@things-factory/auth-ui 10.1.46 → 10.1.47

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@things-factory/auth-ui",
-  "version": "10.1.46",
+  "version": "10.1.47",
   "main": "dist-server/index.js",
   "browser": "dist-client/index.js",
   "things-factory": true,
@@ -31,18 +31,18 @@
     "@operato/attribute": "^10.0.0",
     "@operato/data-grist": "^10.19.0",
     "@operato/i18n": "^10.0.0",
-    "@operato/layout": "^10.0.0",
+    "@operato/layout": "^10.26.0",
     "@operato/list-state": "^10.15.0",
     "@operato/lottie-player": "^10.0.0",
     "@operato/moment-timezone-es": "^10.0.0",
     "@operato/p13n": "^10.0.0",
     "@operato/popup": "^10.15.0",
     "@operato/styles": "^10.0.0",
-    "@things-factory/auth-base": "^10.1.46",
-    "@things-factory/component-ui": "^10.1.46",
-    "@things-factory/more-base": "^10.1.46",
+    "@things-factory/auth-base": "^10.1.47",
+    "@things-factory/component-ui": "^10.1.47",
+    "@things-factory/more-base": "^10.1.47",
     "base64url": "^3.0.1",
     "clipboard": "^2.0.6"
   },
-  "gitHead": "d3467cde550453f3348fed0ed6c79a12a6ba0db4"
+  "gitHead": "185f20d7d9a15715a0ee2757a6a8189ec36cfb9d"
 }

package/tests/person-360-sections.test.ts

@@ -0,0 +1,85 @@
+import { readFileSync } from 'fs'
+import path from 'path'
+
+/**
+ * The person 360 (ADR-0067 person 360 ruling): auth-ui declares the kind, and three modules each hang
+ * a section read through its own door. How a door's answer becomes none / may-not-see / failed is
+ * tested where it lives (@operato/layout `entity360-section.test.ts`); this holds what the three
+ * sections do with it. The sections need a DOM, so the test reads their source with comments stripped.
+ */
+
+const PACKAGES = path.resolve(__dirname, '../..')
+const read = (file: string) =>
+  readFileSync(path.join(PACKAGES, file), 'utf-8')
+    .replace(/\/\*[\s\S]*?\*\//g, '')
+    .replace(/^\s*\/\/.*$/gm, '')
+
+const SECTIONS = {
+  roles: { file: 'auth-ui/client/entity360/person-360.ts', register: 'registerPersonKind', bootstrap: 'auth-ui' },
+  membership: {
+    file: 'organization/client/entity360/person-membership-section.ts',
+    register: 'registerPersonMembershipSection',
+    bootstrap: 'organization'
+  },
+  'open-work': {
+    file: 'worklist/client/entity360/person-open-work-section.ts',
+    register: 'registerPersonOpenWorkSection',
+    bootstrap: 'worklist'
+  }
+}
+
+describe('the person 360 sections', () => {
+  it('★ a User value opens the person kind', () => {
+    expect(read(SECTIONS.roles.file)).toMatch(/kind: 'person',\s*typenames: \['User'\]/)
+  })
+
+  it.each(Object.entries(SECTIONS))('★ %s is hung on person and its module bootstrap registers it', (name, one) => {
+    const code = read(one.file)
+    expect(code).toMatch(new RegExp(`registerEntity360Section\\('person', \\{\\s*name: '${name}'`))
+    const bootstrap = read(`${one.bootstrap}/client/bootstrap.ts`)
+    expect(bootstrap).toMatch(new RegExp(`\\n\\s*${one.register}\\(\\)`))
+    /* Without a semicolon, a next statement that opens with [ or ( is read as part of this call -
+       worklist's bootstrap broke the 10.1.47 build that way (registerPersonOpenWorkSection()[...]). */
+    const after = bootstrap.slice(bootstrap.indexOf(`${one.register}()`) + `${one.register}()`.length)
+    const next = after.replace(/^;/, '').trimStart()
+    if (/^[[(`]/.test(next)) expect(after.startsWith(';')).toBe(true)
+  })
+
+  it.each(Object.entries(SECTIONS))(
+    '★ %s shows its door answer through the shared section frame, never its own none',
+    (_, one) => {
+      const code = read(one.file)
+      expect(code).toMatch(/this\.answer = readEntity360Door\(response,/)
+      expect(code).toMatch(/<ox-entity360-section[\s\S]*\.state=\$\{answer\?\.state \?\? 'loading'\}/)
+      expect(code).toMatch(/\.message=\$\{answer\?\.message \?\? ''\}/)
+    }
+  )
+
+  it.each(Object.entries(SECTIONS))('%s drops an answer for a subject that is no longer shown', (_, one) => {
+    expect(read(one.file)).toMatch(/await client\.query[\s\S]*if \(this\.subject\?\.id !== id\) return\s*this\.answer =/)
+  })
+
+  it("★ roles are this site's - read through userRoles, never User.roles which answers every domain", () => {
+    const code = read(SECTIONS.roles.file)
+    expect(code).toMatch(/userRoles\(userId: \$userId\)/)
+    expect(code).toMatch(/\.filter\(\(role: any\) => role\.assigned\)/)
+    expect(code).not.toMatch(/\broles\s*\{/)
+  })
+
+  it('★ open work is counts only - the items stay with the person and the site owner', () => {
+    const query = read(SECTIONS['open-work'].file).match(/gql`([\s\S]*?)`/)![1]
+    expect(query.replace(/\s+/g, ' ').trim()).toBe(
+      'query ($userId: String!) { personOpenWork(userId: $userId) { toDos approvalsPending } }'
+    )
+  })
+
+  it('membership reads this person only', () => {
+    expect(read(SECTIONS.membership.file)).toMatch(/filters: \[\{ name: 'userId', operator: 'eq', value: id \}\]/)
+  })
+
+  it('the dock reads who they are, then what they hold, then their roles', () => {
+    const order = (one: { file: string }) => Number(read(one.file).match(/order: (\d+)/)![1])
+    expect(order(SECTIONS.membership)).toBeLessThan(order(SECTIONS['open-work']))
+    expect(order(SECTIONS['open-work'])).toBeLessThan(order(SECTIONS.roles))
+  })
+})

package/translations/en.json

@@ -2,7 +2,6 @@
   "button.accept invitation": "accept invitation",
   "button.activate": "activate",
   "button.add what it can do": "Add what it can do",
-  "button.cancel": "cancel",
   "button.close": "Close",
   "button.confirm": "confirm",
   "button.copy": "copy",
@@ -40,7 +39,6 @@
   "button.terminate contract": "terminate",
   "button.transfer owner": "transfer owner",
   "button.unlock": "unlock",
-  "button.update": "update",
   "button.withdraw": "withdraw",
   "error.cannot_modify_system_subdomain": "the 'system' subdomain cannot be modified.",
   "error.domain not allowed": "the '{subdomain}' domain is not allowed for this user.",
@@ -69,28 +67,20 @@
   "field.confirm password": "confirm password",
   "field.contact email": "contact email",
   "field.created at": "created at",
-  "field.description": "description",
-  "field.email": "email address",
   "field.entity": "entity",
   "field.expires at": "expires at",
   "field.forgot-password": "forgot password",
   "field.granted at": "granted at",
   "field.granted by": "granted by",
   "field.granted privileges": "What it can do",
-  "field.hidden": "hidden",
   "field.invited": "invited",
   "field.ip_address": "IP address",
-  "field.model": "model",
   "field.module": "Module",
-  "field.name": "name",
-  "field.netmask": "netmask",
-  "field.options": "options",
   "field.owner": "owner",
   "field.owner-user": "owner",
   "field.parent-domain": "parent domain",
   "field.password": "password",
   "field.private-key": "private key",
-  "field.reason": "reason",
   "field.reason (optional)": "reason (optional)",
   "field.redirect url": "redirect url",
   "field.required privilege": "required privilege",
@@ -105,7 +95,6 @@
   "field.source-domain": "source domain",
   "field.state": "state",
   "field.status": "status",
-  "field.tag": "tag",
   "field.target-domain": "target domain",
   "field.tenant-id": "tenant id",
   "field.token": "token",
@@ -139,7 +128,6 @@
   "label.customers": "customers",
   "label.delete account": "delete account",
   "label.deleted-user": "deleted",
-  "label.description": "description",
   "label.domain": "domain",
   "label.domain-owner": "domain owner",
   "label.draft": "draft",
@@ -154,7 +142,6 @@
   "label.language": "language",
   "label.locked-user": "locked",
   "label.login_history": "login history",
-  "label.name": "name",
   "label.ours": "Ours",
   "label.password": "password",
   "label.privilege": "privilege",
@@ -227,7 +214,6 @@
   "text.current password": "current password",
   "text.delete account warning message": "this action cannot be undone. this will permanently delete all about this account.\n\nplease type in the email and password of this account to confirm.",
   "text.deleted_successfully": "deleted successfully",
-  "text.do_you_want_to_create_role": "do you want to create role?",
   "text.do_you_want_to_create_x": "do you want to create {x} ?",
   "text.do_you_want_to_invite_x": "do you want to invite {x}",
   "text.domain management": "domain management",
@@ -249,7 +235,6 @@
   "text.invalid-email": "that is not an email address",
   "text.invalid-username": "use an id or an email address",
   "text.invitation resent": "invitation sent again.",
-  "text.loading": "loading…",
   "text.missing against template": "{count} missing",
   "text.new password": "new password",
   "text.no account and no default password": "No account uses this address, and this system has no default password. They have to sign up first.",

package/translations/ja.json

@@ -1,7 +1,6 @@
 {
   "button.accept invitation": "招待を受ける",
   "button.activate": "アクティブ化",
-  "button.cancel": "キャンセル",
   "button.close": "閉じる",
   "button.confirm": "確認",
   "button.copy": "コピー",
@@ -34,7 +33,6 @@
   "button.submit": "送信",
   "button.terminate contract": "契約解除",
   "button.transfer owner": "管理者付与",
-  "button.update": "更新",
   "button.withdraw": "招待を取り消す",
   "error.cannot_modify_system_subdomain": "'system'サブドメインは変更できません。",
   "error.domain not allowed": "この$t(term.domain)は許可されていません.",
@@ -63,18 +61,11 @@
   "field.confirm password": "パスワード確認",
   "field.contact email": "連絡先メール",
   "field.created at": "送信日時",
-  "field.description": "説明",
-  "field.email": "メール",
   "field.entity": "エンティティ",
   "field.expires at": "有効期限",
   "field.forgot-password": "パスワードを忘れましたか?",
-  "field.hidden": "隠し",
   "field.invited": "招待",
   "field.ip_address": "IPアドレス",
-  "field.model": "モデル",
-  "field.name": "名前",
-  "field.netmask": "ネットマスク",
-  "field.options": "オプション",
   "field.owner": "管理者",
   "field.owner-user": "管理者",
   "field.parent-domain": "親$t(term.domain)",
@@ -92,7 +83,6 @@
   "field.source-domain": "ソース$t(term.domain)",
   "field.state": "状態",
   "field.status": "状態",
-  "field.tag": "タグ",
   "field.target-domain": "ターゲット$t(term.domain)",
   "field.tenant-id": "テナントID",
   "field.token": "認証トークン",
@@ -120,7 +110,6 @@
   "label.customers": "顧客",
   "label.delete account": "アカウント削除",
   "label.deleted-user": "削除済み",
-  "label.description": "説明",
   "label.domain": "$t(term.domain)",
   "label.domain-owner": "$t(term.domain)オーナー",
   "label.draft": "下書き",
@@ -133,7 +122,6 @@
   "label.language": "言語",
   "label.locked-user": "ロック",
   "label.login_history": "ログイン履歴",
-  "label.name": "名前",
   "label.password": "パスワード",
   "label.privilege": "特権",
   "label.protected-request-ip": "安全なリクエスト IP",
@@ -293,5 +281,73 @@
   "title.secure-ip-list": "セキュアな IP リスト",
   "title.sign in": "ログイン",
   "title.sign up": "ユーザー登録",
-  "title.unlock account": "アカウントロック解除"
+  "title.unlock account": "アカウントロック解除",
+  "button.add what it can do": "できることを追加",
+  "button.drop": "外す",
+  "button.edit privileges": "権限を編集",
+  "button.remove from domain": "$t(term.domain)から外す",
+  "button.remove owner": "オーナーを解除",
+  "button.unlock": "ロック解除",
+  "field.granted at": "付与日時",
+  "field.granted by": "付与者",
+  "field.granted privileges": "できること",
+  "field.module": "モジュール",
+  "field.reason (optional)": "理由(任意)",
+  "field.source": "出所",
+  "field.username or email": "ユーザー名またはメール",
+  "label.add role": "ロールを追加",
+  "label.add to domain": "$t(term.domain)に追加",
+  "label.add user": "ユーザーを追加",
+  "label.all": "すべて",
+  "label.create account and add": "アカウントを作成して追加",
+  "label.execute": "実行",
+  "label.inherited": "継承",
+  "label.ours": "自分のロール",
+  "label.read": "読み取り",
+  "label.write": "書き込み",
+  "text.account exists so joins immediately": "このアカウントはすでにあります。追加するとすぐに入れます。",
+  "text.account will be created with the default password": "このメールで登録されたアカウントはありません。既定のパスワードでアカウントを作成して追加します。パスワードはご自身で伝えてください。",
+  "text.add_domain_owner_description": "$t(term.domain)のメンバーの一人にオーナー権限を付与します。",
+  "text.and x more": "ほか{x}件",
+  "text.are_you_sure_to_remove_domain_owner": "{x} を$t(term.domain)のオーナーから解除しますか?",
+  "text.cannot be undone": "元に戻せない操作",
+  "text.domain owner added successfully": "$t(term.domain)のオーナーを追加しました",
+  "text.domain owner removed successfully": "$t(term.domain)のオーナーを解除しました",
+  "text.domain owners": "$t(term.domain)のオーナー",
+  "text.failed": "失敗",
+  "text.failed to fetch": "一覧を読み込めませんでした",
+  "text.filter by module name": "モジュール名で絞り込み",
+  "text.inherited roles are edited in their own domain": "これらのロールは上位の$t(term.domain)で定義されており、そちらでのみ変更できます。",
+  "text.no account and no default password": "このメールで登録されたアカウントがなく、このシステムには既定のパスワードもありません。先にご本人が登録する必要があります。",
+  "text.no description for this privilege": "この権限の説明はまだありません。",
+  "text.no description for this role": "説明はまだありません — ロール一覧で書けます。",
+  "text.no one holds this role yet": "このロールを持つ人はまだいません。",
+  "text.no other user yet": "まだ他のユーザーはいません",
+  "text.no privilege declared in this deployment": "このデプロイで宣言された権限はまだありません。ロールに付けるものがありません。",
+  "text.no privilege granted": "何も開かない",
+  "text.no role assigned": "ロールなし",
+  "text.no role defined in this domain": "この$t(term.domain)にはロールがありません。付与する前にロールを作成してください。",
+  "text.no role yet": "まだ定義されたロールはありません",
+  "text.none on": "なし",
+  "text.not declared for this module": "このモジュールにはその権限が宣言されていません。",
+  "text.nothing is on for this role yet": "このロールはまだ何も開きません。下でできることを追加してください。",
+  "text.nothing matches x": "「{x}」を含むモジュール名はありません。",
+  "text.owner opens everything without a role": "オーナーはロールなしですべての画面を開けます。他のユーザーにはロールが必要です。",
+  "text.password becomes the default and must be told to them": "パスワードは既定値に戻ります。メールは送られないので、新しいパスワードはご自身で伝えてください。",
+  "text.pick a module on the left": "左でモジュールを選ぶと、このロールがそのモジュールで何をできるかが表示されます。",
+  "text.please enter username or email": "ユーザー名またはメールを入力してください",
+  "text.please try again": "しばらくしてからもう一度お試しください。",
+  "text.remove the role from x people first": "このロールを削除するには、まず持っている {x} 人から外してください。",
+  "text.role belongs to x domain and is edited there": "このロールは {x} で定義されており、そちらでのみ編集できます。ここで付与できるため一覧に表示されています。",
+  "text.roles in use are kept": "誰かが持っているロールは残します。使われていないものだけ削除されます。",
+  "text.they lose access to this domain but keep the account": "この$t(term.domain)では作業できなくなります。アカウントは残るので、後で再び追加できます。",
+  "text.unlocks in x minutes": "{x}分後にロック解除",
+  "text.view only": "継承ロール — 閲覧のみ",
+  "text.without a role they see nothing": "ロールを決めないと、入っても見られる画面がありません。",
+  "text.x is required": "{x}を入力してください。",
+  "text.x of y on": "{y}件中{x}件オン",
+  "text.x on": "{x}件オン",
+  "text.x people hold this role": "このロールを持つ人 {x}名",
+  "title.add domain owner": "$t(term.domain)のオーナーを追加",
+  "title.role privileges": "ロールの権限"
 }

package/translations/ko.json

@@ -2,7 +2,6 @@
   "button.accept invitation": "초대 수락",
   "button.activate": "활성화",
   "button.add what it can do": "할 수 있는 일 더하기",
-  "button.cancel": "취소",
   "button.close": "닫기",
   "button.confirm": "확인",
   "button.copy": "복사",
@@ -40,7 +39,6 @@
   "button.terminate contract": "계약 해지",
   "button.transfer owner": "관리자 부여",
   "button.unlock": "잠금 해제",
-  "button.update": "수정",
   "button.withdraw": "초대 취소",
   "error.cannot_modify_system_subdomain": "'system' 서브도메인은 수정할 수 없습니다.",
   "error.domain not allowed": "'{subdomain}' 영역은 이 사용자에게 허가되지 않았습니다.",
@@ -69,28 +67,20 @@
   "field.confirm password": "비밀번호 확인",
   "field.contact email": "연락 이메일",
   "field.created at": "보낸 시점",
-  "field.description": "설명",
-  "field.email": "이메일",
   "field.entity": "개체",
   "field.expires at": "만료 시점",
   "field.forgot-password": "암호가 기억나지 않나요?",
   "field.granted at": "부여 시각",
   "field.granted by": "권한 부여자",
   "field.granted privileges": "할 수 있는 일",
-  "field.hidden": "감추기",
   "field.invited": "초대",
   "field.ip_address": "IP 주소",
-  "field.model": "모델",
   "field.module": "모듈",
-  "field.name": "이름",
-  "field.netmask": "네트워크 마스크",
-  "field.options": "옵션",
   "field.owner": "소유자",
   "field.owner-user": "소유자",
   "field.parent-domain": "부모$t(term.domain)",
   "field.password": "비밀번호",
   "field.private-key": "private key",
-  "field.reason": "사유",
   "field.reason (optional)": "사유 (선택)",
   "field.redirect url": "리다이렉트 주소",
   "field.required privilege": "필수 권한",
@@ -105,7 +95,6 @@
   "field.source-domain": "소스 $t(term.domain)",
   "field.state": "상태",
   "field.status": "상태",
-  "field.tag": "태그",
   "field.target-domain": "타겟 $t(term.domain)",
   "field.tenant-id": "tenant id",
   "field.token": "인증 토큰",
@@ -139,7 +128,6 @@
   "label.customers": "고객",
   "label.delete account": "계정 삭제",
   "label.deleted-user": "삭제됨",
-  "label.description": "설명",
   "label.domain": "$t(term.domain)",
   "label.domain-owner": "$t(term.domain) 관리자",
   "label.draft": "초안",
@@ -154,7 +142,6 @@
   "label.language": "언어",
   "label.locked-user": "잠김",
   "label.login_history": "로그인 이력",
-  "label.name": "이름",
   "label.ours": "우리 역할",
   "label.password": "비밀번호",
   "label.privilege": "권한",
@@ -248,7 +235,6 @@
   "text.invalid-email": "이메일 주소 형식이 맞지 않습니다",
   "text.invalid-username": "아이디나 이메일 주소를 적으십시오",
   "text.invitation resent": "초대 메일을 다시 보냈습니다.",
-  "text.loading": "읽는 중…",
   "text.missing against template": "{count}개 빠짐",
   "text.new password": "새 비밀번호",
   "text.no account and no default password": "이 이메일로 가입한 계정이 없고, 이 시스템에는 기본 비밀번호가 설정되어 있지 않습니다. 그 사람이 먼저 가입해야 부를 수 있습니다.",

package/translations/ms.json

@@ -1,7 +1,6 @@
 {
   "button.accept invitation": "terima jemputan",
   "button.activate": "aktifkan",
-  "button.cancel": "batalkan",
   "button.close": "tutup",
   "button.confirm": "sahkan",
   "button.copy": "salin",
@@ -34,7 +33,6 @@
   "button.submit": "hantar",
   "button.terminate contract": "tamatkan",
   "button.transfer owner": "pindah pemilik",
-  "button.update": "kemas kini",
   "button.withdraw": "tarik balik",
   "error.cannot_modify_system_subdomain": "subdomain 'system' tidak boleh diubah.",
   "error.domain not allowed": "domain ini tidak dibenarkan untuk anda",
@@ -63,18 +61,11 @@
   "field.confirm password": "sahkan kata laluan",
   "field.contact email": "emel untuk dihubungi",
   "field.created at": "dihantar pada",
-  "field.description": "penerangan",
-  "field.email": "e-mel",
   "field.entity": "entiti",
   "field.expires at": "tamat pada",
   "field.forgot-password": "terlupa kata laluan",
-  "field.hidden": "tersembunyi",
   "field.invited": "dijemput",
   "field.ip_address": "alamat IP",
-  "field.model": "model",
-  "field.name": "nama",
-  "field.netmask": "netmask",
-  "field.options": "pilihan",
   "field.owner": "pemilik",
   "field.owner-user": "pemilik",
   "field.parent-domain": "domain induk",
@@ -92,7 +83,6 @@
   "field.source-domain": "domain sumber",
   "field.state": "keadaan",
   "field.status": "status",
-  "field.tag": "tag",
   "field.target-domain": "domain sasaran",
   "field.tenant-id": "ID penyewa",
   "field.token": "token",
@@ -120,7 +110,6 @@
   "label.customers": "pelanggan",
   "label.delete account": "hapuskan akaun",
   "label.deleted-user": "pengguna dihapus",
-  "label.description": "penerangan",
   "label.domain": "domain",
   "label.domain-owner": "pemilik domain",
   "label.draft": "draf",
@@ -133,7 +122,6 @@
   "label.language": "bahasa",
   "label.locked-user": "dikunci",
   "label.login_history": "sejarah log masuk",
-  "label.name": "nama",
   "label.password": "kata laluan",
   "label.privilege": "keistimewaan",
   "label.protected-request-ip": "IP permintaan yang selamat",
@@ -197,11 +185,10 @@
   "text.current password": "kata laluan terkini",
   "text.delete account warning message": "langkah hapuskan akaun tidak boleh diundur.\n\nsila masukkan emel dan kata laluan akaun anda untuk mengesahkan penghapusan akaun.",
   "text.deleted_successfully": "berjaya dihapuskan",
-  "text.do_you_want_to_create_role": "adakah anda hendak membina peranan?",
   "text.do_you_want_to_create_x": "adakah anda mahu mencipta {x}?",
   "text.do_you_want_to_invite_x": "adakah anda ingin mengundang {x}",
   "text.domain management": "pengurusan domain",
-  "text.domain sumber dan sasaran tidak boleh sama": "domain sumber dan sasaran tidak boleh sama",
+  "text.source_and_target_domain_cannot_be_same": "domain sumber dan sasaran tidak boleh sama",
   "text.domain_name_change_warning": "adakah anda pasti mahu menukar nama domain? (subdomain akan kekal tidak berubah.)",
   "text.email is not matched": "alamat email tidak sepadan",
   "text.endpoints": "titik akhir",
@@ -236,7 +223,7 @@
   "text.should select at least one of x": "sila pilih antara satu {x}",
   "text.signed in": "telah log masuk",
   "text.signed out": "telah log keluar",
-  "text.sila isi semua medan yang diperlukan": "sila isi semua medan yang diperlukan",
+  "text.please_fill_all_required_fields": "sila isi semua medan yang diperlukan",
   "text.stand this domain own role of the same name": "{name} ditakrifkan dalam {domain} dan sudah kelihatan di sini. Bina milik domain ini dengan nama yang sama hanya jika anda berniat menggantikan yang diwarisi — namanya kekal sama.",
   "text.start from a blank seat": "start from a blank seat",
   "text.struck through are not installed here": "Struck through are privileges this installation does not have.",
@@ -294,5 +281,73 @@
   "title.secure-ip-list": "senarai IP yang selamat",
   "title.sign in": "log masuk",
   "title.sign up": "daftar",
-  "title.unlock account": "buka semula akaun"
+  "title.unlock account": "buka semula akaun",
+  "button.add what it can do": "tambah apa yang boleh dilakukan",
+  "button.drop": "tanggalkan",
+  "button.edit privileges": "sunting keistimewaan",
+  "button.remove from domain": "keluarkan dari $t(term.domain)",
+  "button.remove owner": "buang pemilik",
+  "button.unlock": "buka kunci",
+  "field.granted at": "diberi pada",
+  "field.granted by": "diberi oleh",
+  "field.granted privileges": "apa yang boleh dilakukan",
+  "field.module": "modul",
+  "field.reason (optional)": "sebab (pilihan)",
+  "field.source": "sumber",
+  "field.username or email": "nama pengguna atau e-mel",
+  "label.add role": "tambah peranan",
+  "label.add to domain": "tambah ke $t(term.domain)",
+  "label.add user": "tambah pengguna",
+  "label.all": "semua",
+  "label.create account and add": "cipta akaun dan tambah",
+  "label.execute": "laksana",
+  "label.inherited": "diwarisi",
+  "label.ours": "peranan kami",
+  "label.read": "baca",
+  "label.write": "tulis",
+  "text.account exists so joins immediately": "akaun ini sudah wujud. menambahnya membolehkan mereka masuk serta-merta.",
+  "text.account will be created with the default password": "belum ada akaun dengan e-mel ini. akaun akan dicipta dengan kata laluan lalai, yang perlu anda maklumkan sendiri.",
+  "text.add_domain_owner_description": "beri kebenaran pemilik kepada seorang ahli $t(term.domain).",
+  "text.and x more": "dan {x} lagi",
+  "text.are_you_sure_to_remove_domain_owner": "buang {x} sebagai pemilik $t(term.domain)?",
+  "text.cannot be undone": "tidak boleh dibatalkan",
+  "text.domain owner added successfully": "pemilik $t(term.domain) ditambah",
+  "text.domain owner removed successfully": "pemilik $t(term.domain) dibuang",
+  "text.domain owners": "pemilik $t(term.domain)",
+  "text.failed": "gagal",
+  "text.failed to fetch": "senarai tidak dapat dibaca",
+  "text.filter by module name": "tapis mengikut nama modul",
+  "text.inherited roles are edited in their own domain": "peranan ini ditakrifkan dalam $t(term.domain) induk dan hanya boleh diubah di sana.",
+  "text.no account and no default password": "tiada akaun dengan e-mel ini dan sistem ini tiada kata laluan lalai. mereka perlu mendaftar dahulu.",
+  "text.no description for this privilege": "belum ada keterangan untuk keistimewaan ini.",
+  "text.no description for this role": "belum ada keterangan — tulis dalam senarai peranan.",
+  "text.no one holds this role yet": "belum ada sesiapa memegang peranan ini.",
+  "text.no other user yet": "belum ada pengguna lain",
+  "text.no privilege declared in this deployment": "belum ada keistimewaan diisytiharkan dalam penggunaan ini, jadi tiada apa untuk diberi.",
+  "text.no privilege granted": "tiada apa dibuka",
+  "text.no role assigned": "tiada peranan",
+  "text.no role defined in this domain": "belum ada peranan dalam $t(term.domain) ini. cipta satu sebelum memberi.",
+  "text.no role yet": "belum ada peranan ditakrifkan",
+  "text.none on": "tiada",
+  "text.not declared for this module": "modul ini tidak mengisytiharkan keistimewaan itu.",
+  "text.nothing is on for this role yet": "peranan ini belum membuka apa-apa. tambah apa yang boleh dilakukan di bawah.",
+  "text.nothing matches x": "tiada nama modul mengandungi \"{x}\".",
+  "text.owner opens everything without a role": "sebagai pemilik anda boleh membuka setiap skrin tanpa peranan. orang lain memerlukannya.",
+  "text.password becomes the default and must be told to them": "kata laluan kembali kepada lalai. tiada e-mel dihantar, jadi anda perlu memaklumkan kata laluan baharu sendiri.",
+  "text.pick a module on the left": "pilih modul di sebelah kiri untuk melihat apa yang peranan ini boleh lakukan di situ.",
+  "text.please enter username or email": "sila masukkan nama pengguna atau e-mel",
+  "text.please try again": "cuba lagi sebentar lagi.",
+  "text.remove the role from x people first": "untuk memadam peranan ini, tanggalkannya dahulu daripada {x} orang yang memegangnya.",
+  "text.role belongs to x domain and is edited there": "peranan ini ditakrifkan dalam {x} dan hanya boleh disunting di sana. ia ditunjukkan di sini kerana boleh diberi di sini.",
+  "text.roles in use are kept": "peranan yang masih dipegang dikekalkan. hanya yang tidak digunakan dipadam.",
+  "text.they lose access to this domain but keep the account": "mereka hilang akses ke $t(term.domain) ini. akaun kekal, jadi anda boleh menambah mereka semula kemudian.",
+  "text.unlocks in x minutes": "dibuka dalam {x} minit",
+  "text.view only": "peranan diwarisi — lihat sahaja",
+  "text.without a role they see nothing": "tanpa peranan, tiada skrin untuk mereka.",
+  "text.x is required": "sila masukkan {x}.",
+  "text.x of y on": "{x} daripada {y} dihidupkan",
+  "text.x on": "{x} dihidupkan",
+  "text.x people hold this role": "dipegang oleh {x}",
+  "title.add domain owner": "tambah pemilik $t(term.domain)",
+  "title.role privileges": "keistimewaan peranan"
 }