@robertraaijmakers/pptb-securityplugin 0.1.1 → 0.1.2-beta.1

package/dist/app.js

@@ -14545,6 +14545,14 @@ ${logTarget.textContent}`;
 
   // src/services/dataverseService.ts
   var dataverseAPI = window.dataverseAPI;
+  function buildPrivilegeReference(privilegeId) {
+    const apiEndpoint = dataverseAPI?.apiEndpoint;
+    if (!apiEndpoint) {
+      return `privileges(${privilegeId})`;
+    }
+    const separator = apiEndpoint.endsWith("/") ? "" : "/";
+    return `${apiEndpoint}${separator}privileges(${privilegeId})`;
+  }
   async function queryAll(odataQuery) {
     const all = [];
     let response = await dataverseAPI.queryData(odataQuery);
@@ -14675,6 +14683,35 @@ ${logTarget.textContent}`;
     const response = await dataverseAPI.queryData(query);
     return response?.RolePrivileges ?? response?.rolePrivileges ?? response?.value ?? [];
   }
+  async function addPrivilegesToRole(roleId, privileges) {
+    if (privileges.length === 0) {
+      return;
+    }
+    await dataverseAPI.execute({
+      entityName: "role",
+      entityId: roleId,
+      operationName: "AddPrivilegesRole",
+      operationType: "action",
+      parameters: {
+        Privileges: privileges
+      }
+    });
+  }
+  async function removePrivilegesFromRole(roleId, privilegeId) {
+    if (!privilegeId) {
+      return;
+    }
+    const privilegeReference = buildPrivilegeReference(privilegeId);
+    await dataverseAPI.execute({
+      entityName: "role",
+      entityId: roleId,
+      operationName: "RemovePrivilegeRole",
+      operationType: "action",
+      parameters: {
+        Privilege: privilegeReference
+      }
+    });
+  }
   async function associateRoleToUser(userId, roleId) {
     await dataverseAPI.associate(
       "systemuser",
@@ -14741,6 +14778,7 @@ ${logTarget.textContent}`;
     loadingRolesMetadata: "Loading roles and metadata",
     loadingRolePrivileges: "Loading role privileges",
     loadingRefreshingPrivileges: "Refreshing role privileges",
+    loadingApplyingChanges: "Applying privilege changes",
     loadingDashboardData: "Loading dashboard data",
     loadingDashboardRolesTeams: "Loading roles and teams",
     loadingDashboardPeople: "Loading users, business units, and team memberships",
@@ -14791,10 +14829,6 @@ ${logTarget.textContent}`;
       title: "Update failed",
       body: "Failed to apply privilege updates. See console for details."
     },
-    updated: {
-      title: "Privileges updated",
-      body: "Your changes have been queued for update."
-    },
     cacheFailed: {
       title: "Cache failed",
       body: "Could not cache role privileges. See console for details."
@@ -14846,9 +14880,6 @@ ${logTarget.textContent}`;
   function formatMissingPrivilegeId(entityLogicalName, privilege) {
     return `Missing privilege ID for ${entityLogicalName}:${privilege}`;
   }
-  function formatQueuedPrivilegeChange(privilege, entityLogicalName, level) {
-    return `Queued ${privilege} change for ${entityLogicalName}: ${level}`;
-  }
   function formatNoPrivilegesForRole(roleName) {
     return `No privileges returned for role ${roleName}.`;
   }
@@ -14944,6 +14975,7 @@ ${logTarget.textContent}`;
       direction: "asc"
     },
     assignmentFilter: "",
+    assignmentSearch: "",
     sort: {
       column: "label",
       direction: "asc"
@@ -15004,6 +15036,7 @@ ${logTarget.textContent}`;
       document.querySelectorAll("[data-assign-sort]")
     ),
     assignmentFilterAssigned: document.getElementById("assignment-filter-assigned"),
+    assignmentSearch: document.getElementById("assignment-search"),
     controlsPrivileges: document.getElementById("controls-privileges"),
     controlsAssignments: document.getElementById("controls-assignments"),
     controlsDashboard: document.getElementById("controls-dashboard"),
@@ -15424,6 +15457,17 @@ ${logTarget.textContent}`;
       if (state.assignmentFilter === "not-assigned") {
         return !item.assigned;
       }
+      if (state.assignmentSearch) {
+        const rawTerm = state.assignmentSearch.toLowerCase();
+        const term = rawTerm.replace(/\*/g, "").trim();
+        if (term) {
+          const labelMatch = item.label.toLowerCase().includes(term);
+          const subLabelMatch = item.subLabel ? item.subLabel.toLowerCase().includes(term) : false;
+          if (!labelMatch && !subLabelMatch) {
+            return false;
+          }
+        }
+      }
       return true;
     });
     return [...filtered].sort((a, b) => {
@@ -15768,7 +15812,6 @@ ${logTarget.textContent}`;
           const level = select.value;
           const isPending = updatePendingChange(roleId, row.entityLogicalName, privilege, level);
           setPendingClass(select, isPending);
-          logMessage(formatQueuedPrivilegeChange(privilege, row.entityLogicalName, level));
         });
         select.disabled = !isRoleMode && !row.roleId;
         applyLevelClass(select, select.value);
@@ -15929,18 +15972,18 @@ ${logTarget.textContent}`;
     }
     return "none";
   }
-  function mapPrivilegeDepth(level) {
+  function mapPrivilegeDepthLabel(level) {
     switch (level) {
       case "user":
-        return 1;
+        return "Basic";
       case "businessUnit":
-        return 2;
+        return "Local";
       case "parentChild":
-        return 4;
+        return "Deep";
       case "organization":
-        return 8;
+        return "Global";
       default:
-        return 0;
+        return "None";
     }
   }
   function mapOwnershipLabel(raw) {
@@ -17266,42 +17309,44 @@ ${logTarget.textContent}`;
       if (currentLevel === change.level) {
         continue;
       }
-      if (currentLevel !== "none") {
+      if (change.level === "none") {
         if (!removesByRole.has(change.roleId)) {
           removesByRole.set(change.roleId, []);
         }
         removesByRole.get(change.roleId).push(privilegeId);
-      }
-      if (change.level !== "none") {
+      } else {
         if (!addsByRole.has(change.roleId)) {
           addsByRole.set(change.roleId, []);
         }
+        const privilegeInfo = state.privilegeInfoById.get(privilegeId);
         addsByRole.get(change.roleId).push({
           PrivilegeId: privilegeId,
-          Depth: mapPrivilegeDepth(change.level)
+          Depth: mapPrivilegeDepthLabel(change.level),
+          PrivilegeName: privilegeInfo?.name
         });
       }
     }
+    const totalRemoveCalls = Array.from(removesByRole.values()).reduce(
+      (total, privilegeIds) => total + privilegeIds.length,
+      0
+    );
+    const totalAddCalls = addsByRole.size;
+    const totalCalls = totalRemoveCalls + totalAddCalls;
+    let completedCalls = 0;
+    setLoading(true, UI_TEXT.loadingApplyingChanges);
+    updateLoadingProgress(0, totalCalls, UI_TEXT.loadingApplyingChanges);
     try {
       for (const [roleId, privilegeIds] of removesByRole) {
-        await dataverseAPI.execute({
-          operationName: "RemovePrivilegesRole",
-          operationType: "action",
-          parameters: {
-            RoleId: roleId,
-            PrivilegeIds: privilegeIds
-          }
-        });
+        for (const privilegeId of privilegeIds) {
+          await removePrivilegesFromRole(roleId, privilegeId);
+          completedCalls += 1;
+          updateLoadingProgress(completedCalls, totalCalls, UI_TEXT.loadingApplyingChanges);
+        }
       }
       for (const [roleId, privileges] of addsByRole) {
-        await dataverseAPI.execute({
-          operationName: "AddPrivilegesRole",
-          operationType: "action",
-          parameters: {
-            RoleId: roleId,
-            Privileges: privileges
-          }
-        });
+        await addPrivilegesToRole(roleId, privileges);
+        completedCalls += 1;
+        updateLoadingProgress(completedCalls, totalCalls, UI_TEXT.loadingApplyingChanges);
       }
       for (const change of state.pendingChanges) {
         if (!state.rolePrivileges.has(change.roleId)) {
@@ -17320,16 +17365,12 @@ ${logTarget.textContent}`;
         duration: 3500
       });
       return;
+    } finally {
+      setLoading(false);
     }
     state.pendingChanges = [];
-    await toolboxAPI2.utils.showNotification({
-      title: NOTIFICATIONS.updated.title,
-      body: NOTIFICATIONS.updated.body,
-      type: "success",
-      duration: 2500
-    });
     updatePendingUi();
-    renderPrivilegeTable();
+    await refreshPrivilegeView();
   }
   async function refreshData() {
     if (state.refreshInProgress) {
@@ -17618,6 +17659,12 @@ ${logTarget.textContent}`;
         renderAssignmentTable(state.assignmentItems);
       });
     }
+    if (elements2.assignmentSearch) {
+      elements2.assignmentSearch.addEventListener("input", () => {
+        state.assignmentSearch = elements2.assignmentSearch.value.trim();
+        renderAssignmentTable(state.assignmentItems);
+      });
+    }
     for (const button of elements2.sortButtons) {
       button.addEventListener("click", () => {
         const column = button.dataset.sort || "label";