@things-factory/auth-ui 10.1.44 → 10.1.47

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@things-factory/auth-ui",
-  "version": "10.1.44",
+  "version": "10.1.47",
   "main": "dist-server/index.js",
   "browser": "dist-client/index.js",
   "things-factory": true,
@@ -31,18 +31,18 @@
     "@operato/attribute": "^10.0.0",
     "@operato/data-grist": "^10.19.0",
     "@operato/i18n": "^10.0.0",
-    "@operato/layout": "^10.0.0",
+    "@operato/layout": "^10.26.0",
     "@operato/list-state": "^10.15.0",
     "@operato/lottie-player": "^10.0.0",
     "@operato/moment-timezone-es": "^10.0.0",
     "@operato/p13n": "^10.0.0",
     "@operato/popup": "^10.15.0",
     "@operato/styles": "^10.0.0",
-    "@things-factory/auth-base": "^10.1.44",
-    "@things-factory/component-ui": "^10.1.44",
-    "@things-factory/more-base": "^10.1.44",
+    "@things-factory/auth-base": "^10.1.47",
+    "@things-factory/component-ui": "^10.1.47",
+    "@things-factory/more-base": "^10.1.47",
     "base64url": "^3.0.1",
     "clipboard": "^2.0.6"
   },
-  "gitHead": "7c95c4e75e155e51c714409e865d96f317232c23"
+  "gitHead": "185f20d7d9a15715a0ee2757a6a8189ec36cfb9d"
 }

package/tests/person-360-sections.test.ts

@@ -0,0 +1,85 @@
+import { readFileSync } from 'fs'
+import path from 'path'
+
+/**
+ * The person 360 (ADR-0067 person 360 ruling): auth-ui declares the kind, and three modules each hang
+ * a section read through its own door. How a door's answer becomes none / may-not-see / failed is
+ * tested where it lives (@operato/layout `entity360-section.test.ts`); this holds what the three
+ * sections do with it. The sections need a DOM, so the test reads their source with comments stripped.
+ */
+
+const PACKAGES = path.resolve(__dirname, '../..')
+const read = (file: string) =>
+  readFileSync(path.join(PACKAGES, file), 'utf-8')
+    .replace(/\/\*[\s\S]*?\*\//g, '')
+    .replace(/^\s*\/\/.*$/gm, '')
+
+const SECTIONS = {
+  roles: { file: 'auth-ui/client/entity360/person-360.ts', register: 'registerPersonKind', bootstrap: 'auth-ui' },
+  membership: {
+    file: 'organization/client/entity360/person-membership-section.ts',
+    register: 'registerPersonMembershipSection',
+    bootstrap: 'organization'
+  },
+  'open-work': {
+    file: 'worklist/client/entity360/person-open-work-section.ts',
+    register: 'registerPersonOpenWorkSection',
+    bootstrap: 'worklist'
+  }
+}
+
+describe('the person 360 sections', () => {
+  it('★ a User value opens the person kind', () => {
+    expect(read(SECTIONS.roles.file)).toMatch(/kind: 'person',\s*typenames: \['User'\]/)
+  })
+
+  it.each(Object.entries(SECTIONS))('★ %s is hung on person and its module bootstrap registers it', (name, one) => {
+    const code = read(one.file)
+    expect(code).toMatch(new RegExp(`registerEntity360Section\\('person', \\{\\s*name: '${name}'`))
+    const bootstrap = read(`${one.bootstrap}/client/bootstrap.ts`)
+    expect(bootstrap).toMatch(new RegExp(`\\n\\s*${one.register}\\(\\)`))
+    /* Without a semicolon, a next statement that opens with [ or ( is read as part of this call -
+       worklist's bootstrap broke the 10.1.47 build that way (registerPersonOpenWorkSection()[...]). */
+    const after = bootstrap.slice(bootstrap.indexOf(`${one.register}()`) + `${one.register}()`.length)
+    const next = after.replace(/^;/, '').trimStart()
+    if (/^[[(`]/.test(next)) expect(after.startsWith(';')).toBe(true)
+  })
+
+  it.each(Object.entries(SECTIONS))(
+    '★ %s shows its door answer through the shared section frame, never its own none',
+    (_, one) => {
+      const code = read(one.file)
+      expect(code).toMatch(/this\.answer = readEntity360Door\(response,/)
+      expect(code).toMatch(/<ox-entity360-section[\s\S]*\.state=\$\{answer\?\.state \?\? 'loading'\}/)
+      expect(code).toMatch(/\.message=\$\{answer\?\.message \?\? ''\}/)
+    }
+  )
+
+  it.each(Object.entries(SECTIONS))('%s drops an answer for a subject that is no longer shown', (_, one) => {
+    expect(read(one.file)).toMatch(/await client\.query[\s\S]*if \(this\.subject\?\.id !== id\) return\s*this\.answer =/)
+  })
+
+  it("★ roles are this site's - read through userRoles, never User.roles which answers every domain", () => {
+    const code = read(SECTIONS.roles.file)
+    expect(code).toMatch(/userRoles\(userId: \$userId\)/)
+    expect(code).toMatch(/\.filter\(\(role: any\) => role\.assigned\)/)
+    expect(code).not.toMatch(/\broles\s*\{/)
+  })
+
+  it('★ open work is counts only - the items stay with the person and the site owner', () => {
+    const query = read(SECTIONS['open-work'].file).match(/gql`([\s\S]*?)`/)![1]
+    expect(query.replace(/\s+/g, ' ').trim()).toBe(
+      'query ($userId: String!) { personOpenWork(userId: $userId) { toDos approvalsPending } }'
+    )
+  })
+
+  it('membership reads this person only', () => {
+    expect(read(SECTIONS.membership.file)).toMatch(/filters: \[\{ name: 'userId', operator: 'eq', value: id \}\]/)
+  })
+
+  it('the dock reads who they are, then what they hold, then their roles', () => {
+    const order = (one: { file: string }) => Number(read(one.file).match(/order: (\d+)/)![1])
+    expect(order(SECTIONS.membership)).toBeLessThan(order(SECTIONS['open-work']))
+    expect(order(SECTIONS['open-work'])).toBeLessThan(order(SECTIONS.roles))
+  })
+})

package/translations/en.json

@@ -2,7 +2,6 @@
   "button.accept invitation": "accept invitation",
   "button.activate": "activate",
   "button.add what it can do": "Add what it can do",
-  "button.cancel": "cancel",
   "button.close": "Close",
   "button.confirm": "confirm",
   "button.copy": "copy",
@@ -40,7 +39,6 @@
   "button.terminate contract": "terminate",
   "button.transfer owner": "transfer owner",
   "button.unlock": "unlock",
-  "button.update": "update",
   "button.withdraw": "withdraw",
   "error.cannot_modify_system_subdomain": "the 'system' subdomain cannot be modified.",
   "error.domain not allowed": "the '{subdomain}' domain is not allowed for this user.",
@@ -69,28 +67,20 @@
   "field.confirm password": "confirm password",
   "field.contact email": "contact email",
   "field.created at": "created at",
-  "field.description": "description",
-  "field.email": "email address",
   "field.entity": "entity",
   "field.expires at": "expires at",
   "field.forgot-password": "forgot password",
   "field.granted at": "granted at",
   "field.granted by": "granted by",
   "field.granted privileges": "What it can do",
-  "field.hidden": "hidden",
   "field.invited": "invited",
   "field.ip_address": "IP address",
-  "field.model": "model",
   "field.module": "Module",
-  "field.name": "name",
-  "field.netmask": "netmask",
-  "field.options": "options",
   "field.owner": "owner",
   "field.owner-user": "owner",
   "field.parent-domain": "parent domain",
   "field.password": "password",
   "field.private-key": "private key",
-  "field.reason": "reason",
   "field.reason (optional)": "reason (optional)",
   "field.redirect url": "redirect url",
   "field.required privilege": "required privilege",
@@ -105,7 +95,6 @@
   "field.source-domain": "source domain",
   "field.state": "state",
   "field.status": "status",
-  "field.tag": "tag",
   "field.target-domain": "target domain",
   "field.tenant-id": "tenant id",
   "field.token": "token",
@@ -116,6 +105,7 @@
   "field.user-type": "user type",
   "field.username": "user id",
   "field.username or email": "username or email",
+  "field.vs template": "vs template",
   "field.webhook": "webhook",
   "label.access token": "access token",
   "label.activated": "activated",
@@ -138,7 +128,6 @@
   "label.customers": "customers",
   "label.delete account": "delete account",
   "label.deleted-user": "deleted",
-  "label.description": "description",
   "label.domain": "domain",
   "label.domain-owner": "domain owner",
   "label.draft": "draft",
@@ -153,7 +142,6 @@
   "label.language": "language",
   "label.locked-user": "locked",
   "label.login_history": "login history",
-  "label.name": "name",
   "label.ours": "Ours",
   "label.password": "password",
   "label.privilege": "privilege",
@@ -184,6 +172,7 @@
   "text.a role of this name is already visible": "a role of this name is already visible",
   "text.account exists so joins immediately": "This account already exists. Adding it lets them in right away.",
   "text.account will be created with the default password": "No account uses this address yet. One is created with the default password, which you have to tell them yourself.",
+  "text.add template privileges": "adds the {count} privileges the {template} template grants and this role lacks: {list}",
   "text.add_domain_owner_description": "grant another domain member owner permission.",
   "text.already in this domain": "already here",
   "text.an application signs in on its own behalf": "an application signs in on its own behalf, with its own key and its own privileges",
@@ -225,7 +214,6 @@
   "text.current password": "current password",
   "text.delete account warning message": "this action cannot be undone. this will permanently delete all about this account.\n\nplease type in the email and password of this account to confirm.",
   "text.deleted_successfully": "deleted successfully",
-  "text.do_you_want_to_create_role": "do you want to create role?",
   "text.do_you_want_to_create_x": "do you want to create {x} ?",
   "text.do_you_want_to_invite_x": "do you want to invite {x}",
   "text.domain management": "domain management",
@@ -247,7 +235,7 @@
   "text.invalid-email": "that is not an email address",
   "text.invalid-username": "use an id or an email address",
   "text.invitation resent": "invitation sent again.",
-  "text.loading": "loading…",
+  "text.missing against template": "{count} missing",
   "text.new password": "new password",
   "text.no account and no default password": "No account uses this address, and this system has no default password. They have to sign up first.",
   "text.no account so an invitation will be mailed": "no account yet, so an invitation will be mailed. they choose their own password.",
@@ -338,6 +326,7 @@
   "title.accept invitation": "accept invitation",
   "title.activate account": "activate account",
   "title.add domain owner": "add domain owner",
+  "title.add template privileges": "add template privileges",
   "title.attribute model": "attribute model",
   "title.attribute-item list": "attribute-item list",
   "title.attributes": "attributes",

package/translations/ja.json

@@ -1,7 +1,6 @@
 {
   "button.accept invitation": "招待を受ける",
   "button.activate": "アクティブ化",
-  "button.cancel": "キャンセル",
   "button.close": "閉じる",
   "button.confirm": "確認",
   "button.copy": "コピー",
@@ -34,7 +33,6 @@
   "button.submit": "送信",
   "button.terminate contract": "契約解除",
   "button.transfer owner": "管理者付与",
-  "button.update": "更新",
   "button.withdraw": "招待を取り消す",
   "error.cannot_modify_system_subdomain": "'system'サブドメインは変更できません。",
   "error.domain not allowed": "この$t(term.domain)は許可されていません.",
@@ -63,18 +61,11 @@
   "field.confirm password": "パスワード確認",
   "field.contact email": "連絡先メール",
   "field.created at": "送信日時",
-  "field.description": "説明",
-  "field.email": "メール",
   "field.entity": "エンティティ",
   "field.expires at": "有効期限",
   "field.forgot-password": "パスワードを忘れましたか?",
-  "field.hidden": "隠し",
   "field.invited": "招待",
   "field.ip_address": "IPアドレス",
-  "field.model": "モデル",
-  "field.name": "名前",
-  "field.netmask": "ネットマスク",
-  "field.options": "オプション",
   "field.owner": "管理者",
   "field.owner-user": "管理者",
   "field.parent-domain": "親$t(term.domain)",
@@ -92,7 +83,6 @@
   "field.source-domain": "ソース$t(term.domain)",
   "field.state": "状態",
   "field.status": "状態",
-  "field.tag": "タグ",
   "field.target-domain": "ターゲット$t(term.domain)",
   "field.tenant-id": "テナントID",
   "field.token": "認証トークン",
@@ -102,6 +92,7 @@
   "field.user-id or email": "ユーザーIDまたはメール",
   "field.user-type": "ユーザー タイプ",
   "field.username": "ユーザーID",
+  "field.vs template": "テンプレート比",
   "field.webhook": "webhook",
   "label.access token": "アクセストークン",
   "label.activated": "使用中",
@@ -119,7 +110,6 @@
   "label.customers": "顧客",
   "label.delete account": "アカウント削除",
   "label.deleted-user": "削除済み",
-  "label.description": "説明",
   "label.domain": "$t(term.domain)",
   "label.domain-owner": "$t(term.domain)オーナー",
   "label.draft": "下書き",
@@ -132,7 +122,6 @@
   "label.language": "言語",
   "label.locked-user": "ロック",
   "label.login_history": "ログイン履歴",
-  "label.name": "名前",
   "label.password": "パスワード",
   "label.privilege": "特権",
   "label.protected-request-ip": "安全なリクエスト IP",
@@ -158,6 +147,7 @@
   "text.a blank seat opens nothing until you give it privileges": "A blank seat opens nothing until you give it privileges.",
   "text.a role of this name exists and will be added to": "A role of this name already exists. It will be used as it stands and these privileges added to it.",
   "text.a role of this name is already visible": "同じ名前のロールが既に見えています",
+  "text.add template privileges": "{template} テンプレートが付与し、このロールにない権限 {count}件を追加します: {list}",
   "text.already in this domain": "already here",
   "text.an application signs in on its own behalf": "アプリケーションは自身のキーと権限でログインします",
   "text.appliance": "端末装置",
@@ -209,6 +199,7 @@
   "text.invalid-email": "メールアドレスの形式が違います",
   "text.invalid-username": "IDまたはメールアドレスを入力してください",
   "text.invitation resent": "招待メールを再送しました。",
+  "text.missing against template": "{count}件不足",
   "text.new password": "新しいパスワード",
   "text.no account so an invitation will be mailed": "アカウントがないため招待メールを送ります。パスワードは本人が決めます。",
   "text.no domain available": "使用できる$t(term.domain)がありません.",
@@ -268,6 +259,7 @@
   "text.your email address": "ユーザー メール",
   "title.accept invitation": "招待を受ける",
   "title.activate account": "アカウント有効化",
+  "title.add template privileges": "テンプレートの権限を追加",
   "title.attribute model": "属性モデル",
   "title.attribute-item list": "属性アイテム リスト",
   "title.attributes": "属性",
@@ -289,5 +281,73 @@
   "title.secure-ip-list": "セキュアな IP リスト",
   "title.sign in": "ログイン",
   "title.sign up": "ユーザー登録",
-  "title.unlock account": "アカウントロック解除"
+  "title.unlock account": "アカウントロック解除",
+  "button.add what it can do": "できることを追加",
+  "button.drop": "外す",
+  "button.edit privileges": "権限を編集",
+  "button.remove from domain": "$t(term.domain)から外す",
+  "button.remove owner": "オーナーを解除",
+  "button.unlock": "ロック解除",
+  "field.granted at": "付与日時",
+  "field.granted by": "付与者",
+  "field.granted privileges": "できること",
+  "field.module": "モジュール",
+  "field.reason (optional)": "理由(任意)",
+  "field.source": "出所",
+  "field.username or email": "ユーザー名またはメール",
+  "label.add role": "ロールを追加",
+  "label.add to domain": "$t(term.domain)に追加",
+  "label.add user": "ユーザーを追加",
+  "label.all": "すべて",
+  "label.create account and add": "アカウントを作成して追加",
+  "label.execute": "実行",
+  "label.inherited": "継承",
+  "label.ours": "自分のロール",
+  "label.read": "読み取り",
+  "label.write": "書き込み",
+  "text.account exists so joins immediately": "このアカウントはすでにあります。追加するとすぐに入れます。",
+  "text.account will be created with the default password": "このメールで登録されたアカウントはありません。既定のパスワードでアカウントを作成して追加します。パスワードはご自身で伝えてください。",
+  "text.add_domain_owner_description": "$t(term.domain)のメンバーの一人にオーナー権限を付与します。",
+  "text.and x more": "ほか{x}件",
+  "text.are_you_sure_to_remove_domain_owner": "{x} を$t(term.domain)のオーナーから解除しますか?",
+  "text.cannot be undone": "元に戻せない操作",
+  "text.domain owner added successfully": "$t(term.domain)のオーナーを追加しました",
+  "text.domain owner removed successfully": "$t(term.domain)のオーナーを解除しました",
+  "text.domain owners": "$t(term.domain)のオーナー",
+  "text.failed": "失敗",
+  "text.failed to fetch": "一覧を読み込めませんでした",
+  "text.filter by module name": "モジュール名で絞り込み",
+  "text.inherited roles are edited in their own domain": "これらのロールは上位の$t(term.domain)で定義されており、そちらでのみ変更できます。",
+  "text.no account and no default password": "このメールで登録されたアカウントがなく、このシステムには既定のパスワードもありません。先にご本人が登録する必要があります。",
+  "text.no description for this privilege": "この権限の説明はまだありません。",
+  "text.no description for this role": "説明はまだありません — ロール一覧で書けます。",
+  "text.no one holds this role yet": "このロールを持つ人はまだいません。",
+  "text.no other user yet": "まだ他のユーザーはいません",
+  "text.no privilege declared in this deployment": "このデプロイで宣言された権限はまだありません。ロールに付けるものがありません。",
+  "text.no privilege granted": "何も開かない",
+  "text.no role assigned": "ロールなし",
+  "text.no role defined in this domain": "この$t(term.domain)にはロールがありません。付与する前にロールを作成してください。",
+  "text.no role yet": "まだ定義されたロールはありません",
+  "text.none on": "なし",
+  "text.not declared for this module": "このモジュールにはその権限が宣言されていません。",
+  "text.nothing is on for this role yet": "このロールはまだ何も開きません。下でできることを追加してください。",
+  "text.nothing matches x": "「{x}」を含むモジュール名はありません。",
+  "text.owner opens everything without a role": "オーナーはロールなしですべての画面を開けます。他のユーザーにはロールが必要です。",
+  "text.password becomes the default and must be told to them": "パスワードは既定値に戻ります。メールは送られないので、新しいパスワードはご自身で伝えてください。",
+  "text.pick a module on the left": "左でモジュールを選ぶと、このロールがそのモジュールで何をできるかが表示されます。",
+  "text.please enter username or email": "ユーザー名またはメールを入力してください",
+  "text.please try again": "しばらくしてからもう一度お試しください。",
+  "text.remove the role from x people first": "このロールを削除するには、まず持っている {x} 人から外してください。",
+  "text.role belongs to x domain and is edited there": "このロールは {x} で定義されており、そちらでのみ編集できます。ここで付与できるため一覧に表示されています。",
+  "text.roles in use are kept": "誰かが持っているロールは残します。使われていないものだけ削除されます。",
+  "text.they lose access to this domain but keep the account": "この$t(term.domain)では作業できなくなります。アカウントは残るので、後で再び追加できます。",
+  "text.unlocks in x minutes": "{x}分後にロック解除",
+  "text.view only": "継承ロール — 閲覧のみ",
+  "text.without a role they see nothing": "ロールを決めないと、入っても見られる画面がありません。",
+  "text.x is required": "{x}を入力してください。",
+  "text.x of y on": "{y}件中{x}件オン",
+  "text.x on": "{x}件オン",
+  "text.x people hold this role": "このロールを持つ人 {x}名",
+  "title.add domain owner": "$t(term.domain)のオーナーを追加",
+  "title.role privileges": "ロールの権限"
 }

package/translations/ko.json

@@ -2,7 +2,6 @@
   "button.accept invitation": "초대 수락",
   "button.activate": "활성화",
   "button.add what it can do": "할 수 있는 일 더하기",
-  "button.cancel": "취소",
   "button.close": "닫기",
   "button.confirm": "확인",
   "button.copy": "복사",
@@ -40,7 +39,6 @@
   "button.terminate contract": "계약 해지",
   "button.transfer owner": "관리자 부여",
   "button.unlock": "잠금 해제",
-  "button.update": "수정",
   "button.withdraw": "초대 취소",
   "error.cannot_modify_system_subdomain": "'system' 서브도메인은 수정할 수 없습니다.",
   "error.domain not allowed": "'{subdomain}' 영역은 이 사용자에게 허가되지 않았습니다.",
@@ -69,28 +67,20 @@
   "field.confirm password": "비밀번호 확인",
   "field.contact email": "연락 이메일",
   "field.created at": "보낸 시점",
-  "field.description": "설명",
-  "field.email": "이메일",
   "field.entity": "개체",
   "field.expires at": "만료 시점",
   "field.forgot-password": "암호가 기억나지 않나요?",
   "field.granted at": "부여 시각",
   "field.granted by": "권한 부여자",
   "field.granted privileges": "할 수 있는 일",
-  "field.hidden": "감추기",
   "field.invited": "초대",
   "field.ip_address": "IP 주소",
-  "field.model": "모델",
   "field.module": "모듈",
-  "field.name": "이름",
-  "field.netmask": "네트워크 마스크",
-  "field.options": "옵션",
   "field.owner": "소유자",
   "field.owner-user": "소유자",
   "field.parent-domain": "부모$t(term.domain)",
   "field.password": "비밀번호",
   "field.private-key": "private key",
-  "field.reason": "사유",
   "field.reason (optional)": "사유 (선택)",
   "field.redirect url": "리다이렉트 주소",
   "field.required privilege": "필수 권한",
@@ -105,7 +95,6 @@
   "field.source-domain": "소스 $t(term.domain)",
   "field.state": "상태",
   "field.status": "상태",
-  "field.tag": "태그",
   "field.target-domain": "타겟 $t(term.domain)",
   "field.tenant-id": "tenant id",
   "field.token": "인증 토큰",
@@ -116,6 +105,7 @@
   "field.user-type": "사용자유형",
   "field.username": "사용자 아이디",
   "field.username or email": "사용자명 또는 이메일",
+  "field.vs template": "템플릿 대비",
   "field.webhook": "webhook",
   "label.access token": "액세스 토큰",
   "label.activated": "사용 중",
@@ -138,7 +128,6 @@
   "label.customers": "고객",
   "label.delete account": "계정 삭제",
   "label.deleted-user": "삭제됨",
-  "label.description": "설명",
   "label.domain": "$t(term.domain)",
   "label.domain-owner": "$t(term.domain) 관리자",
   "label.draft": "초안",
@@ -153,7 +142,6 @@
   "label.language": "언어",
   "label.locked-user": "잠김",
   "label.login_history": "로그인 이력",
-  "label.name": "이름",
   "label.ours": "우리 역할",
   "label.password": "비밀번호",
   "label.privilege": "권한",
@@ -184,6 +172,7 @@
   "text.a role of this name is already visible": "같은 이름의 역할이 이미 보입니다",
   "text.account exists so joins immediately": "이미 계정이 있습니다. 넣으면 바로 들어옵니다.",
   "text.account will be created with the default password": "이 이메일로 가입한 계정이 없습니다. 기본 비밀번호로 계정을 만들어 넣습니다. 비밀번호는 직접 알려 주셔야 합니다.",
+  "text.add template privileges": "{template} 템플릿이 여는데 이 역할에 없는 권한 {count}개를 더합니다: {list}",
   "text.add_domain_owner_description": "$t(term.domain) 멤버 중 한 명에게 소유자 권한을 부여합니다.",
   "text.already in this domain": "이미 있음",
   "text.an application signs in on its own behalf": "응용프로그램은 자기 키와 자기 권한으로 스스로 로그인합니다",
@@ -246,7 +235,7 @@
   "text.invalid-email": "이메일 주소 형식이 맞지 않습니다",
   "text.invalid-username": "아이디나 이메일 주소를 적으십시오",
   "text.invitation resent": "초대 메일을 다시 보냈습니다.",
-  "text.loading": "읽는 중…",
+  "text.missing against template": "{count}개 빠짐",
   "text.new password": "새 비밀번호",
   "text.no account and no default password": "이 이메일로 가입한 계정이 없고, 이 시스템에는 기본 비밀번호가 설정되어 있지 않습니다. 그 사람이 먼저 가입해야 부를 수 있습니다.",
   "text.no account so an invitation will be mailed": "계정이 없어 초대 메일을 보냅니다. 비밀번호는 본인이 정합니다.",
@@ -337,6 +326,7 @@
   "title.accept invitation": "초대 수락",
   "title.activate account": "계정 활성화",
   "title.add domain owner": "$t(term.domain) 소유자 추가",
+  "title.add template privileges": "템플릿의 권한 더하기",
   "title.attribute model": "속성 모델",
   "title.attribute-item list": "속성 아이템 리스트",
   "title.attributes": "속성",