@flusys/ng-auth 8.0.0-beta.1 → 8.0.0

package/fesm2022/flusys-ng-auth.mjs

@@ -1,13 +1,13 @@
 import { HttpClient } from '@angular/common/http';
 import * as i0 from '@angular/core';
-import { inject, Service, signal, computed, effect, PLATFORM_ID, InjectionToken, Component, untracked, viewChild, DestroyRef, DOCUMENT, input, Injector, output, resource, makeStateKey, TransferState } from '@angular/core';
+import { inject, Service, signal, computed, effect, PLATFORM_ID, InjectionToken, Component, input, output, untracked, viewChild, DestroyRef, DOCUMENT, Injector, resource, makeStateKey, TransferState } from '@angular/core';
 import { APP_CONFIG, getServiceUrl, isCompanyFeatureEnabled, isServiceEnabled, isSignUpEnabled, getPermissionMode, getDefaultCompanySlug, getDefaultBranchSlug } from '@flusys/ng-core';
-import { of, timeout, switchMap, map, tap, catchError, shareReplay, finalize, BehaviorSubject, throwError, filter, take, from, forkJoin, firstValueFrom } from 'rxjs';
+import { of, timeout, switchMap, map, tap, catchError, shareReplay, finalize, BehaviorSubject, throwError, filter, take, from, firstValueFrom, forkJoin } from 'rxjs';
 import { Router, RouterOutlet, ActivatedRoute, RouterLink } from '@angular/router';
 import { PlatformService, PermissionValidatorService, ApiResourceService, CookieService, TranslateService, USER_PERMISSIONS, COMPANY_PERMISSIONS, BRANCH_PERMISSIONS, SOCIAL_AUTH_CONFIG_PERMISSIONS, resolveTranslationModule, SHARED_MESSAGES, permissionGuard, USER_PROVIDER, COMPANY_API_PROVIDER, USER_PERMISSION_PROVIDER, AUTH_STATE_PROVIDER, RouterTabsComponent, TranslatePipe, HasPermissionDirective, BaseFormComponent, BaseListComponent, BaseListTemplateDirective, FileUrlService, FILE_PROVIDER, PROFILE_PERMISSION_PROVIDER, FileUploaderComponent } from '@flusys/ng-shared';
 import { map as map$1, catchError as catchError$1, tap as tap$1 } from 'rxjs/operators';
 import { isPlatformBrowser, NgComponentOutlet, NgTemplateOutlet } from '@angular/common';
-import { MessageService, CardComponent, CheckboxComponent, FButtonDirective, InputTextDirective, SelectComponent, UiIconComponent, ConfirmationService, TableComponent, TagComponent, TooltipDirective, PasswordComponent, AvatarComponent, SkeletonComponent, TextareaDirective, ToggleSwitchComponent, DialogComponent, ProgressSpinnerComponent } from '@flusys/ng-ui';
+import { MessageService, CardComponent, CheckboxComponent, FButtonDirective, InputTextDirective, SelectComponent, UiIconComponent, ConfirmationService, DialogComponent, ProgressSpinnerComponent, TooltipDirective, TableComponent, TagComponent, PasswordComponent, AvatarComponent, SkeletonComponent, TextareaDirective, ToggleSwitchComponent } from '@flusys/ng-ui';
 import { LAYOUT_AUTH_STATE, LAYOUT_AUTH_API, AppFloatingConfigurator } from '@flusys/ng-layout';
 import { toSignal, takeUntilDestroyed } from '@angular/core/rxjs-interop';
 import { form, required, FormField, email, minLength } from '@angular/forms/signals';
@@ -598,6 +598,17 @@ class UserPermissionApiService {
             ...(companyId && { companyId }),
         });
     }
+    // Reverse Lookups (target -> users)
+    getCompanyUsers(companyId) {
+        return this.http.post(`${this.baseUrl}/get-company-users`, {
+            companyId,
+        });
+    }
+    getBranchUsers(branchId) {
+        return this.http.post(`${this.baseUrl}/get-branch-users`, {
+            branchId,
+        });
+    }
     static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "22.1.5", ngImport: i0, type: UserPermissionApiService, deps: [], target: i0.ɵɵFactoryTarget.Service });
     static ɵprov = i0.ɵɵngDeclareService({ minVersion: "22.0.0", version: "22.1.5", ngImport: i0, type: UserPermissionApiService });
 }
@@ -1053,6 +1064,11 @@ const AUTH_MESSAGES = {
     'administrative.company.add': 'Add Company',
     'administrative.branch.view.branches': 'View Branches',
     'administrative.company.delete.title': 'Delete Company',
+    // components/company-permitted-users-dialog.component.ts, components/branch-permitted-users-dialog.component.ts
+    'administrative.permission.view.users': 'View Users',
+    'administrative.permission.no.users': 'No users found',
+    'administrative.permission.remove': 'Remove Access',
+    'administrative.permission.remove.confirm': 'Remove access for {{name}}?',
     // pages/users/user-form.component.ts
     'administrative.user.edit': 'Edit User',
     'administrative.user.new': 'New User',
@@ -1481,6 +1497,29 @@ class AuthUserProviderAdapter {
             meta: response.meta,
         })));
     }
+    getUsersByIds(ids) {
+        if (ids.length === 0) {
+            const empty = {
+                success: true,
+                message: '',
+                data: [],
+                meta: { total: 0, page: 0, pageSize: 0, count: 0 },
+            };
+            return from(Promise.resolve(empty));
+        }
+        return from(this.userApi.findByIds(ids, ['id', 'name', 'email'])).pipe(map((response) => ({
+            success: response.success,
+            message: response.message,
+            messageKey: response.messageKey,
+            messageVariables: response.messageVariables,
+            data: (response.data ?? []).map((user) => ({
+                id: user.id,
+                name: user.name || user.email,
+                email: user.email,
+            })),
+            meta: response.meta,
+        })));
+    }
     static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "22.1.5", ngImport: i0, type: AuthUserProviderAdapter, deps: [], target: i0.ɵɵFactoryTarget.Service });
     static ɵprov = i0.ɵɵngDeclareService({ minVersion: "22.0.0", version: "22.1.5", ngImport: i0, type: AuthUserProviderAdapter, autoProvided: false });
 }
@@ -2237,9 +2276,245 @@ var branchForm_component = /*#__PURE__*/Object.freeze({
     BranchFormComponent: BranchFormComponent
 });
 
+/**
+ * Read-only viewer for users permitted against a branch, with a remove-only
+ * action per user. Assigning new users stays on the user-centric permission
+ * flow (`UserBranchPermissionDialogComponent`) — this dialog intentionally
+ * has no "add" affordance.
+ */
+class BranchPermittedUsersDialogComponent {
+    USER_PERMISSIONS = USER_PERMISSIONS;
+    permissionApi = inject(UserPermissionApiService);
+    confirmationService = inject(ConfirmationService);
+    messageService = inject(MessageService);
+    translateAdapter = inject(TranslateService, {
+        optional: true,
+    });
+    t(key, params) {
+        return this.translateAdapter?.translate(key, params) ?? key;
+    }
+    visible = input.required(/* @ts-ignore */
+    ...(ngDevMode ? [{ debugName: "visible" }] : /* istanbul ignore next */ []));
+    branch = input.required(/* @ts-ignore */
+    ...(ngDevMode ? [{ debugName: "branch" }] : /* istanbul ignore next */ []));
+    closed = output();
+    isLoading = signal(false, /* @ts-ignore */
+    ...(ngDevMode ? [{ debugName: "isLoading" }] : /* istanbul ignore next */ []));
+    isRemoving = signal(false, /* @ts-ignore */
+    ...(ngDevMode ? [{ debugName: "isRemoving" }] : /* istanbul ignore next */ []));
+    users = signal([], /* @ts-ignore */
+    ...(ngDevMode ? [{ debugName: "users" }] : /* istanbul ignore next */ []));
+    constructor() {
+        effect(() => {
+            if (this.visible() && this.branch()) {
+                this.loadUsers();
+            }
+        });
+    }
+    async loadUsers() {
+        const branch = this.branch();
+        if (!branch)
+            return;
+        this.isLoading.set(true);
+        try {
+            const response = await firstValueFrom(this.permissionApi.getBranchUsers(branch.id));
+            this.users.set(response.data ?? []);
+        }
+        catch {
+            // Error toast handled by global interceptor
+        }
+        finally {
+            this.isLoading.set(false);
+        }
+    }
+    onRemove(user) {
+        const branch = this.branch();
+        if (!branch)
+            return;
+        this.confirmationService.confirm({
+            message: this.t('administrative.permission.remove.confirm', {
+                name: user.userName,
+            }),
+            header: this.t('administrative.permission.remove'),
+            icon: 'exclamation-triangle',
+            acceptButtonStyleClass: 'p-button-danger',
+            accept: async () => {
+                this.isRemoving.set(true);
+                try {
+                    const response = await firstValueFrom(this.permissionApi.revokeUserFromBranch(user.userId, branch.id));
+                    if (response.success) {
+                        this.users.update((list) => list.filter((u) => u.id !== user.id));
+                        this.messageService.add({
+                            severity: 'success',
+                            summary: this.t('shared.success'),
+                            detail: response?.messageKey
+                                ? this.t(response.messageKey, response.messageVariables)
+                                : (response?.message ?? ''),
+                        });
+                    }
+                }
+                catch {
+                    // Error toast handled by global interceptor
+                }
+                finally {
+                    this.isRemoving.set(false);
+                }
+            },
+        });
+    }
+    onClose() {
+        this.closed.emit();
+    }
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "22.1.5", ngImport: i0, type: BranchPermittedUsersDialogComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
+    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "22.1.5", type: BranchPermittedUsersDialogComponent, isStandalone: true, selector: "lib-branch-permitted-users-dialog", inputs: { visible: { classPropertyName: "visible", publicName: "visible", isSignal: true, isRequired: true, transformFunction: null }, branch: { classPropertyName: "branch", publicName: "branch", isSignal: true, isRequired: true, transformFunction: null } }, outputs: { closed: "closed" }, ngImport: i0, template: `
+    <f-dialog
+      [visible]="visible()"
+      [modal]="true"
+      [closable]="true"
+      [breakpoints]="{ '960px': '90vw', '640px': '95vw' }"
+      [style]="{ width: '50vw', maxWidth: '600px' }"
+      [header]="'administrative.permission.view.users' | translate"
+      (onHide)="onClose()"
+    >
+      <div class="mb-4">
+        <p class="text-sm text-muted-color">
+          {{ 'administrative.branch.title' | translate }}:
+          <strong>{{ branch()?.name }}</strong>
+        </p>
+      </div>
+
+      @if (isLoading()) {
+        <div class="flex justify-center items-center py-8">
+          <f-progressspinner />
+        </div>
+      } @else {
+        <div class="flex flex-col gap-3">
+          @for (user of users(); track user.id) {
+            <div
+              class="flex items-center justify-between p-3 border border-surface rounded"
+            >
+              <div>
+                <div class="font-semibold">{{ user.userName }}</div>
+                <div class="text-sm text-muted-color">{{ user.userEmail }}</div>
+              </div>
+              <button
+                fButton
+                *hasPermission="USER_PERMISSIONS.UPDATE"
+                [text]="true"
+                severity="danger"
+                size="small"
+                [disabled]="isRemoving()"
+                [fTooltip]="'shared.remove' | translate"
+                (click)="onRemove(user)"
+              >
+                <ui-icon pButtonIcon name="trash"></ui-icon>
+              </button>
+            </div>
+          } @empty {
+            <div class="text-center py-4 text-muted-color">
+              {{ 'administrative.permission.no.users' | translate }}
+            </div>
+          }
+        </div>
+      }
+
+      <ng-template #footer>
+        <button
+          fButton
+          severity="secondary"
+          [outlined]="true"
+          (click)="onClose()"
+        >
+          <span pButtonLabel>{{ 'shared.close' | translate }}</span>
+        </button>
+      </ng-template>
+    </f-dialog>
+  `, isInline: true, dependencies: [{ kind: "component", type: DialogComponent, selector: "f-dialog", inputs: ["header", "visible", "modal", "closable", "closeOnEscape", "dismissableMask", "resizable", "draggable", "maximizable", "blockScroll", "returnFocusOnClose", "position", "style", "styleClass", "breakpoints"], outputs: ["visibleChange", "onShow", "onHide", "onMaximize"] }, { kind: "directive", type: FButtonDirective, selector: "[fButton]", inputs: ["severity", "text", "outlined", "link", "variant", "rounded", "raised", "fluid", "disabled", "loading", "loadingIcon", "size", "label", "icon", "iconPos", "ariaLabel", "plain"] }, { kind: "component", type: ProgressSpinnerComponent, selector: "f-progressspinner", inputs: ["size", "strokeWidth", "animationDuration", "styleClass", "ariaLabel"] }, { kind: "directive", type: TooltipDirective, selector: "[fTooltip]", inputs: ["fTooltip", "tooltipPosition", "positionStyle", "tooltipStyleClass", "disabled", "tooltipEvent", "showDelay", "hideDelay", "life", "autoHide", "positionTop", "positionLeft", "escape"] }, { kind: "component", type: UiIconComponent, selector: "ui-icon", inputs: ["name", "size", "spin", "fill", "severity"] }, { kind: "directive", type: HasPermissionDirective, selector: "[hasPermission]", inputs: ["hasPermission"] }, { kind: "pipe", type: TranslatePipe, name: "translate" }] });
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.1.5", ngImport: i0, type: BranchPermittedUsersDialogComponent, decorators: [{
+            type: Component,
+            args: [{
+                    selector: 'lib-branch-permitted-users-dialog',
+                    imports: [
+                        DialogComponent,
+                        FButtonDirective,
+                        ProgressSpinnerComponent,
+                        TooltipDirective,
+                        UiIconComponent,
+                        HasPermissionDirective,
+                        TranslatePipe,
+                    ],
+                    template: `
+    <f-dialog
+      [visible]="visible()"
+      [modal]="true"
+      [closable]="true"
+      [breakpoints]="{ '960px': '90vw', '640px': '95vw' }"
+      [style]="{ width: '50vw', maxWidth: '600px' }"
+      [header]="'administrative.permission.view.users' | translate"
+      (onHide)="onClose()"
+    >
+      <div class="mb-4">
+        <p class="text-sm text-muted-color">
+          {{ 'administrative.branch.title' | translate }}:
+          <strong>{{ branch()?.name }}</strong>
+        </p>
+      </div>
+
+      @if (isLoading()) {
+        <div class="flex justify-center items-center py-8">
+          <f-progressspinner />
+        </div>
+      } @else {
+        <div class="flex flex-col gap-3">
+          @for (user of users(); track user.id) {
+            <div
+              class="flex items-center justify-between p-3 border border-surface rounded"
+            >
+              <div>
+                <div class="font-semibold">{{ user.userName }}</div>
+                <div class="text-sm text-muted-color">{{ user.userEmail }}</div>
+              </div>
+              <button
+                fButton
+                *hasPermission="USER_PERMISSIONS.UPDATE"
+                [text]="true"
+                severity="danger"
+                size="small"
+                [disabled]="isRemoving()"
+                [fTooltip]="'shared.remove' | translate"
+                (click)="onRemove(user)"
+              >
+                <ui-icon pButtonIcon name="trash"></ui-icon>
+              </button>
+            </div>
+          } @empty {
+            <div class="text-center py-4 text-muted-color">
+              {{ 'administrative.permission.no.users' | translate }}
+            </div>
+          }
+        </div>
+      }
+
+      <ng-template #footer>
+        <button
+          fButton
+          severity="secondary"
+          [outlined]="true"
+          (click)="onClose()"
+        >
+          <span pButtonLabel>{{ 'shared.close' | translate }}</span>
+        </button>
+      </ng-template>
+    </f-dialog>
+  `,
+                }]
+        }], ctorParameters: () => [], propDecorators: { visible: [{ type: i0.Input, args: [{ isSignal: true, alias: "visible", required: true }] }], branch: [{ type: i0.Input, args: [{ isSignal: true, alias: "branch", required: true }] }], closed: [{ type: i0.Output, args: ["closed"] }] } });
+
 class BranchListComponent {
     // Permission constants for template
     BRANCH_PERMISSIONS = BRANCH_PERMISSIONS;
+    USER_PERMISSIONS = USER_PERMISSIONS;
     router = inject(Router);
     route = inject(ActivatedRoute);
     messageService = inject(MessageService);
@@ -2266,6 +2541,10 @@ class BranchListComponent {
     isLoading = this.branchService.isLoading;
     /** Total count from service */
     total = this.branchService.total;
+    permittedUsersDialogVisible = signal(false, /* @ts-ignore */
+    ...(ngDevMode ? [{ debugName: "permittedUsersDialogVisible" }] : /* istanbul ignore next */ []));
+    selectedBranch = signal(null, /* @ts-ignore */
+    ...(ngDevMode ? [{ debugName: "selectedBranch" }] : /* istanbul ignore next */ []));
     constructor() {
         effect(() => {
             const params = this.queryParamMap();
@@ -2312,6 +2591,10 @@ class BranchListComponent {
     onEdit(branch) {
         this.router.navigate(['/administration/branch', branch.id]);
     }
+    onViewUsers(branch) {
+        this.selectedBranch.set(branch);
+        this.permittedUsersDialogVisible.set(true);
+    }
     onDelete(branch) {
         this.confirmationService.confirm({
             message: this.translate('shared.confirm.delete.item', {
@@ -2433,6 +2716,17 @@ class BranchListComponent {
                   >
                     <ui-icon pButtonIcon name="pencil"></ui-icon>
                   </button>
+                  <button
+                    fButton
+                    *hasPermission="USER_PERMISSIONS.READ"
+                    [rounded]="true"
+                    [text]="true"
+                    severity="secondary"
+                    [fTooltip]="'administrative.permission.view.users' | translate"
+                    (click)="onViewUsers(branch)"
+                  >
+                    <ui-icon pButtonIcon name="users"></ui-icon>
+                  </button>
                   @if (!branch.readOnly) {
                     <button
                       fButton
@@ -2464,7 +2758,13 @@ class BranchListComponent {
         </f-table>
       </div>
     </f-card>
-  `, isInline: true, dependencies: [{ kind: "ngmodule", type: FormsModule }, { kind: "directive", type: i1.NgControlStatus, selector: "[formControlName],[ngModel],[formControl]" }, { kind: "directive", type: i1.NgModel, selector: "[ngModel]:not([formControlName]):not([formControl])", inputs: ["name", "disabled", "ngModel", "ngModelOptions"], outputs: ["ngModelChange"], exportAs: ["ngModel"] }, { kind: "component", type: CardComponent, selector: "f-card", inputs: ["header", "subheader", "styleClass", "style"] }, { kind: "directive", type: FButtonDirective, selector: "[fButton]", inputs: ["severity", "text", "outlined", "link", "variant", "rounded", "raised", "fluid", "disabled", "loading", "loadingIcon", "size", "label", "icon", "iconPos", "ariaLabel", "plain"] }, { kind: "component", type: SelectComponent, selector: "f-select", inputs: ["options", "optionLabel", "optionValue", "placeholder", "disabled", "filter", "filterBy", "filterMatchMode", "filterLocale", "filterPlaceholder", "resetFilterOnHide", "autofocusFilter", "emptyMessage", "emptyFilterMessage", "showClear", "loading", "loadingIcon", "dropdownIcon", "clearIcon", "inputId", "invalid", "touched", "styleClass", "style", "appendTo", "editable", "readonly", "autofocus", "checkmark", "group", "optionGroupLabel", "optionGroupChildren", "virtualScroll", "virtualScrollItemSize", "lazy"], outputs: ["onFilter", "onChange", "onShow", "onHide", "onBlur", "onFocus", "onClear", "onLazyLoad"] }, { kind: "component", type: TableComponent, selector: "f-table", inputs: ["value", "lazy", "loading", "rows", "totalRecords", "rowHover", "dataKey", "scrollable", "scrollHeight", "paginator", "first", "rowsPerPageOptions", "showCurrentPageReport", "currentPageReportTemplate", "tableStyle", "styleClass", "globalFilterFields", "filterDelay", "responsiveLayout", "selectionMode", "sortMode", "rowExpandMode", "resizableColumns", "rowStyleClass", "virtualScroll", "virtualScrollItemSize", "sortField", "sortOrder", "multiSortMeta", "filters", "selection", "expandedRowKeys", "contextMenuSelection"], outputs: ["sortFieldChange", "sortOrderChange", "multiSortMetaChange", "filtersChange", "selectionChange", "expandedRowKeysChange", "contextMenuSelectionChange", "onLazyLoad", "onSort", "onFilter", "onRowSelect", "onRowUnselect", "onSelectAllChange", "onRowExpand", "onRowCollapse", "onColResize", "onRowContextMenu"] }, { kind: "component", type: TagComponent, selector: "f-tag", inputs: ["value", "severity", "icon", "rounded", "color", "styleClass", "style"] }, { kind: "directive", type: TooltipDirective, selector: "[fTooltip]", inputs: ["fTooltip", "tooltipPosition", "positionStyle", "tooltipStyleClass", "disabled", "tooltipEvent", "showDelay", "hideDelay", "life", "autoHide", "positionTop", "positionLeft", "escape"] }, { kind: "component", type: UiIconComponent, selector: "ui-icon", inputs: ["name", "size", "spin", "fill", "severity"] }, { kind: "directive", type: HasPermissionDirective, selector: "[hasPermission]", inputs: ["hasPermission"] }, { kind: "pipe", type: TranslatePipe, name: "translate" }] });
+
+    <lib-branch-permitted-users-dialog
+      [visible]="permittedUsersDialogVisible()"
+      [branch]="selectedBranch()"
+      (closed)="permittedUsersDialogVisible.set(false)"
+    />
+  `, isInline: true, dependencies: [{ kind: "ngmodule", type: FormsModule }, { kind: "directive", type: i1.NgControlStatus, selector: "[formControlName],[ngModel],[formControl]" }, { kind: "directive", type: i1.NgModel, selector: "[ngModel]:not([formControlName]):not([formControl])", inputs: ["name", "disabled", "ngModel", "ngModelOptions"], outputs: ["ngModelChange"], exportAs: ["ngModel"] }, { kind: "component", type: CardComponent, selector: "f-card", inputs: ["header", "subheader", "styleClass", "style"] }, { kind: "directive", type: FButtonDirective, selector: "[fButton]", inputs: ["severity", "text", "outlined", "link", "variant", "rounded", "raised", "fluid", "disabled", "loading", "loadingIcon", "size", "label", "icon", "iconPos", "ariaLabel", "plain"] }, { kind: "component", type: SelectComponent, selector: "f-select", inputs: ["options", "optionLabel", "optionValue", "placeholder", "disabled", "filter", "filterBy", "filterMatchMode", "filterLocale", "filterPlaceholder", "resetFilterOnHide", "autofocusFilter", "emptyMessage", "emptyFilterMessage", "showClear", "loading", "loadingIcon", "dropdownIcon", "clearIcon", "inputId", "invalid", "touched", "styleClass", "style", "appendTo", "editable", "readonly", "autofocus", "checkmark", "group", "optionGroupLabel", "optionGroupChildren", "virtualScroll", "virtualScrollItemSize", "lazy"], outputs: ["onFilter", "onChange", "onShow", "onHide", "onBlur", "onFocus", "onClear", "onLazyLoad"] }, { kind: "component", type: TableComponent, selector: "f-table", inputs: ["value", "lazy", "loading", "rows", "totalRecords", "rowHover", "dataKey", "scrollable", "scrollHeight", "paginator", "first", "rowsPerPageOptions", "showCurrentPageReport", "currentPageReportTemplate", "tableStyle", "styleClass", "globalFilterFields", "filterDelay", "responsiveLayout", "selectionMode", "sortMode", "rowExpandMode", "resizableColumns", "rowStyleClass", "virtualScroll", "virtualScrollItemSize", "sortField", "sortOrder", "multiSortMeta", "filters", "selection", "expandedRowKeys", "contextMenuSelection"], outputs: ["sortFieldChange", "sortOrderChange", "multiSortMetaChange", "filtersChange", "selectionChange", "expandedRowKeysChange", "contextMenuSelectionChange", "onLazyLoad", "onSort", "onFilter", "onRowSelect", "onRowUnselect", "onSelectAllChange", "onRowExpand", "onRowCollapse", "onColResize", "onRowContextMenu"] }, { kind: "component", type: TagComponent, selector: "f-tag", inputs: ["value", "severity", "icon", "rounded", "color", "styleClass", "style"] }, { kind: "directive", type: TooltipDirective, selector: "[fTooltip]", inputs: ["fTooltip", "tooltipPosition", "positionStyle", "tooltipStyleClass", "disabled", "tooltipEvent", "showDelay", "hideDelay", "life", "autoHide", "positionTop", "positionLeft", "escape"] }, { kind: "component", type: UiIconComponent, selector: "ui-icon", inputs: ["name", "size", "spin", "fill", "severity"] }, { kind: "directive", type: HasPermissionDirective, selector: "[hasPermission]", inputs: ["hasPermission"] }, { kind: "component", type: BranchPermittedUsersDialogComponent, selector: "lib-branch-permitted-users-dialog", inputs: ["visible", "branch"], outputs: ["closed"] }, { kind: "pipe", type: TranslatePipe, name: "translate" }] });
 }
 i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.1.5", ngImport: i0, type: BranchListComponent, decorators: [{
             type: Component,
@@ -2480,6 +2780,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.1.5", ngImpor
                         TooltipDirective,
                         UiIconComponent,
                         HasPermissionDirective,
+                        BranchPermittedUsersDialogComponent,
                         TranslatePipe,
                     ],
                     template: `
@@ -2573,6 +2874,17 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.1.5", ngImpor
                   >
                     <ui-icon pButtonIcon name="pencil"></ui-icon>
                   </button>
+                  <button
+                    fButton
+                    *hasPermission="USER_PERMISSIONS.READ"
+                    [rounded]="true"
+                    [text]="true"
+                    severity="secondary"
+                    [fTooltip]="'administrative.permission.view.users' | translate"
+                    (click)="onViewUsers(branch)"
+                  >
+                    <ui-icon pButtonIcon name="users"></ui-icon>
+                  </button>
                   @if (!branch.readOnly) {
                     <button
                       fButton
@@ -2604,6 +2916,12 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.1.5", ngImpor
         </f-table>
       </div>
     </f-card>
+
+    <lib-branch-permitted-users-dialog
+      [visible]="permittedUsersDialogVisible()"
+      [branch]="selectedBranch()"
+      (closed)="permittedUsersDialogVisible.set(false)"
+    />
   `,
                 }]
         }], ctorParameters: () => [] });
@@ -2747,6 +3065,241 @@ var companyForm_component = /*#__PURE__*/Object.freeze({
     CompanyFormComponent: CompanyFormComponent
 });
 
+/**
+ * Read-only viewer for users permitted against a company, with a remove-only
+ * action per user. Assigning new users stays on the user-centric permission
+ * flow (`UserCompanyPermissionDialogComponent`) — this dialog intentionally
+ * has no "add" affordance.
+ */
+class CompanyPermittedUsersDialogComponent {
+    USER_PERMISSIONS = USER_PERMISSIONS;
+    permissionApi = inject(UserPermissionApiService);
+    confirmationService = inject(ConfirmationService);
+    messageService = inject(MessageService);
+    translateAdapter = inject(TranslateService, {
+        optional: true,
+    });
+    t(key, params) {
+        return this.translateAdapter?.translate(key, params) ?? key;
+    }
+    visible = input.required(/* @ts-ignore */
+    ...(ngDevMode ? [{ debugName: "visible" }] : /* istanbul ignore next */ []));
+    company = input.required(/* @ts-ignore */
+    ...(ngDevMode ? [{ debugName: "company" }] : /* istanbul ignore next */ []));
+    closed = output();
+    isLoading = signal(false, /* @ts-ignore */
+    ...(ngDevMode ? [{ debugName: "isLoading" }] : /* istanbul ignore next */ []));
+    isRemoving = signal(false, /* @ts-ignore */
+    ...(ngDevMode ? [{ debugName: "isRemoving" }] : /* istanbul ignore next */ []));
+    users = signal([], /* @ts-ignore */
+    ...(ngDevMode ? [{ debugName: "users" }] : /* istanbul ignore next */ []));
+    constructor() {
+        effect(() => {
+            if (this.visible() && this.company()) {
+                this.loadUsers();
+            }
+        });
+    }
+    async loadUsers() {
+        const company = this.company();
+        if (!company)
+            return;
+        this.isLoading.set(true);
+        try {
+            const response = await firstValueFrom(this.permissionApi.getCompanyUsers(company.id));
+            this.users.set(response.data ?? []);
+        }
+        catch {
+            // Error toast handled by global interceptor
+        }
+        finally {
+            this.isLoading.set(false);
+        }
+    }
+    onRemove(user) {
+        const company = this.company();
+        if (!company)
+            return;
+        this.confirmationService.confirm({
+            message: this.t('administrative.permission.remove.confirm', {
+                name: user.userName,
+            }),
+            header: this.t('administrative.permission.remove'),
+            icon: 'exclamation-triangle',
+            acceptButtonStyleClass: 'p-button-danger',
+            accept: async () => {
+                this.isRemoving.set(true);
+                try {
+                    const response = await firstValueFrom(this.permissionApi.revokeUserFromCompany(user.userId, company.id));
+                    if (response.success) {
+                        this.users.update((list) => list.filter((u) => u.id !== user.id));
+                        this.messageService.add({
+                            severity: 'success',
+                            summary: this.t('shared.success'),
+                            detail: response?.messageKey
+                                ? this.t(response.messageKey, response.messageVariables)
+                                : (response?.message ?? ''),
+                        });
+                    }
+                }
+                catch {
+                    // Error toast handled by global interceptor
+                }
+                finally {
+                    this.isRemoving.set(false);
+                }
+            },
+        });
+    }
+    onClose() {
+        this.closed.emit();
+    }
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "22.1.5", ngImport: i0, type: CompanyPermittedUsersDialogComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
+    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "22.1.5", type: CompanyPermittedUsersDialogComponent, isStandalone: true, selector: "lib-company-permitted-users-dialog", inputs: { visible: { classPropertyName: "visible", publicName: "visible", isSignal: true, isRequired: true, transformFunction: null }, company: { classPropertyName: "company", publicName: "company", isSignal: true, isRequired: true, transformFunction: null } }, outputs: { closed: "closed" }, ngImport: i0, template: `
+    <f-dialog
+      [visible]="visible()"
+      [modal]="true"
+      [closable]="true"
+      [breakpoints]="{ '960px': '90vw', '640px': '95vw' }"
+      [style]="{ width: '50vw', maxWidth: '600px' }"
+      [header]="'administrative.permission.view.users' | translate"
+      (onHide)="onClose()"
+    >
+      <div class="mb-4">
+        <p class="text-sm text-muted-color">
+          {{ 'administrative.company.title' | translate }}:
+          <strong>{{ company()?.name }}</strong>
+        </p>
+      </div>
+
+      @if (isLoading()) {
+        <div class="flex justify-center items-center py-8">
+          <f-progressspinner />
+        </div>
+      } @else {
+        <div class="flex flex-col gap-3">
+          @for (user of users(); track user.id) {
+            <div
+              class="flex items-center justify-between p-3 border border-surface rounded"
+            >
+              <div>
+                <div class="font-semibold">{{ user.userName }}</div>
+                <div class="text-sm text-muted-color">{{ user.userEmail }}</div>
+              </div>
+              <button
+                fButton
+                *hasPermission="USER_PERMISSIONS.UPDATE"
+                [text]="true"
+                severity="danger"
+                size="small"
+                [disabled]="isRemoving()"
+                [fTooltip]="'shared.remove' | translate"
+                (click)="onRemove(user)"
+              >
+                <ui-icon pButtonIcon name="trash"></ui-icon>
+              </button>
+            </div>
+          } @empty {
+            <div class="text-center py-4 text-muted-color">
+              {{ 'administrative.permission.no.users' | translate }}
+            </div>
+          }
+        </div>
+      }
+
+      <ng-template #footer>
+        <button
+          fButton
+          severity="secondary"
+          [outlined]="true"
+          (click)="onClose()"
+        >
+          <span pButtonLabel>{{ 'shared.close' | translate }}</span>
+        </button>
+      </ng-template>
+    </f-dialog>
+  `, isInline: true, dependencies: [{ kind: "component", type: DialogComponent, selector: "f-dialog", inputs: ["header", "visible", "modal", "closable", "closeOnEscape", "dismissableMask", "resizable", "draggable", "maximizable", "blockScroll", "returnFocusOnClose", "position", "style", "styleClass", "breakpoints"], outputs: ["visibleChange", "onShow", "onHide", "onMaximize"] }, { kind: "directive", type: FButtonDirective, selector: "[fButton]", inputs: ["severity", "text", "outlined", "link", "variant", "rounded", "raised", "fluid", "disabled", "loading", "loadingIcon", "size", "label", "icon", "iconPos", "ariaLabel", "plain"] }, { kind: "component", type: ProgressSpinnerComponent, selector: "f-progressspinner", inputs: ["size", "strokeWidth", "animationDuration", "styleClass", "ariaLabel"] }, { kind: "directive", type: TooltipDirective, selector: "[fTooltip]", inputs: ["fTooltip", "tooltipPosition", "positionStyle", "tooltipStyleClass", "disabled", "tooltipEvent", "showDelay", "hideDelay", "life", "autoHide", "positionTop", "positionLeft", "escape"] }, { kind: "component", type: UiIconComponent, selector: "ui-icon", inputs: ["name", "size", "spin", "fill", "severity"] }, { kind: "directive", type: HasPermissionDirective, selector: "[hasPermission]", inputs: ["hasPermission"] }, { kind: "pipe", type: TranslatePipe, name: "translate" }] });
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.1.5", ngImport: i0, type: CompanyPermittedUsersDialogComponent, decorators: [{
+            type: Component,
+            args: [{
+                    selector: 'lib-company-permitted-users-dialog',
+                    imports: [
+                        DialogComponent,
+                        FButtonDirective,
+                        ProgressSpinnerComponent,
+                        TooltipDirective,
+                        UiIconComponent,
+                        HasPermissionDirective,
+                        TranslatePipe,
+                    ],
+                    template: `
+    <f-dialog
+      [visible]="visible()"
+      [modal]="true"
+      [closable]="true"
+      [breakpoints]="{ '960px': '90vw', '640px': '95vw' }"
+      [style]="{ width: '50vw', maxWidth: '600px' }"
+      [header]="'administrative.permission.view.users' | translate"
+      (onHide)="onClose()"
+    >
+      <div class="mb-4">
+        <p class="text-sm text-muted-color">
+          {{ 'administrative.company.title' | translate }}:
+          <strong>{{ company()?.name }}</strong>
+        </p>
+      </div>
+
+      @if (isLoading()) {
+        <div class="flex justify-center items-center py-8">
+          <f-progressspinner />
+        </div>
+      } @else {
+        <div class="flex flex-col gap-3">
+          @for (user of users(); track user.id) {
+            <div
+              class="flex items-center justify-between p-3 border border-surface rounded"
+            >
+              <div>
+                <div class="font-semibold">{{ user.userName }}</div>
+                <div class="text-sm text-muted-color">{{ user.userEmail }}</div>
+              </div>
+              <button
+                fButton
+                *hasPermission="USER_PERMISSIONS.UPDATE"
+                [text]="true"
+                severity="danger"
+                size="small"
+                [disabled]="isRemoving()"
+                [fTooltip]="'shared.remove' | translate"
+                (click)="onRemove(user)"
+              >
+                <ui-icon pButtonIcon name="trash"></ui-icon>
+              </button>
+            </div>
+          } @empty {
+            <div class="text-center py-4 text-muted-color">
+              {{ 'administrative.permission.no.users' | translate }}
+            </div>
+          }
+        </div>
+      }
+
+      <ng-template #footer>
+        <button
+          fButton
+          severity="secondary"
+          [outlined]="true"
+          (click)="onClose()"
+        >
+          <span pButtonLabel>{{ 'shared.close' | translate }}</span>
+        </button>
+      </ng-template>
+    </f-dialog>
+  `,
+                }]
+        }], ctorParameters: () => [], propDecorators: { visible: [{ type: i0.Input, args: [{ isSignal: true, alias: "visible", required: true }] }], company: [{ type: i0.Input, args: [{ isSignal: true, alias: "company", required: true }] }], closed: [{ type: i0.Output, args: ["closed"] }] } });
+
 class CompanyListComponent {
     permissionValidator = inject(PermissionValidatorService);
     translateAdapter = inject(TranslateService, {
@@ -2759,7 +3312,11 @@ class CompanyListComponent {
     canEditFn = (_item) => this.permissionValidator.hasPermission(COMPANY_PERMISSIONS.UPDATE);
     canDeleteFn = (item) => !item.readOnly &&
         this.permissionValidator.hasPermission(COMPANY_PERMISSIONS.DELETE);
-    viewBranchesAction = [
+    permittedUsersDialogVisible = signal(false, /* @ts-ignore */
+    ...(ngDevMode ? [{ debugName: "permittedUsersDialogVisible" }] : /* istanbul ignore next */ []));
+    selectedCompany = signal(null, /* @ts-ignore */
+    ...(ngDevMode ? [{ debugName: "selectedCompany" }] : /* istanbul ignore next */ []));
+    rowActions = [
         {
             icon: 'building',
             tooltip: 'administrative.branch.view.branches',
@@ -2769,6 +3326,16 @@ class CompanyListComponent {
                 queryParams: { companyId: c.id },
             }),
         },
+        {
+            icon: 'users',
+            tooltip: 'administrative.permission.view.users',
+            severity: 'secondary',
+            show: () => this.permissionValidator.hasPermission(USER_PERMISSIONS.READ),
+            handler: (c) => {
+                this.selectedCompany.set(c);
+                this.permittedUsersDialogVisible.set(true);
+            },
+        },
     ];
     columns = [
         {
@@ -2803,7 +3370,7 @@ class CompanyListComponent {
     static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "14.0.0", version: "22.1.5", type: CompanyListComponent, isStandalone: true, selector: "lib-company-list", ngImport: i0, template: `
     <lib-base-list
       [columns]="columns"
-      [actions]="viewBranchesAction"
+      [actions]="rowActions"
       [service]="companyService"
       [title]="'administrative.company.title' | translate"
       [showCreateButton]="canCreate()"
@@ -2826,7 +3393,13 @@ class CompanyListComponent {
         />
       </ng-template>
     </lib-base-list>
-  `, isInline: true, dependencies: [{ kind: "component", type: BaseListComponent, selector: "lib-base-list", inputs: ["columns", "actions", "title", "showCreateButton", "searchable", "pageSize", "scrollHeight", "emptyMessage", "createButtonLabel", "createButtonIcon", "data", "total", "isLoading", "service", "filter", "createRoute", "editRoute", "deleteConfirmField", "deleteType", "idField", "canEdit", "canDelete"], outputs: ["onCreate", "onLazyLoad", "onSearch"] }, { kind: "directive", type: BaseListTemplateDirective, selector: "ng-template[baseListTemplate]", inputs: ["baseListTemplate"] }, { kind: "component", type: TagComponent, selector: "f-tag", inputs: ["value", "severity", "icon", "rounded", "color", "styleClass", "style"] }, { kind: "pipe", type: TranslatePipe, name: "translate" }] });
+
+    <lib-company-permitted-users-dialog
+      [visible]="permittedUsersDialogVisible()"
+      [company]="selectedCompany()"
+      (closed)="permittedUsersDialogVisible.set(false)"
+    />
+  `, isInline: true, dependencies: [{ kind: "component", type: BaseListComponent, selector: "lib-base-list", inputs: ["columns", "actions", "title", "showCreateButton", "searchable", "pageSize", "scrollHeight", "emptyMessage", "createButtonLabel", "createButtonIcon", "data", "total", "isLoading", "service", "filter", "createRoute", "editRoute", "deleteConfirmField", "deleteType", "idField", "canEdit", "canDelete"], outputs: ["onCreate", "onLazyLoad", "onSearch"] }, { kind: "directive", type: BaseListTemplateDirective, selector: "ng-template[baseListTemplate]", inputs: ["baseListTemplate"] }, { kind: "component", type: TagComponent, selector: "f-tag", inputs: ["value", "severity", "icon", "rounded", "color", "styleClass", "style"] }, { kind: "component", type: CompanyPermittedUsersDialogComponent, selector: "lib-company-permitted-users-dialog", inputs: ["visible", "company"], outputs: ["closed"] }, { kind: "pipe", type: TranslatePipe, name: "translate" }] });
 }
 i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.1.5", ngImport: i0, type: CompanyListComponent, decorators: [{
             type: Component,
@@ -2836,12 +3409,13 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.1.5", ngImpor
                         BaseListComponent,
                         BaseListTemplateDirective,
                         TagComponent,
+                        CompanyPermittedUsersDialogComponent,
                         TranslatePipe,
                     ],
                     template: `
     <lib-base-list
       [columns]="columns"
-      [actions]="viewBranchesAction"
+      [actions]="rowActions"
       [service]="companyService"
       [title]="'administrative.company.title' | translate"
       [showCreateButton]="canCreate()"
@@ -2864,6 +3438,12 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.1.5", ngImpor
         />
       </ng-template>
     </lib-base-list>
+
+    <lib-company-permitted-users-dialog
+      [visible]="permittedUsersDialogVisible()"
+      [company]="selectedCompany()"
+      (closed)="permittedUsersDialogVisible.set(false)"
+    />
   `,
                 }]
         }] });
@@ -10770,5 +11350,5 @@ var verifyEmailPage_component = /*#__PURE__*/Object.freeze({
  * Generated bundle index. Do not edit.
  */
 
-export { ADMINISTRATION_ROUTES, AUTH_ENDPOINTS, AUTH_MESSAGES, AUTH_PROFILE_EXTENSION, AUTH_REGISTRATION_EXTENSION, AUTH_ROUTES, AUTH_USER_DETAIL_CONFIG, AUTH_USER_FORM_EXTENSION, AUTH_USER_LIST_EXTENSION, AUTH_VALIDATION_CONFIG, AdministrationPageComponent, AuthApiService, AuthCompanyApiProviderAdapter, AuthInitService, AuthLayoutApiAdapter, AuthLayoutStateAdapter, AuthStateProviderAdapter, AuthStateService, AuthUserPermissionProviderAdapter, AuthUserProviderAdapter, BranchApiService, BranchFormComponent, BranchListComponent, CompanyApiService, CompanyFormComponent, CompanyListComponent, ForgotPasswordPageComponent, LoginPageComponent, PROFILE_FIELD_CONTEXT, PROFILE_ROUTES, ProfilePageComponent, REGISTRATION_FIELD_CONTEXT, RegisterPageComponent, ResetPasswordPageComponent, SOCIAL_PROVIDERS, SOCIAL_RETURN_URL_KEY, SocialAuthApiService, SocialAuthConfigApiService, SocialCallbackPageComponent, SocialConfigPageComponent, SocialLoginButtonsComponent, SocialProviderEnum, TokenRefreshStateService, USER_FORM_FIELD_CONTEXT, UserApiService, UserBranchPermissionDialogComponent, UserCompanyPermissionDialogComponent, UserFormComponent, UserListComponent, UserPermissionApiService, VerifyEmailPageComponent, authGuard, authInterceptor, companyFeatureGuard, emailFeatureGuard, guestGuard, isCompanySelectionResponse, isEmailVerificationRequired, isEndpoint, isLoginResponse, provideAuthLayoutIntegration, provideAuthProviders, signUpFeatureGuard, tokenRefreshInterceptor, validateEmail, validatePassword };
+export { ADMINISTRATION_ROUTES, AUTH_ENDPOINTS, AUTH_MESSAGES, AUTH_PROFILE_EXTENSION, AUTH_REGISTRATION_EXTENSION, AUTH_ROUTES, AUTH_USER_DETAIL_CONFIG, AUTH_USER_FORM_EXTENSION, AUTH_USER_LIST_EXTENSION, AUTH_VALIDATION_CONFIG, AdministrationPageComponent, AuthApiService, AuthCompanyApiProviderAdapter, AuthInitService, AuthLayoutApiAdapter, AuthLayoutStateAdapter, AuthStateProviderAdapter, AuthStateService, AuthUserPermissionProviderAdapter, AuthUserProviderAdapter, BranchApiService, BranchFormComponent, BranchListComponent, BranchPermittedUsersDialogComponent, CompanyApiService, CompanyFormComponent, CompanyListComponent, CompanyPermittedUsersDialogComponent, ForgotPasswordPageComponent, LoginPageComponent, PROFILE_FIELD_CONTEXT, PROFILE_ROUTES, ProfilePageComponent, REGISTRATION_FIELD_CONTEXT, RegisterPageComponent, ResetPasswordPageComponent, SOCIAL_PROVIDERS, SOCIAL_RETURN_URL_KEY, SocialAuthApiService, SocialAuthConfigApiService, SocialCallbackPageComponent, SocialConfigPageComponent, SocialLoginButtonsComponent, SocialProviderEnum, TokenRefreshStateService, USER_FORM_FIELD_CONTEXT, UserApiService, UserBranchPermissionDialogComponent, UserCompanyPermissionDialogComponent, UserFormComponent, UserListComponent, UserPermissionApiService, VerifyEmailPageComponent, authGuard, authInterceptor, companyFeatureGuard, emailFeatureGuard, guestGuard, isCompanySelectionResponse, isEmailVerificationRequired, isEndpoint, isLoginResponse, provideAuthLayoutIntegration, provideAuthProviders, signUpFeatureGuard, tokenRefreshInterceptor, validateEmail, validatePassword };
 //# sourceMappingURL=flusys-ng-auth.mjs.map