@openedx/frontend-app-admin-console 1.0.0-alpha.0

package/README.rst

@@ -0,0 +1,164 @@
+frontend-app-admin-console
+##########################
+
+|license-badge| |status-badge| |ci-badge| |codecov-badge|
+
+.. |license-badge| image:: https://img.shields.io/github/license/openedx/frontend-app-admin-console.svg
+    :target: https://github.com/openedx/frontend-app-admin-console/blob/master/LICENSE
+    :alt: License
+
+.. |status-badge| image:: https://img.shields.io/badge/Status-Maintained-brightgreen
+
+.. |ci-badge| image:: https://github.com/openedx/frontend-app-admin-console/actions/workflows/ci.yml/badge.svg
+    :target: https://github.com/openedx/frontend-app-admin-console/actions/workflows/ci.yml
+    :alt: Continuous Integration
+
+.. |codecov-badge| image:: https://codecov.io/github/openedx/frontend-app-admin-console/coverage.svg?branch=master
+    :target: https://codecov.io/github/openedx/frontend-app-admin-console?branch=master
+    :alt: Codecov
+
+Purpose
+=======
+
+The console aims to centralize platform-level settings and administrative tasks—including authorization (AuthZ) and,
+eventually, other key configurations—into a single, extensible UI. It reduces platform fragmentation and improves
+administrator efficiency.
+
+Branches and Releases
+=====================
+
+This app is published to NPM by ``semantic-release``, and its branches
+follow `OEP-10 ADR 0002`_:
+
+``master``
+  Unstable.  Every merge publishes a prerelease on the ``alpha``
+  dist-tag.  Breaking changes land here with no DEPR process and no
+  warning, so it is not supported in production.  All changes, including
+  bug fixes, should target this branch first.
+
+``stable``
+  Carries the newest stable major and owns the ``latest`` dist-tag.
+  Changes arrive here as backports from ``master``, and no breaking
+  change lands after publication.
+
+``n.x`` and ``n.m.x``
+  Maintenance branches for majors and minors that ``stable`` has moved
+  past.  Each owns the dist-tag matching its own name, so consumers
+  select a maintained line by semver range, e.g. ``"1.x"``.
+
+``stable`` has not been cut yet: until this app is first ready for
+production use, ``master`` and its alphas are all there is.  Both
+``.releaserc`` and the ``Release CI`` workflow already know the whole
+layout, including the maintenance branch patterns, so a new line starts
+publishing as soon as it is pushed.
+
+This repository is no longer branched or tagged for Open edX releases in
+its own right.  It participates by published version instead, per
+`OEP-10 ADR 0003`_.
+
+The micro-frontend this app replaces goes on living on `legacy-mfe`_,
+which is where any further ``release/RELEASENAME`` branches for it are
+cut, for as long as a supported release still ships it.  Ulmo and
+Verawood both do.
+
+.. _OEP-10 ADR 0002: https://docs.openedx.org/projects/openedx-proposals/en/latest/processes/oep-0010/decisions/0002-frontend-stable-branches.html
+.. _OEP-10 ADR 0003: https://docs.openedx.org/projects/openedx-proposals/en/latest/processes/oep-0010/decisions/0003-frontend-release-strategy.html
+.. _legacy-mfe: https://github.com/openedx/frontend-app-admin-console/tree/legacy-mfe
+
+Getting Started
+===============
+
+A running Open edX instance is needed to serve this app's backend APIs.
+`Tutor`_ in development mode is the usual choice, and
+``site.config.dev.tsx`` already points at its default hostnames.
+
+Unlike a micro-frontend, this app is neither built nor served by
+``tutor-mfe``.  Install dependencies with ``npm ci`` (using the Node
+version in ``.nvmrc``), then start the dev server on the host with
+``npm run dev``; it serves the app at
+`http://apps.local.openedx.io:2025/admin-console <http://apps.local.openedx.io:2025/admin-console>`_.
+
+.. _Tutor: https://github.com/overhangio/tutor
+
+Configuration
+-------------
+This repository works with `openedx-authz <https://github.com/openedx/openedx-authz>`_
+
+Plugins
+=======
+This frontend app can be customized using the `<Slot />` component from `frontend-base <https://github.com/openedx/frontend-base>`_. See the `slot naming and lifecycle ADR <https://github.com/openedx/frontend-base/blob/main/docs/decisions/0009-slot-naming-and-lifecycle.rst>`_ for the slot API and conventions.
+
+The parts of this frontend app that can be customized in that manner are documented `here </src/slots>`_.
+
+
+Development Roadmap
+===================
+
+* `Technical Approach: Console MVP (AuthZ-Scoped, Ulmo Release) <https://openedx.atlassian.net/wiki/x/M4B4MgE>`_.
+* `Administrative Console Long-Term Technical Approach <https://openedx.atlassian.net/wiki/x/AgAwMQE>`_.
+
+Getting Help
+============
+
+If you're having trouble, we have discussion forums at
+https://discuss.openedx.org where you can connect with others in the community.
+
+Our real-time conversations are on Slack. You can request a `Slack
+invitation`_, then join our `community Slack workspace`_.  Because this is a
+frontend repository, the best place to discuss it would be in the `#wg-frontend
+channel`_.
+
+For anything non-trivial, the best path is to open an issue in this repository
+with as many details about the issue you are facing as you can provide.
+
+https://github.com/openedx/frontend-app-admin-console/issues
+
+For more information about these options, see the `Getting Help`_ page.
+
+.. _Slack invitation: https://openedx.org/slack
+.. _community Slack workspace: https://openedx.slack.com/
+.. _#wg-frontend channel: https://openedx.slack.com/archives/C04BM6YC7A6
+.. _Getting Help: https://openedx.org/getting-help
+
+License
+=======
+
+The code in this repository is licensed under the AGPLv3 unless otherwise
+noted.
+
+Please see `LICENSE <LICENSE>`_ for details.
+
+Contributing
+============
+
+Contributions are very welcome.  Please read `How To Contribute`_ for details.
+
+.. _How To Contribute: https://openedx.org/r/how-to-contribute
+
+This project is currently accepting all types of contributions, bug fixes,
+security fixes, maintenance work, or new features.  However, please make sure
+to have a discussion about your new feature idea with the maintainers prior to
+beginning development to maximize the chances of your change being accepted.
+You can start a conversation by creating a new issue on this repo summarizing
+your idea.
+
+The Open edX Code of Conduct
+============================
+
+All community members are expected to follow the `Open edX Code of Conduct`_.
+
+.. _Open edX Code of Conduct: https://openedx.org/code-of-conduct/
+
+People
+======
+
+The assigned maintainers for this component and other project details may be
+found in `Backstage`_. Backstage pulls this data from the ``catalog-info.yaml``
+file in this repo.
+
+.. _Backstage: https://open-edx-backstage.herokuapp.com/catalog/default/component/frontend-app-admin-console
+
+Reporting Security Issues
+=========================
+
+Please do not report security issues in public.  Email security@openedx.org instead.

package/dist/Main.d.ts

@@ -0,0 +1,3 @@
+import './style.scss';
+declare const Main: () => import("react").JSX.Element;
+export default Main;

package/dist/Main.js

@@ -0,0 +1,15 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { CurrentAppProvider, PageWrap, getSiteConfig, useIntl } from '@openedx/frontend-base';
+import { Helmet } from 'react-helmet';
+import { appId } from './constants';
+import messages from './messages';
+import AuthZModule from './authz-module';
+import './style.scss';
+const Main = () => {
+    const { formatMessage } = useIntl();
+    return (_jsxs(CurrentAppProvider, { appId: appId, children: [_jsx(Helmet, { children: _jsx("title", { children: formatMessage(messages['admin.console.page.title'], {
+                        siteName: getSiteConfig().siteName,
+                    }) }) }), _jsx(PageWrap, { children: _jsx(AuthZModule, {}) })] }));
+};
+export default Main;
+//# sourceMappingURL=Main.js.map

package/dist/Main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Main.js","sourceRoot":"","sources":["../src/Main.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAC9F,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,QAAQ,MAAM,YAAY,CAAC;AAClC,OAAO,WAAW,MAAM,gBAAgB,CAAC;AACzC,OAAO,cAAc,CAAC;AAEtB,MAAM,IAAI,GAAG,GAAG,EAAE;IAChB,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,EAAE,CAAC;IAEpC,OAAO,CACL,MAAC,kBAAkB,IAAC,KAAK,EAAE,KAAK,aAC9B,KAAC,MAAM,cACL,0BACG,aAAa,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE;wBACnD,QAAQ,EAAE,aAAa,EAAE,CAAC,QAAQ;qBACnC,CAAC,GACI,GACD,EACT,KAAC,QAAQ,cACP,KAAC,WAAW,KAAG,GACN,IACQ,CACtB,CAAC;AACJ,CAAC,CAAC;AAEF,eAAe,IAAI,CAAC","sourcesContent":["import { CurrentAppProvider, PageWrap, getSiteConfig, useIntl } from '@openedx/frontend-base';\nimport { Helmet } from 'react-helmet';\n\nimport { appId } from './constants';\nimport messages from './messages';\nimport AuthZModule from './authz-module';\nimport './style.scss';\n\nconst Main = () => {\n  const { formatMessage } = useIntl();\n\n  return (\n    <CurrentAppProvider appId={appId}>\n      <Helmet>\n        <title>\n          {formatMessage(messages['admin.console.page.title'], {\n            siteName: getSiteConfig().siteName,\n          })}\n        </title>\n      </Helmet>\n      <PageWrap>\n        <AuthZModule />\n      </PageWrap>\n    </CurrentAppProvider>\n  );\n};\n\nexport default Main;\n"]}

package/dist/app.d.ts

@@ -0,0 +1,3 @@
+import { App } from '@openedx/frontend-base';
+declare const app: App;
+export default app;

package/dist/app.js

@@ -0,0 +1,10 @@
+import { appId } from './constants';
+import routes from './routes';
+import providers from './providers';
+const app = {
+    appId,
+    routes,
+    providers,
+};
+export default app;
+//# sourceMappingURL=app.js.map

package/dist/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,MAAM,MAAM,UAAU,CAAC;AAC9B,OAAO,SAAS,MAAM,aAAa,CAAC;AAEpC,MAAM,GAAG,GAAQ;IACf,KAAK;IACL,MAAM;IACN,SAAS;CACV,CAAC;AAEF,eAAe,GAAG,CAAC","sourcesContent":["import { App } from '@openedx/frontend-base';\nimport { appId } from './constants';\nimport routes from './routes';\nimport providers from './providers';\n\nconst app: App = {\n  appId,\n  routes,\n  providers,\n};\n\nexport default app;\n"]}

package/dist/authz-module/audit-user/index.d.ts

@@ -0,0 +1,2 @@
+declare const AuditUserPage: () => import("react").JSX.Element;
+export default AuditUserPage;

package/dist/authz-module/audit-user/index.js

@@ -0,0 +1,191 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useCallback, useContext, useEffect, useMemo, useState, } from 'react';
+import { SiteContext, useIntl } from '@openedx/frontend-base';
+import { Container, DataTable, } from '@openedx/paragon';
+import TableFooter from '../components/TableFooter/TableFooter';
+import { AUTHZ_HOME_PATH, TABLE_DEFAULT_PAGE_SIZE, } from '../constants';
+import AuthZLayout from '../components/AuthZLayout';
+import { useNavigate, useParams } from 'react-router-dom';
+import { useUserAccount, useValidateUserPermissionsNonSuspense } from '../../data/hooks';
+import { LIBRARY_ROLE_KEYS } from '../roles-permissions';
+import { useViewTeamPermissions } from '../hooks/useViewTeamPermissions';
+import { getHttpErrorStatus } from '../../data/utils';
+import baseMessages from '../messages';
+import AddRoleButton from '../components/AddRoleButton';
+import { OrgCell, RoleCell, ScopeCell, PermissionsCell, ViewAllPermissionsCell, createActionsCell, } from '../components/TableCells';
+import { useQuerySettings } from '../hooks/useQuerySettings';
+import { useCourseAuthoringFlag } from '../hooks/useCourseAuthoringFlag';
+import { useRevokeUserRoles, useUserAssignedRoles } from '../data/hooks';
+import { useToastManager } from '../../components/ToastManager/ToastManagerContext';
+import UserPermissions from '../components/UserPermissions';
+import OrgFilter from '../components/TableControlBar/OrgFilter';
+import RolesFilter from '../components/TableControlBar/RolesFilter';
+import TableControlBar from '../components/TableControlBar/TableControlBar';
+import messages from './messages';
+import ConfirmDeletionModal from '../components/ConfirmDeletionModal';
+import { getCellHeader, getScopeManageActionPermission } from '../utils';
+const AuditUserPage = () => {
+    const { formatMessage } = useIntl();
+    const [columnsWithFiltersApplied, setColumnsWithFiltersApplied] = useState([]);
+    const { username } = useParams();
+    const { authenticatedUser } = useContext(SiteContext);
+    const navigate = useNavigate();
+    const { isLoading: isLoadingUser, data: user, isError: isErrorUser, error: errorUser, } = useUserAccount(username);
+    const { querySettings, handleTableFetch } = useQuerySettings();
+    const { isCourseViewAllowed } = useViewTeamPermissions();
+    const { isCourseEnabled } = useCourseAuthoringFlag();
+    const effectiveQuerySettings = useMemo(() => {
+        if (isCourseViewAllowed || querySettings.roles)
+            return querySettings;
+        return Object.assign(Object.assign({}, querySettings), { roles: LIBRARY_ROLE_KEYS });
+    }, [isCourseViewAllowed, querySettings]);
+    const { isLoading: isLoadingUserAssignments, data: { results: userAssignments, count } = { results: [], count: 0 }, } = useUserAssignedRoles(username, effectiveQuerySettings);
+    const [roleToDelete, setRoleToDelete] = useState(null);
+    const [showConfirmDeletionModal, setShowConfirmDeletionModal] = useState(false);
+    const { showToast, showErrorToast, Bold, Br, } = useToastManager();
+    const { mutate: revokeUserRoles, isPending: isRevokingUserRolePending } = useRevokeUserRoles();
+    const deletePermissions = useMemo(() => {
+        const uniqueScopes = [...new Set(userAssignments.map(assignment => assignment.scope))];
+        return uniqueScopes.map(scope => getScopeManageActionPermission(scope));
+    }, [userAssignments]);
+    const { data: permissionsToManageScope, } = useValidateUserPermissionsNonSuspense(deletePermissions);
+    const rowsWithPermissions = useMemo(() => {
+        if (!permissionsToManageScope)
+            return userAssignments;
+        return userAssignments.map(assignment => {
+            const canManageScope = permissionsToManageScope.some(permission => permission.scope === assignment.scope && permission.allowed);
+            return Object.assign(Object.assign({}, assignment), { canManageScope });
+        });
+    }, [userAssignments, permissionsToManageScope]);
+    const fetchData = useMemo(() => handleTableFetch, [handleTableFetch]);
+    useEffect(() => {
+        if (!user && !isLoadingUser) {
+            if (!isErrorUser || getHttpErrorStatus(errorUser) === 404) {
+                navigate(AUTHZ_HOME_PATH);
+            }
+        }
+    }, [user, isLoadingUser, navigate, isErrorUser, errorUser]);
+    const handleShowConfirmDeletionModal = useCallback((role) => {
+        if (isRevokingUserRolePending)
+            return;
+        setRoleToDelete(role);
+        setShowConfirmDeletionModal(true);
+    }, [isRevokingUserRolePending]);
+    const navLinks = useMemo(() => [
+        {
+            label: formatMessage(baseMessages['authz.management.home.nav.link']),
+            to: AUTHZ_HOME_PATH,
+        },
+    ], [formatMessage]);
+    const additionalColumns = useMemo(() => [
+        {
+            id: 'view_permissions',
+            Header: '',
+            Cell: ViewAllPermissionsCell,
+        },
+        {
+            id: 'action',
+            Header: formatMessage(messages['authz.user.table.action.column.header']),
+            Cell: createActionsCell({
+                onClickDeleteButton: handleShowConfirmDeletionModal,
+                isUserAuthenticatedPage: username === (authenticatedUser === null || authenticatedUser === void 0 ? void 0 : authenticatedUser.username),
+                isCourseEnabled,
+            }),
+        },
+    ], [authenticatedUser === null || authenticatedUser === void 0 ? void 0 : authenticatedUser.username, formatMessage, handleShowConfirmDeletionModal, username, isCourseEnabled]);
+    const columns = useMemo(() => [
+        {
+            Header: getCellHeader('role', formatMessage(messages['authz.user.table.role.column.header']), columnsWithFiltersApplied),
+            accessor: 'role',
+            Cell: RoleCell,
+            filter: 'includesValue',
+            Filter: RolesFilter,
+            filterButtonText: formatMessage(messages['authz.user.table.role.column.header']),
+            filterOrder: 2,
+        },
+        {
+            Header: getCellHeader('org', formatMessage(messages['authz.user.table.organization.column.header']), columnsWithFiltersApplied),
+            accessor: 'org',
+            Cell: OrgCell,
+            filter: 'includesValue',
+            Filter: OrgFilter,
+            filterButtonText: formatMessage(messages['authz.user.table.organization.column.header']),
+            filterOrder: 1,
+        },
+        {
+            Header: getCellHeader('scope', formatMessage(messages['authz.user.table.scope.column.header']), columnsWithFiltersApplied),
+            accessor: 'scope',
+            Cell: ScopeCell,
+            disableFilters: true,
+        },
+        {
+            Header: formatMessage(messages['authz.user.table.permissions.column.header']),
+            Cell: PermissionsCell,
+            disableFilters: true,
+            disableSortBy: true,
+        },
+    ], [formatMessage, columnsWithFiltersApplied]);
+    const pageCount = Math.ceil(count / TABLE_DEFAULT_PAGE_SIZE);
+    const handleCloseConfirmDeletionModal = () => {
+        setRoleToDelete(null);
+        setShowConfirmDeletionModal(false);
+    };
+    const handleRevokeUserRole = () => {
+        if (!user || !roleToDelete)
+            return;
+        const data = {
+            users: user.username,
+            role: roleToDelete.role,
+            scope: roleToDelete.scope,
+        };
+        const runRevokeRole = (variables) => {
+            const variablesData = {
+                data: Object.assign(Object.assign({}, variables.data), { querySettings }),
+            };
+            revokeUserRoles(variablesData, {
+                onSuccess: (response) => {
+                    var _a;
+                    const { errors } = response;
+                    if (errors.length) {
+                        showToast({
+                            type: 'error',
+                            message: formatMessage(baseMessages['authz.team.toast.default.error.message'], { Bold, Br }),
+                        });
+                        return;
+                    }
+                    const remainingRolesCount = count ? count - 1 : 0;
+                    showToast({
+                        message: formatMessage(baseMessages['authz.team.remove.user.toast.success.description'], {
+                            role: (_a = roleToDelete.name) !== null && _a !== void 0 ? _a : roleToDelete.role,
+                            rolesCount: remainingRolesCount,
+                        }),
+                        type: 'success',
+                    });
+                    handleCloseConfirmDeletionModal();
+                    if (remainingRolesCount === 0) {
+                        navigate(AUTHZ_HOME_PATH);
+                    }
+                },
+                onError: (error, retryVariables) => {
+                    showErrorToast(error, () => runRevokeRole(retryVariables));
+                },
+            });
+        };
+        runRevokeRole({ data });
+    };
+    return (_jsxs("div", { className: "authz-module", children: [_jsx(ConfirmDeletionModal, { isOpen: showConfirmDeletionModal, close: handleCloseConfirmDeletionModal, onSave: handleRevokeUserRole, isDeleting: isRevokingUserRolePending, context: {
+                    userName: (user === null || user === void 0 ? void 0 : user.username) || '',
+                    scope: (roleToDelete === null || roleToDelete === void 0 ? void 0 : roleToDelete.scope) || '',
+                    role: (roleToDelete === null || roleToDelete === void 0 ? void 0 : roleToDelete.role) || '',
+                    name: (roleToDelete === null || roleToDelete === void 0 ? void 0 : roleToDelete.name) || '',
+                    rolesCount: count || 0,
+                } }), _jsx(AuthZLayout, { context: {
+                    id: '',
+                    org: '',
+                    title: '',
+                }, navLinks: navLinks, activeLabel: (user === null || user === void 0 ? void 0 : user.username) || '', pageTitle: (user === null || user === void 0 ? void 0 : user.username) || '', pageSubtitle: (user === null || user === void 0 ? void 0 : user.email) || '', actions: [
+                    _jsx(AddRoleButton, { presetUsername: user === null || user === void 0 ? void 0 : user.username }, "add-role-button"),
+                ], children: _jsx(Container, { className: "bg-light-200 p-5", children: _jsxs(DataTable, { isPaginated: true, isFilterable: true, isSortable: true, manualPagination: true, data: rowsWithPermissions, manualFilters: true, manualSortBy: true, fetchData: fetchData, itemCount: count, pageCount: pageCount, initialState: { pageSize: TABLE_DEFAULT_PAGE_SIZE }, additionalColumns: additionalColumns, columns: columns, isLoading: isLoadingUserAssignments, isExpandable: true, renderRowSubComponent: ({ row }) => (_jsx(UserPermissions, { row: row })), children: [_jsx(TableControlBar, { onFilterChange: setColumnsWithFiltersApplied }), _jsx(DataTable.Table, {}), _jsx(TableFooter, {})] }) }) })] }));
+};
+export default AuditUserPage;
+//# sourceMappingURL=index.js.map

package/dist/authz-module/audit-user/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/authz-module/audit-user/index.tsx"],"names":[],"mappings":";AAAA,OAAO,EACL,WAAW,EACX,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,GACzC,MAAM,OAAO,CAAC;AACf,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EACL,SAAS,EAAE,SAAS,GACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,WAAW,MAAM,sDAAsD,CAAC;AAC/E,OAAO,EACL,eAAe,EAAE,uBAAuB,GACzC,MAAM,6BAA6B,CAAC;AACrC,OAAO,WAAW,MAAM,0CAA0C,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,qCAAqC,EAAE,MAAM,iBAAiB,CAAC;AACxF,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gDAAgD,CAAC;AACxF,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,YAAY,MAAM,4BAA4B,CAAC;AACtD,OAAO,aAAa,MAAM,4CAA4C,CAAC;AACvE,OAAO,EACL,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,sBAAsB,EACrE,iBAAiB,GAClB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gDAAgD,CAAC;AACxF,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAGxF,OAAO,EAAE,eAAe,EAAE,MAAM,kDAAkD,CAAC;AACnF,OAAO,eAAe,MAAM,8CAA8C,CAAC;AAC3E,OAAO,SAAS,MAAM,wDAAwD,CAAC;AAC/E,OAAO,WAAW,MAAM,0DAA0D,CAAC;AACnF,OAAO,eAAe,MAAM,8DAA8D,CAAC;AAC3F,OAAO,QAAQ,MAAM,YAAY,CAAC;AAClC,OAAO,oBAAoB,MAAM,mDAAmD,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AAExF,MAAM,aAAa,GAAG,GAAG,EAAE;IACzB,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,EAAE,CAAC;IACpC,MAAM,CAAC,yBAAyB,EAAE,4BAA4B,CAAC,GAAG,QAAQ,CAAW,EAAE,CAAC,CAAC;IACzF,MAAM,EAAE,QAAQ,EAAE,GAAG,SAAS,EAAE,CAAC;IACjC,MAAM,EAAE,iBAAiB,EAAE,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,EACJ,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,GAC7E,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC7B,MAAM,EAAE,aAAa,EAAE,gBAAgB,EAAE,GAAG,gBAAgB,EAAE,CAAC;IAE/D,MAAM,EAAE,mBAAmB,EAAE,GAAG,sBAAsB,EAAE,CAAC;IACzD,MAAM,EAAE,eAAe,EAAE,GAAG,sBAAsB,EAAE,CAAC;IAErD,MAAM,sBAAsB,GAAG,OAAO,CAAC,GAAG,EAAE;QAC1C,IAAI,mBAAmB,IAAI,aAAa,CAAC,KAAK;YAAE,OAAO,aAAa,CAAC;QACrE,uCAAY,aAAa,KAAE,KAAK,EAAE,iBAAiB,IAAG;IACxD,CAAC,EAAE,CAAC,mBAAmB,EAAE,aAAa,CAAC,CAAC,CAAC;IAEzC,MAAM,EACJ,SAAS,EAAE,wBAAwB,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,GAC3G,GAAG,oBAAoB,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;IAC3D,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAsB,IAAI,CAAC,CAAC;IAC5E,MAAM,CAAC,wBAAwB,EAAE,2BAA2B,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChF,MAAM,EACJ,SAAS,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,GACpC,GAAG,eAAe,EAAE,CAAC;IACtB,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,yBAAyB,EAAE,GAAG,kBAAkB,EAAE,CAAC;IAE/F,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,EAAE;QACrC,MAAM,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvF,OAAO,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,8BAA8B,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1E,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;IAEtB,MAAM,EACJ,IAAI,EAAE,wBAAwB,GAC/B,GAAG,qCAAqC,CAAC,iBAAiB,CAAC,CAAC;IAE7D,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,EAAE;QACvC,IAAI,CAAC,wBAAwB;YAAE,OAAO,eAAe,CAAC;QAEtD,OAAO,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE;YACtC,MAAM,cAAc,GAAG,wBAAwB,CAAC,IAAI,CAClD,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,KAAK,UAAU,CAAC,KAAK,IAAI,UAAU,CAAC,OAAO,CAC1E,CAAC;YACF,uCACK,UAAU,KACb,cAAc,IACd;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,eAAe,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAEhD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,gBAAgB,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAEtE,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC5B,IAAI,CAAC,WAAW,IAAI,kBAAkB,CAAC,SAAS,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC1D,QAAQ,CAAC,eAAe,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC,EAAE,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;IAE5D,MAAM,8BAA8B,GAAG,WAAW,CAAC,CAAC,IAAkB,EAAE,EAAE;QACxE,IAAI,yBAAyB;YAAE,OAAO;QAEtC,eAAe,CAAC,IAAI,CAAC,CAAC;QACtB,2BAA2B,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC,EAAE,CAAC,yBAAyB,CAAC,CAAC,CAAC;IAEhC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC7B;YACE,KAAK,EAAE,aAAa,CAAC,YAAY,CAAC,gCAAgC,CAAC,CAAC;YACpE,EAAE,EAAE,eAAe;SACpB;KACF,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;IAEpB,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QACtC;YACE,EAAE,EAAE,kBAAkB;YACtB,MAAM,EAAE,EAAE;YACV,IAAI,EAAE,sBAAsB;SAC7B;QACD;YACE,EAAE,EAAE,QAAQ;YACZ,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,uCAAuC,CAAC,CAAC;YACxE,IAAI,EAAE,iBAAiB,CAAC;gBACtB,mBAAmB,EAAE,8BAA8B;gBACnD,uBAAuB,EAAE,QAAQ,MAAK,iBAAiB,aAAjB,iBAAiB,uBAAjB,iBAAiB,CAAE,QAAQ,CAAA;gBACjE,eAAe;aAChB,CAAC;SACH;KACF,EAAE,CAAC,iBAAiB,aAAjB,iBAAiB,uBAAjB,iBAAiB,CAAE,QAAQ,EAAE,aAAa,EAAE,8BAA8B,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC;IAE5G,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC5B;YACE,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,qCAAqC,CAAC,CAAC,EAAE,yBAAyB,CAAC;YACxH,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,eAAe;YACvB,MAAM,EAAE,WAAW;YACnB,gBAAgB,EAAE,aAAa,CAAC,QAAQ,CAAC,qCAAqC,CAAC,CAAC;YAChF,WAAW,EAAE,CAAC;SACf;QACD;YACE,MAAM,EAAE,aAAa,CAAC,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC,6CAA6C,CAAC,CAAC,EAAE,yBAAyB,CAAC;YAC/H,QAAQ,EAAE,KAAK;YACf,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,eAAe;YACvB,MAAM,EAAE,SAAS;YACjB,gBAAgB,EAAE,aAAa,CAAC,QAAQ,CAAC,6CAA6C,CAAC,CAAC;YACxF,WAAW,EAAE,CAAC;SACf;QACD;YACE,MAAM,EAAE,aAAa,CAAC,OAAO,EAAE,aAAa,CAAC,QAAQ,CAAC,sCAAsC,CAAC,CAAC,EAAE,yBAAyB,CAAC;YAC1H,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,SAAS;YACf,cAAc,EAAE,IAAI;SAErB;QACD;YACE,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,4CAA4C,CAAC,CAAC;YAC7E,IAAI,EAAE,eAAe;YACrB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,IAAI;SACpB;KACF,EAAE,CAAC,aAAa,EAAE,yBAAyB,CAAC,CAAC,CAAC;IAE/C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,uBAAuB,CAAC,CAAC;IAE7D,MAAM,+BAA+B,GAAG,GAAG,EAAE;QAC3C,eAAe,CAAC,IAAI,CAAC,CAAC;QACtB,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC,CAAC;IAEF,MAAM,oBAAoB,GAAG,GAAG,EAAE;QAChC,IAAI,CAAC,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO;QAEnC,MAAM,IAAI,GAAG;YACX,KAAK,EAAE,IAAI,CAAC,QAAQ;YACpB,IAAI,EAAE,YAAY,CAAC,IAAI;YACvB,KAAK,EAAE,YAAY,CAAC,KAAK;SAC1B,CAAC;QAEF,MAAM,aAAa,GAAG,CAAC,SAA2C,EAAE,EAAE;YACpE,MAAM,aAAa,GAAG;gBACpB,IAAI,kCACC,SAAS,CAAC,IAAI,KACjB,aAAa,GACd;aAEF,CAAC;YACF,eAAe,CAAC,aAAa,EAAE;gBAC7B,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE;;oBACtB,MAAM,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC;oBAE5B,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;wBAClB,SAAS,CAAC;4BACR,IAAI,EAAE,OAAO;4BACb,OAAO,EAAE,aAAa,CACpB,YAAY,CAAC,wCAAwC,CAAC,EACtD,EAAE,IAAI,EAAE,EAAE,EAAE,CACb;yBACF,CAAC,CAAC;wBACH,OAAO;oBACT,CAAC;oBAED,MAAM,mBAAmB,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBAClD,SAAS,CAAC;wBACR,OAAO,EAAE,aAAa,CACpB,YAAY,CAAC,kDAAkD,CAAC,EAChE;4BACE,IAAI,EAAE,MAAA,YAAY,CAAC,IAAI,mCAAI,YAAY,CAAC,IAAI;4BAC5C,UAAU,EAAE,mBAAmB;yBAChC,CACF;wBACD,IAAI,EAAE,SAAS;qBAChB,CAAC,CAAC;oBACH,+BAA+B,EAAE,CAAC;oBAClC,IAAI,mBAAmB,KAAK,CAAC,EAAE,CAAC;wBAC9B,QAAQ,CAAC,eAAe,CAAC,CAAC;oBAC5B,CAAC;gBACH,CAAC;gBACD,OAAO,EAAE,CAAC,KAAK,EAAE,cAAc,EAAE,EAAE;oBACjC,cAAc,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC;gBAC7D,CAAC;aACF,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC;IAEF,OAAO,CACL,eAAK,SAAS,EAAC,cAAc,aAC3B,KAAC,oBAAoB,IACnB,MAAM,EAAE,wBAAwB,EAChC,KAAK,EAAE,+BAA+B,EACtC,MAAM,EAAE,oBAAoB,EAC5B,UAAU,EAAE,yBAAyB,EACrC,OAAO,EAAE;oBACP,QAAQ,EAAE,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,QAAQ,KAAI,EAAE;oBAC9B,KAAK,EAAE,CAAA,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,KAAK,KAAI,EAAE;oBAChC,IAAI,EAAE,CAAA,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,IAAI,KAAI,EAAE;oBAC9B,IAAI,EAAE,CAAA,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,IAAI,KAAI,EAAE;oBAC9B,UAAU,EAAE,KAAK,IAAI,CAAC;iBACvB,GACD,EACF,KAAC,WAAW,IACV,OAAO,EAAE;oBACP,EAAE,EAAE,EAAE;oBACN,GAAG,EAAE,EAAE;oBACP,KAAK,EAAE,EAAE;iBACV,EACD,QAAQ,EAAE,QAAQ,EAClB,WAAW,EAAE,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,QAAQ,KAAI,EAAE,EACjC,SAAS,EAAE,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,QAAQ,KAAI,EAAE,EAC/B,YAAY,EAAE,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,KAAK,KAAI,EAAE,EAC/B,OAAO,EACL;oBACE,KAAC,aAAa,IAAC,cAAc,EAAE,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,QAAQ,IAAM,iBAAiB,CAAG;iBACxE,YAGH,KAAC,SAAS,IAAC,SAAS,EAAC,kBAAkB,YACrC,MAAC,SAAS,IACR,WAAW,QACX,YAAY,QACZ,UAAU,QACV,gBAAgB,QAChB,IAAI,EAAE,mBAAmB,EACzB,aAAa,QACb,YAAY,QACZ,SAAS,EAAE,SAAS,EACpB,SAAS,EAAE,KAAK,EAChB,SAAS,EAAE,SAAS,EACpB,YAAY,EAAE,EAAE,QAAQ,EAAE,uBAAuB,EAAE,EACnD,iBAAiB,EAAE,iBAAiB,EACpC,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,wBAAwB,EACnC,YAAY,QACZ,qBAAqB,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAClC,KAAC,eAAe,IAAC,GAAG,EAAE,GAAG,GAAI,CAC9B,aAED,KAAC,eAAe,IAAC,cAAc,EAAE,4BAA4B,GAAI,EACjE,KAAC,SAAS,CAAC,KAAK,KAAG,EACnB,KAAC,WAAW,KAAG,IACL,GAEF,GACA,IACV,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,eAAe,aAAa,CAAC","sourcesContent":["import {\n  useCallback,\n  useContext, useEffect, useMemo, useState,\n} from 'react';\nimport { SiteContext, useIntl } from '@openedx/frontend-base';\nimport {\n  Container, DataTable,\n} from '@openedx/paragon';\nimport TableFooter from '@src/authz-module/components/TableFooter/TableFooter';\nimport {\n  AUTHZ_HOME_PATH, TABLE_DEFAULT_PAGE_SIZE,\n} from '@src/authz-module/constants';\nimport AuthZLayout from '@src/authz-module/components/AuthZLayout';\nimport { useNavigate, useParams } from 'react-router-dom';\nimport { useUserAccount, useValidateUserPermissionsNonSuspense } from '@src/data/hooks';\nimport { LIBRARY_ROLE_KEYS } from '@src/authz-module/roles-permissions';\nimport { useViewTeamPermissions } from '@src/authz-module/hooks/useViewTeamPermissions';\nimport { getHttpErrorStatus } from '@src/data/utils';\nimport baseMessages from '@src/authz-module/messages';\nimport AddRoleButton from '@src/authz-module/components/AddRoleButton';\nimport {\n  OrgCell, RoleCell, ScopeCell, PermissionsCell, ViewAllPermissionsCell,\n  createActionsCell,\n} from '@src/authz-module/components/TableCells';\nimport { useQuerySettings } from '@src/authz-module/hooks/useQuerySettings';\nimport { useCourseAuthoringFlag } from '@src/authz-module/hooks/useCourseAuthoringFlag';\nimport { useRevokeUserRoles, useUserAssignedRoles } from '@src/authz-module/data/hooks';\nimport type { RevokeUserRolesRequest } from '@src/authz-module/data/api';\nimport { RoleToDelete } from '@src/types';\nimport { useToastManager } from '@src/components/ToastManager/ToastManagerContext';\nimport UserPermissions from '@src/authz-module/components/UserPermissions';\nimport OrgFilter from '@src/authz-module/components/TableControlBar/OrgFilter';\nimport RolesFilter from '@src/authz-module/components/TableControlBar/RolesFilter';\nimport TableControlBar from '@src/authz-module/components/TableControlBar/TableControlBar';\nimport messages from './messages';\nimport ConfirmDeletionModal from '@src/authz-module/components/ConfirmDeletionModal';\nimport { getCellHeader, getScopeManageActionPermission } from '@src/authz-module/utils';\n\nconst AuditUserPage = () => {\n  const { formatMessage } = useIntl();\n  const [columnsWithFiltersApplied, setColumnsWithFiltersApplied] = useState<string[]>([]);\n  const { username } = useParams();\n  const { authenticatedUser } = useContext(SiteContext);\n  const navigate = useNavigate();\n  const {\n    isLoading: isLoadingUser, data: user, isError: isErrorUser, error: errorUser,\n  } = useUserAccount(username);\n  const { querySettings, handleTableFetch } = useQuerySettings();\n\n  const { isCourseViewAllowed } = useViewTeamPermissions();\n  const { isCourseEnabled } = useCourseAuthoringFlag();\n\n  const effectiveQuerySettings = useMemo(() => {\n    if (isCourseViewAllowed || querySettings.roles) return querySettings;\n    return { ...querySettings, roles: LIBRARY_ROLE_KEYS };\n  }, [isCourseViewAllowed, querySettings]);\n\n  const {\n    isLoading: isLoadingUserAssignments, data: { results: userAssignments, count } = { results: [], count: 0 },\n  } = useUserAssignedRoles(username, effectiveQuerySettings);\n  const [roleToDelete, setRoleToDelete] = useState<RoleToDelete | null>(null);\n  const [showConfirmDeletionModal, setShowConfirmDeletionModal] = useState(false);\n  const {\n    showToast, showErrorToast, Bold, Br,\n  } = useToastManager();\n  const { mutate: revokeUserRoles, isPending: isRevokingUserRolePending } = useRevokeUserRoles();\n\n  const deletePermissions = useMemo(() => {\n    const uniqueScopes = [...new Set(userAssignments.map(assignment => assignment.scope))];\n    return uniqueScopes.map(scope => getScopeManageActionPermission(scope));\n  }, [userAssignments]);\n\n  const {\n    data: permissionsToManageScope,\n  } = useValidateUserPermissionsNonSuspense(deletePermissions);\n\n  const rowsWithPermissions = useMemo(() => {\n    if (!permissionsToManageScope) return userAssignments;\n\n    return userAssignments.map(assignment => {\n      const canManageScope = permissionsToManageScope.some(\n        permission => permission.scope === assignment.scope && permission.allowed,\n      );\n      return {\n        ...assignment,\n        canManageScope,\n      };\n    });\n  }, [userAssignments, permissionsToManageScope]);\n\n  const fetchData = useMemo(() => handleTableFetch, [handleTableFetch]);\n\n  useEffect(() => {\n    if (!user && !isLoadingUser) {\n      if (!isErrorUser || getHttpErrorStatus(errorUser) === 404) {\n        navigate(AUTHZ_HOME_PATH);\n      }\n    }\n  }, [user, isLoadingUser, navigate, isErrorUser, errorUser]);\n\n  const handleShowConfirmDeletionModal = useCallback((role: RoleToDelete) => {\n    if (isRevokingUserRolePending) return;\n\n    setRoleToDelete(role);\n    setShowConfirmDeletionModal(true);\n  }, [isRevokingUserRolePending]);\n\n  const navLinks = useMemo(() => [\n    {\n      label: formatMessage(baseMessages['authz.management.home.nav.link']),\n      to: AUTHZ_HOME_PATH,\n    },\n  ], [formatMessage]);\n\n  const additionalColumns = useMemo(() => [\n    {\n      id: 'view_permissions',\n      Header: '',\n      Cell: ViewAllPermissionsCell,\n    },\n    {\n      id: 'action',\n      Header: formatMessage(messages['authz.user.table.action.column.header']),\n      Cell: createActionsCell({\n        onClickDeleteButton: handleShowConfirmDeletionModal,\n        isUserAuthenticatedPage: username === authenticatedUser?.username,\n        isCourseEnabled,\n      }),\n    },\n  ], [authenticatedUser?.username, formatMessage, handleShowConfirmDeletionModal, username, isCourseEnabled]);\n\n  const columns = useMemo(() => [\n    {\n      Header: getCellHeader('role', formatMessage(messages['authz.user.table.role.column.header']), columnsWithFiltersApplied),\n      accessor: 'role',\n      Cell: RoleCell,\n      filter: 'includesValue',\n      Filter: RolesFilter,\n      filterButtonText: formatMessage(messages['authz.user.table.role.column.header']),\n      filterOrder: 2,\n    },\n    {\n      Header: getCellHeader('org', formatMessage(messages['authz.user.table.organization.column.header']), columnsWithFiltersApplied),\n      accessor: 'org',\n      Cell: OrgCell,\n      filter: 'includesValue',\n      Filter: OrgFilter,\n      filterButtonText: formatMessage(messages['authz.user.table.organization.column.header']),\n      filterOrder: 1,\n    },\n    {\n      Header: getCellHeader('scope', formatMessage(messages['authz.user.table.scope.column.header']), columnsWithFiltersApplied),\n      accessor: 'scope',\n      Cell: ScopeCell,\n      disableFilters: true,\n\n    },\n    {\n      Header: formatMessage(messages['authz.user.table.permissions.column.header']),\n      Cell: PermissionsCell,\n      disableFilters: true,\n      disableSortBy: true,\n    },\n  ], [formatMessage, columnsWithFiltersApplied]);\n\n  const pageCount = Math.ceil(count / TABLE_DEFAULT_PAGE_SIZE);\n\n  const handleCloseConfirmDeletionModal = () => {\n    setRoleToDelete(null);\n    setShowConfirmDeletionModal(false);\n  };\n\n  const handleRevokeUserRole = () => {\n    if (!user || !roleToDelete) return;\n\n    const data = {\n      users: user.username,\n      role: roleToDelete.role,\n      scope: roleToDelete.scope,\n    };\n\n    const runRevokeRole = (variables: { data: RevokeUserRolesRequest }) => {\n      const variablesData = {\n        data: {\n          ...variables.data,\n          querySettings,\n        },\n\n      };\n      revokeUserRoles(variablesData, {\n        onSuccess: (response) => {\n          const { errors } = response;\n\n          if (errors.length) {\n            showToast({\n              type: 'error',\n              message: formatMessage(\n                baseMessages['authz.team.toast.default.error.message'],\n                { Bold, Br },\n              ),\n            });\n            return;\n          }\n\n          const remainingRolesCount = count ? count - 1 : 0;\n          showToast({\n            message: formatMessage(\n              baseMessages['authz.team.remove.user.toast.success.description'],\n              {\n                role: roleToDelete.name ?? roleToDelete.role,\n                rolesCount: remainingRolesCount,\n              },\n            ),\n            type: 'success',\n          });\n          handleCloseConfirmDeletionModal();\n          if (remainingRolesCount === 0) {\n            navigate(AUTHZ_HOME_PATH);\n          }\n        },\n        onError: (error, retryVariables) => {\n          showErrorToast(error, () => runRevokeRole(retryVariables));\n        },\n      });\n    };\n\n    runRevokeRole({ data });\n  };\n\n  return (\n    <div className=\"authz-module\">\n      <ConfirmDeletionModal\n        isOpen={showConfirmDeletionModal}\n        close={handleCloseConfirmDeletionModal}\n        onSave={handleRevokeUserRole}\n        isDeleting={isRevokingUserRolePending}\n        context={{\n          userName: user?.username || '',\n          scope: roleToDelete?.scope || '',\n          role: roleToDelete?.role || '',\n          name: roleToDelete?.name || '',\n          rolesCount: count || 0,\n        }}\n      />\n      <AuthZLayout\n        context={{\n          id: '',\n          org: '',\n          title: '',\n        }}\n        navLinks={navLinks}\n        activeLabel={user?.username || ''}\n        pageTitle={user?.username || ''}\n        pageSubtitle={user?.email || ''}\n        actions={\n          [\n            <AddRoleButton presetUsername={user?.username} key=\"add-role-button\" />,\n          ]\n        }\n      >\n        <Container className=\"bg-light-200 p-5\">\n          <DataTable\n            isPaginated\n            isFilterable\n            isSortable\n            manualPagination\n            data={rowsWithPermissions}\n            manualFilters\n            manualSortBy\n            fetchData={fetchData}\n            itemCount={count}\n            pageCount={pageCount}\n            initialState={{ pageSize: TABLE_DEFAULT_PAGE_SIZE }}\n            additionalColumns={additionalColumns}\n            columns={columns}\n            isLoading={isLoadingUserAssignments}\n            isExpandable\n            renderRowSubComponent={({ row }) => (\n              <UserPermissions row={row} />\n            )}\n          >\n            <TableControlBar onFilterChange={setColumnsWithFiltersApplied} />\n            <DataTable.Table />\n            <TableFooter />\n          </DataTable>\n\n        </Container>\n      </AuthZLayout>\n    </div>\n  );\n};\n\nexport default AuditUserPage;\n"]}

package/dist/authz-module/audit-user/messages.d.ts

@@ -0,0 +1,58 @@
+declare const messages: {
+    'authz.user.table.role.column.header': {
+        id: string;
+        defaultMessage: string;
+        description: string;
+    };
+    'authz.user.table.organization.column.header': {
+        id: string;
+        defaultMessage: string;
+        description: string;
+    };
+    'authz.user.table.scope.column.header': {
+        id: string;
+        defaultMessage: string;
+        description: string;
+    };
+    'authz.user.table.permissions.column.header': {
+        id: string;
+        defaultMessage: string;
+        description: string;
+    };
+    'authz.user.table.action.column.header': {
+        id: string;
+        defaultMessage: string;
+        description: string;
+    };
+    'authz.user.table.delete.action.alt': {
+        id: string;
+        defaultMessage: string;
+        description: string;
+    };
+    'authz.user.table.permissions.available.count': {
+        id: string;
+        defaultMessage: string;
+        description: string;
+    };
+    'authz.user.table.permissions.total.access': {
+        id: string;
+        defaultMessage: string;
+        description: string;
+    };
+    'authz.user.table.permissions.partial.access': {
+        id: string;
+        defaultMessage: string;
+        description: string;
+    };
+    'authz.user.table.permissions.role.admin': {
+        id: string;
+        defaultMessage: string;
+        description: string;
+    };
+    'authz.user.table.permissions.role.staff': {
+        id: string;
+        defaultMessage: string;
+        description: string;
+    };
+};
+export default messages;

package/dist/authz-module/audit-user/messages.js

@@ -0,0 +1,60 @@
+import { defineMessages } from '@openedx/frontend-base';
+const messages = defineMessages({
+    'authz.user.table.role.column.header': {
+        id: 'authz.user.table.role.column.header',
+        defaultMessage: 'Role',
+        description: 'Header for the role column in the user table',
+    },
+    'authz.user.table.organization.column.header': {
+        id: 'authz.user.table.organization.column.header',
+        defaultMessage: 'Organization',
+        description: 'Header for the organization column in the user table',
+    },
+    'authz.user.table.scope.column.header': {
+        id: 'authz.user.table.scope.column.header',
+        defaultMessage: 'Scope',
+        description: 'Header for the scope column in the user table',
+    },
+    'authz.user.table.permissions.column.header': {
+        id: 'authz.user.table.permissions.column.header',
+        defaultMessage: 'Permissions',
+        description: 'Header for the permissions column in the user table',
+    },
+    'authz.user.table.action.column.header': {
+        id: 'authz.user.table.action.column.header',
+        defaultMessage: 'Actions',
+        description: 'Header for the actions column in the user table',
+    },
+    'authz.user.table.delete.action.alt': {
+        id: 'authz.user.table.delete.action.alt',
+        defaultMessage: 'Delete role action',
+        description: 'Alt description for delete button',
+    },
+    'authz.user.table.permissions.available.count': {
+        id: 'authz.user.table.permissions.available.count',
+        defaultMessage: '{count, plural, one {# permission available} other {# permissions available}}',
+        description: 'Text showing the number of permissions available, with proper pluralization',
+    },
+    'authz.user.table.permissions.total.access': {
+        id: 'authz.user.table.permissions.total.access',
+        defaultMessage: 'Total access',
+        description: 'Label indicating Super Admin has total access to all permissions',
+    },
+    'authz.user.table.permissions.partial.access': {
+        id: 'authz.user.table.permissions.partial.access',
+        defaultMessage: 'Partial access',
+        description: 'Label indicating Global Staff has partial access to permissions',
+    },
+    'authz.user.table.permissions.role.admin': {
+        id: 'authz.user.table.permissions.role.admin',
+        defaultMessage: 'Super Admins have full access to all areas of the platform, including content, settings, and user management. This role is managed at the platform level and cannot be changed from here. To modify it, go to Django Admin.',
+        description: 'Description for the permissions of the Super Admin role',
+    },
+    'authz.user.table.permissions.role.staff': {
+        id: 'authz.user.table.permissions.role.staff',
+        defaultMessage: 'Global Staff have access to all areas of the platform, similar to Super Admin, but cannot grant or revoke Super Admin or Global Staff roles to other users. This role is managed at the platform level and cannot be changed from here. To modify it, go to Django Admin.',
+        description: 'Description for the permissions of the Global Staff role',
+    },
+});
+export default messages;
+//# sourceMappingURL=messages.js.map

package/dist/authz-module/audit-user/messages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.js","sourceRoot":"","sources":["../../../src/authz-module/audit-user/messages.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,MAAM,QAAQ,GAAG,cAAc,CAC7B;IACE,qCAAqC,EAAE;QACrC,EAAE,EAAE,qCAAqC;QACzC,cAAc,EAAE,MAAM;QACtB,WAAW,EAAE,8CAA8C;KAC5D;IACD,6CAA6C,EAAE;QAC7C,EAAE,EAAE,6CAA6C;QACjD,cAAc,EAAE,cAAc;QAC9B,WAAW,EAAE,sDAAsD;KACpE;IACD,sCAAsC,EAAE;QACtC,EAAE,EAAE,sCAAsC;QAC1C,cAAc,EAAE,OAAO;QACvB,WAAW,EAAE,+CAA+C;KAC7D;IACD,4CAA4C,EAAE;QAC5C,EAAE,EAAE,4CAA4C;QAChD,cAAc,EAAE,aAAa;QAC7B,WAAW,EAAE,qDAAqD;KACnE;IACD,uCAAuC,EAAE;QACvC,EAAE,EAAE,uCAAuC;QAC3C,cAAc,EAAE,SAAS;QACzB,WAAW,EAAE,iDAAiD;KAC/D;IACD,oCAAoC,EAAE;QACpC,EAAE,EAAE,oCAAoC;QACxC,cAAc,EAAE,oBAAoB;QACpC,WAAW,EAAE,mCAAmC;KACjD;IACD,8CAA8C,EAAE;QAC9C,EAAE,EAAE,8CAA8C;QAClD,cAAc,EAAE,+EAA+E;QAC/F,WAAW,EAAE,6EAA6E;KAC3F;IACD,2CAA2C,EAAE;QAC3C,EAAE,EAAE,2CAA2C;QAC/C,cAAc,EAAE,cAAc;QAC9B,WAAW,EAAE,kEAAkE;KAChF;IACD,6CAA6C,EAAE;QAC7C,EAAE,EAAE,6CAA6C;QACjD,cAAc,EAAE,gBAAgB;QAChC,WAAW,EAAE,iEAAiE;KAC/E;IACD,yCAAyC,EAAE;QACzC,EAAE,EAAE,yCAAyC;QAC7C,cAAc,EAAE,6NAA6N;QAC7O,WAAW,EAAE,yDAAyD;KACvE;IACD,yCAAyC,EAAE;QACzC,EAAE,EAAE,yCAAyC;QAC7C,cAAc,EAAE,2QAA2Q;QAC3R,WAAW,EAAE,0DAA0D;KACxE;CACF,CACF,CAAC;AAEF,eAAe,QAAQ,CAAC","sourcesContent":["import { defineMessages } from '@openedx/frontend-base';\n\nconst messages = defineMessages(\n  {\n    'authz.user.table.role.column.header': {\n      id: 'authz.user.table.role.column.header',\n      defaultMessage: 'Role',\n      description: 'Header for the role column in the user table',\n    },\n    'authz.user.table.organization.column.header': {\n      id: 'authz.user.table.organization.column.header',\n      defaultMessage: 'Organization',\n      description: 'Header for the organization column in the user table',\n    },\n    'authz.user.table.scope.column.header': {\n      id: 'authz.user.table.scope.column.header',\n      defaultMessage: 'Scope',\n      description: 'Header for the scope column in the user table',\n    },\n    'authz.user.table.permissions.column.header': {\n      id: 'authz.user.table.permissions.column.header',\n      defaultMessage: 'Permissions',\n      description: 'Header for the permissions column in the user table',\n    },\n    'authz.user.table.action.column.header': {\n      id: 'authz.user.table.action.column.header',\n      defaultMessage: 'Actions',\n      description: 'Header for the actions column in the user table',\n    },\n    'authz.user.table.delete.action.alt': {\n      id: 'authz.user.table.delete.action.alt',\n      defaultMessage: 'Delete role action',\n      description: 'Alt description for delete button',\n    },\n    'authz.user.table.permissions.available.count': {\n      id: 'authz.user.table.permissions.available.count',\n      defaultMessage: '{count, plural, one {# permission available} other {# permissions available}}',\n      description: 'Text showing the number of permissions available, with proper pluralization',\n    },\n    'authz.user.table.permissions.total.access': {\n      id: 'authz.user.table.permissions.total.access',\n      defaultMessage: 'Total access',\n      description: 'Label indicating Super Admin has total access to all permissions',\n    },\n    'authz.user.table.permissions.partial.access': {\n      id: 'authz.user.table.permissions.partial.access',\n      defaultMessage: 'Partial access',\n      description: 'Label indicating Global Staff has partial access to permissions',\n    },\n    'authz.user.table.permissions.role.admin': {\n      id: 'authz.user.table.permissions.role.admin',\n      defaultMessage: 'Super Admins have full access to all areas of the platform, including content, settings, and user management. This role is managed at the platform level and cannot be changed from here. To modify it, go to Django Admin.',\n      description: 'Description for the permissions of the Super Admin role',\n    },\n    'authz.user.table.permissions.role.staff': {\n      id: 'authz.user.table.permissions.role.staff',\n      defaultMessage: 'Global Staff have access to all areas of the platform, similar to Super Admin, but cannot grant or revoke Super Admin or Global Staff roles to other users. This role is managed at the platform level and cannot be changed from here. To modify it, go to Django Admin.',\n      description: 'Description for the permissions of the Global Staff role',\n    },\n  },\n);\n\nexport default messages;\n"]}

package/dist/authz-module/authz-home/index.d.ts

@@ -0,0 +1,2 @@
+declare const AuthzHome: () => import("react").JSX.Element;
+export default AuthzHome;

package/dist/authz-module/authz-home/index.js

@@ -0,0 +1,23 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useIntl } from '@openedx/frontend-base';
+import { Tab, Tabs } from '@openedx/paragon';
+import { useLocation, useSearchParams } from 'react-router-dom';
+import TeamMembersTable from '../team-members/TeamMembersTable';
+import AddRoleButton from '../components/AddRoleButton';
+import RolesPermissions from '../roles-permissions/RolesPermissions';
+import AuthZLayout from '../components/AuthZLayout';
+import messages from './messages';
+const AuthzHome = () => {
+    var _a;
+    const { hash } = useLocation();
+    const intl = useIntl();
+    const [searchParams] = useSearchParams();
+    /* In the authoring repository the scope is encoded but this is to Replace spaces with '+'
+       to match URL encoding format in case the 'scope' parameter is provided with spaces instead of '+'
+    */
+    const presetScope = ((_a = searchParams.get('scope')) === null || _a === void 0 ? void 0 : _a.replace(/\s/g, '+')) || undefined;
+    const pageTitle = intl.formatMessage(messages['authz.manage.page.title']);
+    return (_jsx("div", { className: "authz-module", children: _jsx(AuthZLayout, { context: { id: '', title: '', org: '' }, pageTitle: pageTitle, pageSubtitle: "", actions: [_jsx(AddRoleButton, {}, "add-role-button")], children: _jsxs(Tabs, { variant: "tabs", defaultActiveKey: hash ? 'permissionsRoles' : 'team', className: "bg-light-100 px-5", children: [_jsx(Tab, { eventKey: "team", title: intl.formatMessage(messages['authz.tabs.team']), className: "p-5 bg-light-200", children: _jsx(TeamMembersTable, { presetScope: presetScope }) }), _jsx(Tab, { id: "libraries-permissions-roles-tab", eventKey: "permissionsRoles", title: intl.formatMessage(messages['authz.tabs.permissionsRoles']), children: _jsx(RolesPermissions, {}) })] }) }) }));
+};
+export default AuthzHome;
+//# sourceMappingURL=index.js.map

package/dist/authz-module/authz-home/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/authz-module/authz-home/index.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,gBAAgB,MAAM,iDAAiD,CAAC;AAC/E,OAAO,aAAa,MAAM,4CAA4C,CAAC;AACvE,OAAO,gBAAgB,MAAM,sDAAsD,CAAC;AACpF,OAAO,WAAW,MAAM,0CAA0C,CAAC;AAEnE,OAAO,QAAQ,MAAM,YAAY,CAAC;AAElC,MAAM,SAAS,GAAG,GAAG,EAAE;;IACrB,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,MAAM,CAAC,YAAY,CAAC,GAAG,eAAe,EAAE,CAAC;IAEzC;;MAEE;IACF,MAAM,WAAW,GAAG,CAAA,MAAA,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,0CAAE,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,KAAI,SAAS,CAAC;IAEhF,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC,CAAC;IAE1E,OAAO,CACL,cAAK,SAAS,EAAC,cAAc,YAC3B,KAAC,WAAW,IACV,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,EACvC,SAAS,EAAE,SAAS,EACpB,YAAY,EAAC,EAAE,EACf,OAAO,EACL,CAAC,KAAC,aAAa,MAAK,iBAAiB,CAAG,CAAC,YAG3C,MAAC,IAAI,IACH,OAAO,EAAC,MAAM,EACd,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,EACpD,SAAS,EAAC,mBAAmB,aAE7B,KAAC,GAAG,IAAC,QAAQ,EAAC,MAAM,EAAC,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,EAAE,SAAS,EAAC,kBAAkB,YACvG,KAAC,gBAAgB,IAAC,WAAW,EAAE,WAAW,GAAI,GAC1C,EACN,KAAC,GAAG,IAAC,EAAE,EAAC,iCAAiC,EAAC,QAAQ,EAAC,kBAAkB,EAAC,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAC,YACtI,KAAC,gBAAgB,KAAG,GAChB,IACD,GACK,GACV,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,eAAe,SAAS,CAAC","sourcesContent":["import { useIntl } from '@openedx/frontend-base';\nimport { Tab, Tabs } from '@openedx/paragon';\nimport { useLocation, useSearchParams } from 'react-router-dom';\nimport TeamMembersTable from '@src/authz-module/team-members/TeamMembersTable';\nimport AddRoleButton from '@src/authz-module/components/AddRoleButton';\nimport RolesPermissions from '@src/authz-module/roles-permissions/RolesPermissions';\nimport AuthZLayout from '@src/authz-module/components/AuthZLayout';\n\nimport messages from './messages';\n\nconst AuthzHome = () => {\n  const { hash } = useLocation();\n  const intl = useIntl();\n  const [searchParams] = useSearchParams();\n\n  /* In the authoring repository the scope is encoded but this is to Replace spaces with '+'\n     to match URL encoding format in case the 'scope' parameter is provided with spaces instead of '+'\n  */\n  const presetScope = searchParams.get('scope')?.replace(/\\s/g, '+') || undefined;\n\n  const pageTitle = intl.formatMessage(messages['authz.manage.page.title']);\n\n  return (\n    <div className=\"authz-module\">\n      <AuthZLayout\n        context={{ id: '', title: '', org: '' }}\n        pageTitle={pageTitle}\n        pageSubtitle=\"\"\n        actions={\n          [<AddRoleButton key=\"add-role-button\" />]\n        }\n      >\n        <Tabs\n          variant=\"tabs\"\n          defaultActiveKey={hash ? 'permissionsRoles' : 'team'}\n          className=\"bg-light-100 px-5\"\n        >\n          <Tab eventKey=\"team\" title={intl.formatMessage(messages['authz.tabs.team'])} className=\"p-5 bg-light-200\">\n            <TeamMembersTable presetScope={presetScope} />\n          </Tab>\n          <Tab id=\"libraries-permissions-roles-tab\" eventKey=\"permissionsRoles\" title={intl.formatMessage(messages['authz.tabs.permissionsRoles'])}>\n            <RolesPermissions />\n          </Tab>\n        </Tabs>\n      </AuthZLayout>\n    </div>\n  );\n};\n\nexport default AuthzHome;\n"]}