@fleetbase/fleetops-engine 0.6.68 → 0.6.70

package/addon/routes/operations/routes/index/details.js

@@ -1,3 +1,16 @@
 import Route from '@ember/routing/route';
+import { inject as service } from '@ember/service';
 
-export default class OperationsRoutesIndexDetailsRoute extends Route {}
+export default class OperationsRoutesIndexDetailsRoute extends Route {
+    @service notifications;
+    @service hostRouter;
+    @service abilities;
+    @service intl;
+
+    beforeModel() {
+        if (this.abilities.cannot('fleet-ops view route')) {
+            this.notifications.warning(this.intl.t('common.unauthorized-access'));
+            return this.hostRouter.transitionTo('console.fleet-ops.operations.routes.index');
+        }
+    }
+}

package/addon/routes/operations/routes/index/new.js

@@ -1,6 +1,19 @@
 import Route from '@ember/routing/route';
+import { inject as service } from '@ember/service';
 
 export default class OperationsRoutesIndexNewRoute extends Route {
+    @service notifications;
+    @service hostRouter;
+    @service abilities;
+    @service intl;
+
+    beforeModel() {
+        if (this.abilities.cannot('fleet-ops create route')) {
+            this.notifications.warning(this.intl.t('common.unauthorized-access'));
+            return this.hostRouter.transitionTo('console.fleet-ops.operations.routes.index');
+        }
+    }
+
     queryParams = {
         selectedOrders: {
             refreshModel: false,

package/addon/routes/operations/routes.js

@@ -1,3 +1,16 @@
 import Route from '@ember/routing/route';
+import { inject as service } from '@ember/service';
 
-export default class OperationsRoutesRoute extends Route {}
+export default class OperationsRoutesRoute extends Route {
+    @service notifications;
+    @service hostRouter;
+    @service abilities;
+    @service intl;
+
+    beforeModel() {
+        if (this.abilities.cannot('fleet-ops list route')) {
+            this.notifications.warning(this.intl.t('common.unauthorized-access'));
+            return this.hostRouter.transitionTo('console.fleet-ops');
+        }
+    }
+}

package/addon/routes/operations/service-rates/index/new.js

@@ -3,6 +3,17 @@ import { inject as service } from '@ember/service';
 
 export default class OperationsServiceRatesIndexNewRoute extends Route {
     @service store;
+    @service notifications;
+    @service hostRouter;
+    @service abilities;
+    @service intl;
+
+    beforeModel() {
+        if (this.abilities.cannot('fleet-ops create service-rate')) {
+            this.notifications.warning(this.intl.t('common.unauthorized-access'));
+            return this.hostRouter.transitionTo('console.fleet-ops.operations.service-rates.index');
+        }
+    }
 
     async setupController(controller) {
         super.setupController(...arguments);

package/addon/routes/operations/service-rates.js

@@ -1,3 +1,16 @@
 import Route from '@ember/routing/route';
+import { inject as service } from '@ember/service';
 
-export default class OperationsServiceRatesRoute extends Route {}
+export default class OperationsServiceRatesRoute extends Route {
+    @service notifications;
+    @service hostRouter;
+    @service abilities;
+    @service intl;
+
+    beforeModel() {
+        if (this.abilities.cannot('fleet-ops list service-rate')) {
+            this.notifications.warning(this.intl.t('common.unauthorized-access'));
+            return this.hostRouter.transitionTo('console.fleet-ops');
+        }
+    }
+}

package/addon/routes/settings/avatars.js

@@ -1,3 +1,16 @@
 import Route from '@ember/routing/route';
+import { inject as service } from '@ember/service';
 
-export default class SettingsAvatarsRoute extends Route {}
+export default class SettingsAvatarsRoute extends Route {
+    @service notifications;
+    @service hostRouter;
+    @service abilities;
+    @service intl;
+
+    beforeModel() {
+        if (this.abilities.cannot('fleet-ops list avatar')) {
+            this.notifications.warning(this.intl.t('common.unauthorized-access'));
+            return this.hostRouter.transitionTo('console.fleet-ops');
+        }
+    }
+}

package/addon/routes/settings/custom-fields.js

@@ -1,3 +1,16 @@
 import Route from '@ember/routing/route';
+import { inject as service } from '@ember/service';
 
-export default class SettingsCustomFieldsRoute extends Route {}
+export default class SettingsCustomFieldsRoute extends Route {
+    @service notifications;
+    @service hostRouter;
+    @service abilities;
+    @service intl;
+
+    beforeModel() {
+        if (this.abilities.cannot('fleet-ops list custom-field')) {
+            this.notifications.warning(this.intl.t('common.unauthorized-access'));
+            return this.hostRouter.transitionTo('console.fleet-ops');
+        }
+    }
+}

package/addon/routes/settings/map.js

@@ -1,3 +1,16 @@
 import Route from '@ember/routing/route';
+import { inject as service } from '@ember/service';
 
-export default class SettingsMapRoute extends Route {}
+export default class SettingsMapRoute extends Route {
+    @service notifications;
+    @service hostRouter;
+    @service abilities;
+    @service intl;
+
+    beforeModel() {
+        if (this.abilities.cannot('fleet-ops view map-settings')) {
+            this.notifications.warning(this.intl.t('common.unauthorized-access'));
+            return this.hostRouter.transitionTo('console.fleet-ops');
+        }
+    }
+}

package/addon/routes/settings/notifications.js

@@ -4,6 +4,17 @@ import { hash } from 'rsvp';
 
 export default class SettingsNotificationsRoute extends Route {
     @service fetch;
+    @service notifications;
+    @service hostRouter;
+    @service abilities;
+    @service intl;
+
+    beforeModel() {
+        if (this.abilities.cannot('fleet-ops view notification-settings')) {
+            this.notifications.warning(this.intl.t('common.unauthorized-access'));
+            return this.hostRouter.transitionTo('console.fleet-ops');
+        }
+    }
 
     model() {
         return hash({

package/addon/routes/settings/orchestrator.js

@@ -14,7 +14,7 @@ export default class SettingsOrchestratorRoute extends Route {
     @service hostRouter;
 
     beforeModel() {
-        if (this.abilities.cannot('fleet-ops list order')) {
+        if (this.abilities.cannot('fleet-ops view routing-settings')) {
             this.notifications.warning(this.intl.t('common.unauthorized-access'));
             return this.hostRouter.transitionTo('console.fleet-ops');
         }

package/addon/routes/settings/payments/index.js

@@ -16,7 +16,7 @@ export default class SettingsPaymentsIndexRoute extends Route {
     };
 
     beforeModel() {
-        if (this.abilities.cannot('fleet-ops list purchase-rate')) {
+        if (this.abilities.cannot('fleet-ops view payments')) {
             this.notifications.warning(this.intl.t('common.unauthorized-access'));
             return this.hostRouter.transitionTo('console.fleet-ops');
         }

package/addon/routes/settings/routing.js

@@ -1,3 +1,16 @@
 import Route from '@ember/routing/route';
+import { inject as service } from '@ember/service';
 
-export default class SettingsRoutingRoute extends Route {}
+export default class SettingsRoutingRoute extends Route {
+    @service notifications;
+    @service hostRouter;
+    @service abilities;
+    @service intl;
+
+    beforeModel() {
+        if (this.abilities.cannot('fleet-ops view routing-settings')) {
+            this.notifications.warning(this.intl.t('common.unauthorized-access'));
+            return this.hostRouter.transitionTo('console.fleet-ops');
+        }
+    }
+}

package/addon/routes/settings/scheduling.js

@@ -1,3 +1,16 @@
 import Route from '@ember/routing/route';
+import { inject as service } from '@ember/service';
 
-export default class SettingsSchedulingRoute extends Route {}
+export default class SettingsSchedulingRoute extends Route {
+    @service notifications;
+    @service hostRouter;
+    @service abilities;
+    @service intl;
+
+    beforeModel() {
+        if (this.abilities.cannot('fleet-ops view scheduling-settings')) {
+            this.notifications.warning(this.intl.t('common.unauthorized-access'));
+            return this.hostRouter.transitionTo('console.fleet-ops');
+        }
+    }
+}

package/addon/routes/settings/telematics.js

@@ -0,0 +1,21 @@
+import Route from '@ember/routing/route';
+import { inject as service } from '@ember/service';
+
+export default class SettingsTelematicsRoute extends Route {
+    @service notifications;
+    @service hostRouter;
+    @service abilities;
+    @service intl;
+
+    beforeModel() {
+        if (this.abilities.cannot('fleet-ops view telematics-settings')) {
+            this.notifications.warning(this.intl.t('common.unauthorized-access'));
+            return this.hostRouter.transitionTo('console.fleet-ops');
+        }
+    }
+
+    setupController(controller) {
+        super.setupController(...arguments);
+        controller.getSettings.perform();
+    }
+}

package/addon/routes/virtual.js

@@ -4,6 +4,10 @@ import { inject as service } from '@ember/service';
 export default class VirtualRoute extends Route {
     @service universe;
     @service('universe/menu-service') menuService;
+    @service notifications;
+    @service hostRouter;
+    @service abilities;
+    @service intl;
 
     queryParams = {
         view: {
@@ -15,4 +19,11 @@ export default class VirtualRoute extends Route {
         const view = this.universe.getViewFromTransition(transition);
         return this.menuService.lookupMenuItem('engine:fleet-ops', slug, view, section);
     }
+
+    afterModel(menuItem) {
+        if (menuItem?.permission && this.abilities.cannot(menuItem.permission)) {
+            this.notifications.warning(this.intl.t('common.unauthorized-access'));
+            return this.hostRouter.transitionTo('console.fleet-ops');
+        }
+    }
 }

package/addon/routes.js

@@ -323,6 +323,7 @@ export default buildRoutes(function () {
         this.route('map');
         this.route('orchestrator');
         this.route('scheduling');
+        this.route('telematics');
         this.route('payments', function () {
             this.route('index', { path: '/' });
             this.route('onboard');

package/addon/services/contact-actions.js

@@ -1,9 +1,8 @@
 import ResourceActionService from '@fleetbase/ember-core/services/resource-action';
 import { inject as service } from '@ember/service';
-import { action, get } from '@ember/object';
+import { action } from '@ember/object';
 import { PANEL_DEFAULTS, closePanelsThen, registeredPanelTabs } from '../utils/context-panel';
-
-const INTERNAL_NAMESPACE = 'int/v1';
+import { confirmLoginAction, hasInactiveLogin, hasLinkedUser, hasManagedLogin, linkedUserStatus, updateProfileFromResponse } from '../utils/profile-login-actions';
 
 export default class ContactActionsService extends ResourceActionService {
     @service fetch;
@@ -124,17 +123,23 @@ export default class ContactActionsService extends ResourceActionService {
     }
 
     hasLinkedUser(contact) {
-        const user = contact?.user;
-        return Boolean(contact?.user_uuid || (user && (get(user, 'id') || get(user, 'uuid'))));
+        return hasLinkedUser(contact);
+    }
+
+    /**
+     * True when the contact has a login account managed from Fleet-Ops. A
+     * contact owned by a staff member is managed from IAM instead.
+     */
+    hasManagedLogin(contact) {
+        return hasManagedLogin(contact);
     }
 
     linkedUserStatus(contact) {
-        const user = contact?.user;
-        return (user ? (get(user, 'status') ?? get(user, 'session_status')) : null) ?? 'active';
+        return linkedUserStatus(contact);
     }
 
     hasInactiveLogin(contact) {
-        return ['inactive', 'disabled', 'suspended'].includes(this.linkedUserStatus(contact));
+        return hasInactiveLogin(contact);
     }
 
     isCustomerPortalInstalled() {
@@ -156,7 +161,7 @@ export default class ContactActionsService extends ResourceActionService {
     }
 
     accountActionButton(contact, options = {}) {
-        if (!this.hasLinkedUser(contact)) {
+        if (!this.hasManagedLogin(contact)) {
             return null;
         }
 
@@ -171,23 +176,23 @@ export default class ContactActionsService extends ResourceActionService {
     accountActionItems(contact, options = {}) {
         const actions = [
             {
-                text: 'Reset Password',
+                text: this.intl.t('profile-account.actions.reset-password'),
                 icon: 'key',
                 fn: () => this.openResetPasswordModal(contact),
             },
             {
-                text: 'Send Credentials',
+                text: this.intl.t('profile-account.actions.send-credentials'),
                 icon: 'paper-plane',
                 fn: () => this.confirmSendCredentials(contact),
             },
             this.hasInactiveLogin(contact)
                 ? {
-                      text: 'Reactivate Login',
+                      text: this.intl.t('profile-account.actions.reactivate-login'),
                       icon: 'unlock',
                       fn: () => this.confirmReactivatePortalLogin(contact),
                   }
                 : {
-                      text: 'Deactivate Login',
+                      text: this.intl.t('profile-account.actions.deactivate-login'),
                       icon: 'lock',
                       fn: () => this.confirmDeactivatePortalLogin(contact),
                       class: 'text-red-500 hover:text-red-600',
@@ -200,7 +205,7 @@ export default class ContactActionsService extends ResourceActionService {
                     separator: true,
                 },
                 {
-                    text: 'Convert to Vendor',
+                    text: this.intl.t('profile-account.actions.convert-to-vendor'),
                     icon: 'building',
                     fn: () => this.openConvertToVendorModal(contact, options),
                 }
@@ -212,42 +217,42 @@ export default class ContactActionsService extends ResourceActionService {
 
     accountRowActionItems(options = {}) {
         const hasCustomerPortal = this.isCustomerPortalInstalled();
-        const hasLinkedUser = (contact) => this.hasLinkedUser(contact);
+        const hasManagedLogin = (contact) => this.hasManagedLogin(contact);
 
         const actions = [
             {
-                label: 'Reset Password',
+                label: this.intl.t('profile-account.actions.reset-password'),
                 icon: 'key',
                 fn: (contact) => this.openResetPasswordModal(contact),
-                isVisible: hasLinkedUser,
+                isVisible: hasManagedLogin,
             },
             {
-                label: 'Send Credentials',
+                label: this.intl.t('profile-account.actions.send-credentials'),
                 icon: 'paper-plane',
                 fn: (contact) => this.confirmSendCredentials(contact),
-                isVisible: hasLinkedUser,
+                isVisible: hasManagedLogin,
             },
             {
-                label: 'Deactivate Login',
+                label: this.intl.t('profile-account.actions.deactivate-login'),
                 icon: 'lock',
                 class: 'text-red-500 hover:text-red-600',
                 fn: (contact) => this.confirmDeactivatePortalLogin(contact),
-                isVisible: (contact) => hasLinkedUser(contact) && !this.hasInactiveLogin(contact),
+                isVisible: (contact) => hasManagedLogin(contact) && !this.hasInactiveLogin(contact),
             },
             {
-                label: 'Reactivate Login',
+                label: this.intl.t('profile-account.actions.reactivate-login'),
                 icon: 'unlock',
                 fn: (contact) => this.confirmReactivatePortalLogin(contact),
-                isVisible: (contact) => hasLinkedUser(contact) && this.hasInactiveLogin(contact),
+                isVisible: (contact) => hasManagedLogin(contact) && this.hasInactiveLogin(contact),
             },
         ];
 
         if (hasCustomerPortal) {
             actions.push({
-                label: 'Convert to Vendor',
+                label: this.intl.t('profile-account.actions.convert-to-vendor'),
                 icon: 'building',
                 fn: (contact) => this.openConvertToVendorModal(contact, options),
-                isVisible: hasLinkedUser,
+                isVisible: hasManagedLogin,
             });
         }
 
@@ -255,8 +260,10 @@ export default class ContactActionsService extends ResourceActionService {
     }
 
     openResetPasswordModal(contact) {
-        this.modalsManager.show('modals/reset-customer-credentials', {
-            customer: contact,
+        this.modalsManager.show('modals/reset-profile-credentials', {
+            profile: contact,
+            endpoint: 'customers/reset-credentials',
+            payload: (profile) => ({ customer: profile?.id }),
         });
     }
 
@@ -278,86 +285,40 @@ export default class ContactActionsService extends ResourceActionService {
 
     confirmSendCredentials(contact) {
         this.confirmLoginAction(contact, {
-            title: 'Send Portal Credentials',
-            body: 'Generate a new temporary password and email this contact their portal credentials.',
-            acceptButtonText: 'Send Credentials',
+            title: this.intl.t('profile-account.prompts.send-portal-credentials-title'),
+            body: this.intl.t('profile-account.prompts.send-portal-credentials-body'),
+            acceptButtonText: this.intl.t('profile-account.actions.send-credentials'),
             endpoint: 'customers/send-credentials',
-            successMessage: 'Portal credentials sent.',
+            successMessage: this.intl.t('profile-account.prompts.send-portal-credentials-success'),
         });
     }
 
     confirmDeactivatePortalLogin(contact) {
         this.confirmLoginAction(contact, {
-            title: 'Deactivate Login',
-            body: 'Deactivate portal access for this contact. Their profile and history will be preserved.',
-            acceptButtonText: 'Deactivate Login',
+            title: this.intl.t('profile-account.actions.deactivate-login'),
+            body: this.intl.t('profile-account.prompts.deactivate-portal-login-body'),
+            acceptButtonText: this.intl.t('profile-account.actions.deactivate-login'),
             acceptButtonScheme: 'danger',
             endpoint: 'customers/deactivate-portal-login',
-            successMessage: 'Portal login deactivated.',
+            successMessage: this.intl.t('profile-account.prompts.deactivate-portal-login-success'),
         });
     }
 
     confirmReactivatePortalLogin(contact) {
         this.confirmLoginAction(contact, {
-            title: 'Reactivate Login',
-            body: 'Reactivate portal access for this contact.',
-            acceptButtonText: 'Reactivate Login',
+            title: this.intl.t('profile-account.actions.reactivate-login'),
+            body: this.intl.t('profile-account.prompts.reactivate-portal-login-body'),
+            acceptButtonText: this.intl.t('profile-account.actions.reactivate-login'),
             endpoint: 'customers/reactivate-portal-login',
-            successMessage: 'Portal login reactivated.',
+            successMessage: this.intl.t('profile-account.prompts.reactivate-portal-login-success'),
         });
     }
 
-    confirmLoginAction(contact, { title, body, acceptButtonText, acceptButtonScheme, endpoint, successMessage }) {
-        this.modalsManager.confirm({
-            title,
-            body,
-            acceptButtonText,
-            acceptButtonScheme,
-            confirm: async (modal) => {
-                modal.startLoading();
-
-                try {
-                    const response = await this.fetch.post(endpoint, { customer: contact?.id }, { namespace: INTERNAL_NAMESPACE });
-                    await this.updateContactFromResponse(contact, response);
-                    this.notifications.success(successMessage);
-                    modal.done();
-                } catch (error) {
-                    this.notifications.serverError(error);
-                    modal.stopLoading();
-                }
-            },
-        });
+    confirmLoginAction(contact, options = {}) {
+        return confirmLoginAction(this, contact, { payload: { customer: contact?.id }, ...options });
     }
 
-    async updateContactFromResponse(contact, response) {
-        const payload = response.customer ?? response.contact;
-
-        if (!payload || typeof contact?.setProperties !== 'function') {
-            return;
-        }
-
-        contact.setProperties(
-            this.withoutIdentityFields({
-                user_uuid: payload.user_uuid,
-            })
-        );
-
-        if (payload.user) {
-            const user = await contact.user;
-
-            if (typeof user?.setProperties === 'function') {
-                user.setProperties(this.withoutIdentityFields(payload.user));
-            }
-        }
-    }
-
-    withoutIdentityFields(payload = {}) {
-        const attributes = { ...payload };
-
-        delete attributes.id;
-        delete attributes.uuid;
-        delete attributes.public_id;
-
-        return attributes;
+    updateContactFromResponse(contact, response) {
+        return updateProfileFromResponse(contact, response);
     }
 }

package/addon/services/driver-actions.js

@@ -5,6 +5,7 @@ import { action } from '@ember/object';
 import { isArray } from '@ember/array';
 import { dasherize } from '@ember/string';
 import { PANEL_DEFAULTS, closePanelsThen } from '../utils/context-panel';
+import { confirmLoginAction, hasInactiveLogin, hasManagedLogin } from '../utils/profile-login-actions';
 
 export default class DriverActionsService extends ResourceActionService {
     @service('universe/menu-service') menuService;
@@ -422,9 +423,106 @@ export default class DriverActionsService extends ResourceActionService {
             { separator: true },
             { text: this.intl.t('driver.actions.locate-driver'), icon: 'location-dot', fn: () => this.locate(driver), permission: 'fleet-ops view driver' },
             { text: this.intl.t('driver.actions.create-issue'), icon: 'triangle-exclamation', fn: () => this.createIssue(driver), permission: 'fleet-ops create issue' },
+            ...this.accountMenuItems(driver),
         ];
     }
 
+    /**
+     * The login account section of a driver's actions menu. Only offered when
+     * the driver has a login managed from Fleet-Ops; a staff-linked driver's
+     * login is managed from IAM.
+     */
+    accountMenuItems(driver) {
+        if (!hasManagedLogin(driver)) {
+            return [];
+        }
+
+        const items = this.accountRowActionItems()
+            .filter(({ isVisible }) => isVisible(driver))
+            // eslint-disable-next-line no-unused-vars
+            .map(({ label, fn, isVisible, ...item }) => ({ ...item, text: label, fn: () => fn(driver) }));
+
+        return [{ separator: true }, ...items];
+    }
+
+    /**
+     * Login account actions for the drivers table row menu.
+     */
+    accountRowActionItems() {
+        const permission = 'fleet-ops update driver';
+
+        return [
+            {
+                label: this.intl.t('profile-account.actions.reset-password'),
+                icon: 'key',
+                fn: (driver) => this.resetCredentials(driver),
+                permission,
+                isVisible: (driver) => hasManagedLogin(driver),
+            },
+            {
+                label: this.intl.t('profile-account.actions.send-credentials'),
+                icon: 'paper-plane',
+                fn: (driver) => this.sendCredentials(driver),
+                permission,
+                isVisible: (driver) => hasManagedLogin(driver),
+            },
+            {
+                label: this.intl.t('profile-account.actions.deactivate-login'),
+                icon: 'lock',
+                class: 'text-red-500 hover:text-red-600',
+                fn: (driver) => this.deactivateLogin(driver),
+                permission,
+                isVisible: (driver) => hasManagedLogin(driver) && !hasInactiveLogin(driver),
+            },
+            {
+                label: this.intl.t('profile-account.actions.reactivate-login'),
+                icon: 'unlock',
+                fn: (driver) => this.reactivateLogin(driver),
+                permission,
+                isVisible: (driver) => hasManagedLogin(driver) && hasInactiveLogin(driver),
+            },
+        ];
+    }
+
+    @action resetCredentials(driver, options = {}) {
+        return this.modalsManager.show('modals/reset-profile-credentials', {
+            profile: driver,
+            endpoint: `drivers/${driver.id}/reset-credentials`,
+            ...options,
+        });
+    }
+
+    @action sendCredentials(driver) {
+        return confirmLoginAction(this, driver, {
+            title: this.intl.t('profile-account.prompts.send-credentials-title'),
+            body: this.intl.t('profile-account.prompts.send-credentials-body', { name: driver.name }),
+            acceptButtonText: this.intl.t('profile-account.actions.send-credentials'),
+            endpoint: `drivers/${driver.id}/send-credentials`,
+            successMessage: this.intl.t('profile-account.prompts.send-credentials-success', { name: driver.name }),
+        });
+    }
+
+    @action deactivateLogin(driver) {
+        return confirmLoginAction(this, driver, {
+            title: this.intl.t('profile-account.actions.deactivate-login'),
+            body: this.intl.t('profile-account.prompts.deactivate-login-body', { name: driver.name }),
+            acceptButtonText: this.intl.t('profile-account.actions.deactivate-login'),
+            acceptButtonScheme: 'danger',
+            endpoint: `drivers/${driver.id}/deactivate-login`,
+            successMessage: this.intl.t('profile-account.prompts.deactivate-login-success', { name: driver.name }),
+        });
+    }
+
+    @action reactivateLogin(driver) {
+        return confirmLoginAction(this, driver, {
+            title: this.intl.t('profile-account.actions.reactivate-login'),
+            body: this.intl.t('profile-account.prompts.reactivate-login-body', { name: driver.name }),
+            acceptButtonText: this.intl.t('profile-account.actions.reactivate-login'),
+            endpoint: `drivers/${driver.id}/reactivate-login`,
+            successMessage: this.intl.t('profile-account.prompts.reactivate-login-success', { name: driver.name }),
+        });
+    }
+
     @action createIssue(driver) {
         return this.issueActions.modal.create({
             driver,