@localazy/strapi-plugin 1.4.0 → 1.7.0

package/dist/_chunks/{LocalazyGlobalSettings-D3nG4zl7.js → LocalazyGlobalSettings-88jqQbD4.js}

@@ -2,17 +2,18 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const jsxRuntime = require("react/jsx-runtime");
 const index = require("./index-CTkxoioB.js");
-const React = require("react");
-const FetchIdentity = require("./FetchIdentity-BpFOT163.js");
 const admin = require("@strapi/strapi/admin");
-const RequireLocalazyAuth = require("./RequireLocalazyAuth-D3GeZPDh.js");
-const LanguagesSelector = require("./LanguagesSelector-CC1ecWnc.js");
+const React = require("react");
+const FetchIdentity = require("./FetchIdentity-D89DgpbN.js");
+const RequireLocalazyAuth = require("./RequireLocalazyAuth-C442750b.js");
+const LanguagesSelector = require("./LanguagesSelector-638KGQYw.js");
 const useTranslation = require("./useTranslation-BdIl-aLe.js");
-const strapiApiBase = require("./strapi-api-base-IG3Pe5Sg.js");
-require("./i18n-C_5tJvr0.js");
+const strapiApiBase = require("./strapi-api-base-BWZYbxxj.js");
+const index$1 = require("./index-DwFm1TyM.js");
+require("./i18n-C5ucROBh.js");
 const WEBHOOK_PATH = "/api/localazy/public/transfer/download";
 const LOCALAZY_DOCS_URL = "https://localazy.com/docs/general/webhooks";
-function WebhookSetup() {
+function WebhookSetup({ disabled = false } = {}) {
   const { t } = useTranslation.useTranslation();
   const [state, setState] = React.useState("loading");
   const [configuredUrl, setConfiguredUrl] = React.useState("");
@@ -73,7 +74,7 @@ function WebhookSetup() {
         /* @__PURE__ */ jsxRuntime.jsx(index.Typography, { textColor: "success600", variant: "omega", fontWeight: "semiBold", children: t("plugin_settings.webhook_setup_already_configured") })
       ] }),
       /* @__PURE__ */ jsxRuntime.jsx(index.Box, { marginTop: 1, children: /* @__PURE__ */ jsxRuntime.jsx(index.Typography, { textColor: "neutral500", variant: "pi", children: configuredUrl }) }),
-      /* @__PURE__ */ jsxRuntime.jsx(index.Box, { marginTop: 3, children: /* @__PURE__ */ jsxRuntime.jsx(index.Button, { variant: "tertiary", onClick: () => setShowModal(true), children: t("plugin_settings.webhook_setup_reconfigure") }) })
+      /* @__PURE__ */ jsxRuntime.jsx(index.Box, { marginTop: 3, children: /* @__PURE__ */ jsxRuntime.jsx(index.Button, { variant: "tertiary", disabled, onClick: () => setShowModal(true), children: t("plugin_settings.webhook_setup_reconfigure") }) })
     ] }),
     state === "not_configured" && /* @__PURE__ */ jsxRuntime.jsxs(index.Box, { children: [
       /* @__PURE__ */ jsxRuntime.jsxs(index.Flex, { alignItems: "center", gap: 2, marginBottom: 2, children: [
@@ -82,7 +83,7 @@ function WebhookSetup() {
       ] }),
       /* @__PURE__ */ jsxRuntime.jsx(index.Typography, { textColor: "neutral600", variant: "pi", children: t("plugin_settings.webhook_setup_description") }),
       /* @__PURE__ */ jsxRuntime.jsxs(index.Flex, { gap: 3, marginTop: 3, alignItems: "center", children: [
-        /* @__PURE__ */ jsxRuntime.jsx(index.Button, { onClick: () => setShowModal(true), children: t("plugin_settings.webhook_setup_button") }),
+        /* @__PURE__ */ jsxRuntime.jsx(index.Button, { disabled, onClick: () => setShowModal(true), children: t("plugin_settings.webhook_setup_button") }),
         /* @__PURE__ */ jsxRuntime.jsx(index.Link, { href: LOCALAZY_DOCS_URL, isExternal: true, startIcon: /* @__PURE__ */ jsxRuntime.jsx(index.ForwardRef$2l, {}), children: t("plugin_settings.webhook_setup_docs_link") })
       ] })
     ] }),
@@ -152,6 +153,13 @@ class PluginSettingsService {
 }
 const GlobalSettings = () => {
   const { t } = useTranslation.useTranslation();
+  const {
+    allowedActions: { canUpdate: canUpdateSettings }
+  } = admin.useRBAC(index$1.PERMISSIONS.SETTINGS_UPDATE);
+  const {
+    allowedActions: { canRead: canReadAdminUsers },
+    isLoading: isLoadingAdminUsersRBAC
+  } = admin.useRBAC([{ action: "admin::users.read", subject: null }]);
   const [projectLanguages, setProjectLanguages] = React.useState([]);
   const [isLoading, setIsLoading] = React.useState(true);
   const [showSavedAlert, setShowSavedAlert] = React.useState(false);
@@ -175,7 +183,7 @@ const GlobalSettings = () => {
   };
   const patchFormModel = (key, value) => {
     const newFormModel = FetchIdentity.cloneDeep(formModel);
-    FetchIdentity.set(newFormModel, key, value);
+    RequireLocalazyAuth.set(newFormModel, key, value);
     setFormModel(newFormModel);
     setHasUnsavedChanges(!RequireLocalazyAuth.isEqual(originalFormModel, newFormModel));
   };
@@ -183,12 +191,15 @@ const GlobalSettings = () => {
     return `${user.firstname} ${user.lastname || ""}${user.lastname ? " " : ""}(${user.email})`;
   };
   React.useEffect(() => {
+    if (isLoadingAdminUsersRBAC) {
+      return;
+    }
     async function fetchData() {
       setIsLoading(true);
       const [project, globalSettings, users2] = await Promise.all([
         LanguagesSelector.ProjectService.getConnectedProject(),
         FetchIdentity.PluginSettingsService.getPluginSettings(),
-        PluginSettingsService.getAdminPanelUsers()
+        canReadAdminUsers ? PluginSettingsService.getAdminPanelUsers().catch(() => []) : Promise.resolve([])
       ]);
       const projectLanguagesWithoutDefaultLanguage = project?.languages?.filter((language) => language.id !== project.sourceLanguage) || [];
       setProjectLanguages(projectLanguagesWithoutDefaultLanguage);
@@ -198,7 +209,7 @@ const GlobalSettings = () => {
       setIsLoading(false);
     }
     void fetchData();
-  }, []);
+  }, [isLoadingAdminUsersRBAC]);
   return /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
     /* @__PURE__ */ jsxRuntime.jsx(
       admin.Layouts.Header,
@@ -206,12 +217,12 @@ const GlobalSettings = () => {
         title: t("plugin_settings.global_settings"),
         subtitle: t("plugin_settings.global_settings_description"),
         primaryAction: /* @__PURE__ */ jsxRuntime.jsxs(index.Flex, { gap: 2, children: [
-          /* @__PURE__ */ jsxRuntime.jsx(index.Button, { variant: "secondary", disabled: !hasUnsavedChanges, onClick: onCancelClick, children: t("plugin_settings.cancel") }),
+          /* @__PURE__ */ jsxRuntime.jsx(index.Button, { variant: "secondary", disabled: !canUpdateSettings || !hasUnsavedChanges, onClick: onCancelClick, children: t("plugin_settings.cancel") }),
           /* @__PURE__ */ jsxRuntime.jsx(
             index.Button,
             {
               startIcon: /* @__PURE__ */ jsxRuntime.jsx(index.ForwardRef$4z, {}),
-              disabled: !hasUnsavedChanges,
+              disabled: !canUpdateSettings || !hasUnsavedChanges,
               onClick: () => {
                 void saveGlobalSettings(formModel);
               },
@@ -250,6 +261,7 @@ const GlobalSettings = () => {
                 {
                   offLabel: t("plugin_settings.off"),
                   onLabel: t("plugin_settings.on"),
+                  disabled: !canUpdateSettings,
                   checked: typeof formModel?.upload?.allowAutomated === "boolean" ? formModel.upload.allowAutomated : false,
                   onChange: (e) => patchFormModel("upload.allowAutomated", e.target.checked)
                 }
@@ -270,7 +282,7 @@ const GlobalSettings = () => {
                   onClear: () => patchFormModel("upload.automatedTriggers", []),
                   value: formModel?.upload?.automatedTriggers || [],
                   onChange: (values) => patchFormModel("upload.automatedTriggers", values),
-                  disabled: typeof formModel?.upload?.allowAutomated === "boolean" ? !formModel.upload.allowAutomated : true,
+                  disabled: !canUpdateSettings || (typeof formModel?.upload?.allowAutomated === "boolean" ? !formModel.upload.allowAutomated : true),
                   multi: true,
                   withTags: true,
                   children: [
@@ -291,6 +303,7 @@ const GlobalSettings = () => {
                   hint: t("plugin_settings.deprecate_source_keys_on_delete_info"),
                   offLabel: t("plugin_settings.off"),
                   onLabel: t("plugin_settings.on"),
+                  disabled: !canUpdateSettings,
                   checked: typeof formModel?.upload?.allowDeprecate === "boolean" ? formModel.upload.allowDeprecate : false,
                   onChange: (e) => patchFormModel("upload.allowDeprecate", e.target.checked)
                 }
@@ -307,7 +320,7 @@ const GlobalSettings = () => {
             /* @__PURE__ */ jsxRuntime.jsx("br", {}),
             /* @__PURE__ */ jsxRuntime.jsx(index.Typography, { variant: "omega", fontWeight: "semiBold", textColor: "neutral800", children: t("plugin_settings.webhook_setup_title") }),
             /* @__PURE__ */ jsxRuntime.jsx("br", {}),
-            /* @__PURE__ */ jsxRuntime.jsx(WebhookSetup, {}),
+            /* @__PURE__ */ jsxRuntime.jsx(WebhookSetup, { disabled: !canUpdateSettings }),
             /* @__PURE__ */ jsxRuntime.jsx("br", {}),
             /* @__PURE__ */ jsxRuntime.jsx("br", {}),
             /* @__PURE__ */ jsxRuntime.jsx(index.Divider, {}),
@@ -324,6 +337,7 @@ const GlobalSettings = () => {
                   hint: t("plugin_settings.processing_of_download_webhook_info"),
                   offLabel: t("plugin_settings.off"),
                   onLabel: t("plugin_settings.on"),
+                  disabled: !canUpdateSettings,
                   checked: typeof formModel?.download?.processDownloadWebhook === "boolean" ? formModel.download.processDownloadWebhook : true,
                   onChange: (e) => patchFormModel("download.processDownloadWebhook", e.target.checked)
                 }
@@ -343,11 +357,20 @@ const GlobalSettings = () => {
                   onClear: () => patchFormModel("download.webhookAuthorId", null),
                   value: formModel?.download?.webhookAuthorId || null,
                   onChange: (value) => patchFormModel("download.webhookAuthorId", value),
-                  children: users.map((user) => /* @__PURE__ */ jsxRuntime.jsx(index.SingleSelectOption, { value: user.id, children: getUserLabel(user) }, user.id))
+                  disabled: !canUpdateSettings || !canReadAdminUsers,
+                  children: (() => {
+                    const savedAuthorId = formModel?.download?.webhookAuthorId;
+                    const needsFallback = savedAuthorId != null && !users.some((user) => String(user.id) === String(savedAuthorId));
+                    return /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+                      needsFallback && /* @__PURE__ */ jsxRuntime.jsx(index.SingleSelectOption, { value: savedAuthorId, children: t("plugin_settings.webhook_author_unknown_user", { id: savedAuthorId }) }, `fallback-${savedAuthorId}`),
+                      users.map((user) => /* @__PURE__ */ jsxRuntime.jsx(index.SingleSelectOption, { value: user.id, children: getUserLabel(user) }, user.id))
+                    ] });
+                  })()
                 }
               ),
               /* @__PURE__ */ jsxRuntime.jsx(index.Field.Hint, {})
             ] }),
+            !canReadAdminUsers && /* @__PURE__ */ jsxRuntime.jsx(index.Box, { paddingTop: 2, children: /* @__PURE__ */ jsxRuntime.jsx(index.Typography, { variant: "pi", textColor: "warning600", children: t("plugin_settings.webhook_author_permission_required") }) }),
             /* @__PURE__ */ jsxRuntime.jsx("br", {}),
             /* @__PURE__ */ jsxRuntime.jsx("br", {}),
             /* @__PURE__ */ jsxRuntime.jsx(
@@ -358,7 +381,8 @@ const GlobalSettings = () => {
                 onChange: (languages) => patchFormModel("download.webhookLanguages", languages),
                 label: t("plugin_settings.webhook_languages"),
                 hint: t("plugin_settings.webhook_languages_info"),
-                placeholder: t("plugin_settings.webhook_languages_placeholder")
+                placeholder: t("plugin_settings.webhook_languages_placeholder"),
+                disabled: !canUpdateSettings
               }
             ),
             /* @__PURE__ */ jsxRuntime.jsx("br", {}),
@@ -370,6 +394,7 @@ const GlobalSettings = () => {
                 {
                   offLabel: t("plugin_settings.off"),
                   onLabel: t("plugin_settings.on"),
+                  disabled: !canUpdateSettings,
                   checked: typeof formModel?.download?.webhookIncrementalSync === "boolean" ? formModel.download.webhookIncrementalSync : true,
                   onChange: (e) => patchFormModel("download.webhookIncrementalSync", e.target.checked)
                 }
@@ -382,11 +407,17 @@ const GlobalSettings = () => {
     ] })
   ] });
 };
-const LocalazyGlobalSettings = () => /* @__PURE__ */ jsxRuntime.jsxs(index.DesignSystemProvider, { theme: FetchIdentity.getDefaultTheme(), children: [
-  /* @__PURE__ */ jsxRuntime.jsx(FetchIdentity.HeadingFixGlobalStyle, {}),
-  /* @__PURE__ */ jsxRuntime.jsxs(FetchIdentity.LocalazyIdentityProvider, { children: [
-    /* @__PURE__ */ jsxRuntime.jsx(FetchIdentity.FetchIdentity, {}),
-    /* @__PURE__ */ jsxRuntime.jsx(RequireLocalazyAuth.RequireLocalazyAuth, { children: /* @__PURE__ */ jsxRuntime.jsx(GlobalSettings, {}) })
-  ] })
-] });
+const LocalazyGlobalSettings = () => {
+  const {
+    allowedActions: { canRead: canReadSettings },
+    isLoading: isLoadingPermissions
+  } = admin.useRBAC(index$1.PERMISSIONS.SETTINGS_READ);
+  return /* @__PURE__ */ jsxRuntime.jsxs(index.DesignSystemProvider, { theme: FetchIdentity.getDefaultTheme(), children: [
+    /* @__PURE__ */ jsxRuntime.jsx(FetchIdentity.HeadingFixGlobalStyle, {}),
+    isLoadingPermissions ? /* @__PURE__ */ jsxRuntime.jsx(FetchIdentity.PluginPageLoader, {}) : !canReadSettings ? /* @__PURE__ */ jsxRuntime.jsx(admin.Page.NoPermissions, {}) : /* @__PURE__ */ jsxRuntime.jsxs(FetchIdentity.LocalazyIdentityProvider, { children: [
+      /* @__PURE__ */ jsxRuntime.jsx(FetchIdentity.FetchIdentity, {}),
+      /* @__PURE__ */ jsxRuntime.jsx(RequireLocalazyAuth.RequireLocalazyAuth, { children: /* @__PURE__ */ jsxRuntime.jsx(GlobalSettings, {}) })
+    ] })
+  ] });
+};
 exports.default = LocalazyGlobalSettings;

package/dist/_chunks/{LocalazyGlobalSettings-DzBI5M-K.mjs → LocalazyGlobalSettings-BWF0s9tM.mjs}

@@ -1,16 +1,17 @@
 import { jsxs, jsx, Fragment } from "react/jsx-runtime";
-import { c as Flex, L as Loader, T as Typography, B as Box, A as Alert, d as ForwardRef$4z, e as Button, f as ForwardRef$3, g as Link, h as ForwardRef$2l, D as Dialog, F as Field, i as ForwardRef$2x, a as Toggle, M as MultiSelect, b as MultiSelectOption, j as Divider, S as SingleSelect, k as SingleSelectOption, l as DesignSystemProvider } from "./index-BjL9XpRh.mjs";
+import { c as Flex, L as Loader, T as Typography, B as Box, A as Alert, d as ForwardRef$4z, e as Button, f as ForwardRef$3, g as Link, h as ForwardRef$2l, D as Dialog, F as Field, i as ForwardRef$2x, a as Toggle, M as MultiSelect, b as MultiSelectOption, j as Divider, S as SingleSelect, k as SingleSelectOption, l as DesignSystemProvider } from "./index-shryj0jT.mjs";
+import { useRBAC, Layouts, Page } from "@strapi/strapi/admin";
 import { useState, useEffect } from "react";
-import { P as PluginSettingsService$1, c as cloneDeep, s as set, g as getDefaultTheme, H as HeadingFixGlobalStyle, L as LocalazyIdentityProvider, F as FetchIdentity } from "./FetchIdentity-Cor4ooZv.mjs";
-import { Layouts } from "@strapi/strapi/admin";
-import { i as isEqual, R as RequireLocalazyAuth } from "./RequireLocalazyAuth-BwoGRfJq.mjs";
-import { P as ProjectService, L as LanguagesSelector } from "./LanguagesSelector-BbrMKwQY.mjs";
+import { P as PluginSettingsService$1, c as cloneDeep, g as getDefaultTheme, H as HeadingFixGlobalStyle, a as PluginPageLoader, L as LocalazyIdentityProvider, F as FetchIdentity } from "./FetchIdentity-DkHj24S5.mjs";
+import { s as set, i as isEqual, R as RequireLocalazyAuth } from "./RequireLocalazyAuth-DbNjEOq-.mjs";
+import { P as ProjectService, L as LanguagesSelector } from "./LanguagesSelector-CR_7I2R1.mjs";
 import { u as useTranslation } from "./useTranslation-CZQ4lU1m.mjs";
-import { c as createStrapiApiAxiosInstance } from "./strapi-api-base-CAzGcwF6.mjs";
-import "./i18n-o24yXf-j.mjs";
+import { c as createStrapiApiAxiosInstance } from "./strapi-api-base-lPo7wq6I.mjs";
+import { P as PERMISSIONS } from "./index-C9Px4v-A.mjs";
+import "./i18n-76ox2llT.mjs";
 const WEBHOOK_PATH = "/api/localazy/public/transfer/download";
 const LOCALAZY_DOCS_URL = "https://localazy.com/docs/general/webhooks";
-function WebhookSetup() {
+function WebhookSetup({ disabled = false } = {}) {
   const { t } = useTranslation();
   const [state, setState] = useState("loading");
   const [configuredUrl, setConfiguredUrl] = useState("");
@@ -71,7 +72,7 @@ function WebhookSetup() {
         /* @__PURE__ */ jsx(Typography, { textColor: "success600", variant: "omega", fontWeight: "semiBold", children: t("plugin_settings.webhook_setup_already_configured") })
       ] }),
       /* @__PURE__ */ jsx(Box, { marginTop: 1, children: /* @__PURE__ */ jsx(Typography, { textColor: "neutral500", variant: "pi", children: configuredUrl }) }),
-      /* @__PURE__ */ jsx(Box, { marginTop: 3, children: /* @__PURE__ */ jsx(Button, { variant: "tertiary", onClick: () => setShowModal(true), children: t("plugin_settings.webhook_setup_reconfigure") }) })
+      /* @__PURE__ */ jsx(Box, { marginTop: 3, children: /* @__PURE__ */ jsx(Button, { variant: "tertiary", disabled, onClick: () => setShowModal(true), children: t("plugin_settings.webhook_setup_reconfigure") }) })
     ] }),
     state === "not_configured" && /* @__PURE__ */ jsxs(Box, { children: [
       /* @__PURE__ */ jsxs(Flex, { alignItems: "center", gap: 2, marginBottom: 2, children: [
@@ -80,7 +81,7 @@ function WebhookSetup() {
       ] }),
       /* @__PURE__ */ jsx(Typography, { textColor: "neutral600", variant: "pi", children: t("plugin_settings.webhook_setup_description") }),
       /* @__PURE__ */ jsxs(Flex, { gap: 3, marginTop: 3, alignItems: "center", children: [
-        /* @__PURE__ */ jsx(Button, { onClick: () => setShowModal(true), children: t("plugin_settings.webhook_setup_button") }),
+        /* @__PURE__ */ jsx(Button, { disabled, onClick: () => setShowModal(true), children: t("plugin_settings.webhook_setup_button") }),
         /* @__PURE__ */ jsx(Link, { href: LOCALAZY_DOCS_URL, isExternal: true, startIcon: /* @__PURE__ */ jsx(ForwardRef$2l, {}), children: t("plugin_settings.webhook_setup_docs_link") })
       ] })
     ] }),
@@ -150,6 +151,13 @@ class PluginSettingsService {
 }
 const GlobalSettings = () => {
   const { t } = useTranslation();
+  const {
+    allowedActions: { canUpdate: canUpdateSettings }
+  } = useRBAC(PERMISSIONS.SETTINGS_UPDATE);
+  const {
+    allowedActions: { canRead: canReadAdminUsers },
+    isLoading: isLoadingAdminUsersRBAC
+  } = useRBAC([{ action: "admin::users.read", subject: null }]);
   const [projectLanguages, setProjectLanguages] = useState([]);
   const [isLoading, setIsLoading] = useState(true);
   const [showSavedAlert, setShowSavedAlert] = useState(false);
@@ -181,12 +189,15 @@ const GlobalSettings = () => {
     return `${user.firstname} ${user.lastname || ""}${user.lastname ? " " : ""}(${user.email})`;
   };
   useEffect(() => {
+    if (isLoadingAdminUsersRBAC) {
+      return;
+    }
     async function fetchData() {
       setIsLoading(true);
       const [project, globalSettings, users2] = await Promise.all([
         ProjectService.getConnectedProject(),
         PluginSettingsService$1.getPluginSettings(),
-        PluginSettingsService.getAdminPanelUsers()
+        canReadAdminUsers ? PluginSettingsService.getAdminPanelUsers().catch(() => []) : Promise.resolve([])
       ]);
       const projectLanguagesWithoutDefaultLanguage = project?.languages?.filter((language) => language.id !== project.sourceLanguage) || [];
       setProjectLanguages(projectLanguagesWithoutDefaultLanguage);
@@ -196,7 +207,7 @@ const GlobalSettings = () => {
       setIsLoading(false);
     }
     void fetchData();
-  }, []);
+  }, [isLoadingAdminUsersRBAC]);
   return /* @__PURE__ */ jsxs(Fragment, { children: [
     /* @__PURE__ */ jsx(
       Layouts.Header,
@@ -204,12 +215,12 @@ const GlobalSettings = () => {
         title: t("plugin_settings.global_settings"),
         subtitle: t("plugin_settings.global_settings_description"),
         primaryAction: /* @__PURE__ */ jsxs(Flex, { gap: 2, children: [
-          /* @__PURE__ */ jsx(Button, { variant: "secondary", disabled: !hasUnsavedChanges, onClick: onCancelClick, children: t("plugin_settings.cancel") }),
+          /* @__PURE__ */ jsx(Button, { variant: "secondary", disabled: !canUpdateSettings || !hasUnsavedChanges, onClick: onCancelClick, children: t("plugin_settings.cancel") }),
           /* @__PURE__ */ jsx(
             Button,
             {
               startIcon: /* @__PURE__ */ jsx(ForwardRef$4z, {}),
-              disabled: !hasUnsavedChanges,
+              disabled: !canUpdateSettings || !hasUnsavedChanges,
               onClick: () => {
                 void saveGlobalSettings(formModel);
               },
@@ -248,6 +259,7 @@ const GlobalSettings = () => {
                 {
                   offLabel: t("plugin_settings.off"),
                   onLabel: t("plugin_settings.on"),
+                  disabled: !canUpdateSettings,
                   checked: typeof formModel?.upload?.allowAutomated === "boolean" ? formModel.upload.allowAutomated : false,
                   onChange: (e) => patchFormModel("upload.allowAutomated", e.target.checked)
                 }
@@ -268,7 +280,7 @@ const GlobalSettings = () => {
                   onClear: () => patchFormModel("upload.automatedTriggers", []),
                   value: formModel?.upload?.automatedTriggers || [],
                   onChange: (values) => patchFormModel("upload.automatedTriggers", values),
-                  disabled: typeof formModel?.upload?.allowAutomated === "boolean" ? !formModel.upload.allowAutomated : true,
+                  disabled: !canUpdateSettings || (typeof formModel?.upload?.allowAutomated === "boolean" ? !formModel.upload.allowAutomated : true),
                   multi: true,
                   withTags: true,
                   children: [
@@ -289,6 +301,7 @@ const GlobalSettings = () => {
                   hint: t("plugin_settings.deprecate_source_keys_on_delete_info"),
                   offLabel: t("plugin_settings.off"),
                   onLabel: t("plugin_settings.on"),
+                  disabled: !canUpdateSettings,
                   checked: typeof formModel?.upload?.allowDeprecate === "boolean" ? formModel.upload.allowDeprecate : false,
                   onChange: (e) => patchFormModel("upload.allowDeprecate", e.target.checked)
                 }
@@ -305,7 +318,7 @@ const GlobalSettings = () => {
             /* @__PURE__ */ jsx("br", {}),
             /* @__PURE__ */ jsx(Typography, { variant: "omega", fontWeight: "semiBold", textColor: "neutral800", children: t("plugin_settings.webhook_setup_title") }),
             /* @__PURE__ */ jsx("br", {}),
-            /* @__PURE__ */ jsx(WebhookSetup, {}),
+            /* @__PURE__ */ jsx(WebhookSetup, { disabled: !canUpdateSettings }),
             /* @__PURE__ */ jsx("br", {}),
             /* @__PURE__ */ jsx("br", {}),
             /* @__PURE__ */ jsx(Divider, {}),
@@ -322,6 +335,7 @@ const GlobalSettings = () => {
                   hint: t("plugin_settings.processing_of_download_webhook_info"),
                   offLabel: t("plugin_settings.off"),
                   onLabel: t("plugin_settings.on"),
+                  disabled: !canUpdateSettings,
                   checked: typeof formModel?.download?.processDownloadWebhook === "boolean" ? formModel.download.processDownloadWebhook : true,
                   onChange: (e) => patchFormModel("download.processDownloadWebhook", e.target.checked)
                 }
@@ -341,11 +355,20 @@ const GlobalSettings = () => {
                   onClear: () => patchFormModel("download.webhookAuthorId", null),
                   value: formModel?.download?.webhookAuthorId || null,
                   onChange: (value) => patchFormModel("download.webhookAuthorId", value),
-                  children: users.map((user) => /* @__PURE__ */ jsx(SingleSelectOption, { value: user.id, children: getUserLabel(user) }, user.id))
+                  disabled: !canUpdateSettings || !canReadAdminUsers,
+                  children: (() => {
+                    const savedAuthorId = formModel?.download?.webhookAuthorId;
+                    const needsFallback = savedAuthorId != null && !users.some((user) => String(user.id) === String(savedAuthorId));
+                    return /* @__PURE__ */ jsxs(Fragment, { children: [
+                      needsFallback && /* @__PURE__ */ jsx(SingleSelectOption, { value: savedAuthorId, children: t("plugin_settings.webhook_author_unknown_user", { id: savedAuthorId }) }, `fallback-${savedAuthorId}`),
+                      users.map((user) => /* @__PURE__ */ jsx(SingleSelectOption, { value: user.id, children: getUserLabel(user) }, user.id))
+                    ] });
+                  })()
                 }
               ),
               /* @__PURE__ */ jsx(Field.Hint, {})
             ] }),
+            !canReadAdminUsers && /* @__PURE__ */ jsx(Box, { paddingTop: 2, children: /* @__PURE__ */ jsx(Typography, { variant: "pi", textColor: "warning600", children: t("plugin_settings.webhook_author_permission_required") }) }),
             /* @__PURE__ */ jsx("br", {}),
             /* @__PURE__ */ jsx("br", {}),
             /* @__PURE__ */ jsx(
@@ -356,7 +379,8 @@ const GlobalSettings = () => {
                 onChange: (languages) => patchFormModel("download.webhookLanguages", languages),
                 label: t("plugin_settings.webhook_languages"),
                 hint: t("plugin_settings.webhook_languages_info"),
-                placeholder: t("plugin_settings.webhook_languages_placeholder")
+                placeholder: t("plugin_settings.webhook_languages_placeholder"),
+                disabled: !canUpdateSettings
               }
             ),
             /* @__PURE__ */ jsx("br", {}),
@@ -368,6 +392,7 @@ const GlobalSettings = () => {
                 {
                   offLabel: t("plugin_settings.off"),
                   onLabel: t("plugin_settings.on"),
+                  disabled: !canUpdateSettings,
                   checked: typeof formModel?.download?.webhookIncrementalSync === "boolean" ? formModel.download.webhookIncrementalSync : true,
                   onChange: (e) => patchFormModel("download.webhookIncrementalSync", e.target.checked)
                 }
@@ -380,13 +405,19 @@ const GlobalSettings = () => {
     ] })
   ] });
 };
-const LocalazyGlobalSettings = () => /* @__PURE__ */ jsxs(DesignSystemProvider, { theme: getDefaultTheme(), children: [
-  /* @__PURE__ */ jsx(HeadingFixGlobalStyle, {}),
-  /* @__PURE__ */ jsxs(LocalazyIdentityProvider, { children: [
-    /* @__PURE__ */ jsx(FetchIdentity, {}),
-    /* @__PURE__ */ jsx(RequireLocalazyAuth, { children: /* @__PURE__ */ jsx(GlobalSettings, {}) })
-  ] })
-] });
+const LocalazyGlobalSettings = () => {
+  const {
+    allowedActions: { canRead: canReadSettings },
+    isLoading: isLoadingPermissions
+  } = useRBAC(PERMISSIONS.SETTINGS_READ);
+  return /* @__PURE__ */ jsxs(DesignSystemProvider, { theme: getDefaultTheme(), children: [
+    /* @__PURE__ */ jsx(HeadingFixGlobalStyle, {}),
+    isLoadingPermissions ? /* @__PURE__ */ jsx(PluginPageLoader, {}) : !canReadSettings ? /* @__PURE__ */ jsx(Page.NoPermissions, {}) : /* @__PURE__ */ jsxs(LocalazyIdentityProvider, { children: [
+      /* @__PURE__ */ jsx(FetchIdentity, {}),
+      /* @__PURE__ */ jsx(RequireLocalazyAuth, { children: /* @__PURE__ */ jsx(GlobalSettings, {}) })
+    ] })
+  ] });
+};
 export {
   LocalazyGlobalSettings as default
 };

package/dist/_chunks/{LocalazyPanel-W6j8N1WC.mjs → LocalazyPanel-4HRa1jNl.mjs}

@@ -1,12 +1,15 @@
 import { jsxs, jsx } from "react/jsx-runtime";
 import { useState, useEffect } from "react";
 import { useLocation } from "react-router-dom";
-import { T as Typography, a as Toggle } from "./index-BjL9XpRh.mjs";
-import EntryExclusionService from "./entry-exclusion-service-D7gaRHPE.mjs";
-import "./i18n-o24yXf-j.mjs";
+import { T as Typography, a as Toggle } from "./index-shryj0jT.mjs";
+import { useRBAC } from "@strapi/strapi/admin";
+import EntryExclusionService from "./entry-exclusion-service-Bd3mUDde.mjs";
+import { P as PERMISSIONS } from "./index-C9Px4v-A.mjs";
+import "./i18n-76ox2llT.mjs";
 import { u as useTranslation } from "./useTranslation-CZQ4lU1m.mjs";
 const LocalazyPanel = () => {
   const { t } = useTranslation();
+  const { allowedActions } = useRBAC([...PERMISSIONS.READ, ...PERMISSIONS.TRANSFER]);
   const location = useLocation();
   const [isExcluded, setIsExcluded] = useState(false);
   const [isLoading, setIsLoading] = useState(true);
@@ -29,7 +32,7 @@ const LocalazyPanel = () => {
   }, [location.pathname]);
   useEffect(() => {
     const loadExclusionState = async () => {
-      if (!contentType || !documentId) {
+      if (!contentType || !documentId || !allowedActions.canRead) {
         setIsLoading(false);
         return;
       }
@@ -45,7 +48,10 @@ const LocalazyPanel = () => {
       }
     };
     void loadExclusionState();
-  }, [contentType, documentId]);
+  }, [contentType, documentId, allowedActions.canRead]);
+  if (!allowedActions.canRead) {
+    return null;
+  }
   const handleToggleChange = async (event) => {
     const { checked } = event.target;
     const value = checked;
@@ -71,7 +77,7 @@ const LocalazyPanel = () => {
           checked: isExcluded,
           onLabel: "True",
           offLabel: "False",
-          disabled: isLoading || !contentType || !documentId,
+          disabled: isLoading || !contentType || !documentId || !allowedActions.canTransfer,
           onChange: handleToggleChange
         }
       )

package/dist/_chunks/{LocalazyPanel-KQPLxTDz.js → LocalazyPanel-D0w9JSIS.js}

@@ -3,12 +3,15 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const jsxRuntime = require("react/jsx-runtime");
 const React = require("react");
 const reactRouterDom = require("react-router-dom");
-const index = require("./index-CTkxoioB.js");
-const entryExclusionService = require("./entry-exclusion-service-Bwruvyce.js");
-require("./i18n-C_5tJvr0.js");
+const index$1 = require("./index-CTkxoioB.js");
+const admin = require("@strapi/strapi/admin");
+const entryExclusionService = require("./entry-exclusion-service-CAIcybXX.js");
+const index = require("./index-DwFm1TyM.js");
+require("./i18n-C5ucROBh.js");
 const useTranslation = require("./useTranslation-BdIl-aLe.js");
 const LocalazyPanel = () => {
   const { t } = useTranslation.useTranslation();
+  const { allowedActions } = admin.useRBAC([...index.PERMISSIONS.READ, ...index.PERMISSIONS.TRANSFER]);
   const location = reactRouterDom.useLocation();
   const [isExcluded, setIsExcluded] = React.useState(false);
   const [isLoading, setIsLoading] = React.useState(true);
@@ -31,7 +34,7 @@ const LocalazyPanel = () => {
   }, [location.pathname]);
   React.useEffect(() => {
     const loadExclusionState = async () => {
-      if (!contentType || !documentId) {
+      if (!contentType || !documentId || !allowedActions.canRead) {
         setIsLoading(false);
         return;
       }
@@ -47,7 +50,10 @@ const LocalazyPanel = () => {
       }
     };
     void loadExclusionState();
-  }, [contentType, documentId]);
+  }, [contentType, documentId, allowedActions.canRead]);
+  if (!allowedActions.canRead) {
+    return null;
+  }
   const handleToggleChange = async (event) => {
     const { checked } = event.target;
     const value = checked;
@@ -66,14 +72,14 @@ const LocalazyPanel = () => {
   return {
     title: "Localazy",
     content: /* @__PURE__ */ jsxRuntime.jsxs("div", { children: [
-      /* @__PURE__ */ jsxRuntime.jsx("div", { style: { marginBottom: "8px" }, children: /* @__PURE__ */ jsxRuntime.jsx(index.Typography, { children: t("plugin_settings.exclude_from_translation") }) }),
+      /* @__PURE__ */ jsxRuntime.jsx("div", { style: { marginBottom: "8px" }, children: /* @__PURE__ */ jsxRuntime.jsx(index$1.Typography, { children: t("plugin_settings.exclude_from_translation") }) }),
       /* @__PURE__ */ jsxRuntime.jsx(
-        index.Toggle,
+        index$1.Toggle,
         {
           checked: isExcluded,
           onLabel: "True",
           offLabel: "False",
-          disabled: isLoading || !contentType || !documentId,
+          disabled: isLoading || !contentType || !documentId || !allowedActions.canTransfer,
           onChange: handleToggleChange
         }
       )

package/dist/_chunks/{LocalazyStatusColumn-B7Q_U2Lu.js → LocalazyStatusColumn-BR3f8rKp.js}

@@ -3,17 +3,20 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const jsxRuntime = require("react/jsx-runtime");
 const React = require("react");
 const styled = require("styled-components");
-const entryExclusionService = require("./entry-exclusion-service-Bwruvyce.js");
-require("./i18n-C_5tJvr0.js");
+const admin = require("@strapi/strapi/admin");
+const entryExclusionService = require("./entry-exclusion-service-CAIcybXX.js");
+const index = require("./index-DwFm1TyM.js");
+require("./i18n-C5ucROBh.js");
 const useTranslation = require("./useTranslation-BdIl-aLe.js");
 const LocalazyStatusColumn = ({ data, model }) => {
   const { t } = useTranslation.useTranslation();
   const theme = styled.useTheme();
+  const { allowedActions } = admin.useRBAC(index.PERMISSIONS.READ);
   const [isExcluded, setIsExcluded] = React.useState(null);
   const [isLoading, setIsLoading] = React.useState(true);
   React.useEffect(() => {
     const checkStatus = async () => {
-      if (!data?.documentId || !model) {
+      if (!data?.documentId || !model || !allowedActions.canRead) {
         setIsLoading(false);
         return;
       }
@@ -28,7 +31,10 @@ const LocalazyStatusColumn = ({ data, model }) => {
       }
     };
     void checkStatus();
-  }, [data?.documentId, model]);
+  }, [data?.documentId, model, allowedActions.canRead]);
+  if (!allowedActions.canRead) {
+    return null;
+  }
   if (isLoading) {
     return /* @__PURE__ */ jsxRuntime.jsx("span", { style: { color: theme.colors.neutral600, fontSize: "12px" }, children: "..." });
   }

package/dist/_chunks/{LocalazyStatusColumn-CrhsCjgp.mjs → LocalazyStatusColumn-D4-rZZUK.mjs}

@@ -1,17 +1,20 @@
 import { jsx } from "react/jsx-runtime";
 import { useState, useEffect } from "react";
 import { useTheme } from "styled-components";
-import EntryExclusionService from "./entry-exclusion-service-D7gaRHPE.mjs";
-import "./i18n-o24yXf-j.mjs";
+import { useRBAC } from "@strapi/strapi/admin";
+import EntryExclusionService from "./entry-exclusion-service-Bd3mUDde.mjs";
+import { P as PERMISSIONS } from "./index-C9Px4v-A.mjs";
+import "./i18n-76ox2llT.mjs";
 import { u as useTranslation } from "./useTranslation-CZQ4lU1m.mjs";
 const LocalazyStatusColumn = ({ data, model }) => {
   const { t } = useTranslation();
   const theme = useTheme();
+  const { allowedActions } = useRBAC(PERMISSIONS.READ);
   const [isExcluded, setIsExcluded] = useState(null);
   const [isLoading, setIsLoading] = useState(true);
   useEffect(() => {
     const checkStatus = async () => {
-      if (!data?.documentId || !model) {
+      if (!data?.documentId || !model || !allowedActions.canRead) {
         setIsLoading(false);
         return;
       }
@@ -26,7 +29,10 @@ const LocalazyStatusColumn = ({ data, model }) => {
       }
     };
     void checkStatus();
-  }, [data?.documentId, model]);
+  }, [data?.documentId, model, allowedActions.canRead]);
+  if (!allowedActions.canRead) {
+    return null;
+  }
   if (isLoading) {
     return /* @__PURE__ */ jsx("span", { style: { color: theme.colors.neutral600, fontSize: "12px" }, children: "..." });
   }