+    edit: (role.isAdmin || role.defaultPermissions?.edit) ?? false,
+    delete: (role.isAdmin || role.defaultPermissions?.delete) ?? false
   };
-  return t.collectionPermissions && t.collectionPermissions[i] ? te(t.collectionPermissions[i], n) : t.defaultPermissions ? te(t.defaultPermissions, n) : n;
+  const thisCollectionPermissions = role.collectionPermissions?.[id];
+  if (thisCollectionPermissions) {
+    return mergePermissions(thisCollectionPermissions, basePermissions);
+  } else if (role.defaultPermissions) {
+    return mergePermissions(role.defaultPermissions, basePermissions);
+  } else {
+    return basePermissions;
+  }
 }
-const te = (t, i) => ({
-  read: t.read || i.read,
-  create: t.create || i.create,
-  edit: t.edit || i.edit,
-  delete: t.delete || i.delete
-});
-function fn(t, i) {
-  return t ? i.roles ? i.roles.map((n) => t.find((c) => c.id === n.id)).filter(Boolean) : [] : void 0;
+const mergePermissions = (permA, permB) => {
+  return {
+    read: permA.read || permB.read,
+    create: permA.create || permB.create,
+    edit: permA.edit || permB.edit,
+    delete: permA.delete || permB.delete
+  };
+};
+function getUserRoles(roles, fireCMSUser) {
+  return !roles ? void 0 : fireCMSUser.roles ? fireCMSUser.roles.map((role) => roles.find((r) => r.id === role.id)).filter(Boolean) : [];
 }
-const We = (t, i) => {
-  const n = t.map((r) => r.id), c = i.map((r) => r.id);
-  return n.length === i.length && n.every((r) => c.includes(r));
+const areRolesEqual = (rolesA, rolesB) => {
+  const rolesAIds = rolesA.map((r) => r.id);
+  const rolesBIds = rolesB.map((r) => r.id);
+  return rolesAIds.length === rolesB.length && rolesAIds.every((role) => rolesBIds.includes(role));
 };
-function gn(t, i) {
-  if (!i)
+function cacheDelegatedLoginToken(projectId, delegatedToken) {
+  if (!delegatedToken) {
     return;
-  const n = je(i), c = new Date(n.exp * 1e3);
-  localStorage.setItem(`auth_token::${t}`, JSON.stringify({
-    token: i,
-    expiry: c
+  }
+  const data = parseJwt(delegatedToken);
+  const expiry = new Date(data.exp * 1e3);
+  localStorage.setItem(`auth_token::${projectId}`, JSON.stringify({
+    token: delegatedToken,
+    expiry
   }));
 }
-function pn(t) {
-  const i = localStorage.getItem(`auth_token::${t}`);
-  if (i) {
-    const n = JSON.parse(i);
-    if (n.expiry = new Date(n.expiry), n.expiry > /* @__PURE__ */ new Date())
-      return n.token;
+function getDelegatedLoginTokenFromCache(projectId) {
+  const entry = localStorage.getItem(`auth_token::${projectId}`);
+  if (entry) {
+    const data = JSON.parse(entry);
+    data.expiry = new Date(data.expiry);
+    if (data.expiry > /* @__PURE__ */ new Date()) {
+      return data.token;
+    }
   }
+  return void 0;
 }
-function Cn() {
-  for (let t = 0; t < localStorage.length; t++) {
-    const i = localStorage.key(t);
-    i?.startsWith("auth_token::") && localStorage.removeItem(i);
+function clearDelegatedLoginTokensCache() {
+  for (let i = 0; i < localStorage.length; i++) {
+    const key = localStorage.key(i);
+    if (key?.startsWith("auth_token::")) {
+      localStorage.removeItem(key);
+    }
   }
 }
-function je(t) {
-  if (!t)
+function parseJwt(token) {
+  if (!token) {
     throw new Error("No JWT token");
-  const n = t.split(".")[1].replace(/-/g, "+").replace(/_/g, "/"), c = decodeURIComponent(window.atob(n).split("").map(function(r) {
-    return "%" + ("00" + r.charCodeAt(0).toString(16)).slice(-2);
+  }
+  const base64Url = token.split(".")[1];
+  const base64 = base64Url.replace(/-/g, "+").replace(/_/g, "/");
+  const jsonPayload = decodeURIComponent(window.atob(base64).split("").map(function(c) {
+    return "%" + ("00" + c.charCodeAt(0).toString(16)).slice(-2);
   }).join(""));
-  return JSON.parse(c);
+  return JSON.parse(jsonPayload);
 }
-function vn(t, i = 10) {
-  if (!/^#([0-9A-Fa-f]{3}){1,2}$/.test(t))
+function darkenColor(hexColor, darkenBy = 10) {
+  if (!/^#([0-9A-Fa-f]{3}){1,2}$/.test(hexColor)) {
     throw new Error("Invalid color format");
-  let n = t.substring(1).split("");
-  n.length === 3 && (n = [n[0], n[0], n[1], n[1], n[2], n[2]]);
-  let c = parseInt(n[0] + n[1], 16), r = parseInt(n[2] + n[3], 16), m = parseInt(n[4] + n[5], 16);
-  return c = Math.floor(c * (1 - i / 100)), r = Math.floor(r * (1 - i / 100)), m = Math.floor(m * (1 - i / 100)), "#" + (c < 16 ? "0" : "") + c.toString(16) + (r < 16 ? "0" : "") + r.toString(16) + (m < 16 ? "0" : "") + m.toString(16);
+  }
+  let color = hexColor.substring(1).split("");
+  if (color.length === 3) {
+    color = [color[0], color[0], color[1], color[1], color[2], color[2]];
+  }
+  let r = parseInt(color[0] + color[1], 16);
+  let g = parseInt(color[2] + color[3], 16);
+  let b = parseInt(color[4] + color[5], 16);
+  r = Math.floor(r * (1 - darkenBy / 100));
+  g = Math.floor(g * (1 - darkenBy / 100));
+  b = Math.floor(b * (1 - darkenBy / 100));
+  return "#" + (r < 16 ? "0" : "") + r.toString(16) + (g < 16 ? "0" : "") + g.toString(16) + (b < 16 ? "0" : "") + b.toString(16);
 }
-function wn(t, i = 10) {
-  if (!/^#([0-9A-Fa-f]{3}){1,2}$/.test(t))
+function hexToRgbaWithOpacity(hexColor, opacity = 10) {
+  if (!/^#([0-9A-Fa-f]{3}){1,2}$/.test(hexColor)) {
     throw new Error("Invalid color format");
-  let n = t.substring(1).split("");
-  n.length === 3 && (n = [n[0], n[0], n[1], n[1], n[2], n[2]]);
-  const c = parseInt(n[0] + n[1], 16), r = parseInt(n[2] + n[3], 16), m = parseInt(n[4] + n[5], 16), C = i / 100;
-  return `rgba(${c}, ${r}, ${m}, ${C})`;
+  }
+  let color = hexColor.substring(1).split("");
+  if (color.length === 3) {
+    color = [color[0], color[0], color[1], color[1], color[2], color[2]];
+  }
+  const r = parseInt(color[0] + color[1], 16);
+  const g = parseInt(color[2] + color[3], 16);
+  const b = parseInt(color[4] + color[5], 16);
+  const alpha = opacity / 100;
+  return `rgba(${r}, ${g}, ${b}, ${alpha})`;
 }
-function yn({
-  firebaseApp: t,
-  usersPath: i = "__FIRECMS/config/users",
-  rolesPath: n = "__FIRECMS/config/roles",
-  usersLimit: c,
-  canEditRoles: r = !0,
-  allowDefaultRolesCreation: m,
-  includeCollectionConfigPermissions: C
+function useBuildUserManagement({
+  authController,
+  dataSourceDelegate,
+  usersPath = "__FIRECMS/config/users",
+  rolesPath = "__FIRECMS/config/roles",
+  usersLimit,
+  canEditRoles = true,
+  allowDefaultRolesCreation,
+  includeCollectionConfigPermissions
 }) {
-  const h = Ie(), [x, v] = P.useState(!0), [d, I] = P.useState(!0), [b, s] = P.useState([]), [g, D] = P.useState([]), w = g.map((p) => ({
-    ...p,
-    roles: b.filter((y) => p.roles?.includes(y.id))
-  })), [z, L] = P.useState(), [f, u] = P.useState(), N = x || d;
-  Z(() => {
-    t && (h.current = ee(t));
-  }, [t]), Z(() => {
-    if (!t || !n)
-      return;
-    const p = ee(t);
-    return le(
-      se(p, n),
-      {
-        next: (y) => {
-          L(void 0);
-          try {
-            const R = Je(y.docs);
-            s(R);
-          } catch (R) {
-            L(R);
+  if (!authController) {
+    throw Error("useBuildUserManagement: You need to provide an authController since version 3.0.0-beta.11. Check https://firecms.co/docs/pro/migrating_from_v3_beta");
+  }
+  const [rolesLoading, setRolesLoading] = React.useState(true);
+  const [usersLoading, setUsersLoading] = React.useState(true);
+  const [roles, setRoles] = React.useState([]);
+  const [usersWithRoleIds, setUsersWithRoleIds] = React.useState([]);
+  const users = usersWithRoleIds.map((u) => ({
+    ...u,
+    roles: roles.filter((r) => u.roles?.includes(r.id))
+  }));
+  const [rolesError, setRolesError] = React.useState();
+  const [usersError, setUsersError] = React.useState();
+  const _usersLoading = usersLoading;
+  const _rolesLoading = rolesLoading;
+  const loading = _rolesLoading || _usersLoading;
+  useEffect(() => {
+    if (!dataSourceDelegate || !rolesPath) return;
+    if (dataSourceDelegate.initialised !== void 0 && !dataSourceDelegate.initialised) return;
+    if (authController?.initialLoading) return;
+    setRolesLoading(true);
+    return dataSourceDelegate.listenCollection?.({
+      path: rolesPath,
+      onUpdate(entities) {
+        setRolesError(void 0);
+        try {
+          const newRoles = entityToRoles(entities);
+          if (!equal(newRoles, roles)) {
+            setRoles(newRoles);
           }
-          v(!1);
-        },
-        error: (y) => {
-          L(y), v(!1);
+        } catch (e) {
+          setRoles([]);
+          console.error("Error loading roles", e);
+          setRolesError(e);
         }
+        setRolesLoading(false);
+      },
+      onError(e) {
+        setRoles([]);
+        console.error("Error loading roles", e);
+        setRolesError(e);
+        setRolesLoading(false);
       }
-    );
-  }, [t, n]), Z(() => {
-    if (!t || !i)
+    });
+  }, [dataSourceDelegate?.initialised, authController?.initialLoading, authController?.user?.uid, rolesPath]);
+  useEffect(() => {
+    if (!dataSourceDelegate || !usersPath) return;
+    if (dataSourceDelegate.initialised !== void 0 && !dataSourceDelegate.initialised) {
       return;
-    const p = ee(t);
-    return le(
-      se(p, i),
-      {
-        next: (y) => {
-          u(void 0);
-          try {
-            const R = ze(y.docs);
-            D(R);
-          } catch (R) {
-            u(R);
-          }
-          I(!1);
-        },
-        error: (y) => {
-          u(y), I(!1);
+    }
+    if (authController?.initialLoading) {
+      return;
+    }
+    setUsersLoading(true);
+    return dataSourceDelegate.listenCollection?.({
+      path: usersPath,
+      onUpdate(entities) {
+        console.debug("Updating users", entities);
+        setUsersError(void 0);
+        try {
+          const newUsers = entitiesToUsers(entities);
+          setUsersWithRoleIds(newUsers);
+        } catch (e) {
+          setUsersWithRoleIds([]);
+          console.error("Error loading users", e);
+          setUsersError(e);
         }
+        setUsersLoading(false);
+      },
+      onError(e) {
+        console.error("Error loading users", e);
+        setUsersWithRoleIds([]);
+        setUsersError(e);
+        setUsersLoading(false);
       }
-    );
-  }, [t, i]);
-  const U = k(async (p) => {
-    const y = h.current;
-    if (!y || !i)
-      throw Error("useFirestoreConfigurationPersistence Firestore not initialised");
-    console.debug("Persisting user", p);
-    const R = p.roles?.map((Se) => Se.id), {
-      uid: W,
-      ...X
-    } = p;
-    return ae(G(y, i, W), {
-      ...X,
-      roles: R
-    }, { merge: !0 }).then(() => p);
-  }, [i]), F = k((p) => {
-    const y = h.current;
-    if (!y || !n)
-      throw Error("useFirestoreConfigurationPersistence Firestore not initialised");
-    console.debug("Persisting role", p);
+    });
+  }, [dataSourceDelegate?.initialised, authController?.initialLoading, authController?.user?.uid, usersPath]);
+  const saveUser = useCallback(async (user) => {
+    if (!dataSourceDelegate) throw Error("useBuildUserManagement Firebase not initialised");
+    if (!usersPath) throw Error("useBuildUserManagement Firestore not initialised");
+    console.debug("Persisting user", user);
+    const roleIds = user.roles?.map((r) => r.id);
+    const email = user.email?.toLowerCase().trim();
+    if (!email) throw Error("Email is required");
+    const userExists = users.find((u) => u.email?.toLowerCase() === email);
+    const data = {
+      ...user,
+      roles: roleIds ?? []
+    };
+    if (!userExists) {
+      data.created_on = /* @__PURE__ */ new Date();
+    }
+    return dataSourceDelegate.saveEntity({
+      status: "existing",
+      path: usersPath,
+      entityId: email,
+      values: removeUndefined(data)
+    }).then(() => user);
+  }, [usersPath, dataSourceDelegate?.initialised]);
+  const saveRole = useCallback((role) => {
+    if (!dataSourceDelegate) throw Error("useBuildUserManagement Firebase not initialised");
+    if (!rolesPath) throw Error("useBuildUserManagement Firestore not initialised");
+    console.debug("Persisting role", role);
     const {
-      id: R,
-      ...W
-    } = p, X = G(y, n, R);
-    return ae(X, W, { merge: !0 });
-  }, [n]), o = k(async (p) => {
-    const y = h.current;
-    if (!y || !i)
-      throw Error("useFirestoreConfigurationPersistence Firestore not initialised");
-    console.debug("Deleting", p);
-    const { uid: R } = p;
-    return ce(G(y, i, R));
-  }, [i]), S = k((p) => {
-    const y = h.current;
-    if (!y || !n)
-      throw Error("useFirestoreConfigurationPersistence Firestore not initialised");
-    console.debug("Deleting", p);
-    const { id: R } = p, W = G(y, n, R);
-    return ce(W);
-  }, [n]), $ = k(({
-    collection: p,
-    user: y
-  }) => qe({
-    collection: p,
-    user: y
-  }), []), J = w.map((p) => p.uid), Ue = k((p) => {
-    if (!w)
-      throw Error("Users not loaded");
-    return w.find((R) => R.email?.toLowerCase() === p?.email?.toLowerCase())?.roles;
-  }, [J]);
+      id,
+      ...roleData
+    } = role;
+    return dataSourceDelegate.saveEntity({
+      status: "existing",
+      path: rolesPath,
+      entityId: id,
+      values: removeUndefined(roleData)
+    }).then(() => {
+      return;
+    });
+  }, [rolesPath, dataSourceDelegate?.initialised]);
+  const deleteUser = useCallback(async (user) => {
+    if (!dataSourceDelegate) throw Error("useBuildUserManagement Firebase not initialised");
+    if (!usersPath) throw Error("useBuildUserManagement Firestore not initialised");
+    console.debug("Deleting", user);
+    const { uid } = user;
+    const entity = {
+      path: usersPath,
+      id: uid,
+      values: {}
+    };
+    await dataSourceDelegate.deleteEntity({ entity });
+  }, [usersPath, dataSourceDelegate?.initialised]);
+  const deleteRole = useCallback(async (role) => {
+    if (!dataSourceDelegate) throw Error("useBuildUserManagement Firebase not initialised");
+    if (!rolesPath) throw Error("useBuildUserManagement Firestore not initialised");
+    console.debug("Deleting", role);
+    const { id } = role;
+    const entity = {
+      path: rolesPath,
+      id,
+      values: {}
+    };
+    await dataSourceDelegate.deleteEntity({ entity });
+  }, [rolesPath, dataSourceDelegate?.initialised]);
+  const collectionPermissions = useCallback(({
+    collection,
+    user
+  }) => resolveUserRolePermissions({
+    collection,
+    user
+  }), []);
+  const defineRolesFor = useCallback((user) => {
+    if (!usersWithRoleIds) throw Error("Users not loaded");
+    const users2 = usersWithRoleIds.map((u) => ({
+      ...u,
+      roles: roles.filter((r) => u.roles?.includes(r.id))
+    }));
+    const mgmtUser = users2.find((u) => u.email?.toLowerCase() === user?.email?.toLowerCase());
+    return mgmtUser?.roles;
+  }, [roles, usersWithRoleIds]);
+  const authenticator = useCallback(({ user }) => {
+    if (loading) {
+      return false;
+    }
+    if (users.length === 0) {
+      console.warn("No users created yet");
+      return true;
+    }
+    const mgmtUser = users.find((u) => u.email?.toLowerCase() === user?.email?.toLowerCase());
+    if (mgmtUser) {
+      console.debug("User found in user management system", mgmtUser);
+      return true;
+    }
+    throw Error("Could not find a user with the provided email in the user management system.");
+  }, [loading, users]);
+  const userRoles = authController.user ? defineRolesFor(authController.user) : void 0;
+  const isAdmin = (userRoles ?? []).some((r) => r.id === "admin");
   return {
-    loading: N,
-    roles: b,
-    users: w,
-    saveUser: U,
-    saveRole: F,
-    deleteUser: o,
-    deleteRole: S,
-    usersLimit: c,
-    canEditRoles: r === void 0 ? !0 : r,
-    allowDefaultRolesCreation: m === void 0 ? !0 : m,
-    includeCollectionConfigPermissions: !!C,
-    collectionPermissions: $,
-    defineRolesFor: Ue
+    loading,
+    roles,
+    users,
+    saveUser,
+    saveRole,
+    rolesError,
+    deleteUser,
+    deleteRole,
+    usersLimit,
+    usersError,
+    isAdmin,
+    canEditRoles: canEditRoles === void 0 ? true : canEditRoles,
+    allowDefaultRolesCreation: allowDefaultRolesCreation === void 0 ? true : allowDefaultRolesCreation,
+    includeCollectionConfigPermissions: Boolean(includeCollectionConfigPermissions),
+    collectionPermissions,
+    defineRolesFor,
+    authenticator,
+    ...authController,
+    initialLoading: authController.initialLoading || loading,
+    userRoles,
+    user: authController.user ? {
+      ...authController.user,
+      roles: userRoles
+    } : null
   };
 }
-const ze = (t) => t.map((i) => {
-  const n = i.data();
-  return {
-    uid: i.id,
-    ...n,
-    created_on: n?.created_on?.toDate(),
-    updated_on: n?.updated_on?.toDate()
-  };
-}), Je = (t) => t.map((i) => ({
-  id: i.id,
-  ...i.data()
-})), De = P.createContext({});
-function Ge({
-  children: t,
-  userManagement: i
+const entitiesToUsers = (docs) => {
+  return docs.map((doc) => {
+    const data = doc.values;
+    const newVar = {
+      uid: doc.id,
+      ...data,
+      created_on: data?.created_on,
+      updated_on: data?.updated_on
+    };
+    return newVar;
+  });
+};
+const entityToRoles = (entities) => {
+  return entities.map((doc) => ({
+    id: doc.id,
+    ...doc.values
+  }));
+};
+const UserManagementContext = React.createContext({});
+function UserManagementProvider({
+  children,
+  userManagement
 }) {
-  return /* @__PURE__ */ e(De.Provider, { value: i, children: t });
+  return /* @__PURE__ */ jsx(UserManagementContext.Provider, { value: userManagement, children });
 }
-const Y = () => ke(De);
-function Q({ role: t }) {
-  let i;
-  return t.isAdmin ? i = "blueDarker" : t.id === "editor" ? i = "yellowLight" : t.id === "viewer" ? i = "grayLight" : i = Ee(t.id), /* @__PURE__ */ e(
-    Pe,
+const useUserManagement = () => useContext(UserManagementContext);
+function RoleChip({ role }) {
+  let colorScheme;
+  if (role.isAdmin) {
+    colorScheme = "blueDarker";
+  } else if (role.id === "editor") {
+    colorScheme = "yellowLight";
+  } else if (role.id === "viewer") {
+    colorScheme = "grayLight";
+  } else {
+    colorScheme = getColorSchemeForSeed(role.id);
+  }
+  return /* @__PURE__ */ jsx(
+    Chip,
     {
-      colorScheme: i,
-      children: t.name
+      colorScheme,
+      children: role.name
     },
-    t.id
+    role.id
   );
 }
-const He = _.object().shape({
-  id: _.string().required("Required"),
-  name: _.string().required("Required")
+const RoleYupSchema = Yup.object().shape({
+  id: Yup.string().required("Required"),
+  name: Yup.string().required("Required")
 });
-function Ke({
-  open: t,
-  role: i,
-  editable: n,
-  handleClose: c,
-  collections: r
+function canRoleBeEdited(loggedUser) {
+  const loggedUserIsAdmin = loggedUser.roles?.map((r) => r.id).includes("admin");
+  console.log("loggedUserIsAdmin", loggedUser);
+  if (!loggedUserIsAdmin) {
+    throw new Error("Only admins can edit roles");
+  }
+  return true;
+}
+function RolesDetailsForm({
+  open,
+  role,
+  editable,
+  handleClose,
+  collections
 }) {
-  const { saveRole: m } = Y(), C = !i, [h, x] = A(), v = k((o) => (x(void 0), m(o)), [m]), d = Re({
-    initialValues: i ?? {
+  const { saveRole } = useUserManagement();
+  const isNewRole = !role;
+  const {
+    user: loggedInUser
+  } = useAuthController();
+  const [savingError, setSavingError] = useState();
+  const onRoleUpdated = useCallback((role2) => {
+    setSavingError(void 0);
+    if (!loggedInUser) throw new Error("User not found");
+    canRoleBeEdited(loggedInUser);
+    return saveRole(role2);
+  }, [saveRole, loggedInUser]);
+  const formex = useCreateFormex({
+    initialValues: role ?? {
       name: ""
     },
-    onSubmit: (o, S) => v(o).then(() => {
-      S.resetForm({
-        values: o
-      }), c();
-    }).catch(($) => x($)),
-    validation: (o) => He.validate(o, { abortEarly: !1 }).then(() => ({})).catch((S) => {
-      const $ = {};
-      return S.inner.forEach((J) => {
-        $[J.path] = J.message;
-      }), $;
-    })
-  }), {
-    isSubmitting: I,
-    touched: b,
-    values: s,
-    errors: g,
-    handleChange: D,
-    setFieldValue: w,
-    dirty: z,
-    setFieldTouched: L
-  } = d, f = s.isAdmin ?? !1, u = s.defaultPermissions?.create ?? !1, N = s.defaultPermissions?.read ?? !1, U = s.defaultPermissions?.edit ?? !1, F = s.defaultPermissions?.delete ?? !1;
-  return P.useEffect(() => {
-    !j(b, "id") && s.name && w("id", Be(s.name));
-  }, [b, s.name]), /* @__PURE__ */ e(
-    de,
+    onSubmit: (role2, formexController) => {
+      try {
+        return onRoleUpdated(role2).then(() => {
+          formexController.resetForm({
+            values: role2
+          });
+          handleClose();
+        }).catch((e) => {
+          setSavingError(e);
+        });
+      } catch (e) {
+        setSavingError(e);
+        return Promise.resolve();
+      }
+    },
+    validation: (values2) => {
+      return RoleYupSchema.validate(values2, { abortEarly: false }).then(() => ({})).catch((e) => {
+        const errors2 = {};
+        e.inner.forEach((error) => {
+          errors2[error.path] = error.message;
+        });
+        return errors2;
+      });
+    }
+  });
+  const {
+    isSubmitting,
+    touched,
+    values,
+    errors,
+    handleChange,
+    setFieldValue,
+    dirty,
+    setFieldTouched
+  } = formex;
+  const isAdmin = values.isAdmin ?? false;
+  const defaultCreate = values.defaultPermissions?.create ?? false;
+  const defaultRead = values.defaultPermissions?.read ?? false;
+  const defaultEdit = values.defaultPermissions?.edit ?? false;
+  const defaultDelete = values.defaultPermissions?.delete ?? false;
+  React.useEffect(() => {
+    const idTouched = getIn(touched, "id");
+    if (!idTouched && values.name) {
+      setFieldValue("id", toSnakeCase(values.name));
+    }
+  }, [touched, values.name]);
+  return /* @__PURE__ */ jsx(
+    Dialog,
     {
-      open: t,
+      open,
       maxWidth: "4xl",
-      children: /* @__PURE__ */ e(xe, { value: d, children: /* @__PURE__ */ l(
+      children: /* @__PURE__ */ jsx(Formex, { value: formex, children: /* @__PURE__ */ jsxs(
         "form",
         {
-          noValidate: !0,
+          noValidate: true,
           autoComplete: "off",
-          onSubmit: d.handleSubmit,
+          onSubmit: formex.handleSubmit,
           style: {
             display: "flex",
             flexDirection: "column",
@@ -317,13 +496,13 @@ function Ke({
             height: "100%"
           },
           children: [
-            /* @__PURE__ */ l(ue, { className: "flex-grow", children: [
-              /* @__PURE__ */ e(
+            /* @__PURE__ */ jsxs(DialogContent, { className: "flex-grow", children: [
+              /* @__PURE__ */ jsx(
                 "div",
                 {
                   className: "flex flex-row pt-12 pb-8",
-                  children: /* @__PURE__ */ e(
-                    O,
+                  children: /* @__PURE__ */ jsx(
+                    Typography,
                     {
                       variant: "h4",
                       className: "flex-grow",
@@ -332,262 +511,296 @@ function Ke({
                   )
                 }
               ),
-              /* @__PURE__ */ l("div", { className: "grid grid-cols-12 gap-8", children: [
-                /* @__PURE__ */ l("div", { className: "col-span-12 md:col-span-8", children: [
-                  /* @__PURE__ */ e(
-                    K,
+              /* @__PURE__ */ jsxs("div", { className: "grid grid-cols-12 gap-8", children: [
+                /* @__PURE__ */ jsxs("div", { className: "col-span-12 md:col-span-8", children: [
+                  /* @__PURE__ */ jsx(
+                    TextField,
                     {
                       name: "name",
-                      required: !0,
-                      error: b.name && !!g.name,
-                      value: s.name,
-                      disabled: f || !n,
-                      onChange: D,
+                      required: true,
+                      error: touched.name && Boolean(errors.name),
+                      value: values.name,
+                      disabled: isAdmin || !editable,
+                      onChange: handleChange,
                       "aria-describedby": "name-helper-text",
                       label: "Name"
                     }
                   ),
-                  /* @__PURE__ */ e(B, { children: b.name && g.name ? g.name : "Name of this role" })
+                  /* @__PURE__ */ jsx(FieldCaption, { children: touched.name && Boolean(errors.name) ? errors.name : "Name of this role" })
                 ] }),
-                /* @__PURE__ */ l("div", { className: "col-span-12 md:col-span-4", children: [
-                  /* @__PURE__ */ e(
-                    K,
+                /* @__PURE__ */ jsxs("div", { className: "col-span-12 md:col-span-4", children: [
+                  /* @__PURE__ */ jsx(
+                    TextField,
                     {
                       name: "id",
-                      required: !0,
-                      error: b.id && !!g.id,
-                      value: s.id,
-                      disabled: !C || !n,
-                      onChange: (o) => {
-                        D(o), L("id", !0);
+                      required: true,
+                      error: touched.id && Boolean(errors.id),
+                      value: values.id,
+                      disabled: !isNewRole || !editable,
+                      onChange: (e) => {
+                        handleChange(e);
+                        setFieldTouched("id", true);
                       },
                       "aria-describedby": "id-helper-text",
                       label: "ID"
                     }
                   ),
-                  /* @__PURE__ */ e(B, { children: b.id && g.id ? g.id : "ID of this role" })
+                  /* @__PURE__ */ jsx(FieldCaption, { children: touched.id && Boolean(errors.id) ? errors.id : "ID of this role" })
                 ] }),
-                /* @__PURE__ */ l("div", { className: "col-span-12", children: [
-                  /* @__PURE__ */ e(
-                    Ae,
-                    {
-                      className: "bg-inherit",
-                      children: /* @__PURE__ */ l(ie, { children: [
-                        /* @__PURE__ */ l(re, { children: [
-                          /* @__PURE__ */ e(a, {}),
-                          /* @__PURE__ */ e(
-                            a,
-                            {
-                              align: "center",
-                              children: "Create entities"
-                            }
-                          ),
-                          /* @__PURE__ */ e(
-                            a,
-                            {
-                              align: "center",
-                              children: "Read entities"
-                            }
-                          ),
-                          /* @__PURE__ */ e(
-                            a,
-                            {
-                              align: "center",
-                              children: "Update entities"
-                            }
-                          ),
-                          /* @__PURE__ */ e(
-                            a,
-                            {
-                              align: "center",
-                              children: "Delete entities"
-                            }
-                          )
-                        ] }),
-                        /* @__PURE__ */ l(oe, { children: [
-                          /* @__PURE__ */ l(M, { children: [
-                            /* @__PURE__ */ e(
-                              a,
-                              {
-                                scope: "row",
-                                children: /* @__PURE__ */ e("strong", { children: "All collections" })
-                              }
-                            ),
-                            /* @__PURE__ */ e(
-                              a,
+                /* @__PURE__ */ jsxs("div", { className: "col-span-12", children: [
+                  /* @__PURE__ */ jsx(Paper, { className: "bg-inherit overflow-hidden", children: /* @__PURE__ */ jsxs(Table, { className: "w-full rounded-md", children: [
+                    /* @__PURE__ */ jsxs(TableHeader, { className: "rounded-md", children: [
+                      /* @__PURE__ */ jsx(TableCell, {}),
+                      /* @__PURE__ */ jsx(
+                        TableCell,
+                        {
+                          align: "center",
+                          children: "Create entities"
+                        }
+                      ),
+                      /* @__PURE__ */ jsx(
+                        TableCell,
+                        {
+                          align: "center",
+                          children: "Read entities"
+                        }
+                      ),
+                      /* @__PURE__ */ jsx(
+                        TableCell,
+                        {
+                          align: "center",
+                          children: "Update entities"
+                        }
+                      ),
+                      /* @__PURE__ */ jsx(
+                        TableCell,
+                        {
+                          align: "center",
+                          children: "Delete entities"
+                        }
+                      ),
+                      /* @__PURE__ */ jsx(
+                        TableCell,
+                        {
+                          align: "center"
+                        }
+                      )
+                    ] }),
+                    /* @__PURE__ */ jsxs(TableBody, { children: [
+                      /* @__PURE__ */ jsxs(TableRow, { children: [
+                        /* @__PURE__ */ jsx(
+                          TableCell,
+                          {
+                            scope: "row",
+                            children: /* @__PURE__ */ jsx("strong", { children: "All collections" })
+                          }
+                        ),
+                        /* @__PURE__ */ jsx(
+                          TableCell,
+                          {
+                            align: "center",
+                            children: /* @__PURE__ */ jsx(
+                              Tooltip,
                               {
-                                align: "center",
-                                children: /* @__PURE__ */ e(
-                                  V,
+                                title: "Create entities in collections",
+                                children: /* @__PURE__ */ jsx(
+                                  Checkbox,
                                   {
-                                    title: "Create entities in collections",
-                                    children: /* @__PURE__ */ e(
-                                      E,
-                                      {
-                                        disabled: f || !n,
-                                        checked: (f || u) ?? !1,
-                                        onCheckedChange: (o) => w("defaultPermissions.create", o)
-                                      }
-                                    )
+                                    disabled: isAdmin || !editable,
+                                    checked: (isAdmin || defaultCreate) ?? false,
+                                    onCheckedChange: (checked) => setFieldValue("defaultPermissions.create", checked)
                                   }
                                 )
                               }
-                            ),
-                            /* @__PURE__ */ e(
-                              a,
+                            )
+                          }
+                        ),
+                        /* @__PURE__ */ jsx(
+                          TableCell,
+                          {
+                            align: "center",
+                            children: /* @__PURE__ */ jsx(
+                              Tooltip,
                               {
-                                align: "center",
-                                children: /* @__PURE__ */ e(
-                                  V,
+                                title: "Access all data in every collection",
+                                children: /* @__PURE__ */ jsx(
+                                  Checkbox,
                                   {
-                                    title: "Access all data in every collection",
-                                    children: /* @__PURE__ */ e(
-                                      E,
-                                      {
-                                        disabled: f || !n,
-                                        checked: (f || N) ?? !1,
-                                        onCheckedChange: (o) => w("defaultPermissions.read", o)
-                                      }
-                                    )
+                                    disabled: isAdmin || !editable,
+                                    checked: (isAdmin || defaultRead) ?? false,
+                                    onCheckedChange: (checked) => setFieldValue("defaultPermissions.read", checked)
                                   }
                                 )
                               }
-                            ),
-                            /* @__PURE__ */ e(
-                              a,
+                            )
+                          }
+                        ),
+                        /* @__PURE__ */ jsx(
+                          TableCell,
+                          {
+                            align: "center",
+                            children: /* @__PURE__ */ jsx(
+                              Tooltip,
                               {
-                                align: "center",
-                                children: /* @__PURE__ */ e(
-                                  V,
+                                title: "Update data in any collection",
+                                children: /* @__PURE__ */ jsx(
+                                  Checkbox,
                                   {
-                                    title: "Update data in any collection",
-                                    children: /* @__PURE__ */ e(
-                                      E,
-                                      {
-                                        disabled: f || !n,
-                                        checked: (f || U) ?? !1,
-                                        onCheckedChange: (o) => w("defaultPermissions.edit", o)
-                                      }
-                                    )
+                                    disabled: isAdmin || !editable,
+                                    checked: (isAdmin || defaultEdit) ?? false,
+                                    onCheckedChange: (checked) => setFieldValue("defaultPermissions.edit", checked)
                                   }
                                 )
                               }
-                            ),
-                            /* @__PURE__ */ e(
-                              a,
+                            )
+                          }
+                        ),
+                        /* @__PURE__ */ jsx(
+                          TableCell,
+                          {
+                            align: "center",
+                            children: /* @__PURE__ */ jsx(
+                              Tooltip,
                               {
-                                align: "center",
-                                children: /* @__PURE__ */ e(
-                                  V,
+                                title: "Delete data in any collection",
+                                children: /* @__PURE__ */ jsx(
+                                  Checkbox,
                                   {
-                                    title: "Delete data in any collection",
-                                    children: /* @__PURE__ */ e(
-                                      E,
-                                      {
-                                        disabled: f || !n,
-                                        checked: (f || F) ?? !1,
-                                        onCheckedChange: (o) => w("defaultPermissions.delete", o)
-                                      }
-                                    )
+                                    disabled: isAdmin || !editable,
+                                    checked: (isAdmin || defaultDelete) ?? false,
+                                    onCheckedChange: (checked) => setFieldValue("defaultPermissions.delete", checked)
                                   }
                                 )
                               }
                             )
-                          ] }),
-                          r && r.map((o) => /* @__PURE__ */ l(M, { children: [
-                            /* @__PURE__ */ e(
-                              a,
+                          }
+                        ),
+                        /* @__PURE__ */ jsx(
+                          TableCell,
+                          {
+                            align: "center"
+                          }
+                        )
+                      ] }),
+                      collections && collections.map((col) => /* @__PURE__ */ jsxs(TableRow, { children: [
+                        /* @__PURE__ */ jsx(
+                          TableCell,
+                          {
+                            scope: "row",
+                            children: col.name
+                          }
+                        ),
+                        /* @__PURE__ */ jsx(
+                          TableCell,
+                          {
+                            align: "center",
+                            children: /* @__PURE__ */ jsx(
+                              Checkbox,
                               {
-                                scope: "row",
-                                children: o.name
+                                disabled: isAdmin || defaultCreate || !editable,
+                                checked: (isAdmin || defaultCreate || getIn(values, `collectionPermissions.${col.id}.create`)) ?? false,
+                                onCheckedChange: (checked) => setFieldValue(`collectionPermissions.${col.id}.create`, checked)
                               }
-                            ),
-                            /* @__PURE__ */ e(
-                              a,
+                            )
+                          }
+                        ),
+                        /* @__PURE__ */ jsx(
+                          TableCell,
+                          {
+                            align: "center",
+                            children: /* @__PURE__ */ jsx(
+                              Checkbox,
                               {
-                                align: "center",
-                                children: /* @__PURE__ */ e(
-                                  E,
-                                  {
-                                    disabled: f || u || !n,
-                                    checked: (f || u || j(s, `collectionPermissions.${o.path}.create`)) ?? !1,
-                                    onCheckedChange: (S) => w(`collectionPermissions.${o.path}.create`, S)
-                                  }
-                                )
+                                disabled: isAdmin || defaultRead || !editable,
+                                checked: (isAdmin || defaultRead || getIn(values, `collectionPermissions.${col.id}.read`)) ?? false,
+                                onCheckedChange: (checked) => setFieldValue(`collectionPermissions.${col.id}.read`, checked)
                               }
-                            ),
-                            /* @__PURE__ */ e(
-                              a,
+                            )
+                          }
+                        ),
+                        /* @__PURE__ */ jsx(
+                          TableCell,
+                          {
+                            align: "center",
+                            children: /* @__PURE__ */ jsx(
+                              Checkbox,
                               {
-                                align: "center",
-                                children: /* @__PURE__ */ e(
-                                  E,
-                                  {
-                                    disabled: f || N || !n,
-                                    checked: (f || N || j(s, `collectionPermissions.${o.path}.read`)) ?? !1,
-                                    onCheckedChange: (S) => w(`collectionPermissions.${o.path}.read`, S)
-                                  }
-                                )
+                                disabled: isAdmin || defaultEdit || !editable,
+                                checked: (isAdmin || defaultEdit || getIn(values, `collectionPermissions.${col.id}.edit`)) ?? false,
+                                onCheckedChange: (checked) => setFieldValue(`collectionPermissions.${col.id}.edit`, checked)
                               }
-                            ),
-                            /* @__PURE__ */ e(
-                              a,
+                            )
+                          }
+                        ),
+                        /* @__PURE__ */ jsx(
+                          TableCell,
+                          {
+                            align: "center",
+                            children: /* @__PURE__ */ jsx(
+                              Checkbox,
                               {
-                                align: "center",
-                                children: /* @__PURE__ */ e(
-                                  E,
-                                  {
-                                    disabled: f || U || !n,
-                                    checked: (f || U || j(s, `collectionPermissions.${o.path}.edit`)) ?? !1,
-                                    onCheckedChange: (S) => w(`collectionPermissions.${o.path}.edit`, S)
-                                  }
-                                )
+                                disabled: isAdmin || defaultDelete || !editable,
+                                checked: (isAdmin || defaultDelete || getIn(values, `collectionPermissions.${col.id}.delete`)) ?? false,
+                                onCheckedChange: (checked) => setFieldValue(`collectionPermissions.${col.id}.delete`, checked)
                               }
-                            ),
-                            /* @__PURE__ */ e(
-                              a,
+                            )
+                          }
+                        ),
+                        /* @__PURE__ */ jsx(
+                          TableCell,
+                          {
+                            align: "center",
+                            children: /* @__PURE__ */ jsx(
+                              Tooltip,
                               {
-                                align: "center",
-                                children: /* @__PURE__ */ e(
-                                  E,
+                                title: "Allow all permissions in this collections",
+                                children: /* @__PURE__ */ jsx(
+                                  Button,
                                   {
-                                    disabled: f || F || !n,
-                                    checked: (f || F || j(s, `collectionPermissions.${o.path}.delete`)) ?? !1,
-                                    onCheckedChange: (S) => w(`collectionPermissions.${o.path}.delete`, S)
+                                    className: "color-inherit",
+                                    onClick: () => {
+                                      setFieldValue(`collectionPermissions.${col.id}.create`, true);
+                                      setFieldValue(`collectionPermissions.${col.id}.read`, true);
+                                      setFieldValue(`collectionPermissions.${col.id}.edit`, true);
+                                      setFieldValue(`collectionPermissions.${col.id}.delete`, true);
+                                    },
+                                    disabled: isAdmin || !editable,
+                                    variant: "text",
+                                    children: "All"
                                   }
                                 )
                               }
                             )
-                          ] }, o.name))
-                        ] })
-                      ] })
-                    }
-                  ),
-                  /* @__PURE__ */ e(B, { children: "You can customise the permissions that the users related to this role can perform in the entities of each collection" })
+                          }
+                        )
+                      ] }, col.name))
+                    ] })
+                  ] }) }),
+                  /* @__PURE__ */ jsx(FieldCaption, { children: "You can customise the permissions that the users related to this role can perform in the entities of each collection" })
                 ] }),
-                /* @__PURE__ */ l("div", { className: "col-span-12 md:col-span-4", children: [
-                  /* @__PURE__ */ l(
-                    ne,
+                /* @__PURE__ */ jsxs("div", { className: "col-span-12 md:col-span-4", children: [
+                  /* @__PURE__ */ jsxs(
+                    Select,
                     {
-                      error: b.config && !!g.config,
+                      error: touched.config && Boolean(errors.config),
                       id: "createCollections",
                       name: "createCollections",
                       label: "Create collections",
                       position: "item-aligned",
-                      disabled: f || !n,
-                      onChange: (o) => w("config.createCollections", o.target.value === "true"),
-                      value: f || s.config?.createCollections ? "true" : "false",
-                      renderValue: (o) => o === "true" ? "Yes" : "No",
+                      disabled: isAdmin || !editable,
+                      onChange: (event) => setFieldValue("config.createCollections", event.target.value === "true"),
+                      value: isAdmin || values.config?.createCollections ? "true" : "false",
+                      renderValue: (value) => value === "true" ? "Yes" : "No",
                       children: [
-                        /* @__PURE__ */ e(
-                          T,
+                        /* @__PURE__ */ jsx(
+                          SelectItem,
                           {
                             value: "true",
                             children: " Yes "
                           }
                         ),
-                        /* @__PURE__ */ e(
-                          T,
+                        /* @__PURE__ */ jsx(
+                          SelectItem,
                           {
                             value: "false",
                             children: " No "
@@ -596,38 +809,38 @@ function Ke({
                       ]
                     }
                   ),
-                  /* @__PURE__ */ e(B, { children: b.config && g.config ? g.config : "Can the user create collections" })
+                  /* @__PURE__ */ jsx(FieldCaption, { children: touched.config && Boolean(errors.config) ? errors.config : "Can the user create collections" })
                 ] }),
-                /* @__PURE__ */ l("div", { className: "col-span-12 md:col-span-4", children: [
-                  /* @__PURE__ */ l(
-                    ne,
+                /* @__PURE__ */ jsxs("div", { className: "col-span-12 md:col-span-4", children: [
+                  /* @__PURE__ */ jsxs(
+                    Select,
                     {
-                      error: b.config && !!g.config,
+                      error: touched.config && Boolean(errors.config),
                       id: "editCollections",
                       name: "editCollections",
                       label: "Edit collections",
-                      disabled: f || !n,
+                      disabled: isAdmin || !editable,
                       position: "item-aligned",
-                      onChange: (o) => w("config.editCollections", o.target.value === "own" ? "own" : o.target.value === "true"),
-                      value: f ? "true" : s.config?.editCollections === "own" ? "own" : s.config?.editCollections ? "true" : "false",
-                      renderValue: (o) => o === "own" ? "Own" : o === "true" ? "Yes" : "No",
+                      onChange: (event) => setFieldValue("config.editCollections", event.target.value === "own" ? "own" : event.target.value === "true"),
+                      value: isAdmin ? "true" : values.config?.editCollections === "own" ? "own" : values.config?.editCollections ? "true" : "false",
+                      renderValue: (value) => value === "own" ? "Own" : value === "true" ? "Yes" : "No",
                       children: [
-                        /* @__PURE__ */ e(
-                          T,
+                        /* @__PURE__ */ jsx(
+                          SelectItem,
                           {
                             value: "true",
                             children: " Yes "
                           }
                         ),
-                        /* @__PURE__ */ e(
-                          T,
+                        /* @__PURE__ */ jsx(
+                          SelectItem,
                           {
                             value: "false",
                             children: " No "
                           }
                         ),
-                        /* @__PURE__ */ e(
-                          T,
+                        /* @__PURE__ */ jsx(
+                          SelectItem,
                           {
                             value: "own",
                             children: " Only his/her own "
@@ -636,38 +849,38 @@ function Ke({
                       ]
                     }
                   ),
-                  /* @__PURE__ */ e(B, { children: b.config && g.config ? g.config : "Can the user edit collections" })
+                  /* @__PURE__ */ jsx(FieldCaption, { children: touched.config && Boolean(errors.config) ? errors.config : "Can the user edit collections" })
                 ] }),
-                /* @__PURE__ */ l("div", { className: "col-span-12 md:col-span-4", children: [
-                  /* @__PURE__ */ l(
-                    ne,
+                /* @__PURE__ */ jsxs("div", { className: "col-span-12 md:col-span-4", children: [
+                  /* @__PURE__ */ jsxs(
+                    Select,
                     {
-                      error: b.config && !!g.config,
+                      error: touched.config && Boolean(errors.config),
                       id: "deleteCollections",
                       name: "deleteCollections",
                       label: "Delete collections",
-                      disabled: f || !n,
+                      disabled: isAdmin || !editable,
                       position: "item-aligned",
-                      onChange: (o) => w("config.deleteCollections", o.target.value === "own" ? "own" : o.target.value === "true"),
-                      value: f ? "true" : s.config?.deleteCollections === "own" ? "own" : s.config?.deleteCollections ? "true" : "false",
-                      renderValue: (o) => o === "own" ? "Own" : o === "true" ? "Yes" : "No",
+                      onChange: (event) => setFieldValue("config.deleteCollections", event.target.value === "own" ? "own" : event.target.value === "true"),
+                      value: isAdmin ? "true" : values.config?.deleteCollections === "own" ? "own" : values.config?.deleteCollections ? "true" : "false",
+                      renderValue: (value) => value === "own" ? "Own" : value === "true" ? "Yes" : "No",
                       children: [
-                        /* @__PURE__ */ e(
-                          T,
+                        /* @__PURE__ */ jsx(
+                          SelectItem,
                           {
                             value: "true",
                             children: " Yes "
                           }
                         ),
-                        /* @__PURE__ */ e(
-                          T,
+                        /* @__PURE__ */ jsx(
+                          SelectItem,
                           {
                             value: "false",
                             children: " No "
                           }
                         ),
-                        /* @__PURE__ */ e(
-                          T,
+                        /* @__PURE__ */ jsx(
+                          SelectItem,
                           {
                             value: "own",
                             children: " Only his/her own "
@@ -676,32 +889,32 @@ function Ke({
                       ]
                     }
                   ),
-                  /* @__PURE__ */ e(B, { children: b.config && g.config ? g.config : "Can the user delete collections" })
+                  /* @__PURE__ */ jsx(FieldCaption, { children: touched.config && Boolean(errors.config) ? errors.config : "Can the user delete collections" })
                 ] })
               ] })
             ] }),
-            /* @__PURE__ */ l(me, { position: "sticky", children: [
-              h && /* @__PURE__ */ e(O, { className: "text-red-500", children: "There was an error saving this role" }),
-              /* @__PURE__ */ e(
-                q,
+            /* @__PURE__ */ jsxs(DialogActions, { position: "sticky", children: [
+              savingError && /* @__PURE__ */ jsx(Typography, { className: "text-red-500 dark:text-red-500", children: savingError.message ?? "There was an error saving this role" }),
+              /* @__PURE__ */ jsx(
+                Button,
                 {
                   variant: "text",
                   onClick: () => {
-                    c();
+                    handleClose();
                   },
                   children: "Cancel"
                 }
               ),
-              /* @__PURE__ */ e(
-                he,
+              /* @__PURE__ */ jsx(
+                LoadingButton,
                 {
                   variant: "filled",
                   color: "primary",
                   type: "submit",
-                  disabled: !z,
-                  loading: I,
-                  startIcon: /* @__PURE__ */ e(fe, {}),
-                  children: C ? "Create role" : "Update"
+                  disabled: !dirty,
+                  loading: isSubmitting,
+                  startIcon: /* @__PURE__ */ jsx(DoneIcon, {}),
+                  children: isNewRole ? "Create role" : "Update"
                 }
               )
             ] })
@@ -711,24 +924,24 @@ function Ke({
     }
   );
 }
-const Qe = [
+const DEFAULT_ROLES = [
   {
     id: "admin",
     name: "Admin",
-    isAdmin: !0
+    isAdmin: true
   },
   {
     id: "editor",
     name: "Editor",
-    isAdmin: !1,
+    isAdmin: false,
     defaultPermissions: {
-      read: !0,
-      create: !0,
-      edit: !0,
-      delete: !0
+      read: true,
+      create: true,
+      edit: true,
+      delete: true
     },
     config: {
-      createCollections: !0,
+      createCollections: true,
       editCollections: "own",
       deleteCollections: "own"
     }
@@ -736,78 +949,93 @@ const Qe = [
   {
     id: "viewer",
     name: "Viewer",
-    isAdmin: !1,
+    isAdmin: false,
     defaultPermissions: {
-      read: !0,
-      create: !1,
-      edit: !1,
-      delete: !1
+      read: true,
+      create: false,
+      edit: false,
+      delete: false
     }
   }
 ];
-function Xe({
-  onRoleClicked: t,
-  editable: i
+function RolesTable({
+  onRoleClicked,
+  editable
 }) {
   const {
-    roles: n,
-    saveRole: c,
-    deleteRole: r,
-    allowDefaultRolesCreation: m
-  } = Y(), [C, h] = A(void 0), [x, v] = A(!1);
-  return /* @__PURE__ */ l(
+    roles,
+    saveRole,
+    deleteRole,
+    allowDefaultRolesCreation
+  } = useUserManagement();
+  const [roleToBeDeleted, setRoleToBeDeleted] = useState(void 0);
+  const [deleteInProgress, setDeleteInProgress] = useState(false);
+  return /* @__PURE__ */ jsxs(
     "div",
     {
       className: "w-full overflow-auto",
       children: [
-        /* @__PURE__ */ l(ie, { children: [
-          /* @__PURE__ */ l(re, { children: [
-            /* @__PURE__ */ e(a, { header: !0, className: "w-16" }),
-            /* @__PURE__ */ e(a, { header: !0, children: "Role" }),
-            /* @__PURE__ */ e(a, { header: !0, className: "items-center", children: "Is Admin" }),
-            /* @__PURE__ */ e(a, { header: !0, children: "Default permissions" })
+        /* @__PURE__ */ jsxs(Table, { className: "w-full", children: [
+          /* @__PURE__ */ jsxs(TableHeader, { children: [
+            /* @__PURE__ */ jsx(TableCell, { header: true, className: "w-16" }),
+            /* @__PURE__ */ jsx(TableCell, { header: true, children: "Role" }),
+            /* @__PURE__ */ jsx(TableCell, { header: true, className: "items-center", children: "Is Admin" }),
+            /* @__PURE__ */ jsx(TableCell, { header: true, children: "Default permissions" })
           ] }),
-          /* @__PURE__ */ l(oe, { children: [
-            n && n.map((d) => {
-              const I = d.isAdmin || d.defaultPermissions?.create, b = d.isAdmin || d.defaultPermissions?.read, s = d.isAdmin || d.defaultPermissions?.edit, g = d.isAdmin || d.defaultPermissions?.delete;
-              return /* @__PURE__ */ l(
-                M,
+          /* @__PURE__ */ jsxs(TableBody, { children: [
+            roles && roles.map((role) => {
+              const canCreateAll = role.isAdmin || role.defaultPermissions?.create;
+              const canReadAll = role.isAdmin || role.defaultPermissions?.read;
+              const canUpdateAll = role.isAdmin || role.defaultPermissions?.edit;
+              const canDeleteAll = role.isAdmin || role.defaultPermissions?.delete;
+              return /* @__PURE__ */ jsxs(
+                TableRow,
                 {
                   onClick: () => {
-                    t(d);
+                    onRoleClicked(role);
                   },
                   children: [
-                    /* @__PURE__ */ e(a, { style: { width: "64px" }, children: !d.isAdmin && /* @__PURE__ */ e(V, { title: "Delete this role", children: /* @__PURE__ */ e(
-                      ge,
+                    /* @__PURE__ */ jsx(TableCell, { style: { width: "64px" }, children: !role.isAdmin && /* @__PURE__ */ jsx(
+                      Tooltip,
                       {
-                        size: "small",
-                        disabled: !i,
-                        onClick: (D) => (D.stopPropagation(), h(d)),
-                        children: /* @__PURE__ */ e(pe, {})
+                        asChild: true,
+                        title: "Delete this role",
+                        children: /* @__PURE__ */ jsx(
+                          IconButton,
+                          {
+                            size: "small",
+                            disabled: !editable,
+                            onClick: (event) => {
+                              event.stopPropagation();
+                              return setRoleToBeDeleted(role);
+                            },
+                            children: /* @__PURE__ */ jsx(DeleteIcon, {})
+                          }
+                        )
                       }
-                    ) }) }),
-                    /* @__PURE__ */ e(a, { children: /* @__PURE__ */ e(Q, { role: d }) }),
-                    /* @__PURE__ */ e(a, { className: "items-center", children: /* @__PURE__ */ e(E, { checked: d.isAdmin ?? !1 }) }),
-                    /* @__PURE__ */ e(a, { children: /* @__PURE__ */ l("ul", { children: [
-                      I && /* @__PURE__ */ e("li", { children: "Create" }),
-                      b && /* @__PURE__ */ e("li", { children: "Read" }),
-                      s && /* @__PURE__ */ e("li", { children: "Update" }),
-                      g && /* @__PURE__ */ e("li", { children: "Delete" })
+                    ) }),
+                    /* @__PURE__ */ jsx(TableCell, { children: /* @__PURE__ */ jsx(RoleChip, { role }) }),
+                    /* @__PURE__ */ jsx(TableCell, { className: "items-center", children: /* @__PURE__ */ jsx(Checkbox, { checked: role.isAdmin ?? false }) }),
+                    /* @__PURE__ */ jsx(TableCell, { children: /* @__PURE__ */ jsxs("ul", { children: [
+                      canCreateAll && /* @__PURE__ */ jsx("li", { children: "Create" }),
+                      canReadAll && /* @__PURE__ */ jsx("li", { children: "Read" }),
+                      canUpdateAll && /* @__PURE__ */ jsx("li", { children: "Update" }),
+                      canDeleteAll && /* @__PURE__ */ jsx("li", { children: "Delete" })
                     ] }) })
                   ]
                 },
-                d.name
+                role.name
               );
             }),
-            (!n || n.length === 0) && /* @__PURE__ */ e(M, { children: /* @__PURE__ */ e(a, { colspan: 4, children: /* @__PURE__ */ l(Ce, { className: "flex flex-col gap-4 my-8 items-center", children: [
-              /* @__PURE__ */ e(O, { variant: "label", children: "You don't have any roles yet." }),
-              m && /* @__PURE__ */ e(
-                q,
+            (!roles || roles.length === 0) && /* @__PURE__ */ jsx(TableRow, { children: /* @__PURE__ */ jsx(TableCell, { colspan: 4, children: /* @__PURE__ */ jsxs(CenteredView, { className: "flex flex-col gap-4 my-8 items-center", children: [
+              /* @__PURE__ */ jsx(Typography, { variant: "label", children: "You don't have any roles yet." }),
+              allowDefaultRolesCreation && /* @__PURE__ */ jsx(
+                Button,
                 {
                   variant: "outlined",
                   onClick: () => {
-                    Qe.forEach((d) => {
-                      c(d);
+                    DEFAULT_ROLES.forEach((role) => {
+                      saveRole(role);
                     });
                   },
                   children: "Create default roles"
@@ -816,146 +1044,189 @@ function Xe({
             ] }) }) })
           ] })
         ] }),
-        /* @__PURE__ */ e(
-          ye,
+        /* @__PURE__ */ jsx(
+          ConfirmationDialog,
           {
-            open: !!C,
-            loading: x,
+            open: Boolean(roleToBeDeleted),
+            loading: deleteInProgress,
             onAccept: () => {
-              C && (v(!0), r(C).then(() => {
-                h(void 0);
-              }).finally(() => {
-                v(!1);
-              }));
+              if (roleToBeDeleted) {
+                setDeleteInProgress(true);
+                deleteRole(roleToBeDeleted).then(() => {
+                  setRoleToBeDeleted(void 0);
+                }).finally(() => {
+                  setDeleteInProgress(false);
+                });
+              }
             },
             onCancel: () => {
-              h(void 0);
+              setRoleToBeDeleted(void 0);
             },
-            title: /* @__PURE__ */ e(H, { children: "Delete?" }),
-            body: /* @__PURE__ */ e(H, { children: "Are you sure you want to delete this role?" })
+            title: /* @__PURE__ */ jsx(Fragment, { children: "Delete?" }),
+            body: /* @__PURE__ */ jsx(Fragment, { children: "Are you sure you want to delete this role?" })
           }
         )
       ]
     }
   );
 }
-const Ze = P.memo(
-  function({ children: i }) {
-    const { collections: n } = Le(), [c, r] = A(!1), [m, C] = A(), { canEditRoles: h } = Y(), x = k((d) => {
-      r(!0), C(d);
+const RolesView = React.memo(
+  function RolesView2({ children }) {
+    const { collections } = useNavigationController();
+    const [dialogOpen, setDialogOpen] = useState(false);
+    const [selectedRole, setSelectedRole] = useState();
+    const { canEditRoles } = useUserManagement();
+    const onRoleClicked = useCallback((user) => {
+      setDialogOpen(true);
+      setSelectedRole(user);
     }, []);
-    return /* @__PURE__ */ l(ve, { className: "w-full flex flex-col py-4 gap-4", maxWidth: "6xl", children: [
-      i,
-      /* @__PURE__ */ l("div", { className: "flex items-center mt-12", children: [
-        /* @__PURE__ */ e(
-          O,
+    const handleClose = () => {
+      setSelectedRole(void 0);
+      setDialogOpen(false);
+    };
+    return /* @__PURE__ */ jsxs(Container, { className: "w-full flex flex-col py-4 gap-4", maxWidth: "6xl", children: [
+      children,
+      /* @__PURE__ */ jsxs("div", { className: "flex items-center mt-12", children: [
+        /* @__PURE__ */ jsx(
+          Typography,
           {
-            gutterBottom: !0,
+            gutterBottom: true,
             variant: "h4",
             className: "flex-grow",
             component: "h4",
             children: "Roles"
           }
         ),
-        /* @__PURE__ */ e(V, { title: h ? void 0 : "Update plans to customise roles", children: /* @__PURE__ */ e(
-          q,
+        /* @__PURE__ */ jsx(
+          Tooltip,
           {
-            size: "large",
-            disabled: !h,
-            startIcon: /* @__PURE__ */ e(we, {}),
-            onClick: () => r(!0),
-            children: "Add role"
+            asChild: true,
+            title: !canEditRoles ? "Update plans to customise roles" : void 0,
+            children: /* @__PURE__ */ jsx(
+              Button,
+              {
+                size: "large",
+                disabled: !canEditRoles,
+                startIcon: /* @__PURE__ */ jsx(AddIcon, {}),
+                onClick: () => setDialogOpen(true),
+                children: "Add role"
+              }
+            )
           }
-        ) })
+        )
       ] }),
-      /* @__PURE__ */ e(Xe, { onRoleClicked: x, editable: !!h }),
-      /* @__PURE__ */ e(
-        Ke,
+      /* @__PURE__ */ jsx(RolesTable, { onRoleClicked, editable: Boolean(canEditRoles) }),
+      /* @__PURE__ */ jsx(
+        RolesDetailsForm,
         {
-          open: c,
-          role: m,
-          editable: h,
-          collections: n,
-          handleClose: () => {
-            C(void 0), r(!1);
-          }
+          open: dialogOpen,
+          role: selectedRole,
+          editable: canEditRoles,
+          collections,
+          handleClose
         },
-        m?.id ?? "new"
+        selectedRole?.id ?? "new"
       )
     ] });
   }
-), en = _.object().shape({
-  displayName: _.string().required("Required"),
-  email: _.string().email().required("Required"),
-  roles: _.array().min(1)
+);
+const UserYupSchema = Yup.object().shape({
+  displayName: Yup.string().required("Required"),
+  email: Yup.string().email().required("Required"),
+  roles: Yup.array().min(1)
 });
-function nn(t, i, n, c, r) {
-  const m = n.filter((v) => v.roles?.map((d) => d.id).includes("admin")), C = t.roles?.map((v) => v.id).includes("admin");
-  if ((!r || !We(r.roles ?? [], i.roles ?? [])) && !C)
+function canUserBeEdited(loggedUser, user, users, roles, prevUser) {
+  const admins = users.filter((u) => u.roles?.map((r) => r.id).includes("admin"));
+  const loggedUserIsAdmin = loggedUser.roles?.map((r) => r.id).includes("admin");
+  const didRolesChange = !prevUser || !areRolesEqual(prevUser.roles ?? [], user.roles ?? []);
+  if (didRolesChange && !loggedUserIsAdmin) {
     throw new Error("Only admins can change roles");
-  if (r && r.roles?.map((v) => v.id).includes("admin") && !i.roles?.map((v) => v.id).includes("admin") && m.length === 1)
+  }
+  const adminRoleRemoved = prevUser && prevUser.roles?.map((r) => r.id).includes("admin") && !user.roles?.map((r) => r.id).includes("admin");
+  if (adminRoleRemoved && admins.length === 1) {
     throw new Error("There must be at least one admin");
-  return !0;
+  }
+  return true;
 }
-function tn({
-  open: t,
-  user: i,
-  handleClose: n
+function UserDetailsForm({
+  open,
+  user: userProp,
+  handleClose
 }) {
-  const c = be(), {
-    user: r
-  } = Ne(), {
-    saveUser: m,
-    users: C,
-    roles: h
-  } = Y(), x = !i, v = k((u) => {
-    if (!r)
+  const snackbarController = useSnackbarController();
+  const {
+    user: loggedInUser
+  } = useAuthController();
+  const {
+    saveUser,
+    users,
+    roles
+  } = useUserManagement();
+  const isNewUser = !userProp;
+  const onUserUpdated = useCallback((savedUser) => {
+    if (!loggedInUser) {
       throw new Error("Logged user not found");
+    }
     try {
-      return nn(r, u, C, h, i), m(u);
-    } catch (N) {
-      return Promise.reject(N);
+      canUserBeEdited(loggedInUser, savedUser, users, roles, userProp);
+      return saveUser(savedUser);
+    } catch (e) {
+      return Promise.reject(e);
     }
-  }, [h, m, i, C, r]), d = Re({
-    initialValues: i ?? {
+  }, [roles, saveUser, userProp, users, loggedInUser]);
+  const formex = useCreateFormex({
+    initialValues: userProp ?? {
       displayName: "",
       email: "",
-      roles: h.filter((u) => u.id === "editor")
+      roles: roles.filter((r) => r.id === "editor")
     },
-    validation: (u) => en.validate(u, { abortEarly: !1 }).then(() => ({})).catch((N) => N.inner.reduce((U, F) => (U[F.path] = F.message, U), {})),
-    onSubmit: (u, N) => v(u).then(() => {
-      n(), N.resetForm({
-        values: u
+    validation: (values2) => {
+      return UserYupSchema.validate(values2, { abortEarly: false }).then(() => {
+        return {};
+      }).catch((e) => {
+        return e.inner.reduce((acc, error) => {
+          acc[error.path] = error.message;
+          return acc;
+        }, {});
       });
-    }).catch((U) => {
-      c.open({
-        type: "error",
-        message: U.message
+    },
+    onSubmit: (user, formexController) => {
+      return onUserUpdated(user).then(() => {
+        handleClose();
+        formexController.resetForm({
+          values: user
+        });
+      }).catch((e) => {
+        snackbarController.open({
+          type: "error",
+          message: e.message
+        });
       });
-    })
-  }), {
-    isSubmitting: I,
-    touched: b,
-    handleChange: s,
-    values: g,
-    errors: D,
-    setFieldValue: w,
-    dirty: z,
-    handleSubmit: L,
-    submitCount: f
-  } = d;
-  return /* @__PURE__ */ e(
-    de,
+    }
+  });
+  const {
+    isSubmitting,
+    touched,
+    handleChange,
+    values,
+    errors,
+    setFieldValue,
+    dirty,
+    handleSubmit,
+    submitCount
+  } = formex;
+  return /* @__PURE__ */ jsx(
+    Dialog,
     {
-      open: t,
-      onOpenChange: (u) => u ? void 0 : n(),
+      open,
+      onOpenChange: (open2) => !open2 ? handleClose() : void 0,
       maxWidth: "4xl",
-      children: /* @__PURE__ */ e(xe, { value: d, children: /* @__PURE__ */ l(
+      children: /* @__PURE__ */ jsx(Formex, { value: formex, children: /* @__PURE__ */ jsxs(
         "form",
         {
-          onSubmit: L,
+          onSubmit: handleSubmit,
           autoComplete: "off",
-          noValidate: !0,
+          noValidate: true,
           style: {
             display: "flex",
             flexDirection: "column",
@@ -963,13 +1234,13 @@ function tn({
             height: "100%"
           },
           children: [
-            /* @__PURE__ */ l(ue, { className: "h-full flex-grow", children: [
-              /* @__PURE__ */ e(
+            /* @__PURE__ */ jsxs(DialogContent, { className: "h-full flex-grow", children: [
+              /* @__PURE__ */ jsx(
                 "div",
                 {
                   className: "flex flex-row pt-4 pb-4",
-                  children: /* @__PURE__ */ e(
-                    O,
+                  children: /* @__PURE__ */ jsx(
+                    Typography,
                     {
                       variant: "h4",
                       className: "flex-grow",
@@ -978,80 +1249,77 @@ function tn({
                   )
                 }
               ),
-              /* @__PURE__ */ l("div", { className: "grid grid-cols-12 gap-8", children: [
-                /* @__PURE__ */ l("div", { className: "col-span-12", children: [
-                  /* @__PURE__ */ e(
-                    K,
+              /* @__PURE__ */ jsxs("div", { className: "grid grid-cols-12 gap-8", children: [
+                /* @__PURE__ */ jsxs("div", { className: "col-span-12", children: [
+                  /* @__PURE__ */ jsx(
+                    TextField,
                     {
                       name: "displayName",
-                      required: !0,
-                      error: f > 0 && !!D.displayName,
-                      value: g.displayName ?? "",
-                      onChange: s,
+                      required: true,
+                      error: submitCount > 0 && Boolean(errors.displayName),
+                      value: values.displayName ?? "",
+                      onChange: handleChange,
                       "aria-describedby": "name-helper-text",
                       label: "Name"
                     }
                   ),
-                  /* @__PURE__ */ e(B, { children: f > 0 && D.displayName ? D.displayName : "Name of this user" })
+                  /* @__PURE__ */ jsx(FieldCaption, { children: submitCount > 0 && Boolean(errors.displayName) ? errors.displayName : "Name of this user" })
                 ] }),
-                /* @__PURE__ */ l("div", { className: "col-span-12", children: [
-                  /* @__PURE__ */ e(
-                    K,
+                /* @__PURE__ */ jsxs("div", { className: "col-span-12", children: [
+                  /* @__PURE__ */ jsx(
+                    TextField,
                     {
-                      required: !0,
-                      error: f > 0 && !!D.email,
+                      required: true,
+                      error: submitCount > 0 && Boolean(errors.email),
                       name: "email",
-                      value: g.email ?? "",
-                      onChange: s,
+                      value: values.email ?? "",
+                      onChange: handleChange,
                       "aria-describedby": "email-helper-text",
                       label: "Email"
                     }
                   ),
-                  /* @__PURE__ */ e(B, { children: f > 0 && D.email ? D.email : "Email of this user" })
+                  /* @__PURE__ */ jsx(FieldCaption, { children: submitCount > 0 && Boolean(errors.email) ? errors.email : "Email of this user" })
                 ] }),
-                /* @__PURE__ */ e("div", { className: "col-span-12", children: /* @__PURE__ */ e(
-                  Fe,
+                /* @__PURE__ */ jsx("div", { className: "col-span-12", children: /* @__PURE__ */ jsx(
+                  MultiSelect,
                   {
+                    className: "w-full",
                     label: "Roles",
-                    value: g.roles?.map((u) => u.id) ?? [],
-                    onMultiValueChange: (u) => w("roles", u.map((N) => h.find((U) => U.id === N))),
-                    renderValue: (u) => {
-                      const N = h.find((U) => U.id === u);
-                      return N ? /* @__PURE__ */ e("div", { className: "flex flex-wrap space-x-2 space-y-2", children: /* @__PURE__ */ e(Q, { role: N }, N?.id) }) : null;
-                    },
-                    children: h.map((u) => /* @__PURE__ */ e(
-                      Te,
+                    value: values.roles?.map((r) => r.id) ?? [],
+                    onValueChange: (value) => setFieldValue("roles", value.map((id) => roles.find((r) => r.id === id))),
+                    children: roles.map((userRole) => /* @__PURE__ */ jsx(
+                      MultiSelectItem,
                       {
-                        value: u.id,
-                        children: /* @__PURE__ */ e(Q, { role: u }, u?.id)
+                        value: userRole.id,
+                        children: /* @__PURE__ */ jsx(RoleChip, { role: userRole }, userRole?.id)
                       },
-                      u.id
+                      userRole.id
                     ))
                   }
                 ) })
               ] })
             ] }),
-            /* @__PURE__ */ l(me, { children: [
-              /* @__PURE__ */ e(
-                q,
+            /* @__PURE__ */ jsxs(DialogActions, { children: [
+              /* @__PURE__ */ jsx(
+                Button,
                 {
                   variant: "text",
                   onClick: () => {
-                    n();
+                    handleClose();
                   },
                   children: "Cancel"
                 }
               ),
-              /* @__PURE__ */ e(
-                he,
+              /* @__PURE__ */ jsx(
+                LoadingButton,
                 {
                   variant: "filled",
                   color: "primary",
                   type: "submit",
-                  disabled: !z,
-                  loading: I,
-                  startIcon: /* @__PURE__ */ e(fe, {}),
-                  children: x ? "Create user" : "Update"
+                  disabled: !dirty,
+                  loading: isSubmitting,
+                  startIcon: /* @__PURE__ */ jsx(DoneIcon, {}),
+                  children: isNewUser ? "Create user" : "Update"
                 }
               )
             ] })
@@ -1061,79 +1329,96 @@ function tn({
     }
   );
 }
-function rn({ onUserClicked: t }) {
+function UsersTable({ onUserClicked }) {
   const {
-    users: i,
-    saveUser: n,
-    deleteUser: c
-  } = Y(), r = Ne(), m = be(), C = Ve(), h = C?.locale ? $e[C?.locale] : void 0, x = C?.dateTimeFormat ?? _e, [v, d] = A(void 0), [I, b] = A(!1);
-  return /* @__PURE__ */ l("div", { className: "overflow-auto", children: [
-    /* @__PURE__ */ l(ie, { children: [
-      /* @__PURE__ */ l(re, { children: [
-        /* @__PURE__ */ e(a, { className: "truncate w-16" }),
-        /* @__PURE__ */ e(a, { children: "ID" }),
-        /* @__PURE__ */ e(a, { children: "Email" }),
-        /* @__PURE__ */ e(a, { children: "Name" }),
-        /* @__PURE__ */ e(a, { children: "Roles" }),
-        /* @__PURE__ */ e(a, { children: "Created on" })
+    users,
+    saveUser,
+    deleteUser
+  } = useUserManagement();
+  const authController = useAuthController();
+  const snackbarController = useSnackbarController();
+  const customizationController = useCustomizationController();
+  const dateUtilsLocale = customizationController?.locale ? locales[customizationController?.locale] : void 0;
+  const dateFormat = customizationController?.dateTimeFormat ?? defaultDateFormat;
+  const [userToBeDeleted, setUserToBeDeleted] = useState(void 0);
+  const [deleteInProgress, setDeleteInProgress] = useState(false);
+  return /* @__PURE__ */ jsxs("div", { className: "overflow-auto", children: [
+    /* @__PURE__ */ jsxs(Table, { className: "w-full", children: [
+      /* @__PURE__ */ jsxs(TableHeader, { children: [
+        /* @__PURE__ */ jsx(TableCell, { className: "truncate w-16" }),
+        /* @__PURE__ */ jsx(TableCell, { children: "Email" }),
+        /* @__PURE__ */ jsx(TableCell, { children: "Name" }),
+        /* @__PURE__ */ jsx(TableCell, { children: "Roles" }),
+        /* @__PURE__ */ jsx(TableCell, { children: "Created on" })
       ] }),
-      /* @__PURE__ */ l(oe, { children: [
-        i && i.map((s) => {
-          const g = s.roles, D = s.created_on ? Oe(s.created_on, x, { locale: h }) : "";
-          return /* @__PURE__ */ l(
-            M,
+      /* @__PURE__ */ jsxs(TableBody, { children: [
+        users && users.map((user) => {
+          const userRoles = user.roles;
+          const formattedDate = user.created_on ? format(user.created_on, dateFormat, { locale: dateUtilsLocale }) : "";
+          return /* @__PURE__ */ jsxs(
+            TableRow,
             {
               onClick: () => {
-                t(s);
+                onUserClicked(user);
               },
               children: [
-                /* @__PURE__ */ e(a, { className: "w-10", children: /* @__PURE__ */ e(V, { title: "Delete this user", children: /* @__PURE__ */ e(
-                  ge,
+                /* @__PURE__ */ jsx(TableCell, { className: "w-10", children: /* @__PURE__ */ jsx(
+                  Tooltip,
                   {
-                    size: "small",
-                    onClick: (w) => (w.stopPropagation(), d(s)),
-                    children: /* @__PURE__ */ e(pe, {})
+                    asChild: true,
+                    title: "Delete this user",
+                    children: /* @__PURE__ */ jsx(
+                      IconButton,
+                      {
+                        size: "small",
+                        onClick: (event) => {
+                          event.stopPropagation();
+                          return setUserToBeDeleted(user);
+                        },
+                        children: /* @__PURE__ */ jsx(DeleteIcon, {})
+                      }
+                    )
                   }
-                ) }) }),
-                /* @__PURE__ */ e(a, { children: s.uid }),
-                /* @__PURE__ */ e(a, { children: s.email }),
-                /* @__PURE__ */ e(a, { className: "font-medium align-left", children: s.displayName }),
-                /* @__PURE__ */ e(a, { className: "align-left", children: g ? /* @__PURE__ */ e("div", { className: "flex flex-wrap gap-2", children: g.map(
-                  (w) => /* @__PURE__ */ e(Q, { role: w }, w?.id)
+                ) }),
+                /* @__PURE__ */ jsx(TableCell, { children: user.email }),
+                /* @__PURE__ */ jsx(TableCell, { className: "font-medium align-left", children: user.displayName }),
+                /* @__PURE__ */ jsx(TableCell, { className: "align-left", children: userRoles ? /* @__PURE__ */ jsx("div", { className: "flex flex-wrap gap-2", children: userRoles.map(
+                  (userRole) => /* @__PURE__ */ jsx(RoleChip, { role: userRole }, userRole?.id)
                 ) }) : null }),
-                /* @__PURE__ */ e(a, { children: D })
+                /* @__PURE__ */ jsx(TableCell, { children: formattedDate })
               ]
             },
-            "row_" + s.uid
+            "row_" + user.uid
           );
         }),
-        (!i || i.length === 0) && /* @__PURE__ */ e(M, { children: /* @__PURE__ */ e(a, { colspan: 6, children: /* @__PURE__ */ l(Ce, { className: "flex flex-col gap-4 my-8 items-center", children: [
-          /* @__PURE__ */ e(O, { variant: "label", children: "There are no users yet" }),
-          /* @__PURE__ */ e(
-            q,
+        (!users || users.length === 0) && /* @__PURE__ */ jsx(TableRow, { children: /* @__PURE__ */ jsx(TableCell, { colspan: 6, children: /* @__PURE__ */ jsxs(CenteredView, { className: "flex flex-col gap-4 my-8 items-center", children: [
+          /* @__PURE__ */ jsx(Typography, { variant: "label", children: "There are no users yet" }),
+          /* @__PURE__ */ jsx(
+            Button,
             {
               variant: "outlined",
               onClick: () => {
-                if (!r.user?.uid)
+                if (!authController.user?.uid) {
                   throw Error("UsersTable, authController misconfiguration");
-                n({
-                  uid: r.user?.uid,
-                  email: r.user?.email,
-                  displayName: r.user?.displayName,
-                  photoURL: r.user?.photoURL,
-                  providerId: r.user?.providerId,
-                  isAnonymous: r.user?.isAnonymous,
+                }
+                saveUser({
+                  uid: authController.user?.uid,
+                  email: authController.user?.email,
+                  displayName: authController.user?.displayName,
+                  photoURL: authController.user?.photoURL,
+                  providerId: authController.user?.providerId,
+                  isAnonymous: authController.user?.isAnonymous,
                   roles: [{ id: "admin", name: "Admin" }],
                   created_on: /* @__PURE__ */ new Date()
                 }).then(() => {
-                  m.open({
+                  snackbarController.open({
                     type: "success",
                     message: "User added successfully"
                   });
-                }).catch((s) => {
-                  m.open({
+                }).catch((error) => {
+                  snackbarController.open({
                     type: "error",
-                    message: "Error adding user: " + s.message
+                    message: "Error adding user: " + error.message
                   });
                 });
               },
@@ -1143,132 +1428,212 @@ function rn({ onUserClicked: t }) {
         ] }) }) })
       ] })
     ] }),
-    /* @__PURE__ */ e(
-      ye,
+    /* @__PURE__ */ jsx(
+      ConfirmationDialog,
       {
-        open: !!v,
-        loading: I,
+        open: Boolean(userToBeDeleted),
+        loading: deleteInProgress,
         onAccept: () => {
-          v && (b(!0), c(v).then(() => {
-            d(void 0);
-          }).catch((s) => {
-            m.open({
-              type: "error",
-              message: "Error deleting user: " + s.message
+          if (userToBeDeleted) {
+            setDeleteInProgress(true);
+            deleteUser(userToBeDeleted).then(() => {
+              setUserToBeDeleted(void 0);
+            }).catch((error) => {
+              snackbarController.open({
+                type: "error",
+                message: "Error deleting user: " + error.message
+              });
+            }).finally(() => {
+              setDeleteInProgress(false);
             });
-          }).finally(() => {
-            b(!1);
-          }));
+          }
         },
         onCancel: () => {
-          d(void 0);
+          setUserToBeDeleted(void 0);
         },
-        title: /* @__PURE__ */ e(H, { children: "Delete?" }),
-        body: /* @__PURE__ */ e(H, { children: "Are you sure you want to delete this user?" })
+        title: /* @__PURE__ */ jsx(Fragment, { children: "Delete?" }),
+        body: /* @__PURE__ */ jsx(Fragment, { children: "Are you sure you want to delete this user?" })
       }
     )
   ] });
 }
-const on = function({ children: i }) {
-  const [n, c] = A(), [r, m] = A(), { users: C, usersLimit: h } = Y(), x = h !== void 0 && C && C.length >= h, v = k((I) => {
-    m(I), c(!0);
-  }, []), d = k(() => {
-    c(!1), m(void 0);
+const UsersView = function UsersView2({ children }) {
+  const [dialogOpen, setDialogOpen] = useState();
+  const [selectedUser, setSelectedUser] = useState();
+  const { users, usersLimit } = useUserManagement();
+  const reachedUsersLimit = usersLimit !== void 0 && (users && users.length >= usersLimit);
+  const onUserClicked = useCallback((user) => {
+    setSelectedUser(user);
+    setDialogOpen(true);
+  }, []);
+  const handleClose = useCallback(() => {
+    setDialogOpen(false);
+    setSelectedUser(void 0);
   }, []);
-  return /* @__PURE__ */ l(ve, { className: "w-full flex flex-col py-4 gap-4", maxWidth: "6xl", children: [
-    i,
-    /* @__PURE__ */ l(
+  return /* @__PURE__ */ jsxs(Container, { className: "w-full flex flex-col py-4 gap-4", maxWidth: "6xl", children: [
+    children,
+    /* @__PURE__ */ jsxs(
       "div",
       {
         className: "flex items-center mt-12",
         children: [
-          /* @__PURE__ */ e(
-            O,
+          /* @__PURE__ */ jsx(
+            Typography,
             {
-              gutterBottom: !0,
+              gutterBottom: true,
               variant: "h4",
               className: "flex-grow",
               component: "h4",
               children: "Users"
             }
           ),
-          /* @__PURE__ */ e(
-            q,
+          /* @__PURE__ */ jsx(
+            Button,
             {
               size: "large",
-              disabled: x,
-              startIcon: /* @__PURE__ */ e(we, {}),
-              onClick: () => c(!0),
+              disabled: reachedUsersLimit,
+              startIcon: /* @__PURE__ */ jsx(AddIcon, {}),
+              onClick: () => setDialogOpen(true),
               children: "Add user"
             }
           )
         ]
       }
     ),
-    /* @__PURE__ */ e(rn, { onUserClicked: v }),
-    /* @__PURE__ */ e(
-      tn,
+    /* @__PURE__ */ jsx(UsersTable, { onUserClicked }),
+    /* @__PURE__ */ jsx(
+      UserDetailsForm,
       {
-        open: n ?? !1,
-        user: r,
-        handleClose: d
+        open: dialogOpen ?? false,
+        user: selectedUser,
+        handleClose
       },
-      r?.uid ?? "new"
+      selectedUser?.uid ?? "new"
     )
   ] });
 };
-function bn({ userManagement: t }) {
+function useUserManagementPlugin({ userManagement }) {
+  const noUsers = userManagement.users.length === 0;
+  const noRoles = userManagement.roles.length === 0;
   return {
     key: "user_management",
-    loading: t.loading,
+    loading: userManagement.loading,
+    homePage: {
+      additionalChildrenStart: noUsers || noRoles ? /* @__PURE__ */ jsx(
+        IntroWidget,
+        {
+          noUsers,
+          noRoles,
+          userManagement
+        }
+      ) : void 0
+    },
     provider: {
-      Component: Ge,
+      Component: UserManagementProvider,
       props: {
-        userManagement: t
+        userManagement
       }
     }
   };
 }
-const Nn = [
+function IntroWidget({
+  noUsers,
+  noRoles,
+  userManagement
+}) {
+  const authController = useAuthController();
+  const snackbarController = useSnackbarController();
+  const buttonLabel = noUsers && noRoles ? "Create default roles and add current user as admin" : noUsers ? "Add current user as admin" : noRoles ? "Create default roles" : void 0;
+  return /* @__PURE__ */ jsxs(
+    Paper,
+    {
+      className: "my-4 flex flex-col px-4 py-6 bg-white dark:bg-surface-accent-800 gap-2",
+      children: [
+        /* @__PURE__ */ jsx(Typography, { variant: "subtitle2", className: "uppercase", children: "Create your users and roles" }),
+        /* @__PURE__ */ jsx(Typography, { children: "You have no users or roles defined. You can create default roles and add the current user as admin." }),
+        /* @__PURE__ */ jsxs(Button, { onClick: () => {
+          if (!authController.user?.uid) {
+            throw Error("UsersTable, authController misconfiguration");
+          }
+          if (noUsers) {
+            userManagement.saveUser({
+              uid: authController.user?.uid,
+              email: authController.user?.email,
+              displayName: authController.user?.displayName,
+              photoURL: authController.user?.photoURL,
+              providerId: authController.user?.providerId,
+              isAnonymous: authController.user?.isAnonymous,
+              roles: [{
+                id: "admin",
+                name: "Admin"
+              }],
+              created_on: /* @__PURE__ */ new Date()
+            }).then(() => {
+              snackbarController.open({
+                type: "success",
+                message: "User added successfully"
+              });
+            }).catch((error) => {
+              snackbarController.open({
+                type: "error",
+                message: "Error adding user: " + error.message
+              });
+            });
+          }
+          if (noRoles) {
+            DEFAULT_ROLES.forEach((role) => {
+              userManagement.saveRole(role);
+            });
+          }
+        }, children: [
+          /* @__PURE__ */ jsx(AddIcon, {}),
+          buttonLabel
+        ] })
+      ]
+    }
+  );
+}
+const userManagementAdminViews = [
   {
     path: "users",
     name: "CMS Users",
     group: "Admin",
     icon: "face",
-    view: /* @__PURE__ */ e(on, {})
+    view: /* @__PURE__ */ jsx(UsersView, {})
   },
   {
     path: "roles",
     name: "Roles",
     group: "Admin",
     icon: "gpp_good",
-    view: /* @__PURE__ */ e(Ze, {})
+    view: /* @__PURE__ */ jsx(RolesView, {})
   }
 ];
 export {
-  hn as RESERVED_GROUPS,
-  Q as RoleChip,
-  He as RoleYupSchema,
-  Ke as RolesDetailsForm,
-  Xe as RolesTable,
-  Ze as RolesView,
-  tn as UserDetailsForm,
-  De as UserManagementContext,
-  Ge as UserManagementProvider,
-  en as UserYupSchema,
-  rn as UsersTable,
-  on as UsersView,
-  We as areRolesEqual,
-  gn as cacheDelegatedLoginToken,
-  Cn as clearDelegatedLoginTokensCache,
-  vn as darkenColor,
-  pn as getDelegatedLoginTokenFromCache,
-  fn as getUserRoles,
-  wn as hexToRgbaWithOpacity,
-  qe as resolveUserRolePermissions,
-  yn as useBuildFirestoreUserManagement,
-  Y as useUserManagement,
-  bn as useUserManagementPlugin,
-  Nn as userManagementAdminViews
+  IntroWidget,
+  RESERVED_GROUPS,
+  RoleChip,
+  RoleYupSchema,
+  RolesDetailsForm,
+  RolesTable,
+  RolesView,
+  UserDetailsForm,
+  UserManagementContext,
+  UserManagementProvider,
+  UserYupSchema,
+  UsersTable,
+  UsersView,
+  areRolesEqual,
+  cacheDelegatedLoginToken,
+  clearDelegatedLoginTokensCache,
+  darkenColor,
+  getDelegatedLoginTokenFromCache,
+  getUserRoles,
+  hexToRgbaWithOpacity,
+  resolveUserRolePermissions,
+  useBuildUserManagement,
+  useUserManagement,
+  useUserManagementPlugin,
+  userManagementAdminViews
 };
 //# sourceMappingURL=index.es.js.map