@localazy/strapi-plugin 1.4.0 → 1.7.0

package/README.md

@@ -71,6 +71,36 @@ localazy: {
   },
 ```
 
+## 🔐 Access control (RBAC)
+
+The plugin registers four Strapi permission actions, all visible under
+**Settings → Administration Panel → Roles → Plugins → Localazy** (grouped
+by `General` and `Settings` sub-categories):
+
+| Action                                                              | Unlocks                                                                                                                                                                                                                                                                               |
+| ------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `Localazy → Read` (`plugin::localazy.read`)                         | Localazy menu link, Overview, Activity Logs (list + detail), Content-Manager side panel & Localazy status column, read endpoints (identity, project, models, plugin settings, **content-transfer-setup**, sync cursor, activity logs, troubleshooting bundle, entry-exclusion state). |
+| `Localazy → Transfer` (`plugin::localazy.transfer`)                 | Upload, Download, Entry Exclusion mutations (incl. Content-Manager bulk actions), Activity Log session clearing. Reading the content-transfer-setup is bundled under `Read` above so transfer-only roles can still open the Upload/Download pages.                                    |
+| `Localazy → Settings → Read` (`plugin::localazy.settings.read`)     | Adds the Localazy Settings menu links (Global Settings, Content Transfer Setup) to the admin sidebar. Form controls render read-only — Save, Cancel, the Content Transfer Setup tree, and the webhook setup buttons are disabled without `Settings → Update`.                         |
+| `Localazy → Settings → Update` (`plugin::localazy.settings.update`) | **Connecting / disconnecting the Localazy account**, webhook setup, updating Content Transfer Setup, and updating Global Settings.                                                                                                                                                    |
+
+> **Note:** the **Webhook author** picker in _Localazy Settings → Global
+> Settings_ populates from Strapi's core `/admin/users` endpoint, which is
+> gated by Strapi's own `admin::users.read` permission — independent of the
+> plugin's actions. A role with only the plugin's `Settings → Read` will
+> still see the rest of the page; the author dropdown silently falls back
+> to an empty list.
+
+Server is the enforcement perimeter — all admin-typed plugin routes are
+gated by `admin::hasPermissions`, so UI gates are convenience only.
+
+### Upgrade note
+
+Strapi grants new actions to the **Super Admin** role automatically. **Other
+roles (Editor, Author, custom roles) keep no Localazy access until an admin
+re-grants the actions** under _Settings → Administration Panel → Roles →
+Plugins → Localazy_. Plan this step when upgrading from `<= 1.4.x`.
+
 ## 🛟 Support
 
 If you encounter any issues or have questions, feel free to contact us through whichever channel suits you best:

package/dist/_chunks/{FetchIdentity-BpFOT163.js → FetchIdentity-D89DgpbN.js}

@@ -1,9 +1,10 @@
 "use strict";
-const strapiApiBase = require("./strapi-api-base-IG3Pe5Sg.js");
+const strapiApiBase = require("./strapi-api-base-BWZYbxxj.js");
+const jsxRuntime = require("react/jsx-runtime");
 const index = require("./index-CTkxoioB.js");
+const useTranslation = require("./useTranslation-BdIl-aLe.js");
 const styled = require("styled-components");
 const React = require("react");
-const jsxRuntime = require("react/jsx-runtime");
 const emptyIdentity = {
   accessToken: "",
   project: {
@@ -73,6 +74,17 @@ class PluginSettingsService {
       throw e;
     }
   }
+  // Read-gated counterpart for per-user UI prefs (last visited route, sort
+  // prefs). Server filters the body to a fixed allowlist; sending anything else
+  // is silently dropped, so callers must only pass UI-pref fields here.
+  static async updatePluginSettingsUiPrefs(data) {
+    try {
+      const result = await axiosInstance.put(`${BASE_PATH$1}/ui-prefs`, data);
+      return result.data;
+    } catch (e) {
+      throw e;
+    }
+  }
   static async getSyncCursor() {
     try {
       const result = await axiosInstance.get(`${BASE_PATH$1}/sync-cursor`);
@@ -82,6 +94,10 @@ class PluginSettingsService {
     }
   }
 }
+function PluginPageLoader() {
+  const { t } = useTranslation.useTranslation();
+  return /* @__PURE__ */ jsxRuntime.jsx(index.Flex, { marginTop: 10, alignItems: "center", justifyContent: "center", children: /* @__PURE__ */ jsxRuntime.jsx(index.Loader, { children: t("common.loading_content") }) });
+}
 const BASE_PATH = "/user";
 const strapiApiInstance = strapiApiBase.createStrapiApiAxiosInstance();
 class LocalazyUserService {
@@ -502,9 +518,9 @@ function cacheHas(cache, key) {
   return cache.has(key);
 }
 var Set = getNative(root, "Set");
-function setToArray(set2) {
-  var index2 = -1, result = Array(set2.size);
-  set2.forEach(function(value) {
+function setToArray(set) {
+  var index2 = -1, result = Array(set.size);
+  set.forEach(function(value) {
     result[++index2] = value;
   });
   return result;
@@ -938,32 +954,6 @@ var CLONE_DEEP_FLAG = 1, CLONE_SYMBOLS_FLAG = 4;
 function cloneDeep(value) {
   return baseClone(value, CLONE_DEEP_FLAG | CLONE_SYMBOLS_FLAG);
 }
-function baseSet(object, path, value, customizer) {
-  if (!isObject(object)) {
-    return object;
-  }
-  path = castPath(path, object);
-  var index2 = -1, length = path.length, lastIndex = length - 1, nested = object;
-  while (nested != null && ++index2 < length) {
-    var key = toKey(path[index2]), newValue = value;
-    if (key === "__proto__" || key === "constructor" || key === "prototype") {
-      return object;
-    }
-    if (index2 != lastIndex) {
-      var objValue = nested[key];
-      newValue = void 0;
-      if (newValue === void 0) {
-        newValue = isObject(objValue) ? objValue : isIndex(path[index2 + 1]) ? [] : {};
-      }
-    }
-    assignValue(nested, key, newValue);
-    nested = nested[key];
-  }
-  return object;
-}
-function set(object, path, value) {
-  return object == null ? object : baseSet(object, path, value);
-}
 const FetchIdentity = () => {
   const { setIdentity, setIsFetchingIdentity } = useLocalazyIdentity();
   React.useEffect(() => {
@@ -989,6 +979,7 @@ exports.FetchIdentity = FetchIdentity;
 exports.HeadingFixGlobalStyle = HeadingFixGlobalStyle;
 exports.LocalazyIdentityProvider = LocalazyIdentityProvider;
 exports.LocalazyUserService = LocalazyUserService;
+exports.PluginPageLoader = PluginPageLoader;
 exports.PluginSettingsService = PluginSettingsService;
 exports.Set = Set;
 exports.SetCache = SetCache;
@@ -996,6 +987,7 @@ exports.Stack = Stack;
 exports.Symbol = Symbol$1;
 exports.Uint8Array = Uint8Array;
 exports.arrayEach = arrayEach;
+exports.assignValue = assignValue;
 exports.cacheHas = cacheHas;
 exports.castPath = castPath;
 exports.cloneDeep = cloneDeep;
@@ -1006,11 +998,11 @@ exports.getDefaultTheme = getDefaultTheme;
 exports.isArray = isArray;
 exports.isArrayLike = isArrayLike;
 exports.isBuffer = isBuffer;
+exports.isIndex = isIndex;
 exports.isObject = isObject;
 exports.isObjectLike = isObjectLike;
 exports.isTypedArray = isTypedArray;
 exports.keys = keys;
-exports.set = set;
 exports.setToArray = setToArray;
 exports.toKey = toKey;
 exports.useLocalazyIdentity = useLocalazyIdentity;

package/dist/_chunks/{FetchIdentity-Cor4ooZv.mjs → FetchIdentity-DkHj24S5.mjs}

@@ -1,8 +1,9 @@
-import { c as createStrapiApiAxiosInstance } from "./strapi-api-base-CAzGcwF6.mjs";
-import { V as darkTheme, W as lightTheme } from "./index-BjL9XpRh.mjs";
+import { c as createStrapiApiAxiosInstance } from "./strapi-api-base-lPo7wq6I.mjs";
+import { jsx } from "react/jsx-runtime";
+import { c as Flex, L as Loader, V as darkTheme, W as lightTheme } from "./index-shryj0jT.mjs";
+import { u as useTranslation } from "./useTranslation-CZQ4lU1m.mjs";
 import { createGlobalStyle } from "styled-components";
 import { useState, useMemo, createContext, useContext, useEffect } from "react";
-import { jsx } from "react/jsx-runtime";
 const emptyIdentity = {
   accessToken: "",
   project: {
@@ -72,6 +73,17 @@ class PluginSettingsService {
       throw e;
     }
   }
+  // Read-gated counterpart for per-user UI prefs (last visited route, sort
+  // prefs). Server filters the body to a fixed allowlist; sending anything else
+  // is silently dropped, so callers must only pass UI-pref fields here.
+  static async updatePluginSettingsUiPrefs(data) {
+    try {
+      const result = await axiosInstance.put(`${BASE_PATH$1}/ui-prefs`, data);
+      return result.data;
+    } catch (e) {
+      throw e;
+    }
+  }
   static async getSyncCursor() {
     try {
       const result = await axiosInstance.get(`${BASE_PATH$1}/sync-cursor`);
@@ -81,6 +93,10 @@ class PluginSettingsService {
     }
   }
 }
+function PluginPageLoader() {
+  const { t } = useTranslation();
+  return /* @__PURE__ */ jsx(Flex, { marginTop: 10, alignItems: "center", justifyContent: "center", children: /* @__PURE__ */ jsx(Loader, { children: t("common.loading_content") }) });
+}
 const BASE_PATH = "/user";
 const strapiApiInstance = createStrapiApiAxiosInstance();
 class LocalazyUserService {
@@ -501,9 +517,9 @@ function cacheHas(cache, key) {
   return cache.has(key);
 }
 var Set = getNative(root, "Set");
-function setToArray(set2) {
-  var index = -1, result = Array(set2.size);
-  set2.forEach(function(value) {
+function setToArray(set) {
+  var index = -1, result = Array(set.size);
+  set.forEach(function(value) {
     result[++index] = value;
   });
   return result;
@@ -937,32 +953,6 @@ var CLONE_DEEP_FLAG = 1, CLONE_SYMBOLS_FLAG = 4;
 function cloneDeep(value) {
   return baseClone(value, CLONE_DEEP_FLAG | CLONE_SYMBOLS_FLAG);
 }
-function baseSet(object, path, value, customizer) {
-  if (!isObject(object)) {
-    return object;
-  }
-  path = castPath(path, object);
-  var index = -1, length = path.length, lastIndex = length - 1, nested = object;
-  while (nested != null && ++index < length) {
-    var key = toKey(path[index]), newValue = value;
-    if (key === "__proto__" || key === "constructor" || key === "prototype") {
-      return object;
-    }
-    if (index != lastIndex) {
-      var objValue = nested[key];
-      newValue = void 0;
-      if (newValue === void 0) {
-        newValue = isObject(objValue) ? objValue : isIndex(path[index + 1]) ? [] : {};
-      }
-    }
-    assignValue(nested, key, newValue);
-    nested = nested[key];
-  }
-  return object;
-}
-function set(object, path, value) {
-  return object == null ? object : baseSet(object, path, value);
-}
 const FetchIdentity = () => {
   const { setIdentity, setIsFetchingIdentity } = useLocalazyIdentity();
   useEffect(() => {
@@ -991,10 +981,10 @@ export {
   PluginSettingsService as P,
   SetCache as S,
   Uint8Array as U,
-  cacheHas as a,
-  Symbol$1 as b,
+  PluginPageLoader as a,
+  cacheHas as b,
   cloneDeep as c,
-  setToArray as d,
+  Symbol$1 as d,
   eq as e,
   getAllKeys as f,
   getDefaultTheme as g,
@@ -1004,15 +994,17 @@ export {
   isTypedArray as k,
   isArray as l,
   isObjectLike as m,
-  keys as n,
-  isArrayLike as o,
-  arrayEach as p,
-  isObject as q,
-  castPath as r,
-  set as s,
+  isObject as n,
+  castPath as o,
+  isIndex as p,
+  assignValue as q,
+  keys as r,
+  setToArray as s,
   toKey as t,
   useLocalazyIdentity as u,
-  Set as v,
-  LocalazyUserService as w,
-  emptyIdentity as x
+  isArrayLike as v,
+  arrayEach as w,
+  Set as x,
+  LocalazyUserService as y,
+  emptyIdentity as z
 };

package/dist/_chunks/{LanguagesSelector-CC1ecWnc.js → LanguagesSelector-638KGQYw.js}

@@ -1,8 +1,8 @@
 "use strict";
-const strapiApiBase = require("./strapi-api-base-IG3Pe5Sg.js");
+const strapiApiBase = require("./strapi-api-base-BWZYbxxj.js");
 const jsxRuntime = require("react/jsx-runtime");
 const React = require("react");
-const FetchIdentity = require("./FetchIdentity-BpFOT163.js");
+const FetchIdentity = require("./FetchIdentity-D89DgpbN.js");
 const index = require("./index-CTkxoioB.js");
 const useTranslation = require("./useTranslation-BdIl-aLe.js");
 const strapiApiInstance = strapiApiBase.createStrapiApiAxiosInstance();
@@ -49,6 +49,7 @@ const LanguagesSelector = (props) => {
         onClear: () => setSelectedLanguages([]),
         value: selectedLanguages || [],
         onChange: (values) => onChange(values),
+        disabled: props.disabled,
         multi: true,
         withTags: true,
         children: props.projectLanguages.map((lang) => /* @__PURE__ */ jsxRuntime.jsx(index.MultiSelectOption, { value: lang.code, children: `${lang.name} (${lang.code})` }, lang.id))

package/dist/_chunks/{LanguagesSelector-BbrMKwQY.mjs → LanguagesSelector-CR_7I2R1.mjs}

@@ -1,8 +1,8 @@
-import { c as createStrapiApiAxiosInstance } from "./strapi-api-base-CAzGcwF6.mjs";
+import { c as createStrapiApiAxiosInstance } from "./strapi-api-base-lPo7wq6I.mjs";
 import { jsxs, jsx } from "react/jsx-runtime";
 import { useState, useEffect } from "react";
-import { c as cloneDeep } from "./FetchIdentity-Cor4ooZv.mjs";
-import { F as Field, M as MultiSelect, b as MultiSelectOption } from "./index-BjL9XpRh.mjs";
+import { c as cloneDeep } from "./FetchIdentity-DkHj24S5.mjs";
+import { F as Field, M as MultiSelect, b as MultiSelectOption } from "./index-shryj0jT.mjs";
 import { u as useTranslation } from "./useTranslation-CZQ4lU1m.mjs";
 const strapiApiInstance = createStrapiApiAxiosInstance();
 class ProjectService {
@@ -48,6 +48,7 @@ const LanguagesSelector = (props) => {
         onClear: () => setSelectedLanguages([]),
         value: selectedLanguages || [],
         onChange: (values) => onChange(values),
+        disabled: props.disabled,
         multi: true,
         withTags: true,
         children: props.projectLanguages.map((lang) => /* @__PURE__ */ jsx(MultiSelectOption, { value: lang.code, children: `${lang.name} (${lang.code})` }, lang.id))

package/dist/_chunks/{LocalazyApp-D0JGRQeF.js → LocalazyApp-Benn8pkA.js}

@@ -4,15 +4,15 @@ const jsxRuntime = require("react/jsx-runtime");
 const reactRouterDom = require("react-router-dom");
 const index$1 = require("./index-CTkxoioB.js");
 const React = require("react");
-const FetchIdentity = require("./FetchIdentity-BpFOT163.js");
-const index = require("./index-jAg6jjCu.js");
+const FetchIdentity = require("./FetchIdentity-D89DgpbN.js");
+const index = require("./index-DwFm1TyM.js");
 const useTranslation = require("./useTranslation-BdIl-aLe.js");
 const _commonjsHelpers = require("./_commonjsHelpers-Bc2YnDe1.js");
-const strapiApiBase = require("./strapi-api-base-IG3Pe5Sg.js");
-const LanguagesSelector = require("./LanguagesSelector-CC1ecWnc.js");
 const admin = require("@strapi/strapi/admin");
-require("./i18n-C_5tJvr0.js");
-const hasModelChanged = require("./has-model-changed-5IV9WI_-.js");
+const strapiApiBase = require("./strapi-api-base-BWZYbxxj.js");
+const LanguagesSelector = require("./LanguagesSelector-638KGQYw.js");
+require("./i18n-C5ucROBh.js");
+const hasModelChanged = require("./has-model-changed-BrDeyHFt.js");
 const styled = require("styled-components");
 const _interopDefault = (e2) => e2 && e2.__esModule ? e2 : { default: e2 };
 const React__default = /* @__PURE__ */ _interopDefault(React);
@@ -102,10 +102,6 @@ const useHeaderSubtitle = () => {
   const currentNavItem = navigation.find((navItem) => pluginSegment.includes(navItem.id));
   return currentNavItem?.description || "";
 };
-function PluginPageLoader() {
-  const { t: t2 } = useTranslation.useTranslation();
-  return /* @__PURE__ */ jsxRuntime.jsx(index$1.Flex, { marginTop: 10, alignItems: "center", justifyContent: "center", children: /* @__PURE__ */ jsxRuntime.jsx(index$1.Loader, { children: t2("common.loading_content") }) });
-}
 var propTypes = { exports: {} };
 var reactIs = { exports: {} };
 var reactIs_production_min = {};
@@ -1262,6 +1258,8 @@ if (process.env.STRAPI_ADMIN_LOCALAZY_ENV === "development") {
 }
 const LoginButton = (props) => {
   const { t: t2 } = useTranslation.useTranslation();
+  const { allowedActions } = admin.useRBAC(index.PERMISSIONS.SETTINGS_UPDATE);
+  const canConnect = !!allowedActions.canUpdate;
   const [isLoading, setIsLoading] = React.useState(false);
   const login = async () => {
     setIsLoading(true);
@@ -1282,7 +1280,8 @@ const LoginButton = (props) => {
     setIsLoading(false);
     props.onResultFetched(pollResult);
   };
-  return /* @__PURE__ */ jsxRuntime.jsx("div", { children: /* @__PURE__ */ jsxRuntime.jsx(index$1.Button, { variant: "default", size: "L", loading: isLoading, onClick: login, children: t2("login.login_with_localazy") }) });
+  const button = /* @__PURE__ */ jsxRuntime.jsx(index$1.Button, { variant: "default", size: "L", loading: isLoading, onClick: login, disabled: !canConnect, children: t2("login.login_with_localazy") });
+  return /* @__PURE__ */ jsxRuntime.jsx("div", { children: canConnect ? button : /* @__PURE__ */ jsxRuntime.jsx(index$1.TooltipImpl, { label: t2("login.requires_settings_update_permission"), children: /* @__PURE__ */ jsxRuntime.jsx("span", { children: button }) }) });
 };
 LoginButton.propTypes = {
   onResultFetched: PropTypes.func.isRequired
@@ -1396,7 +1395,7 @@ const Login = ({ title, subtitle, isLoading = false }) => {
   }, [isLoggedIn, identity]);
   return /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
     /* @__PURE__ */ jsxRuntime.jsx(admin.Layouts.Header, { title, subtitle, as: "h1" }),
-    isLoading && /* @__PURE__ */ jsxRuntime.jsx(PluginPageLoader, {}),
+    isLoading && /* @__PURE__ */ jsxRuntime.jsx(FetchIdentity.PluginPageLoader, {}),
     !isLoading && /* @__PURE__ */ jsxRuntime.jsxs(
       index$1.Box,
       {
@@ -1440,6 +1439,8 @@ const LogoutButton = (props) => {
   const { t: t2 } = useTranslation.useTranslation();
   const [isLoading, setIsLoading] = React.useState(false);
   const { setIdentity } = FetchIdentity.useLocalazyIdentity();
+  const { allowedActions } = admin.useRBAC(index.PERMISSIONS.SETTINGS_UPDATE);
+  const canDisconnect = !!allowedActions.canUpdate;
   const logout = async () => {
     setIsLoading(true);
     void FetchIdentity.LocalazyUserService.deleteIdentity();
@@ -1447,7 +1448,8 @@ const LogoutButton = (props) => {
     setIsLoading(false);
     props.onResultFetched();
   };
-  return /* @__PURE__ */ jsxRuntime.jsx("div", { children: /* @__PURE__ */ jsxRuntime.jsx(index$1.Button, { startIcon: /* @__PURE__ */ jsxRuntime.jsx(index$1.ForwardRef$L, {}), variant: "secondary", loading: isLoading, onClick: logout, children: t2("login.logout_from_localazy") }) });
+  const button = /* @__PURE__ */ jsxRuntime.jsx(index$1.Button, { startIcon: /* @__PURE__ */ jsxRuntime.jsx(index$1.ForwardRef$L, {}), variant: "secondary", loading: isLoading, onClick: logout, disabled: !canDisconnect, children: t2("login.logout_from_localazy") });
+  return /* @__PURE__ */ jsxRuntime.jsx("div", { children: canDisconnect ? button : /* @__PURE__ */ jsxRuntime.jsx(index$1.TooltipImpl, { label: t2("login.requires_settings_update_permission"), children: /* @__PURE__ */ jsxRuntime.jsx("span", { children: button }) }) });
 };
 const OverviewItem = (props) => {
   return /* @__PURE__ */ jsxRuntime.jsxs(index$1.Grid.Root, { padding: 1, col: 6, s: 12, children: [
@@ -1478,7 +1480,7 @@ const Overview = ({ title, subtitle, isLoadingProp = false }) => {
       setIsLoading(true);
       const project = await LanguagesSelector.ProjectService.getConnectedProject();
       setConnectedProject(project);
-      void FetchIdentity.PluginSettingsService.updatePluginSettings({ defaultRoute: PLUGIN_ROUTES.OVERVIEW });
+      void FetchIdentity.PluginSettingsService.updatePluginSettingsUiPrefs({ defaultRoute: PLUGIN_ROUTES.OVERVIEW });
       setIsLoading(false);
     }
     void initComponent();
@@ -1496,7 +1498,7 @@ const Overview = ({ title, subtitle, isLoadingProp = false }) => {
         primaryAction: /* @__PURE__ */ jsxRuntime.jsx(LogoutButton, { onResultFetched: onLoggedOut })
       }
     ),
-    (isLoadingProp || isLoading) && /* @__PURE__ */ jsxRuntime.jsx(PluginPageLoader, {}),
+    (isLoadingProp || isLoading) && /* @__PURE__ */ jsxRuntime.jsx(FetchIdentity.PluginPageLoader, {}),
     !(isLoadingProp || isLoading) && /* @__PURE__ */ jsxRuntime.jsx(index$1.Box, { paddingRight: 10, paddingLeft: 10, children: /* @__PURE__ */ jsxRuntime.jsxs(
       index$1.Box,
       {
@@ -5065,7 +5067,7 @@ const Upload = (props) => {
       setLocalazySourceLanguage(sourceLanguage);
       setModelChanged(modelChangedResult);
       setLocalesIncompatible(!localesCompatibleResult);
-      void FetchIdentity.PluginSettingsService.updatePluginSettings({ defaultRoute: PLUGIN_ROUTES.UPLOAD });
+      void FetchIdentity.PluginSettingsService.updatePluginSettingsUiPrefs({ defaultRoute: PLUGIN_ROUTES.UPLOAD });
       setIsLoading(false);
     }
     void initComponent();
@@ -5088,7 +5090,7 @@ const Upload = (props) => {
         )
       }
     ),
-    isLoading && /* @__PURE__ */ jsxRuntime.jsx(PluginPageLoader, {}),
+    isLoading && /* @__PURE__ */ jsxRuntime.jsx(FetchIdentity.PluginPageLoader, {}),
     !isLoading && /* @__PURE__ */ jsxRuntime.jsxs(index$1.Box, { paddingRight: 10, paddingLeft: 10, children: [
       /* @__PURE__ */ jsxRuntime.jsxs(
         index$1.Box,
@@ -5198,16 +5200,9 @@ const Download = (props) => {
     window.open(identity.project.url, "_blank");
   };
   const [projectLanguages, setProjectLanguages] = React.useState([]);
-  const [formModel, setFormModel] = React.useState({});
+  const [uiLanguages, setUiLanguages] = React.useState([]);
   const onDownloadLanguagesChange = (languages) => {
-    const newFormModel = FetchIdentity.cloneDeep(formModel);
-    FetchIdentity.set(newFormModel, "download.uiLanguages", languages);
-    setFormModel(newFormModel);
-    try {
-      void FetchIdentity.PluginSettingsService.updatePluginSettings(newFormModel);
-    } catch (e2) {
-      console.error(e2.message);
-    }
+    setUiLanguages(languages);
   };
   const onDownloadClick = async (fullSync = false) => {
     setIsDownloading(true);
@@ -5216,7 +5211,7 @@ const Download = (props) => {
       success: false,
       report: []
     });
-    const result = await LocalazyDownloadService.download({ fullSync });
+    const result = await LocalazyDownloadService.download({ fullSync, uiLanguages });
     const { streamIdentifier } = result;
     downloadAlertsService.setStreamIdentifier(streamIdentifier);
     downloadAlertsService.onDownload((data) => {
@@ -5257,8 +5252,8 @@ const Download = (props) => {
       setHasSyncCursor(syncCursor?.processedKeys !== void 0 && Object.keys(syncCursor.processedKeys).length > 0);
       const projectLanguagesWithoutDefaultLanguage = project?.languages?.filter((language) => language.id !== project.sourceLanguage) || [];
       setProjectLanguages(projectLanguagesWithoutDefaultLanguage);
-      setFormModel(globalSettings);
-      void FetchIdentity.PluginSettingsService.updatePluginSettings({ defaultRoute: PLUGIN_ROUTES.DOWNLOAD });
+      setUiLanguages(Array.isArray(globalSettings?.download?.uiLanguages) ? globalSettings.download.uiLanguages : []);
+      void FetchIdentity.PluginSettingsService.updatePluginSettingsUiPrefs({ defaultRoute: PLUGIN_ROUTES.DOWNLOAD });
       setIsLoading(false);
     }
     void initComponent();
@@ -5293,7 +5288,7 @@ const Download = (props) => {
         ] })
       }
     ),
-    isLoading && /* @__PURE__ */ jsxRuntime.jsx(PluginPageLoader, {}),
+    isLoading && /* @__PURE__ */ jsxRuntime.jsx(FetchIdentity.PluginPageLoader, {}),
     !isLoading && /* @__PURE__ */ jsxRuntime.jsxs(index$1.Box, { paddingRight: 10, paddingLeft: 10, children: [
       /* @__PURE__ */ jsxRuntime.jsxs(
         index$1.Box,
@@ -5316,7 +5311,7 @@ const Download = (props) => {
             /* @__PURE__ */ jsxRuntime.jsx(index$1.Box, { paddingTop: 6, children: /* @__PURE__ */ jsxRuntime.jsx(
               LanguagesSelector.LanguagesSelector,
               {
-                preselectedLanguages: formModel?.download?.uiLanguages || [],
+                preselectedLanguages: uiLanguages,
                 projectLanguages,
                 onChange: (languages) => onDownloadLanguagesChange(languages),
                 label: t2("download.ui_languages"),
@@ -5693,6 +5688,9 @@ const useDebouncedSearch = () => {
 const ActivityLogs = (props) => {
   const { t: t2 } = useTranslation.useTranslation();
   const navigate = reactRouterDom.useNavigate();
+  const {
+    allowedActions: { canTransfer }
+  } = admin.useRBAC(index.PERMISSIONS.TRANSFER);
   const [isLoading, setIsLoading] = React.useState(true);
   const [sessions, setSessions] = React.useState([]);
   const [activeTab, setActiveTab] = React.useState("upload");
@@ -5706,7 +5704,7 @@ const ActivityLogs = (props) => {
   const debouncedSaveSortPrefs = React.useCallback((prefs) => {
     if (saveSortTimerRef.current) clearTimeout(saveSortTimerRef.current);
     saveSortTimerRef.current = setTimeout(() => {
-      void FetchIdentity.PluginSettingsService.updatePluginSettings({ activityLogsSort: prefs });
+      void FetchIdentity.PluginSettingsService.updatePluginSettingsUiPrefs({ activityLogsSort: prefs });
     }, 1e3);
   }, []);
   const onSortChange = (eventType, key, direction) => {
@@ -5762,7 +5760,7 @@ const ActivityLogs = (props) => {
       void fetchSessions("upload");
     };
     void init();
-    void FetchIdentity.PluginSettingsService.updatePluginSettings({ defaultRoute: PLUGIN_ROUTES.ACTIVITY_LOGS });
+    void FetchIdentity.PluginSettingsService.updatePluginSettingsUiPrefs({ defaultRoute: PLUGIN_ROUTES.ACTIVITY_LOGS });
   }, []);
   return /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
     /* @__PURE__ */ jsxRuntime.jsx(
@@ -5772,7 +5770,16 @@ const ActivityLogs = (props) => {
         subtitle: props.subtitle,
         primaryAction: /* @__PURE__ */ jsxRuntime.jsxs(index$1.Flex, { gap: 2, children: [
           /* @__PURE__ */ jsxRuntime.jsx(index$1.Button, { variant: "secondary", startIcon: /* @__PURE__ */ jsxRuntime.jsx(index$1.ForwardRef$3P, {}), onClick: onExportLogs, children: t2("activity_logs.export_logs") }),
-          /* @__PURE__ */ jsxRuntime.jsx(index$1.Button, { variant: "danger-light", startIcon: /* @__PURE__ */ jsxRuntime.jsx(index$1.ForwardRef$j, {}), onClick: () => setShowClearConfirm(true), children: t2("activity_logs.clear_logs") })
+          /* @__PURE__ */ jsxRuntime.jsx(
+            index$1.Button,
+            {
+              variant: "danger-light",
+              startIcon: /* @__PURE__ */ jsxRuntime.jsx(index$1.ForwardRef$j, {}),
+              disabled: !canTransfer,
+              onClick: () => setShowClearConfirm(true),
+              children: t2("activity_logs.clear_logs")
+            }
+          )
         ] })
       }
     ),
@@ -5780,7 +5787,7 @@ const ActivityLogs = (props) => {
       /* @__PURE__ */ jsxRuntime.jsx(index$1.ForwardRef$2x, { width: 14, height: 14, fill: "neutral500" }),
       /* @__PURE__ */ jsxRuntime.jsx(index$1.Typography, { variant: "pi", textColor: "neutral500", children: t2("activity_logs.retention_info") })
     ] }) }),
-    isLoading && /* @__PURE__ */ jsxRuntime.jsx(PluginPageLoader, {}),
+    isLoading && /* @__PURE__ */ jsxRuntime.jsx(FetchIdentity.PluginPageLoader, {}),
     !isLoading && /* @__PURE__ */ jsxRuntime.jsxs(index$1.Box, { paddingRight: 10, paddingLeft: 10, children: [
       clearSuccess && /* @__PURE__ */ jsxRuntime.jsx(index$1.Box, { marginBottom: 4, children: /* @__PURE__ */ jsxRuntime.jsx(index$1.Alert, { onClose: () => setClearSuccess(false), closeLabel: t2("activity_logs.close"), variant: "success", children: t2("activity_logs.clear_logs_success") }) }),
       /* @__PURE__ */ jsxRuntime.jsxs(
@@ -6043,7 +6050,7 @@ const ActivityLogDetail = (props) => {
         ) })
       }
     ),
-    isLoading && /* @__PURE__ */ jsxRuntime.jsx(PluginPageLoader, {}),
+    isLoading && /* @__PURE__ */ jsxRuntime.jsx(FetchIdentity.PluginPageLoader, {}),
     !isLoading && !session && /* @__PURE__ */ jsxRuntime.jsx(index$1.Box, { paddingRight: 10, paddingLeft: 10, children: /* @__PURE__ */ jsxRuntime.jsx(index$1.Typography, { variant: "omega", children: t2("activity_logs.no_sessions") }) }),
     !isLoading && session && /* @__PURE__ */ jsxRuntime.jsxs(index$1.Box, { paddingRight: 10, paddingLeft: 10, children: [
       /* @__PURE__ */ jsxRuntime.jsxs(
@@ -6140,6 +6147,10 @@ const App = () => {
   const { isLoggedIn, isFetchingIdentity } = FetchIdentity.useLocalazyIdentity();
   const headerTitle = useHeaderTitle();
   const headerSubtitle = useHeaderSubtitle();
+  const {
+    allowedActions: { canRead, canTransfer },
+    isLoading: isLoadingPermissions
+  } = admin.useRBAC([...index.PERMISSIONS.READ, ...index.PERMISSIONS.TRANSFER]);
   const normalizedPath = location2.pathname.replace(/\/+$/, "");
   const pluginRoot = `/plugins/${index.PLUGIN_ID}`;
   const isAtPluginRoot = normalizedPath === pluginRoot;
@@ -6161,10 +6172,23 @@ const App = () => {
     };
     void fetchData();
   }, [isLoggedIn, isFetchingIdentity, normalizedPath]);
+  if (isLoadingPermissions) {
+    return /* @__PURE__ */ jsxRuntime.jsxs(index$1.DesignSystemProvider, { theme: FetchIdentity.getDefaultTheme(), children: [
+      /* @__PURE__ */ jsxRuntime.jsx(FetchIdentity.HeadingFixGlobalStyle, {}),
+      /* @__PURE__ */ jsxRuntime.jsx(index$1.Box, { background: "neutral100", children: /* @__PURE__ */ jsxRuntime.jsx(admin.Layouts.Root, { children: /* @__PURE__ */ jsxRuntime.jsx(FetchIdentity.PluginPageLoader, {}) }) })
+    ] });
+  }
+  if (!canRead) {
+    return /* @__PURE__ */ jsxRuntime.jsxs(index$1.DesignSystemProvider, { theme: FetchIdentity.getDefaultTheme(), children: [
+      /* @__PURE__ */ jsxRuntime.jsx(FetchIdentity.HeadingFixGlobalStyle, {}),
+      /* @__PURE__ */ jsxRuntime.jsx(index$1.Box, { background: "neutral100", children: /* @__PURE__ */ jsxRuntime.jsx(admin.Layouts.Root, { children: /* @__PURE__ */ jsxRuntime.jsx(admin.Page.NoPermissions, {}) }) })
+    ] });
+  }
+  const transferElement = (page) => canTransfer ? page : /* @__PURE__ */ jsxRuntime.jsx(admin.Page.NoPermissions, {});
   return /* @__PURE__ */ jsxRuntime.jsxs(index$1.DesignSystemProvider, { theme: FetchIdentity.getDefaultTheme(), children: [
     /* @__PURE__ */ jsxRuntime.jsx(FetchIdentity.HeadingFixGlobalStyle, {}),
     /* @__PURE__ */ jsxRuntime.jsx(PluginErrorBoundary, { children: /* @__PURE__ */ jsxRuntime.jsx(index$1.Box, { background: "neutral100", children: /* @__PURE__ */ jsxRuntime.jsxs(admin.Layouts.Root, { sideNav: isLoggedIn && /* @__PURE__ */ jsxRuntime.jsx(SideNav, {}), children: [
-      isFetchingIdentity && /* @__PURE__ */ jsxRuntime.jsx(PluginPageLoader, {}),
+      isFetchingIdentity && /* @__PURE__ */ jsxRuntime.jsx(FetchIdentity.PluginPageLoader, {}),
       /* @__PURE__ */ jsxRuntime.jsxs(reactRouterDom.Routes, { children: [
         /* @__PURE__ */ jsxRuntime.jsx(
           reactRouterDom.Route,
@@ -6180,8 +6204,20 @@ const App = () => {
             element: /* @__PURE__ */ jsxRuntime.jsx(Overview, { title: headerTitle, subtitle: headerSubtitle, isLoadingProp: false })
           }
         ),
-        /* @__PURE__ */ jsxRuntime.jsx(reactRouterDom.Route, { path: `upload`, element: /* @__PURE__ */ jsxRuntime.jsx(Upload, { title: headerTitle, subtitle: headerSubtitle }) }),
-        /* @__PURE__ */ jsxRuntime.jsx(reactRouterDom.Route, { path: `download`, element: /* @__PURE__ */ jsxRuntime.jsx(Download, { title: headerTitle, subtitle: headerSubtitle }) }),
+        /* @__PURE__ */ jsxRuntime.jsx(
+          reactRouterDom.Route,
+          {
+            path: `upload`,
+            element: transferElement(/* @__PURE__ */ jsxRuntime.jsx(Upload, { title: headerTitle, subtitle: headerSubtitle }))
+          }
+        ),
+        /* @__PURE__ */ jsxRuntime.jsx(
+          reactRouterDom.Route,
+          {
+            path: `download`,
+            element: transferElement(/* @__PURE__ */ jsxRuntime.jsx(Download, { title: headerTitle, subtitle: headerSubtitle }))
+          }
+        ),
         /* @__PURE__ */ jsxRuntime.jsx(reactRouterDom.Route, { path: `activity-logs`, element: /* @__PURE__ */ jsxRuntime.jsx(ActivityLogs, { title: headerTitle, subtitle: headerSubtitle }) }),
         /* @__PURE__ */ jsxRuntime.jsx(
           reactRouterDom.Route,