@gooddata/sdk-ui-ext 11.43.0-alpha.5 → 11.43.0

package/esm/sdk-ui-ext.d.ts

@@ -1475,6 +1475,13 @@ export declare interface IObjectShareControllerActions {
     cancelGeneralAccessChange: () => void;
     /** Commit the pending general access change. Auto-saves. */
     confirmGeneralAccessChange: () => Promise<void>;
+    /**
+     * Change the all-workspace-members rule's permission level (VIEW/SHARE).
+     * Only meaningful while general access is WORKSPACE. Auto-saves, no confirm —
+     * unlike the high-impact RESTRICTED↔WORKSPACE toggle, this only re-grades an
+     * already-granted rule.
+     */
+    changeWorkspaceLevel: (level: "VIEW" | "SHARE") => Promise<void>;
 }
 
 /**
@@ -1487,6 +1494,19 @@ export declare interface IObjectShareControllerState {
     summary: IObjectAccessSummary | undefined;
     grantees: IObjectShareGrantee[];
     generalAccess: GeneralAccessValue;
+    /**
+     * Permission level of the all-workspace-members rule when general access is
+     * WORKSPACE. Drives the workspace row's permission dropdown. Meaningless (and
+     * not shown) while general access is RESTRICTED. Capped at VIEW/SHARE — EDIT is
+     * never offered for the workspace rule.
+     */
+    workspaceLevel: "VIEW" | "SHARE";
+    /**
+     * Whether a workspace-level re-grade is in flight. Consumers disable the
+     * workspace permission dropdown while true so rapid toggles can't issue
+     * overlapping writes that settle out of order.
+     */
+    workspaceLevelSaving: boolean;
     /**
      * Labels (display forms) of the shared attribute, in source order. Empty for
      * objects without labels (e.g. facts) — the labels picker is then hidden.

package/esm/share/ObjectShareDialog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ObjectShareDialog.d.ts","sourceRoot":"","sources":["../../src/share/ObjectShareDialog.tsx"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAS1E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAGpD;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACpC,gDAAgD;IAChD,MAAM,EAAE,wBAAwB,GAAG,SAAS,CAAC;IAC7C,wEAAwE;IACxE,WAAW,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,MAAM,EAAE,OAAO,CAAC;IAChB,sFAAsF;IACtF,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,4FAA0F;IAC1F,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB;;;;OAIG;IACH,MAAM,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC7B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;OAIG;IACH,UAAU,CAAC,EAAE,sBAAsB,CAAC;CACvC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iBAAiB,CAAC,EAC9B,MAAM,EACN,WAAW,EACX,MAAM,EACN,OAAO,EACP,OAAO,EACP,MAAM,EACN,aAAa,EACb,WAAW,EACX,UAAU,EACb,EAAE,uBAAuB,2CAwIzB"}
+{"version":3,"file":"ObjectShareDialog.d.ts","sourceRoot":"","sources":["../../src/share/ObjectShareDialog.tsx"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAS1E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAQpD;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACpC,gDAAgD;IAChD,MAAM,EAAE,wBAAwB,GAAG,SAAS,CAAC;IAC7C,wEAAwE;IACxE,WAAW,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,MAAM,EAAE,OAAO,CAAC;IAChB,sFAAsF;IACtF,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,4FAA0F;IAC1F,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB;;;;OAIG;IACH,MAAM,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC7B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;OAIG;IACH,UAAU,CAAC,EAAE,sBAAsB,CAAC;CACvC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iBAAiB,CAAC,EAC9B,MAAM,EACN,WAAW,EACX,MAAM,EACN,OAAO,EACP,OAAO,EACP,MAAM,EACN,aAAa,EACb,WAAW,EACX,UAAU,EACb,EAAE,uBAAuB,2CAmKzB"}

package/esm/share/ObjectShareDialog.js

@@ -5,6 +5,10 @@ import { useIntl } from "react-intl";
 import { UiAddGranteeDialog, UiConfirmDialog, UiGranteeRowControls, UiObjectShareDialog, } from "@gooddata/sdk-ui-kit";
 import { objectShareMessages } from "./messages.js";
 import { useObjectShareController } from "./useObjectShareController.js";
+// The workspace row has no labels menu (see workspaceControls below), so its
+// required onLabelsChange never fires; a stable no-op satisfies the prop type
+// without churning the controls' identity each render.
+const noop = () => { };
 /**
  * Connected share dialog. Renders the main share modal, the add-grantee
  * sub-dialog and the general-access confirm dialog, all driven by one
@@ -82,10 +86,27 @@ export function ObjectShareDialog({ target, objectTitle, isOpen, onClose, onSave
                             void actions.removeGrantee(g.id);
                         } })),
                 })), onAddClick: actions.openAddGrantee, isAddDisabled: isAddDisabled, generalAccess: state.generalAccess, onGeneralAccessChange: actions.requestGeneralAccessChange, 
+                // Permission dropdown on the "All workspace members" row — only while
+                // workspace access is on (the rule must exist to be re-graded). No
+                // labels (⋯) menu and no remove: per the Figma spec the workspace row
+                // carries the permission picker alone; the workspace rule's label
+                // scope is managed implicitly with the RESTRICTED↔WORKSPACE toggle.
+                workspaceControls: state.generalAccess === "WORKSPACE" ? (_jsx(UiGranteeRowControls, { labels: [], selectedLabelIds: [], permissionLevel: state.workspaceLevel, 
+                    // Also disabled while its own re-grade is committing, so
+                    // rapid toggles can't queue overlapping writes.
+                    isDisabled: !isMutable || state.workspaceLevelSaving, onLabelsChange: noop, onPermissionChange: (level) => {
+                        void actions.changeWorkspaceLevel(level);
+                    } })) : undefined, 
+                // Keep the "All workspace members" description in sync with the picked
+                // level ("can view" vs "can view and share").
+                workspaceLevel: state.workspaceLevel, 
                 // Gated on the same condition as Add: changing general access also
                 // mirrors the label scope, so it must wait for resolution and stay
-                // disabled when label metadata failed to load.
-                isGeneralAccessDisabled: !isMutable, 
+                // disabled when label metadata failed to load. Also gated while a
+                // workspace-level re-grade is in flight: switching to Restricted then
+                // would issue an allWorkspaceUsers:none write that could race the
+                // pending re-grade and leave the backend on the wrong rule.
+                isGeneralAccessDisabled: !isMutable || state.workspaceLevelSaving, 
                 // On a failed load the empty grantee list + RESTRICTED radio are a
                 // placeholder, not the real policy — show why instead of letting it
                 // read as "no one has access".

package/esm/share/objectShareController.helpers.js

@@ -80,7 +80,7 @@ export function toGranularGrantee(kind, granteeRef, level) {
 }
 export function granularGranteeFor(principal, level) {
     if ("allWorkspaceUsers" in principal) {
-        const permissions = level === "none" ? [] : ["VIEW"];
+        const permissions = PERMISSIONS_BY_LEVEL[level];
         return { type: "allWorkspaceUsers", permissions, inheritedPermissions: [] };
     }
     return toGranularGrantee(principal.kind, principal.granteeRef, level);

package/esm/share/objectShareController.types.d.ts

@@ -54,6 +54,19 @@ export interface IObjectShareControllerState {
     summary: IObjectAccessSummary | undefined;
     grantees: IObjectShareGrantee[];
     generalAccess: GeneralAccessValue;
+    /**
+     * Permission level of the all-workspace-members rule when general access is
+     * WORKSPACE. Drives the workspace row's permission dropdown. Meaningless (and
+     * not shown) while general access is RESTRICTED. Capped at VIEW/SHARE — EDIT is
+     * never offered for the workspace rule.
+     */
+    workspaceLevel: "VIEW" | "SHARE";
+    /**
+     * Whether a workspace-level re-grade is in flight. Consumers disable the
+     * workspace permission dropdown while true so rapid toggles can't issue
+     * overlapping writes that settle out of order.
+     */
+    workspaceLevelSaving: boolean;
     /**
      * Labels (display forms) of the shared attribute, in source order. Empty for
      * objects without labels (e.g. facts) — the labels picker is then hidden.
@@ -108,6 +121,13 @@ export interface IObjectShareControllerActions {
     cancelGeneralAccessChange: () => void;
     /** Commit the pending general access change. Auto-saves. */
     confirmGeneralAccessChange: () => Promise<void>;
+    /**
+     * Change the all-workspace-members rule's permission level (VIEW/SHARE).
+     * Only meaningful while general access is WORKSPACE. Auto-saves, no confirm —
+     * unlike the high-impact RESTRICTED↔WORKSPACE toggle, this only re-grades an
+     * already-granted rule.
+     */
+    changeWorkspaceLevel: (level: "VIEW" | "SHARE") => Promise<void>;
 }
 /**
  * @internal

package/esm/share/objectShareController.types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"objectShareController.types.d.ts","sourceRoot":"","sources":["../../src/share/objectShareController.types.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,KAAK,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAEzG,OAAO,KAAK,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE1E;;;;;;;;GAQG;AACH,MAAM,MAAM,0BAA0B,GAAG,wBAAwB,CAAC;AAElE;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAChC,kFAAkF;IAClF,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,0BAA0B,CAAC;IAClC;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,0BAA0B,CAAC;IACjD;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;OAIG;IACH,OAAO,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IACxC,OAAO,EAAE,MAAM,GAAG,YAAY,CAAC;IAC/B,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC5D,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,OAAO,EAAE,oBAAoB,GAAG,SAAS,CAAC;IAE1C,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,aAAa,EAAE,kBAAkB,CAAC;IAElC;;;OAGG;IACH,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B;;;;;OAKG;IACH,cAAc,EAAE,OAAO,CAAC;IACxB;;;;OAIG;IACH,yBAAyB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAEpD,mEAAiE;IACjE,oBAAoB,CAAC,EAAE,kBAAkB,CAAC;IAC1C,qEAAqE;IACrE,eAAe,EAAE,gBAAgB,EAAE,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC1C,sFAAsF;IACtF,KAAK,EAAE,MAAM,IAAI,CAAC;IAElB,cAAc,EAAE,MAAM,IAAI,CAAC;IAC3B,eAAe,EAAE,MAAM,IAAI,CAAC;IAC5B,kBAAkB,EAAE,CAAC,IAAI,EAAE,gBAAgB,EAAE,KAAK,IAAI,CAAC;IACvD;;;;OAIG;IACH,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACjE,kDAAkD;IAClD,kBAAkB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAExC,oEAAoE;IACpE,qBAAqB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,0BAA0B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/F,oCAAoC;IACpC,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD;;;OAGG;IACH,mBAAmB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAEtF,+DAA+D;IAC/D,0BAA0B,EAAE,CAAC,IAAI,EAAE,kBAAkB,KAAK,IAAI,CAAC;IAC/D,yBAAyB,EAAE,MAAM,IAAI,CAAC;IACtC,4DAA4D;IAC5D,0BAA0B,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACnC,KAAK,EAAE,2BAA2B,CAAC;IACnC,OAAO,EAAE,6BAA6B,CAAC;CAC1C;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACnC;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB;;;OAGG;IACH,MAAM,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC7B;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CAC3B"}
+{"version":3,"file":"objectShareController.types.d.ts","sourceRoot":"","sources":["../../src/share/objectShareController.types.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,KAAK,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAEzG,OAAO,KAAK,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE1E;;;;;;;;GAQG;AACH,MAAM,MAAM,0BAA0B,GAAG,wBAAwB,CAAC;AAElE;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAChC,kFAAkF;IAClF,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,0BAA0B,CAAC;IAClC;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,0BAA0B,CAAC;IACjD;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;OAIG;IACH,OAAO,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IACxC,OAAO,EAAE,MAAM,GAAG,YAAY,CAAC;IAC/B,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC5D,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,OAAO,EAAE,oBAAoB,GAAG,SAAS,CAAC;IAE1C,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,aAAa,EAAE,kBAAkB,CAAC;IAClC;;;;;OAKG;IACH,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC;IACjC;;;;OAIG;IACH,oBAAoB,EAAE,OAAO,CAAC;IAE9B;;;OAGG;IACH,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B;;;;;OAKG;IACH,cAAc,EAAE,OAAO,CAAC;IACxB;;;;OAIG;IACH,yBAAyB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAEpD,mEAAiE;IACjE,oBAAoB,CAAC,EAAE,kBAAkB,CAAC;IAC1C,qEAAqE;IACrE,eAAe,EAAE,gBAAgB,EAAE,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC1C,sFAAsF;IACtF,KAAK,EAAE,MAAM,IAAI,CAAC;IAElB,cAAc,EAAE,MAAM,IAAI,CAAC;IAC3B,eAAe,EAAE,MAAM,IAAI,CAAC;IAC5B,kBAAkB,EAAE,CAAC,IAAI,EAAE,gBAAgB,EAAE,KAAK,IAAI,CAAC;IACvD;;;;OAIG;IACH,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACjE,kDAAkD;IAClD,kBAAkB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAExC,oEAAoE;IACpE,qBAAqB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,0BAA0B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/F,oCAAoC;IACpC,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD;;;OAGG;IACH,mBAAmB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAEtF,+DAA+D;IAC/D,0BAA0B,EAAE,CAAC,IAAI,EAAE,kBAAkB,KAAK,IAAI,CAAC;IAC/D,yBAAyB,EAAE,MAAM,IAAI,CAAC;IACtC,4DAA4D;IAC5D,0BAA0B,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD;;;;;OAKG;IACH,oBAAoB,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACpE;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACnC,KAAK,EAAE,2BAA2B,CAAC;IACnC,OAAO,EAAE,6BAA6B,CAAC;CAC1C;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACnC;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB;;;OAGG;IACH,MAAM,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC7B;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CAC3B"}

package/esm/share/useObjectShareController.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useObjectShareController.d.ts","sourceRoot":"","sources":["../../src/share/useObjectShareController.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAa1E,OAAO,EACH,KAAK,sBAAsB,EAI3B,KAAK,sBAAsB,EAE9B,MAAM,kCAAkC,CAAC;AAI1C;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,wBAAwB,CACpC,MAAM,EAAE,wBAAwB,GAAG,SAAS,EAC5C,OAAO,CAAC,EAAE,sBAAsB,GACjC,sBAAsB,CAggBxB"}
+{"version":3,"file":"useObjectShareController.d.ts","sourceRoot":"","sources":["../../src/share/useObjectShareController.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAa1E,OAAO,EACH,KAAK,sBAAsB,EAI3B,KAAK,sBAAsB,EAE9B,MAAM,kCAAkC,CAAC;AAI1C;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,wBAAwB,CACpC,MAAM,EAAE,wBAAwB,GAAG,SAAS,EAC5C,OAAO,CAAC,EAAE,sBAAsB,GACjC,sBAAsB,CAyjBxB"}

package/esm/share/useObjectShareController.js

@@ -35,6 +35,11 @@ export function useObjectShareController(target, options) {
     const [subview, setSubview] = useState("main");
     const [pendingGrantees, setPendingGrantees] = useState([]);
     const [pendingGeneralAccess, setPendingGeneralAccess] = useState(undefined);
+    // True while a workspace-level re-grade is committing. The workspace rule has no
+    // grantee row to carry a `pending` flag (unlike named grantees), so this gates
+    // re-entry and disables the dropdown to keep rapid VIEW↔SHARE toggles from issuing
+    // overlapping writes that could settle out of order.
+    const [workspaceLevelSaving, setWorkspaceLevelSaving] = useState(false);
     // The backend access list, seeded into local state (rows, general access,
     // summary, the commit/picker primitives) lives in its own hook.
     const { targetKey, hasList, grantees, generalAccess, workspaceLevel, summary, status, loadError, commit, loadOptions, refForId, setGrantees, setGeneralAccess, setWorkspaceLevel, setKnownNames, } = useAccessList(target, onSaved);
@@ -63,11 +68,13 @@ export function useObjectShareController(target, options) {
         setSubview("main");
         setPendingGrantees([]);
         setPendingGeneralAccess(undefined);
+        setWorkspaceLevelSaving(false);
     }
     const reset = useCallback(() => {
         setSubview("main");
         setPendingGrantees([]);
         setPendingGeneralAccess(undefined);
+        setWorkspaceLevelSaving(false);
     }, []);
     const openAddGrantee = useCallback(() => {
         setSubview("addGrantee");
@@ -332,6 +339,13 @@ export function useObjectShareController(target, options) {
             setPendingGeneralAccess(undefined);
             return;
         }
+        // Don't toggle general access while a workspace-level re-grade is committing:
+        // the two write the same allWorkspaceUsers rule, so a late re-grade could land
+        // after this and leave the backend broader than the UI shows. The dialog also
+        // disables the radio in this window; this guards the controller directly.
+        if (workspaceLevelSaving) {
+            return;
+        }
         const startedFor = targetKey;
         const previous = generalAccess;
         const previousWorkspaceLevel = workspaceLevel;
@@ -379,6 +393,7 @@ export function useObjectShareController(target, options) {
         pendingGeneralAccess,
         generalAccess,
         workspaceLevel,
+        workspaceLevelSaving,
         targetKey,
         applyAccessChange,
         effectiveLabels,
@@ -386,6 +401,32 @@ export function useObjectShareController(target, options) {
         setGeneralAccess,
         setWorkspaceLevel,
     ]);
+    const changeWorkspaceLevel = useCallback(async (level) => {
+        // Only re-grade an already-granted workspace rule; ignore no-ops, calls made
+        // while access is restricted (no rule to re-grade), and re-entry while a
+        // previous re-grade is still in flight (would overlap writes).
+        if (generalAccess !== "WORKSPACE" || level === workspaceLevel || workspaceLevelSaving) {
+            return;
+        }
+        const startedFor = targetKey;
+        const previousLevel = workspaceLevel;
+        // Reflect the new level immediately and mark the write in flight, then commit
+        // it. Labels are untouched — they were already mirrored when workspace access
+        // was granted; this changes only the rule's permission grade.
+        setWorkspaceLevel(level);
+        setWorkspaceLevelSaving(true);
+        const ok = await commit([granularGranteeFor({ allWorkspaceUsers: true }, level)], objectShareMessages.toastGeneralAccessUpdated);
+        // Bail if the target switched mid-write — the workspace level now belongs to
+        // the other object, so neither keeping nor rolling back applies here. The
+        // saving flag is reset on the new target's seed, so don't touch it.
+        if (targetKeyRef.current !== startedFor) {
+            return;
+        }
+        if (!ok) {
+            setWorkspaceLevel(previousLevel);
+        }
+        setWorkspaceLevelSaving(false);
+    }, [generalAccess, workspaceLevel, workspaceLevelSaving, targetKey, commit, setWorkspaceLevel]);
     const actions = useMemo(() => ({
         reset,
         openAddGrantee,
@@ -399,6 +440,7 @@ export function useObjectShareController(target, options) {
         requestGeneralAccessChange,
         cancelGeneralAccessChange: () => setPendingGeneralAccess(undefined),
         confirmGeneralAccessChange,
+        changeWorkspaceLevel,
     }), [
         reset,
         openAddGrantee,
@@ -410,6 +452,7 @@ export function useObjectShareController(target, options) {
         changeGranteeLabels,
         requestGeneralAccessChange,
         confirmGeneralAccessChange,
+        changeWorkspaceLevel,
     ]);
     const state = useMemo(() => ({
         subview,
@@ -418,6 +461,11 @@ export function useObjectShareController(target, options) {
         summary,
         grantees,
         generalAccess,
+        // The workspace rule isn't granted while restricted, so its level is
+        // meaningless then — pin to VIEW so the (hidden) dropdown never shows a
+        // stale SHARE left over from a prior workspace grant.
+        workspaceLevel: generalAccess === "WORKSPACE" ? workspaceLevel : "VIEW",
+        workspaceLevelSaving,
         labels: effectiveLabels,
         labelsResolved,
         selectedLabelIdsByGrantee,
@@ -430,6 +478,8 @@ export function useObjectShareController(target, options) {
         summary,
         grantees,
         generalAccess,
+        workspaceLevel,
+        workspaceLevelSaving,
         effectiveLabels,
         labelsResolved,
         selectedLabelIdsByGrantee,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gooddata/sdk-ui-ext",
-  "version": "11.43.0-alpha.5",
+  "version": "11.43.0",
   "description": "GoodData.UI SDK - Extensions",
   "license": "LicenseRef-LICENSE",
   "author": "GoodData Corporation",
@@ -63,20 +63,20 @@
     "ts-invariant": "0.10.3",
     "tslib": "2.8.1",
     "uuid": "11.1.1",
-    "@gooddata/sdk-backend-base": "11.43.0-alpha.5",
-    "@gooddata/sdk-embedding": "11.43.0-alpha.5",
-    "@gooddata/sdk-backend-spi": "11.43.0-alpha.5",
-    "@gooddata/sdk-model": "11.43.0-alpha.5",
-    "@gooddata/sdk-ui": "11.43.0-alpha.5",
-    "@gooddata/sdk-ui-charts": "11.43.0-alpha.5",
-    "@gooddata/sdk-ui-filters": "11.43.0-alpha.5",
-    "@gooddata/sdk-ui-geo": "11.43.0-alpha.5",
-    "@gooddata/sdk-ui-kit": "11.43.0-alpha.5",
-    "@gooddata/sdk-ui-pivot": "11.43.0-alpha.5",
-    "@gooddata/sdk-ui-semantic-search": "11.43.0-alpha.5",
-    "@gooddata/sdk-ui-vis-commons": "11.43.0-alpha.5",
-    "@gooddata/sdk-ui-theme-provider": "11.43.0-alpha.5",
-    "@gooddata/util": "11.43.0-alpha.5"
+    "@gooddata/sdk-backend-base": "11.43.0",
+    "@gooddata/sdk-backend-spi": "11.43.0",
+    "@gooddata/sdk-embedding": "11.43.0",
+    "@gooddata/sdk-model": "11.43.0",
+    "@gooddata/sdk-ui": "11.43.0",
+    "@gooddata/sdk-ui-charts": "11.43.0",
+    "@gooddata/sdk-ui-geo": "11.43.0",
+    "@gooddata/sdk-ui-kit": "11.43.0",
+    "@gooddata/sdk-ui-pivot": "11.43.0",
+    "@gooddata/sdk-ui-filters": "11.43.0",
+    "@gooddata/sdk-ui-semantic-search": "11.43.0",
+    "@gooddata/sdk-ui-theme-provider": "11.43.0",
+    "@gooddata/util": "11.43.0",
+    "@gooddata/sdk-ui-vis-commons": "11.43.0"
   },
   "devDependencies": {
     "@microsoft/api-documenter": "^7.17.0",
@@ -124,12 +124,12 @@
     "typescript": "5.9.3",
     "vitest": "4.1.8",
     "vitest-dom": "0.1.1",
-    "@gooddata/eslint-config": "11.43.0-alpha.5",
-    "@gooddata/i18n-toolkit": "11.43.0-alpha.5",
-    "@gooddata/oxlint-config": "11.43.0-alpha.5",
-    "@gooddata/reference-workspace": "11.43.0-alpha.5",
-    "@gooddata/sdk-backend-mockingbird": "11.43.0-alpha.5",
-    "@gooddata/stylelint-config": "11.43.0-alpha.5"
+    "@gooddata/eslint-config": "11.43.0",
+    "@gooddata/i18n-toolkit": "11.43.0",
+    "@gooddata/oxlint-config": "11.43.0",
+    "@gooddata/reference-workspace": "11.43.0",
+    "@gooddata/sdk-backend-mockingbird": "11.43.0",
+    "@gooddata/stylelint-config": "11.43.0"
   },
   "peerDependencies": {
     "react": "^18.0.0 || ^19.0.0",