@openedx/frontend-app-admin-console 1.0.0-alpha.0

package/dist/authz-module/roles-permissions/index.js

@@ -0,0 +1,15 @@
+import { CONTENT_COURSE_PERMISSIONS } from './course/constants';
+import { CONTENT_LIBRARY_PERMISSIONS, libraryRolesMetadata as _libraryRolesMetadata } from './library/constants';
+export { CONTENT_LIBRARY_PERMISSIONS, libraryResourceTypes, libraryPermissions, libraryRolesMetadata, libraryRolesWithPermissions, } from './library/constants';
+export const LIBRARY_ROLE_KEYS = _libraryRolesMetadata.map((r) => r.role).join(',');
+export { CONTENT_COURSE_PERMISSIONS, courseResourceTypes, coursePermissions, courseRolesWithPermissions, courseRolesMetadata, } from './course/constants';
+export const MANAGE_TEAM_PERMISSIONS = [
+    { action: CONTENT_LIBRARY_PERMISSIONS.MANAGE_LIBRARY_TEAM },
+    { action: CONTENT_COURSE_PERMISSIONS.MANAGE_COURSE_TEAM },
+];
+export const VIEW_TEAM_PERMISSIONS = [
+    { action: CONTENT_LIBRARY_PERMISSIONS.VIEW_LIBRARY_TEAM },
+    { action: CONTENT_COURSE_PERMISSIONS.VIEW_COURSE_TEAM },
+];
+export { buildPermissionMatrixByResource, getPermissionMetadata } from './utils';
+//# sourceMappingURL=index.js.map

package/dist/authz-module/roles-permissions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/authz-module/roles-permissions/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,2BAA2B,EAAE,oBAAoB,IAAI,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAEjH,OAAO,EACL,2BAA2B,EAC3B,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,EACpB,2BAA2B,GAC5B,MAAM,qBAAqB,CAAC;AAE7B,MAAM,CAAC,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEpF,OAAO,EACL,0BAA0B,EAC1B,mBAAmB,EACnB,iBAAiB,EACjB,0BAA0B,EAC1B,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,CAAC,MAAM,uBAAuB,GAAyB;IAC3D,EAAE,MAAM,EAAE,2BAA2B,CAAC,mBAAmB,EAAE;IAC3D,EAAE,MAAM,EAAE,0BAA0B,CAAC,kBAAkB,EAAE;CAC1D,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAyB;IACzD,EAAE,MAAM,EAAE,2BAA2B,CAAC,iBAAiB,EAAE;IACzD,EAAE,MAAM,EAAE,0BAA0B,CAAC,gBAAgB,EAAE;CACxD,CAAC;AACF,OAAO,EAAE,+BAA+B,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC","sourcesContent":["import { CONTENT_COURSE_PERMISSIONS } from './course/constants';\nimport { CONTENT_LIBRARY_PERMISSIONS, libraryRolesMetadata as _libraryRolesMetadata } from './library/constants';\n\nexport {\n  CONTENT_LIBRARY_PERMISSIONS,\n  libraryResourceTypes,\n  libraryPermissions,\n  libraryRolesMetadata,\n  libraryRolesWithPermissions,\n} from './library/constants';\n\nexport const LIBRARY_ROLE_KEYS = _libraryRolesMetadata.map((r) => r.role).join(',');\n\nexport {\n  CONTENT_COURSE_PERMISSIONS,\n  courseResourceTypes,\n  coursePermissions,\n  courseRolesWithPermissions,\n  courseRolesMetadata,\n} from './course/constants';\n\nexport const MANAGE_TEAM_PERMISSIONS: { action: string }[] = [\n  { action: CONTENT_LIBRARY_PERMISSIONS.MANAGE_LIBRARY_TEAM },\n  { action: CONTENT_COURSE_PERMISSIONS.MANAGE_COURSE_TEAM },\n];\n\nexport const VIEW_TEAM_PERMISSIONS: { action: string }[] = [\n  { action: CONTENT_LIBRARY_PERMISSIONS.VIEW_LIBRARY_TEAM },\n  { action: CONTENT_COURSE_PERMISSIONS.VIEW_COURSE_TEAM },\n];\nexport { buildPermissionMatrixByResource, getPermissionMetadata } from './utils';\n"]}

package/dist/authz-module/roles-permissions/library/constants.d.ts

@@ -0,0 +1,18 @@
+import { PermissionMetadata, ResourceMetadata, Role, RoleMetadata } from '../../../types';
+export declare const CONTENT_LIBRARY_PERMISSIONS: {
+    DELETE_LIBRARY: string;
+    MANAGE_LIBRARY_TAGS: string;
+    VIEW_LIBRARY: string;
+    EDIT_LIBRARY_CONTENT: string;
+    PUBLISH_LIBRARY_CONTENT: string;
+    REUSE_LIBRARY_CONTENT: string;
+    MANAGE_LIBRARY_TEAM: string;
+    VIEW_LIBRARY_TEAM: string;
+    CREATE_LIBRARY_COLLECTION: string;
+    EDIT_LIBRARY_COLLECTION: string;
+    DELETE_LIBRARY_COLLECTION: string;
+};
+export declare const libraryRolesMetadata: RoleMetadata[];
+export declare const libraryResourceTypes: ResourceMetadata[];
+export declare const libraryPermissions: PermissionMetadata[];
+export declare const libraryRolesWithPermissions: Role[];

package/dist/authz-module/roles-permissions/library/constants.js

@@ -0,0 +1,193 @@
+import { Group, CollectionsBookmark, Notes, AutoAwesomeMosaic, RemoveRedEye, Settings, DownloadDone, Plus, EditOutline, Delete, SpinnerIcon, } from '@openedx/paragon/icons';
+export const CONTENT_LIBRARY_PERMISSIONS = {
+    DELETE_LIBRARY: 'content_libraries.delete_library',
+    MANAGE_LIBRARY_TAGS: 'content_libraries.manage_library_tags',
+    VIEW_LIBRARY: 'content_libraries.view_library',
+    EDIT_LIBRARY_CONTENT: 'content_libraries.edit_library_content',
+    PUBLISH_LIBRARY_CONTENT: 'content_libraries.publish_library_content',
+    REUSE_LIBRARY_CONTENT: 'content_libraries.reuse_library_content',
+    MANAGE_LIBRARY_TEAM: 'content_libraries.manage_library_team',
+    VIEW_LIBRARY_TEAM: 'content_libraries.view_library_team',
+    CREATE_LIBRARY_COLLECTION: 'content_libraries.create_library_collection',
+    EDIT_LIBRARY_COLLECTION: 'content_libraries.edit_library_collection',
+    DELETE_LIBRARY_COLLECTION: 'content_libraries.delete_library_collection',
+};
+// Note: this information will eventually come from the backend API
+// but for the MVP we decided to manage it in the frontend
+export const libraryRolesMetadata = [
+    {
+        role: 'library_admin',
+        name: 'Library Admin',
+        description: 'The Library Admin has full control over the library, including managing users, modifying content, and handling publishing workflows. They ensure content is properly maintained and accessible as needed.',
+        contextType: 'library',
+    },
+    {
+        role: 'library_author',
+        name: 'Library Author',
+        description: 'The Library Author is responsible for creating, editing, and publishing content within a library. They can manage tags and collections but cannot delete libraries or manage users.',
+        contextType: 'library',
+    },
+    {
+        role: 'library_contributor',
+        name: 'Library Contributor',
+        description: 'The Library Contributor can create and edit content within a library but cannot publish it. They support the authoring process while leaving final publishing to Authors or Admins.',
+        contextType: 'library',
+    },
+    {
+        role: 'library_user',
+        name: 'Library User',
+        description: 'The Library User can view and reuse content but cannot edit or delete any resource.',
+        contextType: 'library',
+    },
+];
+export const libraryResourceTypes = [
+    {
+        key: 'library',
+        label: 'Library',
+        description: 'Permissions related to viewing, managing, and publishing the library structure and metadata.',
+        icon: CollectionsBookmark,
+    },
+    {
+        key: 'library_content',
+        label: 'Content',
+        description: 'Permissions for editing, publishing, and reusing content within the library.',
+        icon: Notes,
+    },
+    {
+        key: 'library_team',
+        label: 'Team',
+        description: 'Permissions for viewing and managing users who have access to the library.',
+        icon: Group,
+    },
+    {
+        key: 'library_collection',
+        label: 'Collection',
+        description: 'Permissions for creating and managing content collections within the library.',
+        icon: AutoAwesomeMosaic,
+    },
+];
+export const libraryPermissions = [
+    {
+        key: CONTENT_LIBRARY_PERMISSIONS.VIEW_LIBRARY,
+        resource: 'library',
+        label: 'View',
+        description: 'See the library in Studio and access its content in read-only mode.',
+        icon: RemoveRedEye,
+    },
+    {
+        key: CONTENT_LIBRARY_PERMISSIONS.MANAGE_LIBRARY_TAGS,
+        resource: 'library',
+        label: 'Manage tags',
+        description: 'Create, edit, and delete tags on this library.',
+        icon: Settings,
+    },
+    {
+        key: CONTENT_LIBRARY_PERMISSIONS.DELETE_LIBRARY,
+        resource: 'library',
+        label: 'Delete',
+        description: 'Allows users to delete the entire content library.',
+        icon: Delete,
+    },
+    {
+        key: CONTENT_LIBRARY_PERMISSIONS.EDIT_LIBRARY_CONTENT,
+        resource: 'library_content',
+        label: 'Edit',
+        description: 'Create, edit, and delete content items in the library.',
+        icon: EditOutline,
+    },
+    {
+        key: CONTENT_LIBRARY_PERMISSIONS.PUBLISH_LIBRARY_CONTENT,
+        resource: 'library_content',
+        label: 'Publish',
+        description: 'Publish individual content items to make them available for reuse in courses.',
+        icon: DownloadDone,
+    },
+    {
+        key: CONTENT_LIBRARY_PERMISSIONS.REUSE_LIBRARY_CONTENT,
+        resource: 'library_content',
+        label: 'Reuse',
+        description: 'Add published content from this library to a course.',
+        icon: SpinnerIcon,
+    },
+    {
+        key: CONTENT_LIBRARY_PERMISSIONS.VIEW_LIBRARY_TEAM,
+        resource: 'library_team',
+        label: 'View',
+        description: 'See the list of users with a role assigned to this library.',
+        icon: RemoveRedEye,
+    },
+    {
+        key: CONTENT_LIBRARY_PERMISSIONS.MANAGE_LIBRARY_TEAM,
+        resource: 'library_team',
+        label: 'Manage',
+        description: 'Add, change, or remove role assignments for this library from the Roles and Permissions console.',
+        icon: Settings,
+    },
+    {
+        key: CONTENT_LIBRARY_PERMISSIONS.CREATE_LIBRARY_COLLECTION,
+        resource: 'library_collection',
+        label: 'Create',
+        description: 'Create new collections to organize content within the library.',
+        icon: Plus,
+    },
+    {
+        key: CONTENT_LIBRARY_PERMISSIONS.EDIT_LIBRARY_COLLECTION,
+        resource: 'library_collection',
+        label: 'Edit',
+        description: 'Update the name and contents of existing collections.',
+        icon: EditOutline,
+    },
+    {
+        key: CONTENT_LIBRARY_PERMISSIONS.DELETE_LIBRARY_COLLECTION,
+        resource: 'library_collection',
+        label: 'Delete',
+        description: 'Permanently remove collections from the library.',
+        icon: Delete,
+    },
+];
+const LIBRARY_ROLE_PERMISSIONS = {
+    library_admin: [
+        CONTENT_LIBRARY_PERMISSIONS.VIEW_LIBRARY,
+        CONTENT_LIBRARY_PERMISSIONS.MANAGE_LIBRARY_TAGS,
+        CONTENT_LIBRARY_PERMISSIONS.DELETE_LIBRARY,
+        CONTENT_LIBRARY_PERMISSIONS.EDIT_LIBRARY_CONTENT,
+        CONTENT_LIBRARY_PERMISSIONS.PUBLISH_LIBRARY_CONTENT,
+        CONTENT_LIBRARY_PERMISSIONS.VIEW_LIBRARY_TEAM,
+        CONTENT_LIBRARY_PERMISSIONS.MANAGE_LIBRARY_TEAM,
+        CONTENT_LIBRARY_PERMISSIONS.CREATE_LIBRARY_COLLECTION,
+        CONTENT_LIBRARY_PERMISSIONS.EDIT_LIBRARY_COLLECTION,
+        CONTENT_LIBRARY_PERMISSIONS.DELETE_LIBRARY_COLLECTION,
+        CONTENT_LIBRARY_PERMISSIONS.REUSE_LIBRARY_CONTENT,
+    ],
+    library_author: [
+        CONTENT_LIBRARY_PERMISSIONS.VIEW_LIBRARY,
+        CONTENT_LIBRARY_PERMISSIONS.MANAGE_LIBRARY_TAGS,
+        CONTENT_LIBRARY_PERMISSIONS.EDIT_LIBRARY_CONTENT,
+        CONTENT_LIBRARY_PERMISSIONS.PUBLISH_LIBRARY_CONTENT,
+        CONTENT_LIBRARY_PERMISSIONS.REUSE_LIBRARY_CONTENT,
+        CONTENT_LIBRARY_PERMISSIONS.VIEW_LIBRARY_TEAM,
+        CONTENT_LIBRARY_PERMISSIONS.CREATE_LIBRARY_COLLECTION,
+        CONTENT_LIBRARY_PERMISSIONS.EDIT_LIBRARY_COLLECTION,
+        CONTENT_LIBRARY_PERMISSIONS.DELETE_LIBRARY_COLLECTION,
+    ],
+    library_contributor: [
+        CONTENT_LIBRARY_PERMISSIONS.VIEW_LIBRARY,
+        CONTENT_LIBRARY_PERMISSIONS.MANAGE_LIBRARY_TAGS,
+        CONTENT_LIBRARY_PERMISSIONS.EDIT_LIBRARY_CONTENT,
+        CONTENT_LIBRARY_PERMISSIONS.REUSE_LIBRARY_CONTENT,
+        CONTENT_LIBRARY_PERMISSIONS.VIEW_LIBRARY_TEAM,
+        CONTENT_LIBRARY_PERMISSIONS.CREATE_LIBRARY_COLLECTION,
+        CONTENT_LIBRARY_PERMISSIONS.EDIT_LIBRARY_COLLECTION,
+        CONTENT_LIBRARY_PERMISSIONS.DELETE_LIBRARY_COLLECTION,
+    ],
+    library_user: [
+        CONTENT_LIBRARY_PERMISSIONS.VIEW_LIBRARY,
+        CONTENT_LIBRARY_PERMISSIONS.REUSE_LIBRARY_CONTENT,
+        CONTENT_LIBRARY_PERMISSIONS.VIEW_LIBRARY_TEAM,
+    ],
+};
+export const libraryRolesWithPermissions = libraryRolesMetadata.map((meta) => {
+    var _a;
+    return (Object.assign(Object.assign({}, meta), { scope: '', userCount: 1, permissions: (_a = LIBRARY_ROLE_PERMISSIONS[meta.role]) !== null && _a !== void 0 ? _a : [] }));
+});
+//# sourceMappingURL=constants.js.map

package/dist/authz-module/roles-permissions/library/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../src/authz-module/roles-permissions/library/constants.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,iBAAiB,EACpD,YAAY,EACZ,QAAQ,EACR,YAAY,EACZ,IAAI,EACJ,WAAW,EACX,MAAM,EACN,WAAW,GACZ,MAAM,wBAAwB,CAAC;AAEhC,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,cAAc,EAAE,kCAAkC;IAClD,mBAAmB,EAAE,uCAAuC;IAC5D,YAAY,EAAE,gCAAgC;IAE9C,oBAAoB,EAAE,wCAAwC;IAC9D,uBAAuB,EAAE,2CAA2C;IACpE,qBAAqB,EAAE,yCAAyC;IAEhE,mBAAmB,EAAE,uCAAuC;IAC5D,iBAAiB,EAAE,qCAAqC;IAExD,yBAAyB,EAAE,6CAA6C;IACxE,uBAAuB,EAAE,2CAA2C;IACpE,yBAAyB,EAAE,6CAA6C;CACzE,CAAC;AAEF,mEAAmE;AACnE,0DAA0D;AAC1D,MAAM,CAAC,MAAM,oBAAoB,GAAmB;IAClD;QACE,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,2MAA2M;QACxN,WAAW,EAAE,SAAS;KACvB;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,qLAAqL;QAClM,WAAW,EAAE,SAAS;KACvB;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,qLAAqL;QAClM,WAAW,EAAE,SAAS;KACvB;IACD;QACE,IAAI,EAAE,cAAc;QACpB,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,qFAAqF;QAClG,WAAW,EAAE,SAAS;KACvB;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAuB;IACtD;QACE,GAAG,EAAE,SAAS;QACd,KAAK,EAAE,SAAS;QAChB,WAAW,EAAE,8FAA8F;QAC3G,IAAI,EAAE,mBAAmB;KAC1B;IACD;QACE,GAAG,EAAE,iBAAiB;QACtB,KAAK,EAAE,SAAS;QAChB,WAAW,EAAE,8EAA8E;QAC3F,IAAI,EAAE,KAAK;KACZ;IACD;QACE,GAAG,EAAE,cAAc;QACnB,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,4EAA4E;QACzF,IAAI,EAAE,KAAK;KACZ;IACD;QACE,GAAG,EAAE,oBAAoB;QACzB,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,+EAA+E;QAC5F,IAAI,EAAE,iBAAiB;KACxB;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAyB;IACtD;QACE,GAAG,EAAE,2BAA2B,CAAC,YAAY;QAC7C,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,qEAAqE;QAClF,IAAI,EAAE,YAAY;KACnB;IACD;QACE,GAAG,EAAE,2BAA2B,CAAC,mBAAmB;QACpD,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,aAAa;QACpB,WAAW,EAAE,gDAAgD;QAC7D,IAAI,EAAE,QAAQ;KACf;IACD;QACE,GAAG,EAAE,2BAA2B,CAAC,cAAc;QAC/C,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,QAAQ;QACf,WAAW,EAAE,oDAAoD;QACjE,IAAI,EAAE,MAAM;KACb;IACD;QACE,GAAG,EAAE,2BAA2B,CAAC,oBAAoB;QACrD,QAAQ,EAAE,iBAAiB;QAC3B,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,wDAAwD;QACrE,IAAI,EAAE,WAAW;KAClB;IACD;QACE,GAAG,EAAE,2BAA2B,CAAC,uBAAuB;QACxD,QAAQ,EAAE,iBAAiB;QAC3B,KAAK,EAAE,SAAS;QAChB,WAAW,EAAE,+EAA+E;QAC5F,IAAI,EAAE,YAAY;KACnB;IACD;QACE,GAAG,EAAE,2BAA2B,CAAC,qBAAqB;QACtD,QAAQ,EAAE,iBAAiB;QAC3B,KAAK,EAAE,OAAO;QACd,WAAW,EAAE,sDAAsD;QACnE,IAAI,EAAE,WAAW;KAClB;IACD;QACE,GAAG,EAAE,2BAA2B,CAAC,iBAAiB;QAClD,QAAQ,EAAE,cAAc;QACxB,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,6DAA6D;QAC1E,IAAI,EAAE,YAAY;KACnB;IACD;QACE,GAAG,EAAE,2BAA2B,CAAC,mBAAmB;QACpD,QAAQ,EAAE,cAAc;QACxB,KAAK,EAAE,QAAQ;QACf,WAAW,EAAE,kGAAkG;QAC/G,IAAI,EAAE,QAAQ;KACf;IACD;QACE,GAAG,EAAE,2BAA2B,CAAC,yBAAyB;QAC1D,QAAQ,EAAE,oBAAoB;QAC9B,KAAK,EAAE,QAAQ;QACf,WAAW,EAAE,gEAAgE;QAC7E,IAAI,EAAE,IAAI;KACX;IACD;QACE,GAAG,EAAE,2BAA2B,CAAC,uBAAuB;QACxD,QAAQ,EAAE,oBAAoB;QAC9B,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,uDAAuD;QACpE,IAAI,EAAE,WAAW;KAClB;IACD;QACE,GAAG,EAAE,2BAA2B,CAAC,yBAAyB;QAC1D,QAAQ,EAAE,oBAAoB;QAC9B,KAAK,EAAE,QAAQ;QACf,WAAW,EAAE,kDAAkD;QAC/D,IAAI,EAAE,MAAM;KACb;CACF,CAAC;AAEF,MAAM,wBAAwB,GAA6B;IACzD,aAAa,EAAE;QACb,2BAA2B,CAAC,YAAY;QACxC,2BAA2B,CAAC,mBAAmB;QAC/C,2BAA2B,CAAC,cAAc;QAC1C,2BAA2B,CAAC,oBAAoB;QAChD,2BAA2B,CAAC,uBAAuB;QACnD,2BAA2B,CAAC,iBAAiB;QAC7C,2BAA2B,CAAC,mBAAmB;QAC/C,2BAA2B,CAAC,yBAAyB;QACrD,2BAA2B,CAAC,uBAAuB;QACnD,2BAA2B,CAAC,yBAAyB;QACrD,2BAA2B,CAAC,qBAAqB;KAClD;IACD,cAAc,EAAE;QACd,2BAA2B,CAAC,YAAY;QACxC,2BAA2B,CAAC,mBAAmB;QAC/C,2BAA2B,CAAC,oBAAoB;QAChD,2BAA2B,CAAC,uBAAuB;QACnD,2BAA2B,CAAC,qBAAqB;QACjD,2BAA2B,CAAC,iBAAiB;QAC7C,2BAA2B,CAAC,yBAAyB;QACrD,2BAA2B,CAAC,uBAAuB;QACnD,2BAA2B,CAAC,yBAAyB;KACtD;IACD,mBAAmB,EAAE;QACnB,2BAA2B,CAAC,YAAY;QACxC,2BAA2B,CAAC,mBAAmB;QAC/C,2BAA2B,CAAC,oBAAoB;QAChD,2BAA2B,CAAC,qBAAqB;QACjD,2BAA2B,CAAC,iBAAiB;QAC7C,2BAA2B,CAAC,yBAAyB;QACrD,2BAA2B,CAAC,uBAAuB;QACnD,2BAA2B,CAAC,yBAAyB;KACtD;IACD,YAAY,EAAE;QACZ,2BAA2B,CAAC,YAAY;QACxC,2BAA2B,CAAC,qBAAqB;QACjD,2BAA2B,CAAC,iBAAiB;KAC9C;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAW,oBAAoB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;;IAAC,OAAA,iCACjF,IAAI,KACP,KAAK,EAAE,EAAE,EACT,SAAS,EAAE,CAAC,EACZ,WAAW,EAAE,MAAA,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,mCAAI,EAAE,IACtD,CAAA;CAAA,CAAC,CAAC","sourcesContent":["import {\n  PermissionMetadata, ResourceMetadata, Role, RoleMetadata,\n} from '@src/types';\nimport {\n  Group, CollectionsBookmark, Notes, AutoAwesomeMosaic,\n  RemoveRedEye,\n  Settings,\n  DownloadDone,\n  Plus,\n  EditOutline,\n  Delete,\n  SpinnerIcon,\n} from '@openedx/paragon/icons';\n\nexport const CONTENT_LIBRARY_PERMISSIONS = {\n  DELETE_LIBRARY: 'content_libraries.delete_library',\n  MANAGE_LIBRARY_TAGS: 'content_libraries.manage_library_tags',\n  VIEW_LIBRARY: 'content_libraries.view_library',\n\n  EDIT_LIBRARY_CONTENT: 'content_libraries.edit_library_content',\n  PUBLISH_LIBRARY_CONTENT: 'content_libraries.publish_library_content',\n  REUSE_LIBRARY_CONTENT: 'content_libraries.reuse_library_content',\n\n  MANAGE_LIBRARY_TEAM: 'content_libraries.manage_library_team',\n  VIEW_LIBRARY_TEAM: 'content_libraries.view_library_team',\n\n  CREATE_LIBRARY_COLLECTION: 'content_libraries.create_library_collection',\n  EDIT_LIBRARY_COLLECTION: 'content_libraries.edit_library_collection',\n  DELETE_LIBRARY_COLLECTION: 'content_libraries.delete_library_collection',\n};\n\n// Note: this information will eventually come from the backend API\n// but for the MVP we decided to manage it in the frontend\nexport const libraryRolesMetadata: RoleMetadata[] = [\n  {\n    role: 'library_admin',\n    name: 'Library Admin',\n    description: 'The Library Admin has full control over the library, including managing users, modifying content, and handling publishing workflows. They ensure content is properly maintained and accessible as needed.',\n    contextType: 'library',\n  },\n  {\n    role: 'library_author',\n    name: 'Library Author',\n    description: 'The Library Author is responsible for creating, editing, and publishing content within a library. They can manage tags and collections but cannot delete libraries or manage users.',\n    contextType: 'library',\n  },\n  {\n    role: 'library_contributor',\n    name: 'Library Contributor',\n    description: 'The Library Contributor can create and edit content within a library but cannot publish it. They support the authoring process while leaving final publishing to Authors or Admins.',\n    contextType: 'library',\n  },\n  {\n    role: 'library_user',\n    name: 'Library User',\n    description: 'The Library User can view and reuse content but cannot edit or delete any resource.',\n    contextType: 'library',\n  },\n];\n\nexport const libraryResourceTypes: ResourceMetadata[] = [\n  {\n    key: 'library',\n    label: 'Library',\n    description: 'Permissions related to viewing, managing, and publishing the library structure and metadata.',\n    icon: CollectionsBookmark,\n  },\n  {\n    key: 'library_content',\n    label: 'Content',\n    description: 'Permissions for editing, publishing, and reusing content within the library.',\n    icon: Notes,\n  },\n  {\n    key: 'library_team',\n    label: 'Team',\n    description: 'Permissions for viewing and managing users who have access to the library.',\n    icon: Group,\n  },\n  {\n    key: 'library_collection',\n    label: 'Collection',\n    description: 'Permissions for creating and managing content collections within the library.',\n    icon: AutoAwesomeMosaic,\n  },\n];\n\nexport const libraryPermissions: PermissionMetadata[] = [\n  {\n    key: CONTENT_LIBRARY_PERMISSIONS.VIEW_LIBRARY,\n    resource: 'library',\n    label: 'View',\n    description: 'See the library in Studio and access its content in read-only mode.',\n    icon: RemoveRedEye,\n  },\n  {\n    key: CONTENT_LIBRARY_PERMISSIONS.MANAGE_LIBRARY_TAGS,\n    resource: 'library',\n    label: 'Manage tags',\n    description: 'Create, edit, and delete tags on this library.',\n    icon: Settings,\n  },\n  {\n    key: CONTENT_LIBRARY_PERMISSIONS.DELETE_LIBRARY,\n    resource: 'library',\n    label: 'Delete',\n    description: 'Allows users to delete the entire content library.',\n    icon: Delete,\n  },\n  {\n    key: CONTENT_LIBRARY_PERMISSIONS.EDIT_LIBRARY_CONTENT,\n    resource: 'library_content',\n    label: 'Edit',\n    description: 'Create, edit, and delete content items in the library.',\n    icon: EditOutline,\n  },\n  {\n    key: CONTENT_LIBRARY_PERMISSIONS.PUBLISH_LIBRARY_CONTENT,\n    resource: 'library_content',\n    label: 'Publish',\n    description: 'Publish individual content items to make them available for reuse in courses.',\n    icon: DownloadDone,\n  },\n  {\n    key: CONTENT_LIBRARY_PERMISSIONS.REUSE_LIBRARY_CONTENT,\n    resource: 'library_content',\n    label: 'Reuse',\n    description: 'Add published content from this library to a course.',\n    icon: SpinnerIcon,\n  },\n  {\n    key: CONTENT_LIBRARY_PERMISSIONS.VIEW_LIBRARY_TEAM,\n    resource: 'library_team',\n    label: 'View',\n    description: 'See the list of users with a role assigned to this library.',\n    icon: RemoveRedEye,\n  },\n  {\n    key: CONTENT_LIBRARY_PERMISSIONS.MANAGE_LIBRARY_TEAM,\n    resource: 'library_team',\n    label: 'Manage',\n    description: 'Add, change, or remove role assignments for this library from the Roles and Permissions console.',\n    icon: Settings,\n  },\n  {\n    key: CONTENT_LIBRARY_PERMISSIONS.CREATE_LIBRARY_COLLECTION,\n    resource: 'library_collection',\n    label: 'Create',\n    description: 'Create new collections to organize content within the library.',\n    icon: Plus,\n  },\n  {\n    key: CONTENT_LIBRARY_PERMISSIONS.EDIT_LIBRARY_COLLECTION,\n    resource: 'library_collection',\n    label: 'Edit',\n    description: 'Update the name and contents of existing collections.',\n    icon: EditOutline,\n  },\n  {\n    key: CONTENT_LIBRARY_PERMISSIONS.DELETE_LIBRARY_COLLECTION,\n    resource: 'library_collection',\n    label: 'Delete',\n    description: 'Permanently remove collections from the library.',\n    icon: Delete,\n  },\n];\n\nconst LIBRARY_ROLE_PERMISSIONS: Record<string, string[]> = {\n  library_admin: [\n    CONTENT_LIBRARY_PERMISSIONS.VIEW_LIBRARY,\n    CONTENT_LIBRARY_PERMISSIONS.MANAGE_LIBRARY_TAGS,\n    CONTENT_LIBRARY_PERMISSIONS.DELETE_LIBRARY,\n    CONTENT_LIBRARY_PERMISSIONS.EDIT_LIBRARY_CONTENT,\n    CONTENT_LIBRARY_PERMISSIONS.PUBLISH_LIBRARY_CONTENT,\n    CONTENT_LIBRARY_PERMISSIONS.VIEW_LIBRARY_TEAM,\n    CONTENT_LIBRARY_PERMISSIONS.MANAGE_LIBRARY_TEAM,\n    CONTENT_LIBRARY_PERMISSIONS.CREATE_LIBRARY_COLLECTION,\n    CONTENT_LIBRARY_PERMISSIONS.EDIT_LIBRARY_COLLECTION,\n    CONTENT_LIBRARY_PERMISSIONS.DELETE_LIBRARY_COLLECTION,\n    CONTENT_LIBRARY_PERMISSIONS.REUSE_LIBRARY_CONTENT,\n  ],\n  library_author: [\n    CONTENT_LIBRARY_PERMISSIONS.VIEW_LIBRARY,\n    CONTENT_LIBRARY_PERMISSIONS.MANAGE_LIBRARY_TAGS,\n    CONTENT_LIBRARY_PERMISSIONS.EDIT_LIBRARY_CONTENT,\n    CONTENT_LIBRARY_PERMISSIONS.PUBLISH_LIBRARY_CONTENT,\n    CONTENT_LIBRARY_PERMISSIONS.REUSE_LIBRARY_CONTENT,\n    CONTENT_LIBRARY_PERMISSIONS.VIEW_LIBRARY_TEAM,\n    CONTENT_LIBRARY_PERMISSIONS.CREATE_LIBRARY_COLLECTION,\n    CONTENT_LIBRARY_PERMISSIONS.EDIT_LIBRARY_COLLECTION,\n    CONTENT_LIBRARY_PERMISSIONS.DELETE_LIBRARY_COLLECTION,\n  ],\n  library_contributor: [\n    CONTENT_LIBRARY_PERMISSIONS.VIEW_LIBRARY,\n    CONTENT_LIBRARY_PERMISSIONS.MANAGE_LIBRARY_TAGS,\n    CONTENT_LIBRARY_PERMISSIONS.EDIT_LIBRARY_CONTENT,\n    CONTENT_LIBRARY_PERMISSIONS.REUSE_LIBRARY_CONTENT,\n    CONTENT_LIBRARY_PERMISSIONS.VIEW_LIBRARY_TEAM,\n    CONTENT_LIBRARY_PERMISSIONS.CREATE_LIBRARY_COLLECTION,\n    CONTENT_LIBRARY_PERMISSIONS.EDIT_LIBRARY_COLLECTION,\n    CONTENT_LIBRARY_PERMISSIONS.DELETE_LIBRARY_COLLECTION,\n  ],\n  library_user: [\n    CONTENT_LIBRARY_PERMISSIONS.VIEW_LIBRARY,\n    CONTENT_LIBRARY_PERMISSIONS.REUSE_LIBRARY_CONTENT,\n    CONTENT_LIBRARY_PERMISSIONS.VIEW_LIBRARY_TEAM,\n  ],\n};\n\nexport const libraryRolesWithPermissions: Role[] = libraryRolesMetadata.map((meta) => ({\n  ...meta,\n  scope: '',\n  userCount: 1,\n  permissions: LIBRARY_ROLE_PERMISSIONS[meta.role] ?? [],\n}));\n"]}

package/dist/authz-module/roles-permissions/messages.d.ts

@@ -0,0 +1,63 @@
+declare const messages: {
+    'authz.tabs.permissions': {
+        id: string;
+        defaultMessage: string;
+        description: string;
+    };
+    'authz.tabs.permissionsRoles': {
+        id: string;
+        defaultMessage: string;
+        description: string;
+    };
+    'authz.tabs.permissionsRoles.courses.alert.title': {
+        id: string;
+        defaultMessage: string;
+        description: string;
+    };
+    'authz.tabs.permissionsRoles.courses.tab': {
+        id: string;
+        defaultMessage: string;
+        description: string;
+    };
+    'authz.tabs.permissionsRoles.libraries.tab': {
+        id: string;
+        defaultMessage: string;
+        description: string;
+    };
+    'authz.tabs.permissionsRoles.libraries.tab.title': {
+        id: string;
+        defaultMessage: string;
+        description: string;
+    };
+    'authz.tabs.permissionsRoles.courses.tab.title': {
+        id: string;
+        defaultMessage: string;
+        description: string;
+    };
+    'authz.tabs.permissionsRoles.courses.alert.note': {
+        id: string;
+        defaultMessage: string;
+        description: string;
+    };
+    'authz.tabs.permissionsRoles.courses.alert.description': {
+        id: string;
+        defaultMessage: string;
+        description: string;
+    };
+    'authz.tabs.permissionsRoles.courses.alert.link': {
+        id: string;
+        defaultMessage: string;
+        description: string;
+    };
+    'authz.team.remove.user.toast.success.description': {
+        id: string;
+        defaultMessage: string;
+        description: string;
+    };
+    'authz.team.toast.default.error.message': {
+        id: string;
+        defaultMessage: string;
+        description: string;
+    };
+};
+export default messages;

package/dist/authz-module/roles-permissions/messages.js

@@ -0,0 +1,65 @@
+import { defineMessages } from '@openedx/frontend-base';
+const messages = defineMessages({
+    'authz.tabs.permissions': {
+        id: 'authz.tabs.permissions',
+        defaultMessage: 'Permissions',
+        description: 'Libraries AuthZ title for the permissions tab',
+    },
+    'authz.tabs.permissionsRoles': {
+        id: 'authz.tabs.permissionsRoles',
+        defaultMessage: 'Roles and Permissions',
+        description: 'Libraries AuthZ title for the permissions and roles tab',
+    },
+    'authz.tabs.permissionsRoles.courses.alert.title': {
+        id: 'authz.tabs.permissionsRoles.courses.alert.title',
+        defaultMessage: 'Course Roles',
+        description: 'Libraries AuthZ title for the course roles alert',
+    },
+    'authz.tabs.permissionsRoles.courses.tab': {
+        id: 'authz.tabs.permissionsRoles.courses.tab',
+        defaultMessage: 'Courses',
+        description: 'Libraries AuthZ title for the course roles tab',
+    },
+    'authz.tabs.permissionsRoles.libraries.tab': {
+        id: 'authz.tabs.permissionsRoles.libraries.tab',
+        defaultMessage: 'Libraries',
+        description: 'Libraries AuthZ title for the libraries roles tab',
+    },
+    'authz.tabs.permissionsRoles.libraries.tab.title': {
+        id: 'authz.tabs.permissionsRoles.libraries.tab.title',
+        defaultMessage: 'Library Roles',
+        description: 'Libraries AuthZ title for the library roles table',
+    },
+    'authz.tabs.permissionsRoles.courses.tab.title': {
+        id: 'authz.tabs.permissionsRoles.courses.tab.title',
+        defaultMessage: 'Course Roles',
+        description: 'Libraries AuthZ title for the course roles table',
+    },
+    'authz.tabs.permissionsRoles.courses.alert.note': {
+        id: 'authz.tabs.permissionsRoles.courses.alert.note',
+        defaultMessage: 'Note:',
+        description: 'Libraries AuthZ note for the course roles alert',
+    },
+    'authz.tabs.permissionsRoles.courses.alert.description': {
+        id: 'authz.tabs.permissionsRoles.courses.alert.description',
+        defaultMessage: 'This list shows the permissions currently available in Authoring Studio. Some roles may grant additional permissions managed outside this interface.',
+        description: 'Libraries AuthZ description for the course roles alert',
+    },
+    'authz.tabs.permissionsRoles.courses.alert.link': {
+        id: 'authz.tabs.permissionsRoles.courses.alert.link',
+        defaultMessage: 'See full documentation',
+        description: 'Libraries AuthZ link for the course roles alert',
+    },
+    'authz.team.remove.user.toast.success.description': {
+        id: 'authz.team.remove.user.toast.success.description',
+        defaultMessage: 'The {role} role has been successfully removed.{rolesCount, plural, =0 { The user no longer has access to this library and has been removed from the member list.} other {}}',
+        description: 'Libraries team management remove user toast success',
+    },
+    'authz.team.toast.default.error.message': {
+        id: 'authz.team.toast.default.error.message',
+        defaultMessage: '<Bold>Something went wrong on our end.</Bold> <Br></Br>Please try again later.',
+        description: 'Libraries default error message',
+    },
+});
+export default messages;
+//# sourceMappingURL=messages.js.map

package/dist/authz-module/roles-permissions/messages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.js","sourceRoot":"","sources":["../../../src/authz-module/roles-permissions/messages.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,MAAM,QAAQ,GAAG,cAAc,CAAC;IAC9B,wBAAwB,EAAE;QACxB,EAAE,EAAE,wBAAwB;QAC5B,cAAc,EAAE,aAAa;QAC7B,WAAW,EAAE,+CAA+C;KAC7D;IACD,6BAA6B,EAAE;QAC7B,EAAE,EAAE,6BAA6B;QACjC,cAAc,EAAE,uBAAuB;QACvC,WAAW,EAAE,yDAAyD;KACvE;IACD,iDAAiD,EAAE;QACjD,EAAE,EAAE,iDAAiD;QACrD,cAAc,EAAE,cAAc;QAC9B,WAAW,EAAE,kDAAkD;KAChE;IACD,yCAAyC,EAAE;QACzC,EAAE,EAAE,yCAAyC;QAC7C,cAAc,EAAE,SAAS;QACzB,WAAW,EAAE,gDAAgD;KAC9D;IACD,2CAA2C,EAAE;QAC3C,EAAE,EAAE,2CAA2C;QAC/C,cAAc,EAAE,WAAW;QAC3B,WAAW,EAAE,mDAAmD;KACjE;IACD,iDAAiD,EAAE;QACjD,EAAE,EAAE,iDAAiD;QACrD,cAAc,EAAE,eAAe;QAC/B,WAAW,EAAE,mDAAmD;KACjE;IACD,+CAA+C,EAAE;QAC/C,EAAE,EAAE,+CAA+C;QACnD,cAAc,EAAE,cAAc;QAC9B,WAAW,EAAE,kDAAkD;KAChE;IACD,gDAAgD,EAAE;QAChD,EAAE,EAAE,gDAAgD;QACpD,cAAc,EAAE,OAAO;QACvB,WAAW,EAAE,iDAAiD;KAC/D;IACD,uDAAuD,EAAE;QACvD,EAAE,EAAE,uDAAuD;QAC3D,cAAc,EAAE,sJAAsJ;QACtK,WAAW,EAAE,wDAAwD;KACtE;IACD,gDAAgD,EAAE;QAChD,EAAE,EAAE,gDAAgD;QACpD,cAAc,EAAE,wBAAwB;QACxC,WAAW,EAAE,iDAAiD;KAC/D;IACD,kDAAkD,EAAE;QAClD,EAAE,EAAE,kDAAkD;QACtD,cAAc,EAAE,6KAA6K;QAC7L,WAAW,EAAE,qDAAqD;KACnE;IACD,wCAAwC,EAAE;QACxC,EAAE,EAAE,wCAAwC;QAC5C,cAAc,EAAE,gFAAgF;QAChG,WAAW,EAAE,iCAAiC;KAC/C;CACF,CAAC,CAAC;AAEH,eAAe,QAAQ,CAAC","sourcesContent":["import { defineMessages } from '@openedx/frontend-base';\n\nconst messages = defineMessages({\n  'authz.tabs.permissions': {\n    id: 'authz.tabs.permissions',\n    defaultMessage: 'Permissions',\n    description: 'Libraries AuthZ title for the permissions tab',\n  },\n  'authz.tabs.permissionsRoles': {\n    id: 'authz.tabs.permissionsRoles',\n    defaultMessage: 'Roles and Permissions',\n    description: 'Libraries AuthZ title for the permissions and roles tab',\n  },\n  'authz.tabs.permissionsRoles.courses.alert.title': {\n    id: 'authz.tabs.permissionsRoles.courses.alert.title',\n    defaultMessage: 'Course Roles',\n    description: 'Libraries AuthZ title for the course roles alert',\n  },\n  'authz.tabs.permissionsRoles.courses.tab': {\n    id: 'authz.tabs.permissionsRoles.courses.tab',\n    defaultMessage: 'Courses',\n    description: 'Libraries AuthZ title for the course roles tab',\n  },\n  'authz.tabs.permissionsRoles.libraries.tab': {\n    id: 'authz.tabs.permissionsRoles.libraries.tab',\n    defaultMessage: 'Libraries',\n    description: 'Libraries AuthZ title for the libraries roles tab',\n  },\n  'authz.tabs.permissionsRoles.libraries.tab.title': {\n    id: 'authz.tabs.permissionsRoles.libraries.tab.title',\n    defaultMessage: 'Library Roles',\n    description: 'Libraries AuthZ title for the library roles table',\n  },\n  'authz.tabs.permissionsRoles.courses.tab.title': {\n    id: 'authz.tabs.permissionsRoles.courses.tab.title',\n    defaultMessage: 'Course Roles',\n    description: 'Libraries AuthZ title for the course roles table',\n  },\n  'authz.tabs.permissionsRoles.courses.alert.note': {\n    id: 'authz.tabs.permissionsRoles.courses.alert.note',\n    defaultMessage: 'Note:',\n    description: 'Libraries AuthZ note for the course roles alert',\n  },\n  'authz.tabs.permissionsRoles.courses.alert.description': {\n    id: 'authz.tabs.permissionsRoles.courses.alert.description',\n    defaultMessage: 'This list shows the permissions currently available in Authoring Studio. Some roles may grant additional permissions managed outside this interface.',\n    description: 'Libraries AuthZ description for the course roles alert',\n  },\n  'authz.tabs.permissionsRoles.courses.alert.link': {\n    id: 'authz.tabs.permissionsRoles.courses.alert.link',\n    defaultMessage: 'See full documentation',\n    description: 'Libraries AuthZ link for the course roles alert',\n  },\n  'authz.team.remove.user.toast.success.description': {\n    id: 'authz.team.remove.user.toast.success.description',\n    defaultMessage: 'The {role} role has been successfully removed.{rolesCount, plural, =0 { The user no longer has access to this library and has been removed from the member list.} other {}}',\n    description: 'Libraries team management remove user toast success',\n  },\n  'authz.team.toast.default.error.message': {\n    id: 'authz.team.toast.default.error.message',\n    defaultMessage: '<Bold>Something went wrong on our end.</Bold> <Br></Br>Please try again later.',\n    description: 'Libraries default error message',\n  },\n});\n\nexport default messages;\n"]}

package/dist/authz-module/roles-permissions/utils.d.ts

@@ -0,0 +1,41 @@
+import type { IntlShape } from '@openedx/frontend-base';
+import { EnrichedPermission, PermissionMetadata, PermissionsResourceGrouped, ResourceMetadata, Role } from '../../types';
+/**
+ * Derives the localized label and action key for a given permission.
+ *
+ * This function enhance the permissions metadata mapping the key to a list of prefefined actions
+ * to add visual elemments (icons) and a localized label.
+ * If a label is already defined in the permission metadata, that is returned as-is.
+ *
+ * Special handling is applied for action keys like `'tag'` and `'team'`, which are
+ * normalized to `'manage'` and given a custom resource string for translation.
+ *
+ * @param permission - The permission metadata, typically containing a key and optional label.
+ * @param intl - The `IntlShape` object used to generate localized labels.
+ *
+ * @returns An object containing:
+ * - `label`: The human-readable, localized label for the permission.
+ * - `actionKey`: A string representing icon to be displayed (e.g., `'Read'`, `'Edit'`), or '' if not matched.
+ */
+declare const getPermissionMetadata: (permission: PermissionMetadata, intl: IntlShape) => EnrichedPermission;
+interface BuildPermissionsMatrixProps {
+    roles: Role[];
+    permissions: PermissionMetadata[];
+    resources: ResourceMetadata[];
+    intl: IntlShape;
+}
+/**
+ * Builds a permission matrix from the given roles, permissions, and resources.
+ *
+ * The matrix groups permissions under their respective resources and maps
+ * each permission to which roles have access to it.
+ *
+ * @param roles - List of roles, each containing a list of granted permission keys.
+ * @param permissions - Metadata describing each permission, including its associated resource.
+ * @param resources - List of resource metadata used to group permissions.
+ * @param intl - The internationalization object used to localize permission labels.
+ *
+ * @returns A permission matrix grouped by resource, with role mappings per permission.
+ */
+declare const buildPermissionMatrixByResource: ({ roles, permissions, resources, intl, }: BuildPermissionsMatrixProps) => PermissionsResourceGrouped[];
+export { buildPermissionMatrixByResource, getPermissionMetadata };

package/dist/authz-module/roles-permissions/utils.js

@@ -0,0 +1,70 @@
+import { actionKeys } from '../components/RoleCard/constants';
+import actionMessages from '../components/RoleCard/messages';
+/**
+ * Derives the localized label and action key for a given permission.
+ *
+ * This function enhance the permissions metadata mapping the key to a list of prefefined actions
+ * to add visual elemments (icons) and a localized label.
+ * If a label is already defined in the permission metadata, that is returned as-is.
+ *
+ * Special handling is applied for action keys like `'tag'` and `'team'`, which are
+ * normalized to `'manage'` and given a custom resource string for translation.
+ *
+ * @param permission - The permission metadata, typically containing a key and optional label.
+ * @param intl - The `IntlShape` object used to generate localized labels.
+ *
+ * @returns An object containing:
+ * - `label`: The human-readable, localized label for the permission.
+ * - `actionKey`: A string representing icon to be displayed (e.g., `'Read'`, `'Edit'`), or '' if not matched.
+ */
+const getPermissionMetadata = (permission, intl) => {
+    const actionKey = actionKeys.find(action => permission.key.includes(action)) || '';
+    let messageKey = `authz.permissions.actions.${actionKey}`;
+    if (actionKey === 'team') {
+        messageKey = 'authz.permissions.actions.manage';
+    }
+    const messageDescriptor = actionMessages[messageKey];
+    const label = permission.label || (messageDescriptor
+        ? intl.formatMessage(messageDescriptor, { resource: '' })
+        : permission.key);
+    return Object.assign(Object.assign({}, permission), { label, actionKey });
+};
+/**
+ * Builds a permission matrix from the given roles, permissions, and resources.
+ *
+ * The matrix groups permissions under their respective resources and maps
+ * each permission to which roles have access to it.
+ *
+ * @param roles - List of roles, each containing a list of granted permission keys.
+ * @param permissions - Metadata describing each permission, including its associated resource.
+ * @param resources - List of resource metadata used to group permissions.
+ * @param intl - The internationalization object used to localize permission labels.
+ *
+ * @returns A permission matrix grouped by resource, with role mappings per permission.
+ */
+const buildPermissionMatrixByResource = ({ roles, permissions, resources, intl, }) => {
+    const enrichedPermissions = permissions.reduce((acc, perm) => {
+        acc[perm.key] = getPermissionMetadata(perm, intl);
+        return acc;
+    }, {});
+    const permissionsByResource = permissions.reduce((acc, perm) => {
+        if (!acc[perm.resource])
+            acc[perm.resource] = [];
+        acc[perm.resource].push(perm);
+        return acc;
+    }, {});
+    return resources.map(resource => {
+        const perms = permissionsByResource[resource.key] || [];
+        const permissionRows = perms.map(permission => {
+            const enriched = enrichedPermissions[permission.key];
+            const rolesMap = roles.reduce((acc, role) => {
+                acc[role.name] = role.permissions.includes(permission.key);
+                return acc;
+            }, {});
+            return Object.assign(Object.assign({}, enriched), { roles: rolesMap });
+        });
+        return Object.assign(Object.assign({}, resource), { permissions: permissionRows });
+    });
+};
+export { buildPermissionMatrixByResource, getPermissionMetadata };
+//# sourceMappingURL=utils.js.map

package/dist/authz-module/roles-permissions/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../src/authz-module/roles-permissions/utils.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,iDAAiD,CAAC;AAK7E,OAAO,cAAc,MAAM,gDAAgD,CAAC;AAE5E;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,qBAAqB,GAAG,CAAC,UAA8B,EAAE,IAAe,EAAsB,EAAE;IACpG,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACnF,IAAI,UAAU,GAAG,6BAA6B,SAAS,EAAE,CAAC;IAE1D,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QACzB,UAAU,GAAG,kCAAkC,CAAC;IAClD,CAAC;IAED,MAAM,iBAAiB,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,IAAI,CAAC,iBAAiB;QAClD,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,iBAAiB,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QACzD,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAEpB,uCAAY,UAAU,KAAE,KAAK,EAAE,SAAS,IAAG;AAC7C,CAAC,CAAC;AASF;;;;;;;;;;;;GAYG;AACH,MAAM,+BAA+B,GAAG,CAAC,EACvC,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,GACP,EAAgC,EAAE;IAC9D,MAAM,mBAAmB,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3D,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAClD,OAAO,GAAG,CAAC;IACb,CAAC,EAAE,EAAwC,CAAC,CAAC;IAE7C,MAAM,qBAAqB,GAAG,WAAW,CAAC,MAAM,CAAuC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;QACnG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QACjD,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO,GAAG,CAAC;IACb,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,OAAO,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;QAC9B,MAAM,KAAK,GAAG,qBAAqB,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAExD,MAAM,cAAc,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE;YAC5C,MAAM,QAAQ,GAAG,mBAAmB,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACrD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;gBAC1C,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;gBAC3D,OAAO,GAAG,CAAC;YACb,CAAC,EAAE,EAA6B,CAAC,CAAC;YAElC,uCACK,QAAQ,KACX,KAAK,EAAE,QAAQ,IACf;QACJ,CAAC,CAAC,CAAC;QAEH,uCACK,QAAQ,KACX,WAAW,EAAE,cAAc,IAC3B;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,OAAO,EAAE,+BAA+B,EAAE,qBAAqB,EAAE,CAAC","sourcesContent":["import type { IntlShape } from '@openedx/frontend-base';\nimport { actionKeys } from '@src/authz-module/components/RoleCard/constants';\nimport {\n  EnrichedPermission, PermissionMetadata, PermissionsResourceGrouped,\n  ResourceMetadata, Role,\n} from '@src/types';\nimport actionMessages from '@src/authz-module/components/RoleCard/messages';\n\n/**\n * Derives the localized label and action key for a given permission.\n *\n * This function enhance the permissions metadata mapping the key to a list of prefefined actions\n * to add visual elemments (icons) and a localized label.\n * If a label is already defined in the permission metadata, that is returned as-is.\n *\n * Special handling is applied for action keys like `'tag'` and `'team'`, which are\n * normalized to `'manage'` and given a custom resource string for translation.\n *\n * @param permission - The permission metadata, typically containing a key and optional label.\n * @param intl - The `IntlShape` object used to generate localized labels.\n *\n * @returns An object containing:\n * - `label`: The human-readable, localized label for the permission.\n * - `actionKey`: A string representing icon to be displayed (e.g., `'Read'`, `'Edit'`), or '' if not matched.\n */\nconst getPermissionMetadata = (permission: PermissionMetadata, intl: IntlShape): EnrichedPermission => {\n  const actionKey = actionKeys.find(action => permission.key.includes(action)) || '';\n  let messageKey = `authz.permissions.actions.${actionKey}`;\n\n  if (actionKey === 'team') {\n    messageKey = 'authz.permissions.actions.manage';\n  }\n\n  const messageDescriptor = actionMessages[messageKey];\n  const label = permission.label || (messageDescriptor\n    ? intl.formatMessage(messageDescriptor, { resource: '' })\n    : permission.key);\n\n  return { ...permission, label, actionKey };\n};\n\ninterface BuildPermissionsMatrixProps {\n  roles: Role[];\n  permissions: PermissionMetadata[];\n  resources: ResourceMetadata[];\n  intl: IntlShape;\n}\n\n/**\n * Builds a permission matrix from the given roles, permissions, and resources.\n *\n * The matrix groups permissions under their respective resources and maps\n * each permission to which roles have access to it.\n *\n * @param roles - List of roles, each containing a list of granted permission keys.\n * @param permissions - Metadata describing each permission, including its associated resource.\n * @param resources - List of resource metadata used to group permissions.\n * @param intl - The internationalization object used to localize permission labels.\n *\n * @returns A permission matrix grouped by resource, with role mappings per permission.\n */\nconst buildPermissionMatrixByResource = ({\n  roles, permissions, resources, intl,\n}: BuildPermissionsMatrixProps): PermissionsResourceGrouped[] => {\n  const enrichedPermissions = permissions.reduce((acc, perm) => {\n    acc[perm.key] = getPermissionMetadata(perm, intl);\n    return acc;\n  }, {} as Record<string, EnrichedPermission>);\n\n  const permissionsByResource = permissions.reduce<Record<string, PermissionMetadata[]>>((acc, perm) => {\n    if (!acc[perm.resource]) acc[perm.resource] = [];\n    acc[perm.resource].push(perm);\n    return acc;\n  }, {});\n\n  return resources.map(resource => {\n    const perms = permissionsByResource[resource.key] || [];\n\n    const permissionRows = perms.map(permission => {\n      const enriched = enrichedPermissions[permission.key];\n      const rolesMap = roles.reduce((acc, role) => {\n        acc[role.name] = role.permissions.includes(permission.key);\n        return acc;\n      }, {} as Record<string, boolean>);\n\n      return {\n        ...enriched,\n        roles: rolesMap,\n      };\n    });\n\n    return {\n      ...resource,\n      permissions: permissionRows,\n    };\n  });\n};\n\nexport { buildPermissionMatrixByResource, getPermissionMetadata };\n"]}

package/dist/authz-module/team-members/TeamMembersTable.d.ts

@@ -0,0 +1,5 @@
+interface TeamMembersTableProps {
+    presetScope?: string;
+}
+declare const TeamMembersTable: ({ presetScope }: TeamMembersTableProps) => import("react").JSX.Element;
+export default TeamMembersTable;

package/dist/authz-module/team-members/TeamMembersTable.js

@@ -0,0 +1,107 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useEffect, useMemo, useState } from 'react';
+import debounce from 'lodash.debounce';
+import { useIntl } from '@openedx/frontend-base';
+import { DataTable, TextFilter, } from '@openedx/paragon';
+import { useToastManager } from '../../components/ToastManager/ToastManagerContext';
+import { LIBRARY_ROLE_KEYS } from '../roles-permissions';
+import { useViewTeamPermissions } from '../hooks/useViewTeamPermissions';
+import { useCourseAuthoringFlag } from '../hooks/useCourseAuthoringFlag';
+import { useQuerySettings } from '../hooks/useQuerySettings';
+import OrgFilter from '../components/TableControlBar/OrgFilter';
+import RolesFilter from '../components/TableControlBar/RolesFilter';
+import ScopesFilter from '../components/TableControlBar/ScopesFilter';
+import TableControlBar from '../components/TableControlBar/TableControlBar';
+import { getCellHeader } from '../utils';
+import { createViewActionCell, NameCell, OrgCell, RoleCell, ScopeCell, } from '../components/TableCells';
+import { useAllRoleAssignments } from '../data/hooks';
+import { TABLE_DEFAULT_PAGE_SIZE } from '../constants';
+import messages from './messages';
+import TableFooter from '../components/TableFooter/TableFooter';
+const TeamMembersTable = ({ presetScope }) => {
+    const intl = useIntl();
+    const { showErrorToast } = useToastManager();
+    const [columnsWithFiltersApplied, setColumnsWithFiltersApplied] = useState([]);
+    const initialQuerySettings = presetScope ? {
+        scopes: presetScope,
+        pageSize: TABLE_DEFAULT_PAGE_SIZE,
+        pageIndex: 0,
+        roles: null,
+        organizations: null,
+        search: null,
+        order: null,
+        sortBy: null,
+    } : undefined;
+    const { querySettings, handleTableFetch } = useQuerySettings(initialQuerySettings);
+    const { isCourseViewAllowed } = useViewTeamPermissions();
+    const { isCourseEnabled } = useCourseAuthoringFlag();
+    const effectiveQuerySettings = useMemo(() => {
+        if (isCourseViewAllowed || querySettings.roles)
+            return querySettings;
+        return Object.assign(Object.assign({}, querySettings), { roles: LIBRARY_ROLE_KEYS });
+    }, [isCourseViewAllowed, querySettings]);
+    const { data: { results: roleAssignments, count } = { results: [], count: 0 }, isLoading: isLoadingAllRoleAssignments, error, refetch, } = useAllRoleAssignments(effectiveQuerySettings);
+    const viewActionCell = useMemo(() => createViewActionCell({ isCourseEnabled }), [isCourseEnabled]);
+    const initialFilters = presetScope ? [{ id: 'scope', value: [presetScope] }] : [];
+    useEffect(() => {
+        if (error) {
+            showErrorToast(error, refetch);
+        }
+    }, [error, showErrorToast, refetch]);
+    const pageCount = Math.ceil(count / TABLE_DEFAULT_PAGE_SIZE);
+    const fetchData = useMemo(() => debounce(handleTableFetch, 500), [handleTableFetch]);
+    useEffect(() => () => fetchData.cancel(), [fetchData]);
+    return (_jsx("div", { className: "authz-module", children: _jsxs(DataTable, { isFilterable: true, isPaginated: true, isSortable: true, manualFilters: true, manualPagination: true, manualSortBy: true, numBreakoutFilters: 4, fetchData: fetchData, data: roleAssignments, itemCount: count, pageCount: pageCount, initialState: { pageSize: TABLE_DEFAULT_PAGE_SIZE, filters: initialFilters }, isLoading: isLoadingAllRoleAssignments, additionalColumns: [
+                {
+                    id: 'action',
+                    Header: intl.formatMessage(messages['authz.team.members.table.column.actions.title']),
+                    Cell: viewActionCell,
+                },
+            ], columns: [
+                {
+                    id: 'username',
+                    Header: intl.formatMessage(messages['authz.team.members.table.column.name.title']),
+                    accessor: 'username',
+                    Cell: NameCell,
+                    filter: 'text',
+                    Filter: TextFilter,
+                    filterOrder: 1,
+                },
+                {
+                    Header: intl.formatMessage(messages['authz.team.members.table.column.email.title']),
+                    accessor: 'email',
+                    disableFilters: true,
+                    filter: 'text',
+                    Filter: TextFilter,
+                },
+                {
+                    Header: getCellHeader('org', intl.formatMessage(messages['authz.team.members.table.column.organization.title']), columnsWithFiltersApplied),
+                    accessor: 'org',
+                    Cell: OrgCell,
+                    filter: 'includesValue',
+                    Filter: OrgFilter,
+                    filterButtonText: intl.formatMessage(messages['authz.team.members.table.column.organization.title']),
+                    filterOrder: 2,
+                },
+                {
+                    Header: getCellHeader('scope', intl.formatMessage(messages['authz.team.members.table.column.scope.title']), columnsWithFiltersApplied),
+                    accessor: 'scope',
+                    Cell: ScopeCell,
+                    filter: 'includesValue',
+                    Filter: ScopesFilter,
+                    filterButtonText: intl.formatMessage(messages['authz.team.members.table.column.scope.title']),
+                    filterOrder: 4,
+                },
+                {
+                    Header: getCellHeader('role', intl.formatMessage(messages['authz.team.members.table.column.role.title']), columnsWithFiltersApplied),
+                    accessor: 'role',
+                    filter: 'includesValue',
+                    Cell: RoleCell,
+                    Filter: RolesFilter,
+                    filterButtonText: intl.formatMessage(messages['authz.team.members.table.column.role.title']),
+                    filterOrder: 3,
+                },
+            ], children: [_jsx(TableControlBar, { onFilterChange: setColumnsWithFiltersApplied }), _jsx(DataTable.Table, {}), _jsx(TableFooter, {})] }) }));
+};
+export default TeamMembersTable;
+//# sourceMappingURL=TeamMembersTable.js.map