@webiny/app-admin 0.0.0-unstable.e6f0dc8ca7 → 0.0.0-unstable.eb81deee7e

package/presentation/accessManagement/teams/feature.js

@@ -0,0 +1,17 @@
+import { createFeature } from "@webiny/feature/admin";
+import { TeamsPresenter } from "./abstractions.js";
+import { TeamsPresenter as external_TeamsPresenter_js_TeamsPresenter } from "./TeamsPresenter.js";
+const TeamsPresenterFeature = createFeature({
+    name: "AccessManagement/TeamsPresenter",
+    register (container) {
+        container.register(external_TeamsPresenter_js_TeamsPresenter).inSingletonScope();
+    },
+    resolve (container) {
+        return {
+            presenter: container.resolve(TeamsPresenter)
+        };
+    }
+});
+export { TeamsPresenterFeature };
+
+//# sourceMappingURL=feature.js.map

package/presentation/accessManagement/teams/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presentation/accessManagement/teams/feature.js","sources":["../../../../src/presentation/accessManagement/teams/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/admin\";\nimport { TeamsPresenter as Abstraction } from \"./abstractions.js\";\nimport { TeamsPresenter } from \"./TeamsPresenter.js\";\n\nexport const TeamsPresenterFeature = createFeature({\n    name: \"AccessManagement/TeamsPresenter\",\n    register(container) {\n        container.register(TeamsPresenter).inSingletonScope();\n    },\n    resolve(container) {\n        return {\n            presenter: container.resolve(Abstraction)\n        };\n    }\n});\n"],"names":["TeamsPresenterFeature","createFeature","container","TeamsPresenter","Abstraction"],"mappings":";;;AAIO,MAAMA,wBAAwBC,cAAc;IAC/C,MAAM;IACN,UAASC,SAAS;QACdA,UAAU,QAAQ,CAACC,2CAAgB,gBAAgB;IACvD;IACA,SAAQD,SAAS;QACb,OAAO;YACH,WAAWA,UAAU,OAAO,CAACE;QACjC;IACJ;AACJ"}

package/presentation/accessManagement/teams/teamsAutocomplete/TeamsAutocompletePresenter.d.ts

@@ -0,0 +1,15 @@
+import { ListTeamsUseCase } from "../../../../features/accessManagement/teams/listTeams/abstractions.js";
+import { type ITeamsAutocompletePresenter, type ITeamsAutocompleteViewModel } from "./abstractions.js";
+declare class TeamsAutocompletePresenterImpl implements ITeamsAutocompletePresenter {
+    private listTeamsUseCase;
+    private _loading;
+    private _options;
+    private _initialized;
+    constructor(listTeamsUseCase: ListTeamsUseCase.Interface);
+    get vm(): ITeamsAutocompleteViewModel;
+    init(): Promise<void>;
+}
+export declare const TeamsAutocompletePresenter: typeof TeamsAutocompletePresenterImpl & {
+    __abstraction: import("@webiny/di").Abstraction<ITeamsAutocompletePresenter>;
+};
+export {};

package/presentation/accessManagement/teams/teamsAutocomplete/TeamsAutocompletePresenter.js

@@ -0,0 +1,42 @@
+import { makeAutoObservable, runInAction } from "mobx";
+import { ListTeamsUseCase } from "../../../../features/accessManagement/teams/listTeams/abstractions.js";
+import { TeamsAutocompletePresenter } from "./abstractions.js";
+class TeamsAutocompletePresenterImpl {
+    constructor(listTeamsUseCase){
+        this.listTeamsUseCase = listTeamsUseCase;
+        this._loading = true;
+        this._options = [];
+        this._initialized = false;
+        makeAutoObservable(this, {
+            listTeamsUseCase: false,
+            _initialized: false
+        });
+    }
+    get vm() {
+        return {
+            loading: this._loading,
+            options: this._options
+        };
+    }
+    async init() {
+        if (this._initialized) return;
+        this._initialized = true;
+        const result = await this.listTeamsUseCase.execute();
+        runInAction(()=>{
+            this._options = result.data.map((team)=>({
+                    label: team.name,
+                    value: team.id
+                }));
+            this._loading = false;
+        });
+    }
+}
+const TeamsAutocompletePresenter_TeamsAutocompletePresenter = TeamsAutocompletePresenter.createImplementation({
+    implementation: TeamsAutocompletePresenterImpl,
+    dependencies: [
+        ListTeamsUseCase
+    ]
+});
+export { TeamsAutocompletePresenter_TeamsAutocompletePresenter as TeamsAutocompletePresenter };
+
+//# sourceMappingURL=TeamsAutocompletePresenter.js.map

package/presentation/accessManagement/teams/teamsAutocomplete/TeamsAutocompletePresenter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presentation/accessManagement/teams/teamsAutocomplete/TeamsAutocompletePresenter.js","sources":["../../../../../src/presentation/accessManagement/teams/teamsAutocomplete/TeamsAutocompletePresenter.ts"],"sourcesContent":["import { makeAutoObservable, runInAction } from \"mobx\";\nimport { ListTeamsUseCase } from \"~/features/accessManagement/teams/listTeams/abstractions.js\";\nimport {\n    TeamsAutocompletePresenter as Abstraction,\n    type ITeamsAutocompletePresenter,\n    type ITeamsAutocompleteViewModel\n} from \"./abstractions.js\";\n\nclass TeamsAutocompletePresenterImpl implements ITeamsAutocompletePresenter {\n    private _loading = true;\n    private _options: ITeamsAutocompleteViewModel[\"options\"] = [];\n    private _initialized = false;\n\n    constructor(private listTeamsUseCase: ListTeamsUseCase.Interface) {\n        makeAutoObservable<TeamsAutocompletePresenterImpl, \"listTeamsUseCase\" | \"_initialized\">(\n            this,\n            {\n                listTeamsUseCase: false,\n                _initialized: false\n            }\n        );\n    }\n\n    get vm(): ITeamsAutocompleteViewModel {\n        return {\n            loading: this._loading,\n            options: this._options\n        };\n    }\n\n    async init() {\n        if (this._initialized) {\n            return;\n        }\n        this._initialized = true;\n\n        const result = await this.listTeamsUseCase.execute();\n        runInAction(() => {\n            this._options = result.data.map(team => ({\n                label: team.name,\n                value: team.id\n            }));\n            this._loading = false;\n        });\n    }\n}\n\nexport const TeamsAutocompletePresenter = Abstraction.createImplementation({\n    implementation: TeamsAutocompletePresenterImpl,\n    dependencies: [ListTeamsUseCase]\n});\n"],"names":["TeamsAutocompletePresenterImpl","listTeamsUseCase","makeAutoObservable","result","runInAction","team","TeamsAutocompletePresenter","Abstraction","ListTeamsUseCase"],"mappings":";;;AAQA,MAAMA;IAKF,YAAoBC,gBAA4C,CAAE;aAA9CA,gBAAgB,GAAhBA;aAJZ,QAAQ,GAAG;aACX,QAAQ,GAA2C,EAAE;aACrD,YAAY,GAAG;QAGnBC,mBACI,IAAI,EACJ;YACI,kBAAkB;YAClB,cAAc;QAClB;IAER;IAEA,IAAI,KAAkC;QAClC,OAAO;YACH,SAAS,IAAI,CAAC,QAAQ;YACtB,SAAS,IAAI,CAAC,QAAQ;QAC1B;IACJ;IAEA,MAAM,OAAO;QACT,IAAI,IAAI,CAAC,YAAY,EACjB;QAEJ,IAAI,CAAC,YAAY,GAAG;QAEpB,MAAMC,SAAS,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO;QAClDC,YAAY;YACR,IAAI,CAAC,QAAQ,GAAGD,OAAO,IAAI,CAAC,GAAG,CAACE,CAAAA,OAAS;oBACrC,OAAOA,KAAK,IAAI;oBAChB,OAAOA,KAAK,EAAE;gBAClB;YACA,IAAI,CAAC,QAAQ,GAAG;QACpB;IACJ;AACJ;AAEO,MAAMC,wDAA6BC,2BAAAA,oBAAgC,CAAC;IACvE,gBAAgBP;IAChB,cAAc;QAACQ;KAAiB;AACpC"}

package/presentation/accessManagement/teams/teamsAutocomplete/abstractions.d.ts

@@ -0,0 +1,18 @@
+interface ITeamsAutocompleteOption {
+    label: string;
+    value: string;
+}
+export interface ITeamsAutocompleteViewModel {
+    loading: boolean;
+    options: ITeamsAutocompleteOption[];
+}
+export interface ITeamsAutocompletePresenter {
+    readonly vm: ITeamsAutocompleteViewModel;
+    init(): void;
+}
+export declare const TeamsAutocompletePresenter: import("@webiny/di").Abstraction<ITeamsAutocompletePresenter>;
+export declare namespace TeamsAutocompletePresenter {
+    type Interface = ITeamsAutocompletePresenter;
+    type ViewModel = ITeamsAutocompleteViewModel;
+}
+export {};

package/presentation/accessManagement/teams/teamsAutocomplete/abstractions.js

@@ -0,0 +1,5 @@
+import { createAbstraction } from "@webiny/feature/admin";
+const TeamsAutocompletePresenter = createAbstraction("AccessManagement/TeamsAutocompletePresenter");
+export { TeamsAutocompletePresenter };
+
+//# sourceMappingURL=abstractions.js.map

package/presentation/accessManagement/teams/teamsAutocomplete/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presentation/accessManagement/teams/teamsAutocomplete/abstractions.js","sources":["../../../../../src/presentation/accessManagement/teams/teamsAutocomplete/abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/admin\";\n\ninterface ITeamsAutocompleteOption {\n    label: string;\n    value: string;\n}\n\nexport interface ITeamsAutocompleteViewModel {\n    loading: boolean;\n    options: ITeamsAutocompleteOption[];\n}\n\nexport interface ITeamsAutocompletePresenter {\n    readonly vm: ITeamsAutocompleteViewModel;\n    init(): void;\n}\n\nexport const TeamsAutocompletePresenter = createAbstraction<ITeamsAutocompletePresenter>(\n    \"AccessManagement/TeamsAutocompletePresenter\"\n);\n\nexport namespace TeamsAutocompletePresenter {\n    export type Interface = ITeamsAutocompletePresenter;\n    export type ViewModel = ITeamsAutocompleteViewModel;\n}\n"],"names":["TeamsAutocompletePresenter","createAbstraction"],"mappings":";AAiBO,MAAMA,6BAA6BC,kBACtC"}

package/presentation/accessManagement/teams/teamsAutocomplete/feature.d.ts

@@ -0,0 +1,3 @@
+export declare const TeamsAutocompletePresenterFeature: import("@webiny/feature/admin").FeatureDefinition<{
+    presenter: import("./abstractions.js").ITeamsAutocompletePresenter;
+}, []>;

package/presentation/accessManagement/teams/teamsAutocomplete/feature.js

@@ -0,0 +1,17 @@
+import { createFeature } from "@webiny/feature/admin";
+import { TeamsAutocompletePresenter } from "./abstractions.js";
+import { TeamsAutocompletePresenter as external_TeamsAutocompletePresenter_js_TeamsAutocompletePresenter } from "./TeamsAutocompletePresenter.js";
+const TeamsAutocompletePresenterFeature = createFeature({
+    name: "AccessManagement/TeamsAutocompletePresenter",
+    register (container) {
+        container.register(external_TeamsAutocompletePresenter_js_TeamsAutocompletePresenter).inSingletonScope();
+    },
+    resolve (container) {
+        return {
+            presenter: container.resolve(TeamsAutocompletePresenter)
+        };
+    }
+});
+export { TeamsAutocompletePresenterFeature };
+
+//# sourceMappingURL=feature.js.map

package/presentation/accessManagement/teams/teamsAutocomplete/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presentation/accessManagement/teams/teamsAutocomplete/feature.js","sources":["../../../../../src/presentation/accessManagement/teams/teamsAutocomplete/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/admin\";\nimport { TeamsAutocompletePresenter as Abstraction } from \"./abstractions.js\";\nimport { TeamsAutocompletePresenter } from \"./TeamsAutocompletePresenter.js\";\n\nexport const TeamsAutocompletePresenterFeature = createFeature({\n    name: \"AccessManagement/TeamsAutocompletePresenter\",\n    register(container) {\n        container.register(TeamsAutocompletePresenter).inSingletonScope();\n    },\n    resolve(container) {\n        return {\n            presenter: container.resolve(Abstraction)\n        };\n    }\n});\n"],"names":["TeamsAutocompletePresenterFeature","createFeature","container","TeamsAutocompletePresenter","Abstraction"],"mappings":";;;AAIO,MAAMA,oCAAoCC,cAAc;IAC3D,MAAM;IACN,UAASC,SAAS;QACdA,UAAU,QAAQ,CAACC,mEAA4B,gBAAgB;IACnE;IACA,SAAQD,SAAS;QACb,OAAO;YACH,WAAWA,UAAU,OAAO,CAACE;QACjC;IACJ;AACJ"}

package/presentation/accessManagement/teams/teamsAutocomplete/index.d.ts

@@ -0,0 +1,3 @@
+export { TeamsAutocompletePresenter } from "./abstractions.js";
+export type { ITeamsAutocompletePresenter, ITeamsAutocompleteViewModel } from "./abstractions.js";
+export { TeamsAutocompletePresenterFeature } from "./feature.js";

package/presentation/accessManagement/teams/teamsAutocomplete/index.js

@@ -0,0 +1,2 @@
+export { TeamsAutocompletePresenter } from "./abstractions.js";
+export { TeamsAutocompletePresenterFeature } from "./feature.js";

package/presentation/assumePermissions/AssumePermissionsPresenter.d.ts

@@ -0,0 +1,36 @@
+import { FeatureFlagsService } from "../../features/featureFlags/abstractions.js";
+import { IdentityContext } from "../../features/security/IdentityContext/index.js";
+import { AssumePermissionsContext } from "../../features/assumePermissions/abstractions.js";
+import { AssumePermissionsUseCase } from "../../features/assumePermissions/abstractions.js";
+import { ListAssumableTargetsUseCase } from "../../features/assumePermissions/abstractions.js";
+import { AssumePermissionsPresenter as Abstraction } from "./abstractions.js";
+declare class AssumePermissionsPresenterImpl implements Abstraction.Interface {
+    private assumePermissionsUseCase;
+    private listAssumableTargetsUseCase;
+    private identityContext;
+    private featureFlags;
+    private loading;
+    private switching;
+    private roles;
+    private teams;
+    private error;
+    private readonly loadedAssumed;
+    constructor(assumePermissionsContext: AssumePermissionsContext.Interface, assumePermissionsUseCase: AssumePermissionsUseCase.Interface, listAssumableTargetsUseCase: ListAssumableTargetsUseCase.Interface, identityContext: IdentityContext.Interface, featureFlags: FeatureFlagsService.Interface);
+    get vm(): Abstraction.ViewModel;
+    load(): Promise<void>;
+    assume(value: string): Promise<void>;
+    assumeTarget(target: AssumePermissionsUseCase.Target): Promise<void>;
+    exit(): Promise<void>;
+    dismissError(): void;
+    private switchTo;
+    private startLoading;
+    private stopLoading;
+    private setEntries;
+    private setError;
+    private startSwitching;
+    private failSwitching;
+}
+export declare const AssumePermissionsPresenter: typeof AssumePermissionsPresenterImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("./abstractions.js").IAssumePermissionsPresenter>;
+};
+export {};

package/presentation/assumePermissions/AssumePermissionsPresenter.js

@@ -0,0 +1,153 @@
+import { makeAutoObservable } from "mobx";
+import { FeatureFlagsService } from "../../features/featureFlags/abstractions.js";
+import { IdentityContext } from "../../features/security/IdentityContext/index.js";
+import { AssumePermissionsContext, AssumePermissionsUseCase, ListAssumableTargetsUseCase } from "../../features/assumePermissions/abstractions.js";
+import { AssumePermissionsPresenter } from "./abstractions.js";
+function optionValue(entry) {
+    return `${entry.type}:${entry.id}`;
+}
+function toOption(entry) {
+    return {
+        value: optionValue(entry),
+        label: entry.name
+    };
+}
+function currentPath() {
+    const { pathname, search, hash } = window.location;
+    return `${pathname}${search}${hash}`;
+}
+function isSameOrigin(path) {
+    const url = new URL(path, window.location.origin);
+    return url.origin === window.location.origin;
+}
+function leavePage(returnTo) {
+    if (returnTo && isSameOrigin(returnTo)) return void window.location.assign(returnTo);
+    window.location.reload();
+}
+function toMessage(error, fallback) {
+    if (error instanceof Error) return error.message;
+    return fallback;
+}
+class AssumePermissionsPresenterImpl {
+    constructor(assumePermissionsContext, assumePermissionsUseCase, listAssumableTargetsUseCase, identityContext, featureFlags){
+        this.assumePermissionsUseCase = assumePermissionsUseCase;
+        this.listAssumableTargetsUseCase = listAssumableTargetsUseCase;
+        this.identityContext = identityContext;
+        this.featureFlags = featureFlags;
+        this.loading = false;
+        this.switching = false;
+        this.roles = [];
+        this.teams = [];
+        this.error = null;
+        this.loadedAssumed = assumePermissionsContext.get();
+        makeAutoObservable(this, {}, {
+            autoBind: true
+        });
+        if (this.loadedAssumed) this.load();
+    }
+    get vm() {
+        const identity = this.identityContext.getIdentity();
+        const roleOptions = this.roles.map(toOption);
+        const teamOptions = this.teams.map(toOption);
+        const hasFullAccess = null !== identity.getPermission("*", true);
+        const canAssume = null !== this.loadedAssumed || hasFullAccess;
+        return {
+            loading: this.loading,
+            switching: this.switching,
+            roleOptions,
+            teamOptions,
+            assumed: this.loadedAssumed,
+            canAssume,
+            error: this.error
+        };
+    }
+    async load() {
+        const hasOptions = this.roles.length > 0 || this.teams.length > 0;
+        this.startLoading(!hasOptions);
+        const includeTeams = this.featureFlags.getFlags().isEnabled("advancedAccessControlLayer.teams");
+        try {
+            const result = await this.listAssumableTargetsUseCase.execute({
+                includeTeams
+            });
+            this.setEntries(result.roles, result.teams);
+        } catch (error) {
+            const message = toMessage(error, "Could not load roles.");
+            this.setError(message);
+        } finally{
+            this.stopLoading();
+        }
+    }
+    async assume(value) {
+        const entries = [
+            ...this.roles,
+            ...this.teams
+        ];
+        const entry = entries.find((item)=>optionValue(item) === value);
+        if (!entry) return;
+        await this.switchTo({
+            type: entry.type,
+            id: entry.id,
+            name: entry.name
+        }, {});
+    }
+    async assumeTarget(target) {
+        const returnTo = currentPath();
+        await this.switchTo(target, {
+            returnTo
+        });
+    }
+    async exit() {
+        await this.switchTo(null, {});
+    }
+    dismissError() {
+        this.error = null;
+    }
+    async switchTo(target, options) {
+        this.startSwitching();
+        try {
+            await this.assumePermissionsUseCase.execute(target, options);
+        } catch (error) {
+            const message = toMessage(error, "Could not switch roles.");
+            this.failSwitching(message);
+            return;
+        }
+        let returnTo;
+        if (!target) returnTo = this.loadedAssumed?.returnTo;
+        leavePage(returnTo);
+    }
+    startLoading(showLoader) {
+        this.loading = showLoader;
+        this.error = null;
+    }
+    stopLoading() {
+        this.loading = false;
+    }
+    setEntries(roles, teams) {
+        this.roles = roles;
+        this.teams = teams;
+    }
+    setError(message) {
+        this.error = message;
+    }
+    startSwitching() {
+        this.switching = true;
+        this.error = null;
+    }
+    failSwitching(message) {
+        this.switching = false;
+        this.error = message;
+    }
+}
+const AssumePermissionsPresenter_AssumePermissionsPresenter = AssumePermissionsPresenter.createImplementation({
+    implementation: AssumePermissionsPresenterImpl,
+    dependencies: [
+        AssumePermissionsContext,
+        AssumePermissionsUseCase,
+        ListAssumableTargetsUseCase,
+        IdentityContext,
+        FeatureFlagsService
+    ]
+});
+export { AssumePermissionsPresenter_AssumePermissionsPresenter as AssumePermissionsPresenter };
+
+//# sourceMappingURL=AssumePermissionsPresenter.js.map

package/presentation/assumePermissions/AssumePermissionsPresenter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presentation/assumePermissions/AssumePermissionsPresenter.js","sources":["../../../src/presentation/assumePermissions/AssumePermissionsPresenter.ts"],"sourcesContent":["import { makeAutoObservable } from \"mobx\";\nimport { FeatureFlagsService } from \"~/features/featureFlags/abstractions.js\";\nimport { IdentityContext } from \"~/features/security/IdentityContext/index.js\";\nimport { AssumePermissionsContext } from \"~/features/assumePermissions/abstractions.js\";\nimport { AssumePermissionsUseCase } from \"~/features/assumePermissions/abstractions.js\";\nimport { ListAssumableTargetsUseCase } from \"~/features/assumePermissions/abstractions.js\";\nimport { AssumePermissionsPresenter as Abstraction } from \"./abstractions.js\";\n\ntype AssumableTarget = ListAssumableTargetsUseCase.Target;\n\nfunction optionValue(entry: { type: string; id: string }): string {\n    return `${entry.type}:${entry.id}`;\n}\n\nfunction toOption(entry: AssumableTarget): Abstraction.Option {\n    return { value: optionValue(entry), label: entry.name };\n}\n\nfunction currentPath(): string {\n    const { pathname, search, hash } = window.location;\n    return `${pathname}${search}${hash}`;\n}\n\n/*\n * The stored path comes back out of local storage, so it is only followed when it resolves to\n * this Admin's own origin. Anything else falls back to a plain reload.\n */\nfunction isSameOrigin(path: string): boolean {\n    const url = new URL(path, window.location.origin);\n    return url.origin === window.location.origin;\n}\n\nfunction leavePage(returnTo: string | undefined): void {\n    if (returnTo && isSameOrigin(returnTo)) {\n        window.location.assign(returnTo);\n        return;\n    }\n\n    window.location.reload();\n}\n\nfunction toMessage(error: unknown, fallback: string): string {\n    if (error instanceof Error) {\n        return error.message;\n    }\n\n    return fallback;\n}\n\nclass AssumePermissionsPresenterImpl implements Abstraction.Interface {\n    private loading = false;\n    private switching = false;\n    private roles: AssumableTarget[] = [];\n    private teams: AssumableTarget[] = [];\n    private error: string | null = null;\n    /*\n     * The role this page was LOADED with, captured once. The banner renders from this rather than\n     * from the live context so it doesn't flicker during a switch: starting a preview would\n     * otherwise pop the banner up a moment before the reload, and exiting would drop it a moment\n     * before, both of which read as a glitch. Since every switch reloads, the snapshot and the\n     * live value only ever differ inside that window.\n     */\n    private readonly loadedAssumed: AssumePermissionsContext.Value | null;\n\n    constructor(\n        assumePermissionsContext: AssumePermissionsContext.Interface,\n        private assumePermissionsUseCase: AssumePermissionsUseCase.Interface,\n        private listAssumableTargetsUseCase: ListAssumableTargetsUseCase.Interface,\n        private identityContext: IdentityContext.Interface,\n        private featureFlags: FeatureFlagsService.Interface\n    ) {\n        this.loadedAssumed = assumePermissionsContext.get();\n        makeAutoObservable(this, {}, { autoBind: true });\n\n        /*\n         * Preload, but only for a page that loaded into a preview. That is the one case where a\n         * header control exists to open, and it should open on a ready list rather than a spinner.\n         * On the other 99% of page loads nobody is switching roles, so nothing is fetched.\n         */\n        if (this.loadedAssumed) {\n            void this.load();\n        }\n    }\n\n    get vm(): Abstraction.ViewModel {\n        const identity = this.identityContext.getIdentity();\n        const roleOptions = this.roles.map(toOption);\n        const teamOptions = this.teams.map(toOption);\n\n        /*\n         * The same rule the API enforces in AssumedPermissions: only a caller with full access can\n         * preview. The API doesn't refuse anyone else, it quietly keeps their own permissions, so a\n         * looser check here would let someone start a \"preview\" whose banner is a lie.\n         *\n         * While a preview is active the identity carries the previewed role's permissions instead.\n         * Whoever started it already passed this check, so an active preview is enough.\n         */\n        const hasFullAccess = identity.getPermission(\"*\", true) !== null;\n        const canAssume = this.loadedAssumed !== null || hasFullAccess;\n\n        return {\n            loading: this.loading,\n            switching: this.switching,\n            roleOptions,\n            teamOptions,\n            assumed: this.loadedAssumed,\n            canAssume,\n            error: this.error\n        };\n    }\n\n    async load(): Promise<void> {\n        const hasOptions = this.roles.length > 0 || this.teams.length > 0;\n\n        /*\n         * Only show the loader when there is nothing to show yet. Every later call refreshes in the\n         * background, so a role or team added since the last time still turns up without the list\n         * blanking out first.\n         */\n        this.startLoading(!hasOptions);\n\n        const includeTeams = this.featureFlags\n            .getFlags()\n            .isEnabled(\"advancedAccessControlLayer.teams\");\n\n        try {\n            const result = await this.listAssumableTargetsUseCase.execute({ includeTeams });\n            this.setEntries(result.roles, result.teams);\n        } catch (error) {\n            const message = toMessage(error, \"Could not load roles.\");\n            this.setError(message);\n        } finally {\n            this.stopLoading();\n        }\n    }\n\n    async assume(value: string): Promise<void> {\n        const entries = [...this.roles, ...this.teams];\n        const entry = entries.find(item => optionValue(item) === value);\n\n        if (!entry) {\n            return;\n        }\n\n        // From the header control: exiting still returns to where the first preview began.\n        await this.switchTo({ type: entry.type, id: entry.id, name: entry.name }, {});\n    }\n\n    async assumeTarget(target: AssumePermissionsUseCase.Target): Promise<void> {\n        // Started from the role or team form, so exiting comes back to it.\n        const returnTo = currentPath();\n        await this.switchTo(target, { returnTo });\n    }\n\n    async exit(): Promise<void> {\n        await this.switchTo(null, {});\n    }\n\n    dismissError(): void {\n        this.error = null;\n    }\n\n    private async switchTo(\n        target: AssumePermissionsUseCase.Target | null,\n        options: AssumePermissionsUseCase.Options\n    ): Promise<void> {\n        this.startSwitching();\n\n        try {\n            await this.assumePermissionsUseCase.execute(target, options);\n        } catch (error) {\n            const message = toMessage(error, \"Could not switch roles.\");\n            this.failSwitching(message);\n            return;\n        }\n\n        /*\n         * A full reload, not an in-place identity swap. Permission checks such as\n         * `createHasPermission` read the identity during render without observing it, and every\n         * list fetched under the old role is still cached, so a swap leaves parts of the Admin,\n         * such as menus and the dashboard, still showing the previous role. The tenant switcher\n         * reaches for a full page load for the same reason.\n         *\n         * Exiting goes back to the page the preview started from, usually the role form, where the\n         * next step is editing what the preview showed was missing.\n         *\n         * `switching` stays true on purpose: the page is on its way out, and the control should\n         * not look ready for another click in the meantime.\n         */\n        let returnTo: string | undefined;\n        if (!target) {\n            returnTo = this.loadedAssumed?.returnTo;\n        }\n\n        leavePage(returnTo);\n    }\n\n    private startLoading(showLoader: boolean): void {\n        this.loading = showLoader;\n        this.error = null;\n    }\n\n    private stopLoading(): void {\n        this.loading = false;\n    }\n\n    private setEntries(roles: AssumableTarget[], teams: AssumableTarget[]): void {\n        this.roles = roles;\n        this.teams = teams;\n    }\n\n    private setError(message: string): void {\n        this.error = message;\n    }\n\n    private startSwitching(): void {\n        this.switching = true;\n        this.error = null;\n    }\n\n    private failSwitching(message: string): void {\n        this.switching = false;\n        this.error = message;\n    }\n}\n\nexport const AssumePermissionsPresenter = Abstraction.createImplementation({\n    implementation: AssumePermissionsPresenterImpl,\n    dependencies: [\n        AssumePermissionsContext,\n        AssumePermissionsUseCase,\n        ListAssumableTargetsUseCase,\n        IdentityContext,\n        FeatureFlagsService\n    ]\n});\n"],"names":["optionValue","entry","toOption","currentPath","pathname","search","hash","window","isSameOrigin","path","url","URL","leavePage","returnTo","toMessage","error","fallback","Error","AssumePermissionsPresenterImpl","assumePermissionsContext","assumePermissionsUseCase","listAssumableTargetsUseCase","identityContext","featureFlags","makeAutoObservable","identity","roleOptions","teamOptions","hasFullAccess","canAssume","hasOptions","includeTeams","result","message","value","entries","item","target","options","showLoader","roles","teams","AssumePermissionsPresenter","Abstraction","AssumePermissionsContext","AssumePermissionsUseCase","ListAssumableTargetsUseCase","IdentityContext","FeatureFlagsService"],"mappings":";;;;;AAUA,SAASA,YAAYC,KAAmC;IACpD,OAAO,GAAGA,MAAM,IAAI,CAAC,CAAC,EAAEA,MAAM,EAAE,EAAE;AACtC;AAEA,SAASC,SAASD,KAAsB;IACpC,OAAO;QAAE,OAAOD,YAAYC;QAAQ,OAAOA,MAAM,IAAI;IAAC;AAC1D;AAEA,SAASE;IACL,MAAM,EAAEC,QAAQ,EAAEC,MAAM,EAAEC,IAAI,EAAE,GAAGC,OAAO,QAAQ;IAClD,OAAO,GAAGH,WAAWC,SAASC,MAAM;AACxC;AAMA,SAASE,aAAaC,IAAY;IAC9B,MAAMC,MAAM,IAAIC,IAAIF,MAAMF,OAAO,QAAQ,CAAC,MAAM;IAChD,OAAOG,IAAI,MAAM,KAAKH,OAAO,QAAQ,CAAC,MAAM;AAChD;AAEA,SAASK,UAAUC,QAA4B;IAC3C,IAAIA,YAAYL,aAAaK,WAAW,YACpCN,OAAO,QAAQ,CAAC,MAAM,CAACM;IAI3BN,OAAO,QAAQ,CAAC,MAAM;AAC1B;AAEA,SAASO,UAAUC,KAAc,EAAEC,QAAgB;IAC/C,IAAID,iBAAiBE,OACjB,OAAOF,MAAM,OAAO;IAGxB,OAAOC;AACX;AAEA,MAAME;IAeF,YACIC,wBAA4D,EACpDC,wBAA4D,EAC5DC,2BAAkE,EAClEC,eAA0C,EAC1CC,YAA2C,CACrD;aAJUH,wBAAwB,GAAxBA;aACAC,2BAA2B,GAA3BA;aACAC,eAAe,GAAfA;aACAC,YAAY,GAAZA;aAnBJ,OAAO,GAAG;aACV,SAAS,GAAG;aACZ,KAAK,GAAsB,EAAE;aAC7B,KAAK,GAAsB,EAAE;aAC7B,KAAK,GAAkB;QAiB3B,IAAI,CAAC,aAAa,GAAGJ,yBAAyB,GAAG;QACjDK,mBAAmB,IAAI,EAAE,CAAC,GAAG;YAAE,UAAU;QAAK;QAO9C,IAAI,IAAI,CAAC,aAAa,EACb,IAAI,CAAC,IAAI;IAEtB;IAEA,IAAI,KAA4B;QAC5B,MAAMC,WAAW,IAAI,CAAC,eAAe,CAAC,WAAW;QACjD,MAAMC,cAAc,IAAI,CAAC,KAAK,CAAC,GAAG,CAACxB;QACnC,MAAMyB,cAAc,IAAI,CAAC,KAAK,CAAC,GAAG,CAACzB;QAUnC,MAAM0B,gBAAgBH,AAAsC,SAAtCA,SAAS,aAAa,CAAC,KAAK;QAClD,MAAMI,YAAY,AAAuB,SAAvB,IAAI,CAAC,aAAa,IAAaD;QAEjD,OAAO;YACH,SAAS,IAAI,CAAC,OAAO;YACrB,WAAW,IAAI,CAAC,SAAS;YACzBF;YACAC;YACA,SAAS,IAAI,CAAC,aAAa;YAC3BE;YACA,OAAO,IAAI,CAAC,KAAK;QACrB;IACJ;IAEA,MAAM,OAAsB;QACxB,MAAMC,aAAa,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG;QAOhE,IAAI,CAAC,YAAY,CAAC,CAACA;QAEnB,MAAMC,eAAe,IAAI,CAAC,YAAY,CACjC,QAAQ,GACR,SAAS,CAAC;QAEf,IAAI;YACA,MAAMC,SAAS,MAAM,IAAI,CAAC,2BAA2B,CAAC,OAAO,CAAC;gBAAED;YAAa;YAC7E,IAAI,CAAC,UAAU,CAACC,OAAO,KAAK,EAAEA,OAAO,KAAK;QAC9C,EAAE,OAAOjB,OAAO;YACZ,MAAMkB,UAAUnB,UAAUC,OAAO;YACjC,IAAI,CAAC,QAAQ,CAACkB;QAClB,SAAU;YACN,IAAI,CAAC,WAAW;QACpB;IACJ;IAEA,MAAM,OAAOC,KAAa,EAAiB;QACvC,MAAMC,UAAU;eAAI,IAAI,CAAC,KAAK;eAAK,IAAI,CAAC,KAAK;SAAC;QAC9C,MAAMlC,QAAQkC,QAAQ,IAAI,CAACC,CAAAA,OAAQpC,YAAYoC,UAAUF;QAEzD,IAAI,CAACjC,OACD;QAIJ,MAAM,IAAI,CAAC,QAAQ,CAAC;YAAE,MAAMA,MAAM,IAAI;YAAE,IAAIA,MAAM,EAAE;YAAE,MAAMA,MAAM,IAAI;QAAC,GAAG,CAAC;IAC/E;IAEA,MAAM,aAAaoC,MAAuC,EAAiB;QAEvE,MAAMxB,WAAWV;QACjB,MAAM,IAAI,CAAC,QAAQ,CAACkC,QAAQ;YAAExB;QAAS;IAC3C;IAEA,MAAM,OAAsB;QACxB,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC/B;IAEA,eAAqB;QACjB,IAAI,CAAC,KAAK,GAAG;IACjB;IAEA,MAAc,SACVwB,MAA8C,EAC9CC,OAAyC,EAC5B;QACb,IAAI,CAAC,cAAc;QAEnB,IAAI;YACA,MAAM,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAACD,QAAQC;QACxD,EAAE,OAAOvB,OAAO;YACZ,MAAMkB,UAAUnB,UAAUC,OAAO;YACjC,IAAI,CAAC,aAAa,CAACkB;YACnB;QACJ;QAeA,IAAIpB;QACJ,IAAI,CAACwB,QACDxB,WAAW,IAAI,CAAC,aAAa,EAAE;QAGnCD,UAAUC;IACd;IAEQ,aAAa0B,UAAmB,EAAQ;QAC5C,IAAI,CAAC,OAAO,GAAGA;QACf,IAAI,CAAC,KAAK,GAAG;IACjB;IAEQ,cAAoB;QACxB,IAAI,CAAC,OAAO,GAAG;IACnB;IAEQ,WAAWC,KAAwB,EAAEC,KAAwB,EAAQ;QACzE,IAAI,CAAC,KAAK,GAAGD;QACb,IAAI,CAAC,KAAK,GAAGC;IACjB;IAEQ,SAASR,OAAe,EAAQ;QACpC,IAAI,CAAC,KAAK,GAAGA;IACjB;IAEQ,iBAAuB;QAC3B,IAAI,CAAC,SAAS,GAAG;QACjB,IAAI,CAAC,KAAK,GAAG;IACjB;IAEQ,cAAcA,OAAe,EAAQ;QACzC,IAAI,CAAC,SAAS,GAAG;QACjB,IAAI,CAAC,KAAK,GAAGA;IACjB;AACJ;AAEO,MAAMS,wDAA6BC,2BAAAA,oBAAgC,CAAC;IACvE,gBAAgBzB;IAChB,cAAc;QACV0B;QACAC;QACAC;QACAC;QACAC;KACH;AACL"}

package/presentation/assumePermissions/abstractions.d.ts

@@ -0,0 +1,30 @@
+import type { AssumePermissionsContext } from "../../features/assumePermissions/abstractions.js";
+import type { AssumePermissionsUseCase } from "../../features/assumePermissions/abstractions.js";
+export interface IAssumePermissionsOption {
+    value: string;
+    label: string;
+}
+export interface IAssumePermissionsViewModel {
+    loading: boolean;
+    switching: boolean;
+    roleOptions: IAssumePermissionsOption[];
+    teamOptions: IAssumePermissionsOption[];
+    assumed: AssumePermissionsContext.Value | null;
+    canAssume: boolean;
+    error: string | null;
+}
+export interface IAssumePermissionsPresenter {
+    readonly vm: IAssumePermissionsViewModel;
+    load(): Promise<void>;
+    assume(value: string): Promise<void>;
+    assumeTarget(target: AssumePermissionsUseCase.Target): Promise<void>;
+    exit(): Promise<void>;
+    dismissError(): void;
+}
+export declare const AssumePermissionsPresenter: import("@webiny/di").Abstraction<IAssumePermissionsPresenter>;
+export declare namespace AssumePermissionsPresenter {
+    type Interface = IAssumePermissionsPresenter;
+    type ViewModel = IAssumePermissionsViewModel;
+    type Option = IAssumePermissionsOption;
+    type Target = AssumePermissionsUseCase.Target;
+}

package/presentation/assumePermissions/abstractions.js

@@ -0,0 +1,5 @@
+import { createAbstraction } from "@webiny/feature/admin";
+const AssumePermissionsPresenter = createAbstraction("AssumePermissionsPresenter");
+export { AssumePermissionsPresenter };
+
+//# sourceMappingURL=abstractions.js.map

package/presentation/assumePermissions/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presentation/assumePermissions/abstractions.js","sources":["../../../src/presentation/assumePermissions/abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/admin\";\nimport type { AssumePermissionsContext } from \"~/features/assumePermissions/abstractions.js\";\nimport type { AssumePermissionsUseCase } from \"~/features/assumePermissions/abstractions.js\";\n\nexport interface IAssumePermissionsOption {\n    // `${type}:${id}`, so a single string identifies an option across both lists.\n    value: string;\n    label: string;\n}\n\nexport interface IAssumePermissionsViewModel {\n    loading: boolean;\n    switching: boolean;\n    roleOptions: IAssumePermissionsOption[];\n    teamOptions: IAssumePermissionsOption[];\n    assumed: AssumePermissionsContext.Value | null;\n    // Whether the signed-in user may start a preview at all. Mirrors the API's own rule.\n    canAssume: boolean;\n    error: string | null;\n}\n\nexport interface IAssumePermissionsPresenter {\n    readonly vm: IAssumePermissionsViewModel;\n    load(): Promise<void>;\n    // Picks one of the loaded options by its `value`. Does nothing before `load()` has run.\n    assume(value: string): Promise<void>;\n    // Previews a role or team the caller already knows, such as the one open in its edit form.\n    assumeTarget(target: AssumePermissionsUseCase.Target): Promise<void>;\n    exit(): Promise<void>;\n    dismissError(): void;\n}\n\nexport const AssumePermissionsPresenter = createAbstraction<IAssumePermissionsPresenter>(\n    \"AssumePermissionsPresenter\"\n);\n\nexport namespace AssumePermissionsPresenter {\n    export type Interface = IAssumePermissionsPresenter;\n    export type ViewModel = IAssumePermissionsViewModel;\n    export type Option = IAssumePermissionsOption;\n    export type Target = AssumePermissionsUseCase.Target;\n}\n"],"names":["AssumePermissionsPresenter","createAbstraction"],"mappings":";AAgCO,MAAMA,6BAA6BC,kBACtC"}

package/presentation/assumePermissions/components/AssumePermissionsButton.d.ts

@@ -0,0 +1,14 @@
+import React from "react";
+import type { AssumePermissionsPresenter } from "../abstractions.js";
+interface AssumePermissionsButtonProps {
+    target: AssumePermissionsPresenter.Target | null;
+}
+/**
+ * "View as this role" in the role and team forms. This is where a preview starts: next to where the
+ * permissions are edited. Success reloads the page, so the only outcome this has to show is a
+ * failure.
+ */
+export declare const AssumePermissionsButton: (({ target }: AssumePermissionsButtonProps) => React.JSX.Element | null) & React.NamedExoticComponent<AssumePermissionsButtonProps> & {
+    readonly type: ({ target }: AssumePermissionsButtonProps) => React.JSX.Element | null;
+};
+export {};

package/presentation/assumePermissions/components/AssumePermissionsButton.js

@@ -0,0 +1,42 @@
+import react from "react";
+import { useFeature } from "@webiny/app";
+import { Button, Tooltip } from "@webiny/admin-ui";
+import { ReactComponent } from "@webiny/icons/visibility.svg";
+import { createReactiveComponent } from "../../createReactiveComponent.js";
+import { useSnackbar } from "../../../hooks/useSnackbar.js";
+import { AssumePermissionsPresenterFeature } from "../feature.js";
+function tooltipText(type) {
+    return `Reloads the Admin with only this ${type}'s permissions, so you see what its users see. Exit from the banner at the top. Anything you save while previewing is saved for real.`;
+}
+const AssumePermissionsButton = createReactiveComponent(({ target })=>{
+    const { presenter } = useFeature(AssumePermissionsPresenterFeature);
+    const { showSnackbar } = useSnackbar();
+    const vm = presenter.vm;
+    if (!target || !vm.canAssume) return null;
+    const isAssumed = vm.assumed?.type === target.type && vm.assumed.id === target.id;
+    let text = `View as this ${target.type}`;
+    if (isAssumed) text = `Viewing as this ${target.type}`;
+    const assume = async ()=>{
+        await presenter.assumeTarget(target);
+        if (presenter.vm.error) {
+            showSnackbar(presenter.vm.error);
+            presenter.dismissError();
+        }
+    };
+    const button = /*#__PURE__*/ react.createElement(Button, {
+        variant: "ghost",
+        icon: /*#__PURE__*/ react.createElement(ReactComponent, null),
+        text: text,
+        disabled: vm.switching || isAssumed,
+        onClick: assume,
+        "data-testid": "admin.am.view-as"
+    });
+    if (isAssumed) return button;
+    return /*#__PURE__*/ react.createElement(Tooltip, {
+        content: tooltipText(target.type),
+        trigger: button
+    });
+});
+export { AssumePermissionsButton };
+
+//# sourceMappingURL=AssumePermissionsButton.js.map

package/presentation/assumePermissions/components/AssumePermissionsButton.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presentation/assumePermissions/components/AssumePermissionsButton.js","sources":["../../../../src/presentation/assumePermissions/components/AssumePermissionsButton.tsx"],"sourcesContent":["import React from \"react\";\nimport { useFeature } from \"@webiny/app\";\nimport { Button } from \"@webiny/admin-ui\";\nimport { Tooltip } from \"@webiny/admin-ui\";\nimport { ReactComponent as VisibilityIcon } from \"@webiny/icons/visibility.svg\";\nimport { createReactiveComponent } from \"~/presentation/createReactiveComponent.js\";\nimport { useSnackbar } from \"~/hooks/useSnackbar.js\";\nimport { AssumePermissionsPresenterFeature } from \"../feature.js\";\nimport type { AssumePermissionsPresenter } from \"../abstractions.js\";\n\n/*\n * What happens on click, said before the click. The last sentence matters most: a preview is not a\n * sandbox, so anything the role is allowed to save is saved for real.\n */\nfunction tooltipText(type: AssumePermissionsPresenter.Target[\"type\"]): string {\n    return `Reloads the Admin with only this ${type}'s permissions, so you see what its users see. Exit from the banner at the top. Anything you save while previewing is saved for real.`;\n}\n\ninterface AssumePermissionsButtonProps {\n    // The saved role or team open in the form. `null` while the record is new or still loading.\n    target: AssumePermissionsPresenter.Target | null;\n}\n\n/**\n * \"View as this role\" in the role and team forms. This is where a preview starts: next to where the\n * permissions are edited. Success reloads the page, so the only outcome this has to show is a\n * failure.\n */\nexport const AssumePermissionsButton = createReactiveComponent(\n    ({ target }: AssumePermissionsButtonProps) => {\n        const { presenter } = useFeature(AssumePermissionsPresenterFeature);\n        const { showSnackbar } = useSnackbar();\n        const vm = presenter.vm;\n\n        if (!target || !vm.canAssume) {\n            return null;\n        }\n\n        const isAssumed = vm.assumed?.type === target.type && vm.assumed.id === target.id;\n\n        // Already previewing this one: say so, rather than leave a dead button with no reason.\n        let text = `View as this ${target.type}`;\n        if (isAssumed) {\n            text = `Viewing as this ${target.type}`;\n        }\n\n        const assume = async () => {\n            await presenter.assumeTarget(target);\n\n            if (presenter.vm.error) {\n                showSnackbar(presenter.vm.error);\n                presenter.dismissError();\n            }\n        };\n\n        const button = (\n            <Button\n                variant={\"ghost\"}\n                icon={<VisibilityIcon />}\n                text={text}\n                disabled={vm.switching || isAssumed}\n                onClick={assume}\n                data-testid={\"admin.am.view-as\"}\n            />\n        );\n\n        // The label already explains a disabled button, and a disabled button gets no hover anyway.\n        if (isAssumed) {\n            return button;\n        }\n\n        return <Tooltip content={tooltipText(target.type)} trigger={button} />;\n    }\n);\n"],"names":["tooltipText","type","AssumePermissionsButton","createReactiveComponent","target","presenter","useFeature","AssumePermissionsPresenterFeature","showSnackbar","useSnackbar","vm","isAssumed","text","assume","button","Button","VisibilityIcon","Tooltip"],"mappings":";;;;;;;AAcA,SAASA,YAAYC,IAA+C;IAChE,OAAO,CAAC,iCAAiC,EAAEA,KAAK,qIAAqI,CAAC;AAC1L;AAYO,MAAMC,0BAA0BC,wBACnC,CAAC,EAAEC,MAAM,EAAgC;IACrC,MAAM,EAAEC,SAAS,EAAE,GAAGC,WAAWC;IACjC,MAAM,EAAEC,YAAY,EAAE,GAAGC;IACzB,MAAMC,KAAKL,UAAU,EAAE;IAEvB,IAAI,CAACD,UAAU,CAACM,GAAG,SAAS,EACxB,OAAO;IAGX,MAAMC,YAAYD,GAAG,OAAO,EAAE,SAASN,OAAO,IAAI,IAAIM,GAAG,OAAO,CAAC,EAAE,KAAKN,OAAO,EAAE;IAGjF,IAAIQ,OAAO,CAAC,aAAa,EAAER,OAAO,IAAI,EAAE;IACxC,IAAIO,WACAC,OAAO,CAAC,gBAAgB,EAAER,OAAO,IAAI,EAAE;IAG3C,MAAMS,SAAS;QACX,MAAMR,UAAU,YAAY,CAACD;QAE7B,IAAIC,UAAU,EAAE,CAAC,KAAK,EAAE;YACpBG,aAAaH,UAAU,EAAE,CAAC,KAAK;YAC/BA,UAAU,YAAY;QAC1B;IACJ;IAEA,MAAMS,SAAS,WAATA,GACF,oBAACC,QAAMA;QACH,SAAS;QACT,oBAAM,oBAACC,gBAAcA;QACrB,MAAMJ;QACN,UAAUF,GAAG,SAAS,IAAIC;QAC1B,SAASE;QACT,eAAa;;IAKrB,IAAIF,WACA,OAAOG;IAGX,OAAO,WAAP,GAAO,oBAACG,SAAOA;QAAC,SAASjB,YAAYI,OAAO,IAAI;QAAG,SAASU;;AAChE"}

package/presentation/assumePermissions/components/AssumedPermissionsBanner.d.ts

@@ -0,0 +1,11 @@
+import React from "react";
+/**
+ * Shows the preview banner for as long as a preview is active. It is deliberately not dismissible:
+ * writes fail while previewing, and someone who has lost the banner has no way to explain why.
+ *
+ * Mounted outside every permission gate, because the previewed role usually cannot see the menu
+ * the preview was started from. Leaving it behind a gate would strand the user.
+ */
+export declare const AssumedPermissionsBanner: (() => React.JSX.Element | null) & React.NamedExoticComponent<unknown> & {
+    readonly type: () => React.JSX.Element | null;
+};

package/presentation/assumePermissions/components/AssumedPermissionsBanner.js

@@ -0,0 +1,25 @@
+import react from "react";
+import { useFeature } from "@webiny/app";
+import { createReactiveComponent } from "../../createReactiveComponent.js";
+import { Banner } from "../../banners/components/Banner.js";
+import { AssumePermissionsPresenterFeature } from "../feature.js";
+const AssumedPermissionsBanner = createReactiveComponent(()=>{
+    const { presenter } = useFeature(AssumePermissionsPresenterFeature);
+    const { assumed, switching } = presenter.vm;
+    if (!assumed) return null;
+    const action = {
+        label: "Exit preview",
+        disabled: switching,
+        onClick: presenter.exit
+    };
+    return /*#__PURE__*/ react.createElement(Banner, {
+        id: "assume-permissions",
+        variant: "warning",
+        title: `Viewing the Admin as the ${assumed.name} ${assumed.type}.`,
+        message: `Permissions are enforced as this ${assumed.type}, so anything you are not allowed to do will fail.`,
+        action: action
+    });
+});
+export { AssumedPermissionsBanner };
+
+//# sourceMappingURL=AssumedPermissionsBanner.js.map

package/presentation/assumePermissions/components/AssumedPermissionsBanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presentation/assumePermissions/components/AssumedPermissionsBanner.js","sources":["../../../../src/presentation/assumePermissions/components/AssumedPermissionsBanner.tsx"],"sourcesContent":["import React from \"react\";\nimport { useFeature } from \"@webiny/app\";\nimport { createReactiveComponent } from \"~/presentation/createReactiveComponent.js\";\nimport { Banner } from \"~/presentation/banners/components/Banner.js\";\nimport { AssumePermissionsPresenterFeature } from \"../feature.js\";\n\n/**\n * Shows the preview banner for as long as a preview is active. It is deliberately not dismissible:\n * writes fail while previewing, and someone who has lost the banner has no way to explain why.\n *\n * Mounted outside every permission gate, because the previewed role usually cannot see the menu\n * the preview was started from. Leaving it behind a gate would strand the user.\n */\nexport const AssumedPermissionsBanner = createReactiveComponent(() => {\n    const { presenter } = useFeature(AssumePermissionsPresenterFeature);\n    const { assumed, switching } = presenter.vm;\n\n    if (!assumed) {\n        return null;\n    }\n\n    const action = { label: \"Exit preview\", disabled: switching, onClick: presenter.exit };\n\n    return (\n        <Banner\n            id={\"assume-permissions\"}\n            variant={\"warning\"}\n            title={`Viewing the Admin as the ${assumed.name} ${assumed.type}.`}\n            message={`Permissions are enforced as this ${assumed.type}, so anything you are not allowed to do will fail.`}\n            action={action}\n        />\n    );\n});\n"],"names":["AssumedPermissionsBanner","createReactiveComponent","presenter","useFeature","AssumePermissionsPresenterFeature","assumed","switching","action","Banner"],"mappings":";;;;;AAaO,MAAMA,2BAA2BC,wBAAwB;IAC5D,MAAM,EAAEC,SAAS,EAAE,GAAGC,WAAWC;IACjC,MAAM,EAAEC,OAAO,EAAEC,SAAS,EAAE,GAAGJ,UAAU,EAAE;IAE3C,IAAI,CAACG,SACD,OAAO;IAGX,MAAME,SAAS;QAAE,OAAO;QAAgB,UAAUD;QAAW,SAASJ,UAAU,IAAI;IAAC;IAErF,OAAO,WAAP,GACI,oBAACM,QAAMA;QACH,IAAI;QACJ,SAAS;QACT,OAAO,CAAC,yBAAyB,EAAEH,QAAQ,IAAI,CAAC,CAAC,EAAEA,QAAQ,IAAI,CAAC,CAAC,CAAC;QAClE,SAAS,CAAC,iCAAiC,EAAEA,QAAQ,IAAI,CAAC,kDAAkD,CAAC;QAC7G,QAAQE;;AAGpB"}

package/presentation/assumePermissions/components/AssumedPermissionsSelector.d.ts

@@ -0,0 +1,2 @@
+import React from "react";
+export declare const AssumedPermissionsSelector: (props: unknown) => React.JSX.Element;

package/presentation/assumePermissions/components/AssumedPermissionsSelector.js

@@ -0,0 +1,68 @@
+import react, { useState } from "react";
+import { createReactiveComponent } from "../../createReactiveComponent.js";
+import { useFeature } from "@webiny/app";
+import { DropdownMenu, Icon, useToast } from "@webiny/admin-ui";
+import { ReactComponent } from "@webiny/icons/visibility.svg";
+import { AssumedPermissionsSelector as AssumedPermissionsSelector_js_AssumedPermissionsSelector } from "../../../base/ui/AssumedPermissionsSelector.js";
+import { AssumePermissionsPresenterFeature } from "../feature.js";
+const renderGroup = (label, options, onPick)=>{
+    if (0 === options.length) return null;
+    return /*#__PURE__*/ react.createElement(DropdownMenu.Group, {
+        key: label
+    }, /*#__PURE__*/ react.createElement(DropdownMenu.Label, {
+        text: label
+    }), options.map((option)=>/*#__PURE__*/ react.createElement(DropdownMenu.Item, {
+            key: option.value,
+            text: option.label,
+            onClick: ()=>onPick(option.value)
+        })));
+};
+const AssumedPermissionsSelectorView = createReactiveComponent(()=>{
+    const { presenter } = useFeature(AssumePermissionsPresenterFeature);
+    const toast = useToast();
+    const vm = presenter.vm;
+    const [opened, setOpened] = useState(false);
+    if (!vm.assumed) return null;
+    const reportError = ()=>{
+        if (!presenter.vm.error) return;
+        toast.showWarningToast({
+            title: presenter.vm.error
+        });
+        presenter.dismissError();
+    };
+    const onOpenChange = (open)=>{
+        setOpened(open);
+        if (open) presenter.load();
+    };
+    const pick = async (value)=>{
+        await presenter.assume(value);
+        reportError();
+    };
+    const exit = async ()=>{
+        await presenter.exit();
+        reportError();
+    };
+    return /*#__PURE__*/ react.createElement(DropdownMenu, {
+        open: opened,
+        onOpenChange: onOpenChange,
+        className: "w-[240px]",
+        trigger: /*#__PURE__*/ react.createElement("div", {
+            className: "flex items-center gap-x-xs cursor-pointer",
+            "data-testid": "assumed-permissions-selector"
+        }, /*#__PURE__*/ react.createElement(Icon, {
+            label: "Previewing as",
+            icon: /*#__PURE__*/ react.createElement(ReactComponent, null),
+            className: "fill-neutral-xstrong"
+        }), vm.assumed.name)
+    }, /*#__PURE__*/ react.createElement(DropdownMenu.Item, {
+        text: "Exit preview",
+        onClick: exit,
+        disabled: vm.switching
+    }), /*#__PURE__*/ react.createElement(DropdownMenu.Separator, null), renderGroup("Roles", vm.roleOptions, pick), renderGroup("Teams", vm.teamOptions, pick));
+});
+const AssumedPermissionsSelector_AssumedPermissionsSelector = AssumedPermissionsSelector_js_AssumedPermissionsSelector.createDecorator(()=>function() {
+        return /*#__PURE__*/ react.createElement(AssumedPermissionsSelectorView, null);
+    });
+export { AssumedPermissionsSelector_AssumedPermissionsSelector as AssumedPermissionsSelector };
+
+//# sourceMappingURL=AssumedPermissionsSelector.js.map

package/presentation/assumePermissions/components/AssumedPermissionsSelector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presentation/assumePermissions/components/AssumedPermissionsSelector.js","sources":["../../../../src/presentation/assumePermissions/components/AssumedPermissionsSelector.tsx"],"sourcesContent":["import React from \"react\";\nimport { useState } from \"react\";\nimport { createReactiveComponent } from \"~/presentation/createReactiveComponent.js\";\nimport { useFeature } from \"@webiny/app\";\nimport { DropdownMenu } from \"@webiny/admin-ui\";\nimport { Icon } from \"@webiny/admin-ui\";\nimport { useToast } from \"@webiny/admin-ui\";\nimport { ReactComponent as VisibilityIcon } from \"@webiny/icons/visibility.svg\";\nimport { AssumedPermissionsSelector as BaseAssumedPermissionsSelector } from \"~/base/ui/AssumedPermissionsSelector.js\";\nimport { AssumePermissionsPresenterFeature } from \"../feature.js\";\nimport type { AssumePermissionsPresenter } from \"../abstractions.js\";\n\nconst renderGroup = (\n    label: string,\n    options: AssumePermissionsPresenter.Option[],\n    onPick: (value: string) => void\n) => {\n    if (options.length === 0) {\n        return null;\n    }\n\n    return (\n        <DropdownMenu.Group key={label}>\n            <DropdownMenu.Label text={label} />\n            {options.map(option => (\n                <DropdownMenu.Item\n                    key={option.value}\n                    text={option.label}\n                    onClick={() => onPick(option.value)}\n                />\n            ))}\n        </DropdownMenu.Group>\n    );\n};\n\n/**\n * Shown only while a preview is active, so that comparing two roles is one click rather than\n * exiting and opening the next role's form. When nothing is being previewed this renders nothing\n * and the role and team forms are the way in, which keeps a feature used on setup days out of the\n * header on every other day.\n *\n * The options are already loaded by the time this can be opened: the presenter preloads them on\n * page load, but only when the page loaded into a preview.\n */\nconst AssumedPermissionsSelectorView = createReactiveComponent(() => {\n    const { presenter } = useFeature(AssumePermissionsPresenterFeature);\n    const toast = useToast();\n    const vm = presenter.vm;\n\n    const [opened, setOpened] = useState(false);\n\n    if (!vm.assumed) {\n        return null;\n    }\n\n    const reportError = () => {\n        if (!presenter.vm.error) {\n            return;\n        }\n\n        toast.showWarningToast({ title: presenter.vm.error });\n        presenter.dismissError();\n    };\n\n    const onOpenChange = (open: boolean) => {\n        setOpened(open);\n\n        if (open) {\n            // Refreshes in the background; the list stays on screen while it does.\n            presenter.load();\n        }\n    };\n\n    const pick = async (value: string) => {\n        await presenter.assume(value);\n        reportError();\n    };\n\n    const exit = async () => {\n        await presenter.exit();\n        reportError();\n    };\n\n    return (\n        <DropdownMenu\n            open={opened}\n            onOpenChange={onOpenChange}\n            className={\"w-[240px]\"}\n            trigger={\n                <div\n                    className={\"flex items-center gap-x-xs cursor-pointer\"}\n                    data-testid={\"assumed-permissions-selector\"}\n                >\n                    <Icon\n                        label={\"Previewing as\"}\n                        icon={<VisibilityIcon />}\n                        className={\"fill-neutral-xstrong\"}\n                    />\n                    {vm.assumed.name}\n                </div>\n            }\n        >\n            <DropdownMenu.Item text={\"Exit preview\"} onClick={exit} disabled={vm.switching} />\n            <DropdownMenu.Separator />\n            {renderGroup(\"Roles\", vm.roleOptions, pick)}\n            {renderGroup(\"Teams\", vm.teamOptions, pick)}\n        </DropdownMenu>\n    );\n});\n\nexport const AssumedPermissionsSelector = BaseAssumedPermissionsSelector.createDecorator(() => {\n    return function AssumedPermissionsSelector() {\n        return <AssumedPermissionsSelectorView />;\n    };\n});\n"],"names":["renderGroup","label","options","onPick","DropdownMenu","option","AssumedPermissionsSelectorView","createReactiveComponent","presenter","useFeature","AssumePermissionsPresenterFeature","toast","useToast","vm","opened","setOpened","useState","reportError","onOpenChange","open","pick","value","exit","Icon","VisibilityIcon","AssumedPermissionsSelector","BaseAssumedPermissionsSelector"],"mappings":";;;;;;;AAYA,MAAMA,cAAc,CAChBC,OACAC,SACAC;IAEA,IAAID,AAAmB,MAAnBA,QAAQ,MAAM,EACd,OAAO;IAGX,OAAO,WAAP,GACI,oBAACE,aAAa,KAAK;QAAC,KAAKH;qBACrB,oBAACG,aAAa,KAAK;QAAC,MAAMH;QACzBC,QAAQ,GAAG,CAACG,CAAAA,SAAAA,WAAAA,GACT,oBAACD,aAAa,IAAI;YACd,KAAKC,OAAO,KAAK;YACjB,MAAMA,OAAO,KAAK;YAClB,SAAS,IAAMF,OAAOE,OAAO,KAAK;;AAKtD;AAWA,MAAMC,iCAAiCC,wBAAwB;IAC3D,MAAM,EAAEC,SAAS,EAAE,GAAGC,WAAWC;IACjC,MAAMC,QAAQC;IACd,MAAMC,KAAKL,UAAU,EAAE;IAEvB,MAAM,CAACM,QAAQC,UAAU,GAAGC,SAAS;IAErC,IAAI,CAACH,GAAG,OAAO,EACX,OAAO;IAGX,MAAMI,cAAc;QAChB,IAAI,CAACT,UAAU,EAAE,CAAC,KAAK,EACnB;QAGJG,MAAM,gBAAgB,CAAC;YAAE,OAAOH,UAAU,EAAE,CAAC,KAAK;QAAC;QACnDA,UAAU,YAAY;IAC1B;IAEA,MAAMU,eAAe,CAACC;QAClBJ,UAAUI;QAEV,IAAIA,MAEAX,UAAU,IAAI;IAEtB;IAEA,MAAMY,OAAO,OAAOC;QAChB,MAAMb,UAAU,MAAM,CAACa;QACvBJ;IACJ;IAEA,MAAMK,OAAO;QACT,MAAMd,UAAU,IAAI;QACpBS;IACJ;IAEA,OAAO,WAAP,GACI,oBAACb,cAAYA;QACT,MAAMU;QACN,cAAcI;QACd,WAAW;QACX,uBACI,oBAAC;YACG,WAAW;YACX,eAAa;yBAEb,oBAACK,MAAIA;YACD,OAAO;YACP,oBAAM,oBAACC,gBAAcA;YACrB,WAAW;YAEdX,GAAG,OAAO,CAAC,IAAI;qBAIxB,oBAACT,aAAa,IAAI;QAAC,MAAM;QAAgB,SAASkB;QAAM,UAAUT,GAAG,SAAS;sBAC9E,oBAACT,aAAa,SAAS,SACtBJ,YAAY,SAASa,GAAG,WAAW,EAAEO,OACrCpB,YAAY,SAASa,GAAG,WAAW,EAAEO;AAGlD;AAEO,MAAMK,wDAA6BC,yDAAAA,eAA8C,CAAC,IAC9E;QACH,OAAO,WAAP,GAAO,oBAACpB,gCAA8BA;IAC1C"}