@micha.bigler/ui-core-micha 2.2.6 → 2.2.8

package/src/pages/AccountPage.jsx

@@ -38,6 +38,11 @@ export function AccountPage({
   userListExtraContext = null,
   userListRefreshTrigger = 0,
   userListCanEditUser = null,
+  userListShowRoleColumn = true,
+  userListOnChangeRole = null,
+  userListShowDeleteAction = true,
+  userListCanDeleteUser = null,
+  userListOnDeleteUser = null,
   showBulkInviteCsvTab = false,
   bulkInviteCsvProps = {},
   extraTabs = [],
@@ -62,6 +67,13 @@ export function AccountPage({
   
   // NEU: Superuser-Flag prüfen
   const isSuperUser = user?.is_superuser || false;
+  const canViewUsers = Boolean(isSuperUser || perms.can_view_users);
+  const canViewInvite = Boolean(isSuperUser || perms.can_view_invite || perms.can_invite);
+  const canViewAuthPolicy = Boolean(isSuperUser || perms.can_view_auth_policy);
+  const canWriteAuthPolicy = Boolean(isSuperUser || perms.can_write_auth_policy);
+  const canSendInvites = Boolean(isSuperUser || perms.can_send_invites);
+  const canManageAccessCodes = Boolean(isSuperUser || perms.can_manage_access_codes);
+  const canManageSignupQr = Boolean(isSuperUser || perms.can_manage_signup_qr);
 
   const handleTabChange = (_event, newValue) => {
     setSearchParams({ tab: newValue });
@@ -74,7 +86,7 @@ export function AccountPage({
 
   useEffect(() => {
     let active = true;
-    const canLoadPolicy = Boolean(user) && (isSuperUser || perms.can_invite || perms.can_manage_access_codes);
+    const canLoadPolicy = Boolean(user) && (canViewAuthPolicy || canManageSignupQr || canManageAccessCodes);
 
     if (!canLoadPolicy) {
       setAuthPolicy(null);
@@ -102,7 +114,7 @@ export function AccountPage({
     return () => {
       active = false;
     };
-  }, [user, isSuperUser, perms.can_invite, perms.can_manage_access_codes, t]);
+  }, [user, canViewAuthPolicy, canManageSignupQr, canManageAccessCodes, t]);
 
   // 3. Dynamic Tabs (angepasst für Superuser)
   const tabs = useMemo(() => {
@@ -116,11 +128,11 @@ export function AccountPage({
 
     // Logik: Superuser darf ALLES, sonst gelten die spezifischen Permissions
     
-    if (isSuperUser || perms.can_view_users) {
+    if (canViewUsers) {
       list.push({ value: 'users', label: t('Account.TAB_USERS', 'Users') });
     }
     
-    if (isSuperUser || perms.can_invite || perms.can_manage_access_codes) {
+    if (canViewInvite) {
       list.push({ value: 'invite', label: t('Account.TAB_INVITE', 'Invite') });
     }
     
@@ -140,7 +152,7 @@ export function AccountPage({
     });
 
     return list;
-  }, [user, perms, t, isSuperUser, extraTabs]);
+  }, [user, perms, t, isSuperUser, extraTabs, canViewUsers, canViewInvite]);
 
   // 4. Loading & Auth Checks
   if (loading) {
@@ -220,6 +232,11 @@ export function AccountPage({
             extraContext={userListExtraContext}
             refreshTrigger={userListRefreshTrigger}
             canEditUser={userListCanEditUser}
+            showRoleColumn={userListShowRoleColumn}
+            onChangeRole={userListOnChangeRole}
+            showDeleteAction={userListShowDeleteAction}
+            canDeleteUser={userListCanDeleteUser}
+            onDeleteUser={userListOnDeleteUser}
           />
         </Box>
       )}
@@ -227,29 +244,30 @@ export function AccountPage({
       {safeTab === 'invite' && (
         <Box sx={{ mt: 2 }}>
           <Stack spacing={2.5}>
-            {(isSuperUser || perms.can_invite) && (
+            {canViewAuthPolicy && (
               <Paper variant="outlined" sx={{ p: 2.5, borderRadius: 2 }}>
-                <AuthFactorRequirementCard />
+                <AuthFactorRequirementCard canEdit={canWriteAuthPolicy} policy={authPolicy} />
               </Paper>
             )}
 
-            {(isSuperUser || perms.can_invite) && (
+            {canViewAuthPolicy && (
               <Paper variant="outlined" sx={{ p: 2.5, borderRadius: 2 }}>
                 <RegistrationMethodsManager
                   policy={authPolicy}
                   error={authPolicyError}
                   onPolicyChange={setAuthPolicy}
+                  canEdit={canWriteAuthPolicy}
                 />
               </Paper>
             )}
 
-            {(isSuperUser || perms.can_invite) && Boolean(authPolicy?.allow_admin_invite) && (
+            {canSendInvites && Boolean(authPolicy?.allow_admin_invite) && (
               <Paper variant="outlined" sx={{ p: 2.5, borderRadius: 2 }}>
                 <UserInviteComponent />
               </Paper>
             )}
 
-            {(isSuperUser || perms.can_manage_access_codes) && Boolean(authPolicy?.allow_self_signup_access_code) && (
+            {canManageAccessCodes && Boolean(authPolicy?.allow_self_signup_access_code) && (
               <Paper variant="outlined" sx={{ p: 2.5, borderRadius: 2 }}>
                 <Typography variant="h6" gutterBottom>
                   {t('Auth.ACCESS_CODE_MANAGER_TITLE', 'Access Codes')}
@@ -261,33 +279,35 @@ export function AccountPage({
               </Paper>
             )}
 
-            {(isSuperUser || perms.can_invite) && showBulkInviteCsvTab && Boolean(authPolicy?.allow_admin_invite) && (
+            {canSendInvites && showBulkInviteCsvTab && Boolean(authPolicy?.allow_admin_invite) && (
               <Paper variant="outlined" sx={{ p: 2.5, borderRadius: 2 }}>
                 <BulkInviteCsvTab {...bulkInviteCsvProps} />
               </Paper>
             )}
 
-            {(isSuperUser || perms.can_invite) && Boolean(authPolicy?.allow_self_signup_email_domain) && (
+            {canViewAuthPolicy && Boolean(authPolicy?.allow_self_signup_email_domain) && (
               <Paper variant="outlined" sx={{ p: 2.5, borderRadius: 2 }}>
                 <AllowedEmailDomainsManager
                   enabled={Boolean(authPolicy?.allow_self_signup_email_domain)}
                   domains={authPolicy?.allowed_email_domains || []}
                   onPolicyChange={setAuthPolicy}
+                  canEdit={canWriteAuthPolicy}
                 />
               </Paper>
             )}
 
-            {(isSuperUser || perms.can_invite) && Boolean(authPolicy?.allow_self_signup_qr) && (
+            {canViewAuthPolicy && Boolean(authPolicy?.allow_self_signup_qr) && (
               <Paper variant="outlined" sx={{ p: 2.5, borderRadius: 2 }}>
                 <QrSignupValidityManager
                   enabled={Boolean(authPolicy?.allow_self_signup_qr)}
                   expiryDays={authPolicy?.signup_qr_expiry_days}
                   onPolicyChange={setAuthPolicy}
+                  canEdit={canWriteAuthPolicy}
                 />
               </Paper>
             )}
 
-            {(isSuperUser || perms.can_invite) && Boolean(authPolicy?.allow_self_signup_qr) && (
+            {canManageSignupQr && Boolean(authPolicy?.allow_self_signup_qr) && (
               <Paper variant="outlined" sx={{ p: 2.5, borderRadius: 2 }}>
                 <QrSignupManager
                   enabled={Boolean(authPolicy?.allow_self_signup_qr)}