@flusys/ng-storage 1.0.0-rc → 1.0.1

package/fesm2022/flusys-ng-storage.mjs

@@ -3,7 +3,7 @@ import { inject, signal, computed, Directive, Injectable, ChangeDetectionStrateg
 import { Router, RouterOutlet, RouterLink, RouterLinkActive } from '@angular/router';
 import { APP_CONFIG, DEFAULT_APP_NAME, BaseApiService, getDefaultStorageConfigId } from '@flusys/ng-core';
 import { LAYOUT_AUTH_STATE } from '@flusys/ng-layout';
-import { BaseListPage, ApiResourceService, PROFILE_UPLOAD_PROVIDER } from '@flusys/ng-shared';
+import { BaseListPage, ApiResourceService, PROFILE_UPLOAD_PROVIDER, permissionGuard, FILE_PERMISSIONS, FOLDER_PERMISSIONS, STORAGE_CONFIG_PERMISSIONS, PermissionValidatorService } from '@flusys/ng-shared';
 import { MessageService } from 'primeng/api';
 import { map } from 'rxjs/operators';
 import { firstValueFrom, switchMap } from 'rxjs';
@@ -118,219 +118,135 @@ const STORAGE_PROVIDERS = [
     { label: 'Local Storage', value: FileLocationEnum.LOCAL },
 ];
 
-/**
- * Base Storage Page
- *
- * Provides common signals, computed values, and utilities for storage pages.
- * Used by form components that need company context and message utilities.
- */
 class BaseStoragePage {
     router = inject(Router);
     messageService = inject(MessageService);
     appConfig = inject(APP_CONFIG);
     companyContext = inject(LAYOUT_AUTH_STATE);
-    /** Loading state */
     isLoading = signal(false, ...(ngDevMode ? [{ debugName: "isLoading" }] : []));
-    /** Show company info if company feature enabled */
     showCompanyInfo = computed(() => this.appConfig.enableCompanyFeature, ...(ngDevMode ? [{ debugName: "showCompanyInfo" }] : []));
-    /** Current company name */
     currentCompanyName = computed(() => this.companyContext.currentCompanyInfo()?.name ?? DEFAULT_APP_NAME, ...(ngDevMode ? [{ debugName: "currentCompanyName" }] : []));
-    /** Show success message */
     showSuccess(detail, summary = 'Success') {
         this.messageService.add({ severity: 'success', summary, detail });
     }
-    /** Show error message */
     showError(detail, summary = 'Error') {
         this.messageService.add({ severity: 'error', summary, detail });
     }
-    /** Navigate to a route */
     navigateTo(path) {
         this.router.navigate(path);
     }
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: BaseStoragePage, deps: [], target: i0.ɵɵFactoryTarget.Directive });
-    static ɵdir = i0.ɵɵngDeclareDirective({ minVersion: "14.0.0", version: "21.1.3", type: BaseStoragePage, isStandalone: true, ngImport: i0 });
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: BaseStoragePage, deps: [], target: i0.ɵɵFactoryTarget.Directive });
+    static ɵdir = i0.ɵɵngDeclareDirective({ minVersion: "14.0.0", version: "21.1.5", type: BaseStoragePage, isStandalone: true, ngImport: i0 });
 }
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: BaseStoragePage, decorators: [{
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: BaseStoragePage, decorators: [{
             type: Directive
         }] });
-/**
- * Base Storage List Page
- *
- * Extends the shared BaseListPage with storage-specific functionality:
- * - Company context integration via LAYOUT_AUTH_STATE
- * - Current company name computed signal
- * - Storage-specific defaults (pageSize: 50)
- *
- * Usage:
- * ```typescript
- * @Component({ ... })
- * export class FolderListComponent extends BaseStorageListPage<IFolder> {
- *   getResourceRoute(): string { return '/storage/folders'; }
- *   getDeleteConfirmMessage(folder: IFolder): string { return `Delete "${folder.name}"?`; }
- *   async loadData(): Promise<void> { ... }
- * }
- * ```
- */
 class BaseStorageListPage extends BaseListPage {
     companyContext = inject(LAYOUT_AUTH_STATE);
-    /** Override default page size for storage pages */
     pageSize = signal(50, ...(ngDevMode ? [{ debugName: "pageSize" }] : []));
-    /** Total records alias for backward compatibility */
     totalRecords = this.total;
-    /** Current company name */
     currentCompanyName = computed(() => this.companyContext.currentCompanyInfo()?.name ?? DEFAULT_APP_NAME, ...(ngDevMode ? [{ debugName: "currentCompanyName" }] : []));
-    /**
-     * Default implementation - subclasses should override if needed
-     */
     getDeleteConfirmMessage(item) {
         const name = item.name ?? 'this item';
         return `Are you sure you want to delete "${name}"?`;
     }
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: BaseStorageListPage, deps: null, target: i0.ɵɵFactoryTarget.Directive });
-    static ɵdir = i0.ɵɵngDeclareDirective({ minVersion: "14.0.0", version: "21.1.3", type: BaseStorageListPage, isStandalone: true, usesInheritance: true, ngImport: i0 });
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: BaseStorageListPage, deps: null, target: i0.ɵɵFactoryTarget.Directive });
+    static ɵdir = i0.ɵɵngDeclareDirective({ minVersion: "14.0.0", version: "21.1.5", type: BaseStorageListPage, isStandalone: true, usesInheritance: true, ngImport: i0 });
 }
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: BaseStorageListPage, decorators: [{
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: BaseStorageListPage, decorators: [{
             type: Directive
         }] });
 
-/**
- * File Manager API Service
- * Handles file metadata CRUD operations
- * Endpoint: POST /storage/file-manager/*
- *
- * Note: Company feature enabled - all queries automatically scoped to user's company
- */
 class FileManagerApiService extends ApiResourceService {
     constructor() {
-        const http = inject(HttpClient);
-        super('storage/file-manager', http);
+        super('file-manager', inject(HttpClient), 'storage');
     }
-    /**
-     * Get multiple files with valid URLs
-     * POST /storage/file-manager/get-files
-     * Regenerates presigned URLs if expired
-     */
     getFiles(fileIds) {
         const requests = fileIds.map((id) => ({ id }));
         return this.http.post(`${this.baseUrl}/get-files`, requests);
     }
-    /**
-     * Get files by folder
-     * POST /storage/file-manager/get-all
-     * Filtered by folder ID (UUID) and company (if enabled)
-     */
-    getFilesByFolder(folderId, page = 1, limit = 50) {
-        return this.getAll('', {
-            filter: folderId ? { folderId } : {},
-            pagination: { currentPage: page - 1, pageSize: limit },
-            select: [],
-            sort: {},
-        });
-    }
-    /**
-     * Get private files (requires permission)
-     * POST /storage/file-manager/get-all
-     * Filtered by isPrivate and user permission 'storage.file.viewPrivate'
-     */
-    getPrivateFiles(page = 1, limit = 50) {
-        return this.getAll('', {
-            filter: { isPrivate: true },
-            pagination: { currentPage: page - 1, pageSize: limit },
-            select: [],
-            sort: {},
-        });
-    }
-    /**
-     * Create a new file record
-     * POST /storage/file-manager/insert
-     * Uses ICreateFileManagerDto which has different required fields than update
-     */
     createFile(dto) {
         return this.http.post(`${this.baseUrl}/insert`, dto);
     }
-    /**
-     * Create a new file record (async/await version)
-     * POST /storage/file-manager/insert
-     */
     async createFileAsync(dto) {
         return firstValueFrom(this.createFile(dto));
     }
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: FileManagerApiService, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
-    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: FileManagerApiService, providedIn: 'root' });
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: FileManagerApiService, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
+    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: FileManagerApiService, providedIn: 'root' });
 }
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: FileManagerApiService, decorators: [{
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: FileManagerApiService, decorators: [{
             type: Injectable,
-            args: [{
-                    providedIn: 'root',
-                }]
+            args: [{ providedIn: 'root' }]
         }], ctorParameters: () => [] });
 
 /**
- * Upload Service
- * Handles file upload/delete operations
+ * Upload Service - File upload/delete operations
  * Endpoint: POST /storage/upload/*
- *
- * Features:
- * - Company-scoped uploads (if company feature enabled)
- * - Image compression
- * - Multiple storage providers
- * - File validation (size, type)
- * - Default storage config from environment (services.storage.defaultStorageConfigId)
  */
 class UploadService extends BaseApiService {
     fileManagerApi = inject(FileManagerApiService);
     constructor() {
         super('storage');
     }
-    /**
-     * Get default storage config ID from app config
-     * Used when no storageConfigId is provided in upload options
-     */
+    /** Get default storage config ID from app config */
     getDefaultConfigId() {
         return getDefaultStorageConfigId(this.appConfig);
     }
-    /**
-     * Upload single file
-     * POST /storage/upload/single-file?storageConfigId=x&folderPath=y
-     *
-     * @param file - File to upload
-     * @param options - Upload options (storage config, compression, etc.)
-     */
+    /** Upload single file - POST /storage/upload/single-file */
     uploadSingleFile(file, options) {
         const formData = new FormData();
         formData.append('file', file);
-        const queryParams = this.buildQueryParams(options);
-        const url = queryParams
-            ? `${this.getUrl('upload/single-file')}?${queryParams}`
-            : this.getUrl('upload/single-file');
-        return this.http.post(url, formData);
+        return this.http.post(this.buildUploadUrl('single-file', options), formData);
     }
-    /**
-     * Upload multiple files (max 50)
-     * POST /storage/upload/multiple-file?storageConfigId=x&folderPath=y
-     *
-     * @param files - Array of files to upload
-     * @param options - Upload options
-     */
+    /** Upload multiple files (max 50) - POST /storage/upload/multiple-file */
     uploadMultipleFiles(files, options) {
         const formData = new FormData();
         files.forEach((file) => formData.append('files', file));
-        const queryParams = this.buildQueryParams(options);
-        const url = queryParams
-            ? `${this.getUrl('upload/multiple-file')}?${queryParams}`
-            : this.getUrl('upload/multiple-file');
-        return this.http.post(url, formData);
+        return this.http.post(this.buildUploadUrl('multiple-file', options), formData);
+    }
+    /** Delete single file - POST /storage/upload/delete-single-file */
+    deleteSingleFile(key, storageConfigId) {
+        return this.http.post(this.getUrl('upload/delete-single-file'), this.buildDeleteBody({ key }, storageConfigId));
+    }
+    /** Delete multiple files - POST /storage/upload/delete-multiple-file */
+    deleteMultipleFiles(keys, storageConfigId) {
+        return this.http.post(this.getUrl('upload/delete-multiple-file'), this.buildDeleteBody({ keys }, storageConfigId));
+    }
+    /** Get file download URL - GET /storage/upload/file/:filePath */
+    getFileUrl(key) {
+        return this.getUrl(`upload/file/${key}`);
+    }
+    /** Upload file and register in file manager - returns file manager ID (UUID) */
+    uploadAndRegister(file, options) {
+        return this.uploadSingleFile(file, options).pipe(switchMap((response) => {
+            if (!response.success || !response.data) {
+                throw new Error(response.message || 'Upload failed');
+            }
+            return this.fileManagerApi.createFile({
+                name: response.data.name,
+                key: response.data.key,
+                size: String(response.data.size),
+                contentType: response.data.contentType,
+                isPrivate: options?.isPrivate ?? false,
+                folderId: options?.folderId,
+                storageConfigId: this.resolveConfigId(options?.storageConfigId),
+            });
+        }));
+    }
+    // ─── Private Helpers ───────────────────────────────────────────────────────
+    resolveConfigId(storageConfigId) {
+        return storageConfigId ?? this.getDefaultConfigId();
+    }
+    buildUploadUrl(endpoint, options) {
+        const params = this.buildQueryParams(options);
+        const baseUrl = this.getUrl(`upload/${endpoint}`);
+        return params ? `${baseUrl}?${params}` : baseUrl;
     }
-    /**
-     * Build query string from upload options
-     * Uses default storageConfigId from app config if not provided in options
-     */
     buildQueryParams(options) {
         const params = new URLSearchParams();
-        // Use provided storageConfigId or fall back to default from config
-        const storageConfigId = options?.storageConfigId ?? this.getDefaultConfigId();
-        if (storageConfigId)
-            params.append('storageConfigId', storageConfigId);
+        const configId = this.resolveConfigId(options?.storageConfigId);
+        if (configId)
+            params.append('storageConfigId', configId);
         if (options?.folderPath)
             params.append('folderPath', options.folderPath);
         if (options?.maxWidth)
@@ -345,73 +261,16 @@ class UploadService extends BaseApiService {
             params.append('compress', options.compress.toString());
         return params.toString();
     }
-    /**
-     * Delete single file
-     * POST /storage/upload/delete-single-file
-     *
-     * @param key - File key/path to delete
-     * @param storageConfigId - Optional storage config ID (uses default from config if not provided)
-     */
-    deleteSingleFile(key, storageConfigId) {
-        const configId = storageConfigId ?? this.getDefaultConfigId();
-        return this.http.post(this.getUrl('upload/delete-single-file'), { key, ...(configId && { storageConfigId: configId }) });
-    }
-    /**
-     * Delete multiple files
-     * POST /storage/upload/delete-multiple-file
-     *
-     * @param keys - Array of file keys/paths to delete
-     * @param storageConfigId - Optional storage config ID (uses default from config if not provided)
-     */
-    deleteMultipleFiles(keys, storageConfigId) {
-        const configId = storageConfigId ?? this.getDefaultConfigId();
-        return this.http.post(this.getUrl('upload/delete-multiple-file'), { keys, ...(configId && { storageConfigId: configId }) });
+    buildDeleteBody(data, storageConfigId) {
+        const configId = this.resolveConfigId(storageConfigId);
+        return { ...data, ...(configId && { storageConfigId: configId }) };
     }
-    /**
-     * Get file download URL
-     * GET /storage/upload/file/:filePath
-     *
-     * @param key - File key/path
-     * @returns URL for direct file access
-     */
-    getFileUrl(key) {
-        return this.getUrl(`upload/file/${key}`);
-    }
-    /**
-     * Upload file and register in file manager
-     * Returns file manager ID (UUID) for storing in references like profilePictureId
-     *
-     * @param file - File to upload
-     * @param options - Upload options (storage config, compression, etc.)
-     * @returns Observable with file manager record (id is the UUID to store)
-     */
-    uploadAndRegister(file, options) {
-        return this.uploadSingleFile(file, options).pipe(switchMap((uploadResponse) => {
-            if (!uploadResponse.success || !uploadResponse.data) {
-                throw new Error(uploadResponse.message || 'Upload failed');
-            }
-            const uploadedFile = uploadResponse.data;
-            const storageConfigId = options?.storageConfigId ?? this.getDefaultConfigId();
-            // Create file manager record using proper DTO
-            return this.fileManagerApi.createFile({
-                name: uploadedFile.name,
-                key: uploadedFile.key,
-                size: String(uploadedFile.size),
-                contentType: uploadedFile.contentType,
-                isPrivate: options?.isPrivate ?? false,
-                folderId: options?.folderId,
-                storageConfigId,
-            });
-        }));
-    }
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: UploadService, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
-    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: UploadService, providedIn: 'root' });
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: UploadService, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
+    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: UploadService, providedIn: 'root' });
 }
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: UploadService, decorators: [{
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: UploadService, decorators: [{
             type: Injectable,
-            args: [{
-                    providedIn: 'root',
-                }]
+            args: [{ providedIn: 'root' }]
         }], ctorParameters: () => [] });
 
 /**
@@ -454,10 +313,10 @@ class ProfileUploadProviderAdapter {
                 : undefined,
         })));
     }
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: ProfileUploadProviderAdapter, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
-    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: ProfileUploadProviderAdapter });
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: ProfileUploadProviderAdapter, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
+    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: ProfileUploadProviderAdapter });
 }
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: ProfileUploadProviderAdapter, decorators: [{
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: ProfileUploadProviderAdapter, decorators: [{
             type: Injectable
         }] });
 
@@ -495,13 +354,12 @@ function provideStorageProviders() {
  */
 class FolderApiService extends ApiResourceService {
     constructor() {
-        const http = inject(HttpClient);
-        super('storage/folder', http);
+        super('folder', inject(HttpClient), 'storage');
     }
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: FolderApiService, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
-    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: FolderApiService, providedIn: 'root' });
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: FolderApiService, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
+    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: FolderApiService, providedIn: 'root' });
 }
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: FolderApiService, decorators: [{
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: FolderApiService, decorators: [{
             type: Injectable,
             args: [{
                     providedIn: 'root',
@@ -517,13 +375,12 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.3", ngImpor
  */
 class StorageConfigApiService extends ApiResourceService {
     constructor() {
-        const http = inject(HttpClient);
-        super('storage/storage-config', http);
+        super('storage-config', inject(HttpClient), 'storage');
     }
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: StorageConfigApiService, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
-    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: StorageConfigApiService, providedIn: 'root' });
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: StorageConfigApiService, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
+    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: StorageConfigApiService, providedIn: 'root' });
 }
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: StorageConfigApiService, decorators: [{
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: StorageConfigApiService, decorators: [{
             type: Injectable,
             args: [{
                     providedIn: 'root',
@@ -532,9 +389,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.3", ngImpor
 
 /**
  * Storage Module Routes
- * All storage management routes: configs, files, folders
- *
- * All routes are protected by permission guards to prevent direct URL access.
+ * All routes protected by permission guards
  */
 const STORAGE_ROUTES = [
     {
@@ -544,63 +399,68 @@ const STORAGE_ROUTES = [
             // File Manager Routes
             {
                 path: 'files',
+                canActivate: [permissionGuard(FILE_PERMISSIONS.READ)],
                 children: [
                     {
                         path: '',
-                        loadComponent: () => import('./flusys-ng-storage-file-manager-list.component-DDOFAPRD.mjs').then((m) => m.FileManagerListComponent),
+                        loadComponent: () => import('./flusys-ng-storage-file-manager-list.component-0O_b4EjN.mjs').then((m) => m.FileManagerListComponent),
                     },
                     {
                         path: 'new',
-                        loadComponent: () => import('./flusys-ng-storage-file-manager-form.component-CMS_ddbs.mjs').then((m) => m.FileManagerFormComponent),
+                        canActivate: [permissionGuard(FILE_PERMISSIONS.CREATE)],
+                        loadComponent: () => import('./flusys-ng-storage-file-manager-form.component-CXVB9G-f.mjs').then((m) => m.FileManagerFormComponent),
                     },
                     {
                         path: ':id',
-                        loadComponent: () => import('./flusys-ng-storage-file-manager-form.component-CMS_ddbs.mjs').then((m) => m.FileManagerFormComponent),
+                        canActivate: [permissionGuard(FILE_PERMISSIONS.UPDATE)],
+                        loadComponent: () => import('./flusys-ng-storage-file-manager-form.component-CXVB9G-f.mjs').then((m) => m.FileManagerFormComponent),
                     },
                 ],
             },
             // Folder Routes
             {
                 path: 'folders',
+                canActivate: [permissionGuard(FOLDER_PERMISSIONS.READ)],
                 children: [
                     {
                         path: '',
-                        loadComponent: () => import('./flusys-ng-storage-folder-list.component-CzONANHt.mjs').then((m) => m.FolderListComponent),
+                        loadComponent: () => import('./flusys-ng-storage-folder-list.component-B8GoIh6Z.mjs').then((m) => m.FolderListComponent),
                     },
                     {
                         path: 'new',
-                        loadComponent: () => import('./flusys-ng-storage-folder-form.component-ClYATZkh.mjs').then((m) => m.FolderFormComponent),
+                        canActivate: [permissionGuard(FOLDER_PERMISSIONS.CREATE)],
+                        loadComponent: () => import('./flusys-ng-storage-folder-form.component-BTQGEqNu.mjs').then((m) => m.FolderFormComponent),
                     },
                     {
                         path: ':id',
-                        loadComponent: () => import('./flusys-ng-storage-folder-form.component-ClYATZkh.mjs').then((m) => m.FolderFormComponent),
+                        canActivate: [permissionGuard(FOLDER_PERMISSIONS.UPDATE)],
+                        loadComponent: () => import('./flusys-ng-storage-folder-form.component-BTQGEqNu.mjs').then((m) => m.FolderFormComponent),
                     },
                 ],
             },
             // Storage Config Routes
             {
                 path: 'configs',
+                canActivate: [permissionGuard(STORAGE_CONFIG_PERMISSIONS.READ)],
                 children: [
                     {
                         path: '',
-                        loadComponent: () => import('./flusys-ng-storage-storage-config-list.component-BbBx0iSL.mjs').then((m) => m.StorageConfigListComponent),
+                        loadComponent: () => import('./flusys-ng-storage-storage-config-list.component-YXzz3Tvo.mjs').then((m) => m.StorageConfigListComponent),
                     },
                     {
                         path: 'new',
-                        loadComponent: () => import('./flusys-ng-storage-storage-config-form.component-CODLLCtg.mjs').then((m) => m.StorageConfigFormComponent),
+                        canActivate: [permissionGuard(STORAGE_CONFIG_PERMISSIONS.CREATE)],
+                        loadComponent: () => import('./flusys-ng-storage-storage-config-form.component-CorNWrmF.mjs').then((m) => m.StorageConfigFormComponent),
                     },
                     {
                         path: ':id',
-                        loadComponent: () => import('./flusys-ng-storage-storage-config-form.component-CODLLCtg.mjs').then((m) => m.StorageConfigFormComponent),
+                        canActivate: [permissionGuard(STORAGE_CONFIG_PERMISSIONS.UPDATE)],
+                        loadComponent: () => import('./flusys-ng-storage-storage-config-form.component-CorNWrmF.mjs').then((m) => m.StorageConfigFormComponent),
                     },
                 ],
             },
-            // Default redirect to files
-            {
-                path: '',
-                redirectTo: 'files',
-                pathMatch: 'full',
-            },
+            // Default redirect
+            { path: '', redirectTo: 'files', pathMatch: 'full' },
         ],
     },
 ];
@@ -610,39 +470,53 @@ const STORAGE_ROUTES = [
  *
  * Main container for Storage module with tab navigation
  * Routes: Files | Folders | Configurations
+ * Tabs are filtered based on user permissions
  */
 class StorageContainerComponent {
-    /** All available tabs */
-    tabs = [
+    permissionValidator = inject(PermissionValidatorService);
+    /** All available tabs with required permissions */
+    allTabs = [
         {
             id: 'files',
             label: 'Files',
             icon: 'pi pi-file',
             route: 'files',
+            permission: FILE_PERMISSIONS.READ,
         },
         {
             id: 'folders',
             label: 'Folders',
             icon: 'pi pi-folder',
             route: 'folders',
+            permission: FOLDER_PERMISSIONS.READ,
         },
         {
             id: 'configs',
             label: 'Configurations',
             icon: 'pi pi-cog',
             route: 'configs',
+            permission: STORAGE_CONFIG_PERMISSIONS.READ,
         },
     ];
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: StorageContainerComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
-    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "21.1.3", type: StorageContainerComponent, isStandalone: true, selector: "lib-storage-container", ngImport: i0, template: `
+    /** Visible tabs based on user permissions */
+    visibleTabs = computed(() => this.allTabs.filter((tab) => this.permissionValidator.hasPermission(tab.permission)), ...(ngDevMode ? [{ debugName: "visibleTabs" }] : []));
+    /** Dynamic subtitle based on visible tabs */
+    subtitle = computed(() => {
+        const tabs = this.visibleTabs();
+        if (tabs.length === 0)
+            return 'No permissions available';
+        return `Manage ${tabs.map((t) => t.label.toLowerCase()).join(', ')}`;
+    }, ...(ngDevMode ? [{ debugName: "subtitle" }] : []));
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: StorageContainerComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
+    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "21.1.5", type: StorageContainerComponent, isStandalone: true, selector: "lib-storage-container", ngImport: i0, template: `
     <div class="p-2 sm:p-4">
       <div class="mb-4">
         <h1 class="text-xl sm:text-2xl font-bold m-0">Storage</h1>
-        <p class="text-muted-color mt-1 text-sm sm:text-base">Manage files, folders, and storage configurations</p>
+        <p class="text-muted-color mt-1 text-sm sm:text-base">{{ subtitle() }}</p>
       </div>
 
       <div class="scrollbar-hide flex gap-1 mb-4 border-b border-surface overflow-x-auto flex-nowrap">
-        @for (tab of tabs; track tab.id) {
+        @for (tab of visibleTabs(); track tab.id) {
           <a
             [routerLink]="tab.route"
             routerLinkActive="tab-active"
@@ -658,17 +532,17 @@ class StorageContainerComponent {
     </div>
   `, isInline: true, styles: [".scrollbar-hide{-ms-overflow-style:none;scrollbar-width:none}.scrollbar-hide::-webkit-scrollbar{display:none}\n"], dependencies: [{ kind: "ngmodule", type: CommonModule }, { kind: "directive", type: RouterOutlet, selector: "router-outlet", inputs: ["name", "routerOutletData"], outputs: ["activate", "deactivate", "attach", "detach"], exportAs: ["outlet"] }, { kind: "directive", type: RouterLink, selector: "[routerLink]", inputs: ["target", "queryParams", "fragment", "queryParamsHandling", "state", "info", "relativeTo", "preserveFragment", "skipLocationChange", "replaceUrl", "routerLink"] }, { kind: "directive", type: RouterLinkActive, selector: "[routerLinkActive]", inputs: ["routerLinkActiveOptions", "ariaCurrentWhenActive", "routerLinkActive"], outputs: ["isActiveChange"], exportAs: ["routerLinkActive"] }], changeDetection: i0.ChangeDetectionStrategy.OnPush });
 }
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: StorageContainerComponent, decorators: [{
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: StorageContainerComponent, decorators: [{
             type: Component,
-            args: [{ selector: 'lib-storage-container', standalone: true, changeDetection: ChangeDetectionStrategy.OnPush, imports: [CommonModule, RouterOutlet, RouterLink, RouterLinkActive], template: `
+            args: [{ selector: 'lib-storage-container', changeDetection: ChangeDetectionStrategy.OnPush, imports: [CommonModule, RouterOutlet, RouterLink, RouterLinkActive], template: `
     <div class="p-2 sm:p-4">
       <div class="mb-4">
         <h1 class="text-xl sm:text-2xl font-bold m-0">Storage</h1>
-        <p class="text-muted-color mt-1 text-sm sm:text-base">Manage files, folders, and storage configurations</p>
+        <p class="text-muted-color mt-1 text-sm sm:text-base">{{ subtitle() }}</p>
       </div>
 
       <div class="scrollbar-hide flex gap-1 mb-4 border-b border-surface overflow-x-auto flex-nowrap">
-        @for (tab of tabs; track tab.id) {
+        @for (tab of visibleTabs(); track tab.id) {
           <a
             [routerLink]="tab.route"
             routerLinkActive="tab-active"