@scalio-cloud/ui 0.25.1 → 0.26.0

package/nav.css

@@ -484,6 +484,19 @@
 .dark .scalio-roles-yes { color: #4ade80; }
 .scalio-roles-no { color: hsl(var(--muted-foreground)); }
 .scalio-roles-lic { margin-left: 0.375rem; }
+.scalio-roles-cell > svg, .scalio-roles-cell > input, .scalio-roles-cell > .scalio-roles-no { display: block; margin-left: auto; margin-right: auto; }
+.scalio-roles-table th.scalio-roles-col.is-mine, .scalio-roles-cell.is-mine { background: hsl(var(--primary) / 0.08); }
+.scalio-roles-table th.scalio-roles-col.is-mine .scalio-roles-name { color: hsl(var(--primary)); }
+.scalio-roles-mine { margin-bottom: 0.25rem; font-size: 10px; font-weight: 700; text-transform: uppercase; letter-spacing: 0.15em; color: hsl(var(--primary)); }
+.scalio-tenant-list { display: flex; flex-direction: column; margin: 0; padding: 0; list-style: none; border: 1px solid hsl(var(--border)); border-radius: 2px; }
+.scalio-tenant-row { display: flex; align-items: center; justify-content: space-between; gap: 1rem; padding: 0.625rem 0.875rem; border-bottom: 1px solid hsl(var(--border)); }
+.scalio-tenant-row:last-child { border-bottom: 0; }
+.scalio-tenant-who { min-width: 0; }
+.scalio-tenant-domain { display: flex; flex-wrap: wrap; align-items: center; gap: 0.5rem; font-weight: 600; overflow-wrap: anywhere; }
+.scalio-tenant-id { margin-top: 0.125rem; font-family: ui-monospace, SFMono-Regular, Menlo, monospace; font-size: 11px; color: hsl(var(--muted-foreground)); overflow-wrap: anywhere; }
+.scalio-tenant-actions { display: flex; flex-wrap: wrap; align-items: center; gap: 0.5rem; }
+.scalio-tenant-manual { display: flex; flex-direction: column; gap: 0.5rem; max-width: 28rem; }
+.scalio-btn.is-disabled { pointer-events: none; opacity: 0.5; }
 .scalio-roles-source { display: flex; flex-direction: column; gap: 0.875rem; padding: 1rem; border: 1px solid hsl(var(--border)); border-radius: 2px; background: hsl(var(--card)); font-size: 0.875rem; }
 
 /* Setup wizard (SetupWizard, ADR 0060): design of the Nexus wizard, first built in Kontor */
@@ -493,7 +506,7 @@
   padding: 1.5rem; border: 1px solid hsl(var(--border)); border-radius: 2px; background: hsl(var(--background)); color: hsl(var(--foreground));
   box-shadow: 0 16px 40px rgb(0 0 0 / 0.25); font-size: 0.875rem;
 }
-.scalio-wizard.is-wide { max-width: 56rem; }
+.scalio-wizard.is-wide { max-width: 72rem; }
 .scalio-wizard-head { display: flex; align-items: flex-start; justify-content: space-between; gap: 1rem; }
 .scalio-wizard-title { margin: 0; font-family: 'Chivo', sans-serif; font-size: 1.5rem; font-weight: 900; line-height: 1.2; text-transform: uppercase; letter-spacing: -0.025em; }
 .scalio-wizard-subtitle { margin: 0.25rem 0 0; color: hsl(var(--muted-foreground)); }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@scalio-cloud/ui",
-  "version": "0.25.1",
+  "version": "0.26.0",
   "description": "Scalio Control Room design tokens, Tailwind preset, self-hosted fonts, the shared app header, sign-in layout, sidebar and page blocks",
   "license": "SEE LICENSE IN README.md",
   "private": false,

package/react/labels.js

@@ -64,7 +64,7 @@ const LABELS = {
       graceTip: "Diese Version liegt nach Ihrem Lizenzdatum und wechselt nach der Kulanzzeit in den Nur-Lesen-Modus.",
     },
     accountGroups: { people: "Personen", access: "Rechte" },
-    accountTabs: { users: "Benutzer", roles: "Rollen", entra: "Microsoft Entra", signIn: "Anmeldung", organizations: "Organisationen" },
+    accountTabs: { users: "Benutzer", roles: "Rollen", entra: "Rollen aus Entra ID", signIn: "Anmeldung", organizations: "Organisationen" },
     passwordPolicy: {
       label: "Anmeldung mit Passwort",
       local: "Erlaubt",
@@ -460,7 +460,7 @@ const LABELS = {
       graceTip: "This version is past your license date and turns read-only after the grace period.",
     },
     accountGroups: { people: "People", access: "Permissions" },
-    accountTabs: { users: "Users", roles: "Roles", entra: "Microsoft Entra", signIn: "Sign-in", organizations: "Organizations" },
+    accountTabs: { users: "Users", roles: "Roles", entra: "Roles from Entra ID", signIn: "Sign-in", organizations: "Organizations" },
     passwordPolicy: {
       label: "Password sign-in",
       local: "Allowed",

package/react/roles.js

@@ -1,9 +1,10 @@
 "use strict";
-// Konten und Rollen -> Rollen and -> Microsoft Entra, the same in every Scalio app (scalio-docs concepts/app-roles.md,
+// Konten und Rollen -> Rollen and -> Rollen aus Entra ID, the same in every Scalio app (scalio-docs concepts/app-roles.md,
 // roles/R1-R6). rolesApi(api, opts) maps the shared role API of scalio-platform `roles_router` (GET /roles/permissions,
 // GET/POST /roles, PATCH/DELETE /roles/{id}); RoleAdmin shows "welche Rolle darf was" (permissions as rows, roles as
-// columns), built-in roles read-only, own roles with checkboxes, add / copy / rename / delete. RoleSourceSettings is
-// the role source (Scalio app or Entra app roles) with the Entra values and, where the app has them, the tenant IDs.
+// columns), built-in roles read-only, own roles with checkboxes, add / copy / rename / delete; the column of the signed-in
+// person's role is marked. RoleSourceSettings is the role source (Scalio app or Entra app roles) with the Entra values
+// and the list of tenants whose roles count, with «Tenant hinzufügen» by admin consent (ADR 0068).
 const React = require("react");
 const h = React.createElement;
 const Icons = require("./icons");
@@ -47,8 +48,26 @@ const TEXT = {
     sourceEntra: "Microsoft Entra ID (App-Rollen)",
     hintLocal: "Sie vergeben die Rollen unter Benutzer. Werte für Entra ID, falls Sie später umstellen:",
     hintEntra: "Ab der nächsten Anmeldung entscheiden die App-Rollen der Unternehmensanwendung «Scalio» für jedes Microsoft-Konto. Wer keine Rolle hat, kann sich nicht mehr anmelden. Eigene Rollen und lokale Konten vergeben Sie weiter hier. Werte:",
-    tenants: "Microsoft-Tenant-IDs",
-    tenantsHint: "Nur App-Rollen aus diesen Tenants zählen, durch Komma getrennt.",
+    yourRole: "Ihre Rolle",
+    tenants: "Vertraute Tenants",
+    tenantsHint: "Nur App-Rollen aus diesen Tenants zählen, und Personen aus diesen Tenants können sich anmelden.",
+    tenantsEmpty: "Noch kein Tenant. Mit «Tenant hinzufügen» gibt ein Admin des Tenants die Zustimmung für die App «Scalio».",
+    tenantAdd: "Tenant hinzufügen",
+    tenantAddHint: "Sie melden sich als Admin des Tenants bei Microsoft an und stimmen der App «Scalio» zu.",
+    tenantManual: "Von Hand eintragen",
+    tenantManualHint: "Nur wenn ein Admin des Tenants der App «Scalio» schon zugestimmt hat.",
+    tenantId: "Tenant-ID",
+    tenantAddManual: "Eintragen",
+    tenantInvalid: "Das ist keine Tenant-ID (GUID).",
+    tenantRemove: "Entfernen",
+    tenantRemoveTitle: "Tenant «{name}» entfernen?",
+    tenantRemoveText: "App-Rollen aus diesem Tenant zählen dann nicht mehr. Die Unternehmensanwendung im Tenant bleibt; entfernen Sie sie dort bei Bedarf selbst.",
+    tenantFixed: "Fest",
+    tenantAdded: "Tenant hinzugefügt.",
+    tenantRemoved: "Tenant entfernt.",
+    consentCancelled: "Die Zustimmung wurde abgebrochen.",
+    consentFailed: "Die Zustimmung hat nicht geklappt. Melden Sie sich mit einem Konto an, das in diesem Tenant Admin ist.",
+    consentForbidden: "Nur Admins dieser App können einen Tenant hinzufügen.",
     entraConfirm: "Rollen aus Entra ID übernehmen?",
     entraConfirmText: "Ab der nächsten Anmeldung entscheiden die App-Rollen in Entra ID für jedes Microsoft-Konto. Personen ohne Rolle können sich nicht mehr anmelden.",
     entraAction: "Entra ID verwenden",
@@ -90,8 +109,26 @@ const TEXT = {
     sourceEntra: "Microsoft Entra ID (app roles)",
     hintLocal: "You give roles under Users. Values for Entra ID, in case you switch later:",
     hintEntra: "From the next sign-in, the app roles of the enterprise application “Scalio” decide for every Microsoft account. People without a role can no longer sign in. Own roles and local accounts are still given here. Values:",
-    tenants: "Microsoft tenant IDs",
-    tenantsHint: "Only app roles from these tenants count, separated by commas.",
+    yourRole: "Your role",
+    tenants: "Trusted tenants",
+    tenantsHint: "Only app roles from these tenants count, and people from these tenants can sign in.",
+    tenantsEmpty: "No tenant yet. With “Add tenant” an admin of the tenant consents to the app “Scalio”.",
+    tenantAdd: "Add tenant",
+    tenantAddHint: "You sign in to Microsoft as an admin of the tenant and consent to the app “Scalio”.",
+    tenantManual: "Enter by hand",
+    tenantManualHint: "Only if an admin of the tenant already consented to the app “Scalio”.",
+    tenantId: "Tenant ID",
+    tenantAddManual: "Add",
+    tenantInvalid: "This is not a tenant ID (GUID).",
+    tenantRemove: "Remove",
+    tenantRemoveTitle: "Remove the tenant “{name}”?",
+    tenantRemoveText: "App roles from this tenant no longer count. The enterprise application stays in the tenant; remove it there yourself if needed.",
+    tenantFixed: "Fixed",
+    tenantAdded: "Tenant added.",
+    tenantRemoved: "Tenant removed.",
+    consentCancelled: "The consent was cancelled.",
+    consentFailed: "The consent did not work. Sign in with an account that is an admin in this tenant.",
+    consentForbidden: "Only admins of this app can add a tenant.",
     entraConfirm: "Take roles from Entra ID?",
     entraConfirmText: "From the next sign-in, the app roles in Entra ID decide for every Microsoft account. People without a role can no longer sign in.",
     entraAction: "Use Entra ID",
@@ -265,9 +302,11 @@ function RoleAdmin(props) {
   const byGroup = (g) => catalog.permissions.filter((p) => (p.group || "") === g || (!groups.includes(p.group || "") && g === groups[0]));
   const usersText = (r) => (r.users === null ? "" : r.users === 1 ? L.oneUser : fill(L.users, { n: r.users }));
 
+  const mine = (r) => props.currentRole !== undefined && props.currentRole !== null && String(props.currentRole) === r.id;
   const head = h("tr", null,
     h("th", { className: "scalio-roles-perm" }, L.permission),
-    roles.map((r) => h("th", { key: r.id, className: cx("scalio-roles-col", r.builtin ? "is-builtin" : "is-own"), "data-testid": `role-col-${r.id}` },
+    roles.map((r) => h("th", { key: r.id, className: cx("scalio-roles-col", r.builtin ? "is-builtin" : "is-own", mine(r) && "is-mine"), "data-testid": `role-col-${r.id}` },
+      mine(r) ? h("div", { className: "scalio-roles-mine", "data-testid": "role-yours" }, L.yourRole) : null,
       h("div", { className: "scalio-roles-name" }, tr(r.name, lang)),
       h("div", { className: "scalio-roles-meta" },
         h("span", null, r.builtin ? L.builtin : L.own),
@@ -282,10 +321,10 @@ function RoleAdmin(props) {
   const cell = (r, p) => {
     const has = r.admin || r.permissions.includes(p.key);
     if (r.builtin || !canEdit) {
-      return h("td", { key: r.id, className: "scalio-roles-cell", "data-testid": `role-cell-${r.id}-${p.key}` },
+      return h("td", { key: r.id, className: cx("scalio-roles-cell", mine(r) && "is-mine"), "data-testid": `role-cell-${r.id}-${p.key}` },
         has ? h(Icons.Check, { className: "scalio-icon scalio-roles-yes", "aria-label": "✓" }) : h("span", { className: "scalio-roles-no", "aria-label": "–" }, "–"));
     }
-    return h("td", { key: r.id, className: "scalio-roles-cell" },
+    return h("td", { key: r.id, className: cx("scalio-roles-cell", mine(r) && "is-mine") },
       h("input", { type: "checkbox", checked: has, disabled: busy, onChange: () => toggle(r, p.key),
         "aria-label": `${tr(r.name, lang)}: ${tr(p.label, lang)}`, "data-testid": `role-check-${r.id}-${p.key}` }));
   };
@@ -303,7 +342,7 @@ function RoleAdmin(props) {
   body.push(h("tr", { key: "admin-only", className: "scalio-roles-group" }, h("td", { colSpan: roles.length + 1 }, L.adminOnly)));
   body.push(h("tr", { key: "admin-row" },
     h("td", { className: "scalio-roles-perm" }, L.adminAll),
-    roles.map((r) => h("td", { key: r.id, className: "scalio-roles-cell" },
+    roles.map((r) => h("td", { key: r.id, className: cx("scalio-roles-cell", mine(r) && "is-mine") },
       r.admin ? h(Icons.Check, { className: "scalio-icon scalio-roles-yes", "aria-label": "✓" }) : h("span", { className: "scalio-roles-no" }, "–")))));
 
   const dialogEl = dialog ? h(Dialog, { title: dialog.mode === "add" ? L.addTitle : L.renameTitle, onClose: close, testId: "role-dialog" },
@@ -339,46 +378,128 @@ function RoleAdmin(props) {
     dialogEl);
 }
 
-// Props: value {source: "local"|"entra", values: [...], tenants?: [...]}, onSave({source, tenants}) -> Promise,
-// tenants (show the tenant field), lang, labels, confirm, notify, formatError, disabled, testId.
+const GUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+
+// A tenant entry: "tid" (old lists) or {tid, domain, fixed, label, href}.
+function tenantOf(x) {
+  if (typeof x === "string") return { tid: x.trim().toLowerCase(), domain: "" };
+  return Object.assign({}, x, { tid: String(x.tid || x.id || "").trim().toLowerCase(), domain: x.domain || "" });
+}
+
+// Back from «Tenant hinzufügen»: ?entra_tenant=added|cancelled|failed|forbidden (scalio-identity 0.5.0).
+function consentResult() {
+  if (typeof window === "undefined" || !window.location) return "";
+  try {
+    const url = new URL(window.location.href);
+    const res = url.searchParams.get("entra_tenant") || "";
+    if (res && window.history && window.history.replaceState) {
+      url.searchParams.delete("entra_tenant");
+      window.history.replaceState(window.history.state, "", url.pathname + url.search + url.hash);
+    }
+    return res;
+  } catch (e) {
+    return "";
+  }
+}
+
+// Props: value {source: "local"|"entra", values: [...], tenants?: [tid | {tid, domain, fixed}]},
+// onSave({source, tenants: [{tid, domain}]}) -> Promise, tenants (show the tenant list), consentUrl (button «Tenant
+// hinzufügen», e.g. "/api/auth/scalio/consent"), manual (default true: enter a tenant ID by hand), fixed (one fixed
+// tenant, no add or remove: Nexus), extraTenants [{tid, domain, label, href}] and extraTitle (view only: Rosetta's
+// customer tenants), lang, labels, confirm, notify, formatError, disabled, testId.
 function RoleSourceSettings(props) {
   const lang = props.lang === "en" ? "en" : "de";
   const L = rolesText(lang, props.labels);
   const v = props.value || { source: "local", values: [] };
+  const list = (v.tenants || []).map(tenantOf).filter((t) => t.tid);
   const [source, setSource] = React.useState(v.source || "local");
-  const [tenants, setTenants] = React.useState((v.tenants || []).join(", "));
+  const [manual, setManual] = React.useState(null); // null = closed, else the typed id
   const [busy, setBusy] = React.useState(false);
-  React.useEffect(() => { setSource(v.source || "local"); setTenants((v.tenants || []).join(", ")); }, [v.source, (v.tenants || []).join(",")]);
-  const dirty = source !== (v.source || "local") || (props.tenants && tenants !== (v.tenants || []).join(", "));
-  const save = async () => {
-    if (source === "entra" && v.source !== "entra" && !(await ask(props.confirm, L.entraConfirm, L.entraConfirmText, L.entraAction, false))) return;
+  const [error, setError] = React.useState("");
+  const say = (text, tone) => props.notify && props.notify(text, tone || "success");
+  const fmt = props.formatError || errorText;
+  React.useEffect(() => { setSource(v.source || "local"); }, [v.source]);
+  React.useEffect(() => {
+    const res = consentResult();
+    if (res === "added") say(L.tenantAdded);
+    else if (res === "cancelled") say(L.consentCancelled, "error");
+    else if (res === "forbidden") say(L.consentForbidden, "error");
+    else if (res) say(L.consentFailed, "error");
+  }, []);
+  const dirty = source !== (v.source || "local");
+  const store = async (src, tenants, okText) => {
     setBusy(true);
+    setError("");
     try {
-      await props.onSave({ source, tenants: tenants.split(/[\s,;]+/).filter(Boolean) });
-      if (props.notify) props.notify(L.saved, "success");
+      await props.onSave({ source: src, tenants: tenants.map((t) => ({ tid: t.tid, domain: t.domain || "" })) });
+      say(okText || L.saved);
+      return true;
     } catch (e) {
-      if (props.notify) props.notify((props.formatError || errorText)(e), "error");
+      say(fmt(e), "error");
+      return false;
     } finally {
       setBusy(false);
     }
   };
+  const save = async () => {
+    if (source === "entra" && v.source !== "entra" && !(await ask(props.confirm, L.entraConfirm, L.entraConfirmText, L.entraAction, false))) return;
+    store(source, list.filter((t) => !t.fixed));
+  };
+  const remove = async (t) => {
+    if (!(await ask(props.confirm, fill(L.tenantRemoveTitle, { name: t.domain || t.tid }), L.tenantRemoveText, L.tenantRemove))) return;
+    store(v.source || "local", list.filter((x) => !x.fixed && x.tid !== t.tid), L.tenantRemoved);
+  };
+  const addManual = async (e) => {
+    e.preventDefault();
+    const tid = (manual || "").trim().toLowerCase();
+    if (!GUID.test(tid)) { setError(L.tenantInvalid); return; }
+    if (list.some((t) => t.tid === tid)) { setManual(null); return; }
+    if (await store(v.source || "local", [...list.filter((t) => !t.fixed), { tid, domain: "" }], L.tenantAdded)) setManual(null);
+  };
   const values = (v.values || []).map((x) => (typeof x === "string" ? x : x.value || x.name)).filter(Boolean);
+  const off = props.disabled || busy;
+  const row = (t, extra) => h("li", { key: t.tid, className: "scalio-tenant-row", "data-testid": `tenant-${t.tid}` },
+    h("div", { className: "scalio-tenant-who" },
+      h("div", { className: "scalio-tenant-domain" }, t.href ? h("a", { href: t.href }, t.domain || t.label || t.tid) : (t.domain || t.label || t.tid),
+        t.label && t.domain ? h("span", { className: "scalio-badge" }, t.label) : null),
+      t.domain || t.label ? h("div", { className: "scalio-tenant-id" }, t.tid) : null),
+    extra ? null : t.fixed || props.fixed
+      ? h("span", { className: "scalio-badge" }, L.tenantFixed)
+      : h("button", { type: "button", className: "scalio-btn is-ghost scalio-roles-tool is-danger", onClick: () => remove(t), disabled: off, "data-testid": `tenant-remove-${t.tid}` }, L.tenantRemove));
+  const tenantBlock = props.tenants ? h("div", { className: "scalio-users-field", "data-testid": "role-source-tenants" },
+    h("div", { className: "scalio-field-label" }, L.tenants),
+    list.length
+      ? h("ul", { className: "scalio-tenant-list" }, list.map((t) => row(t, false)))
+      : h("p", { className: "scalio-users-hint", "data-testid": "tenants-empty" }, L.tenantsEmpty),
+    h("p", { className: "scalio-users-hint" }, L.tenantsHint),
+    props.fixed ? null : h("div", { className: "scalio-tenant-actions" },
+      props.consentUrl ? h("a", { className: cx("scalio-btn is-primary", off && "is-disabled"), href: props.consentUrl, title: L.tenantAddHint, "data-testid": "tenant-add" },
+        h(Icons.Plus, { className: "scalio-icon" }), L.tenantAdd) : null,
+      props.manual !== false && manual === null ? h("button", { type: "button", className: "scalio-btn", onClick: () => { setError(""); setManual(""); }, disabled: off, "data-testid": "tenant-manual" }, L.tenantManual) : null),
+    manual !== null ? h("form", { className: "scalio-tenant-manual", onSubmit: addManual },
+      h("label", { className: "scalio-field-label", htmlFor: "tenant-manual-id" }, L.tenantId),
+      h("input", { id: "tenant-manual-id", className: "scalio-input", value: manual, autoFocus: true, placeholder: "00000000-0000-0000-0000-000000000000",
+        onChange: (e) => setManual(e.target.value), disabled: off, "data-testid": "tenant-manual-id" }),
+      h("p", { className: "scalio-users-hint" }, L.tenantManualHint),
+      error ? h("p", { className: "scalio-notice is-error", role: "alert", "data-testid": "tenant-manual-error" }, error) : null,
+      h("div", { className: "scalio-tenant-actions" },
+        h("button", { type: "button", className: "scalio-btn is-ghost", onClick: () => setManual(null) }, L.cancel),
+        h("button", { type: "submit", className: "scalio-btn is-primary", disabled: off || !manual.trim(), "data-testid": "tenant-manual-save" }, L.tenantAddManual))) : null,
+    props.extraTenants && props.extraTenants.length ? h("div", { className: "scalio-users-field", "data-testid": "role-source-extra" },
+      props.extraTitle ? h("div", { className: "scalio-field-label" }, props.extraTitle) : null,
+      h("ul", { className: "scalio-tenant-list" }, props.extraTenants.map(tenantOf).map((t) => row(t, true)))) : null) : null;
   return h("div", { className: "scalio-roles-source", "data-testid": props.testId || "role-source" },
     h("div", { className: "scalio-users-field" },
       h("label", { className: "scalio-field-label", htmlFor: "role-source-select" }, L.source),
-      h("select", { id: "role-source-select", className: "scalio-input scalio-users-select", value: source, disabled: props.disabled || busy,
-        onChange: (e) => setSource(e.target.value), "data-testid": "role-source-select" },
-        h("option", { value: "local" }, L.sourceLocal),
-        h("option", { value: "entra" }, L.sourceEntra))),
-    props.tenants ? h("div", { className: "scalio-users-field" },
-      h("label", { className: "scalio-field-label", htmlFor: "role-source-tenants" }, L.tenants),
-      h("input", { id: "role-source-tenants", className: "scalio-input", value: tenants, disabled: props.disabled || busy,
-        onChange: (e) => setTenants(e.target.value), "data-testid": "role-source-tenants" }),
-      h("p", { className: "scalio-users-hint" }, L.tenantsHint)) : null,
+      h("div", { className: "scalio-tenant-actions" },
+        h("select", { id: "role-source-select", className: "scalio-input scalio-users-select", value: source, disabled: off,
+          onChange: (e) => setSource(e.target.value), "data-testid": "role-source-select" },
+          h("option", { value: "local" }, L.sourceLocal),
+          h("option", { value: "entra" }, L.sourceEntra)),
+        h("button", { type: "button", className: "scalio-btn is-primary", onClick: save, disabled: off || !dirty, "data-testid": "role-source-save" }, L.save))),
     h("p", { className: "scalio-users-hint", "data-testid": "role-source-hint" }, source === "entra" ? L.hintEntra : L.hintLocal, " ",
       values.map((x, i) => h(React.Fragment, { key: x }, i ? ", " : "", h("code", null, x)))),
-    h("div", null,
-      h("button", { type: "button", className: "scalio-btn is-primary", onClick: save, disabled: props.disabled || busy || !dirty, "data-testid": "role-source-save" }, L.save)));
+    tenantBlock);
 }
 
 module.exports = { RoleAdmin, RoleSourceSettings, rolesApi, rolesText };