@yuneta/gobj-ui 7.23.70 → 7.23.71

package/dist/gobj-ui.cjs.js

@@ -6403,6 +6403,57 @@ function plan_toolbar(wanted) {
 	};
 }
 //#endregion
+//#region src/form_field_readonly.js
+/***********************************************************************
+*          form_field_readonly.js
+*
+*      Is this field of the form read-only?
+*
+*      Pure, so the rule can be tested without a DOM: the gclass turns
+*      the answer into `readonly`/`disabled` on a control, this decides
+*      the answer. Same split as form_toolbar_plan.js and
+*      treedb_write_plan.js.
+*
+*      The rule it exists to state ONCE: **`writable` governs the WRITE
+*      of a column's VALUE, and an fkey is not written — it is LINKED.**
+*      An fkey column is normally declared with no `writable` flag at
+*      all (`treedb_authzs`'s `users.roles` is `['fkey']`, and so is
+*      almost every fkey in the tree), so reading "not writable" as "not
+*      editable" takes away the only way to link a record to its parent
+*      — with `users.roles`, the only way to give a person a role.
+*
+*      The other half of this rule is already written down in
+*      c_yui_treedb_topic_with_form.js, where the record travels back:
+*      the form sends "the writable cols, the fkeys (a link is edited by
+*      linking) and the pkey". The two halves have to agree, and when
+*      they did not, the form disabled the control whose value the save
+*      path was still waiting for.
+*
+*      A `file` column is an fkey too (flagged `['fkey','file']`) and is
+*      NOT covered: it answers `type: "file"`, its bytes travel beside
+*      the record, and the SDK declares as legal a `file` column that
+*      only a load fills.
+*
+*          Copyright (c) 2026, ArtGins.
+*          All Rights Reserved.
+***********************************************************************/
+/***************************************************************
+*  field_is_readonly(form_readonly, field_desc) -> boolean
+*
+*      form_readonly   the FORM is read-only: a record opened to be
+*                      looked at, or a store nobody may write. It is
+*                      a property of the opening, not of the schema,
+*                      and it wins over everything.
+*      field_desc      as treedb_get_field_desc() answers it
+*                      (`type`, `is_writable`).
+***************************************************************/
+function field_is_readonly(form_readonly, field_desc) {
+	if (form_readonly) return true;
+	let desc = field_desc || {};
+	if (desc.type === "fkey") return false;
+	return !desc.is_writable;
+}
+//#endregion
 //#region src/yui_theme.js
 /***********************************************************************
 *          yui_theme.js
@@ -7215,7 +7266,7 @@ function build_form_field_conf(gobj, field_desc) {
 		placeholder: "",
 		options: [],
 		extras: {},
-		readonly: (0, _yuneta_gobj_js.gobj_read_bool_attr)(gobj, "readonly") || !field_desc.is_writable,
+		readonly: field_is_readonly((0, _yuneta_gobj_js.gobj_read_bool_attr)(gobj, "readonly"), field_desc),
 		required: field_desc.is_required,
 		hidden: field_desc.is_hidden,
 		default_value: field_desc.default_value

package/dist/gobj-ui.es.js

@@ -6398,6 +6398,57 @@ function plan_toolbar(wanted) {
 	};
 }
 //#endregion
+//#region src/form_field_readonly.js
+/***********************************************************************
+*          form_field_readonly.js
+*
+*      Is this field of the form read-only?
+*
+*      Pure, so the rule can be tested without a DOM: the gclass turns
+*      the answer into `readonly`/`disabled` on a control, this decides
+*      the answer. Same split as form_toolbar_plan.js and
+*      treedb_write_plan.js.
+*
+*      The rule it exists to state ONCE: **`writable` governs the WRITE
+*      of a column's VALUE, and an fkey is not written — it is LINKED.**
+*      An fkey column is normally declared with no `writable` flag at
+*      all (`treedb_authzs`'s `users.roles` is `['fkey']`, and so is
+*      almost every fkey in the tree), so reading "not writable" as "not
+*      editable" takes away the only way to link a record to its parent
+*      — with `users.roles`, the only way to give a person a role.
+*
+*      The other half of this rule is already written down in
+*      c_yui_treedb_topic_with_form.js, where the record travels back:
+*      the form sends "the writable cols, the fkeys (a link is edited by
+*      linking) and the pkey". The two halves have to agree, and when
+*      they did not, the form disabled the control whose value the save
+*      path was still waiting for.
+*
+*      A `file` column is an fkey too (flagged `['fkey','file']`) and is
+*      NOT covered: it answers `type: "file"`, its bytes travel beside
+*      the record, and the SDK declares as legal a `file` column that
+*      only a load fills.
+*
+*          Copyright (c) 2026, ArtGins.
+*          All Rights Reserved.
+***********************************************************************/
+/***************************************************************
+*  field_is_readonly(form_readonly, field_desc) -> boolean
+*
+*      form_readonly   the FORM is read-only: a record opened to be
+*                      looked at, or a store nobody may write. It is
+*                      a property of the opening, not of the schema,
+*                      and it wins over everything.
+*      field_desc      as treedb_get_field_desc() answers it
+*                      (`type`, `is_writable`).
+***************************************************************/
+function field_is_readonly(form_readonly, field_desc) {
+	if (form_readonly) return true;
+	let desc = field_desc || {};
+	if (desc.type === "fkey") return false;
+	return !desc.is_writable;
+}
+//#endregion
 //#region src/yui_theme.js
 /***********************************************************************
 *          yui_theme.js
@@ -7210,7 +7261,7 @@ function build_form_field_conf(gobj, field_desc) {
 		placeholder: "",
 		options: [],
 		extras: {},
-		readonly: gobj_read_bool_attr(gobj, "readonly") || !field_desc.is_writable,
+		readonly: field_is_readonly(gobj_read_bool_attr(gobj, "readonly"), field_desc),
 		required: field_desc.is_required,
 		hidden: field_desc.is_hidden,
 		default_value: field_desc.default_value

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yuneta/gobj-ui",
-  "version": "7.23.70",
+  "version": "7.23.71",
   "type": "module",
   "main": "dist/gobj-ui.cjs.js",
   "module": "dist/gobj-ui.es.js",

package/src/c_yui_form.js

@@ -65,6 +65,7 @@ import {
 import "./c_yui_form.css";
 import {attach_clear, refresh_clear} from "./yui_inputs.js";
 import {plan_toolbar, DEFAULT_TOOLBAR} from "./form_toolbar_plan.js";
+import {field_is_readonly} from "./form_field_readonly.js";
 /*  Read at field-build time only — deliberately NOT watched: the hosting
  *  dialog rebuilds the form on every open, and re-rendering a form under
  *  the user mid-edit would throw away what they typed. */
@@ -601,8 +602,13 @@ function build_form_field_conf(gobj, field_desc)
         extras: {},             // extra html input/textarea attributes
         /*  A form opened to LOOK at a record has no editable field, and
          *  that is a property of the opening, not of the schema: the same
-         *  col is writable when the same form is opened to edit.  */
-        readonly: gobj_read_bool_attr(gobj, "readonly") || !field_desc.is_writable,
+         *  col is writable when the same form is opened to edit.  And an
+         *  fkey is editable WITHOUT `writable`, because a link is not
+         *  written, it is linked -- the rule and its why live in
+         *  form_field_readonly.js.  */
+        readonly: field_is_readonly(
+            gobj_read_bool_attr(gobj, "readonly"), field_desc
+        ),
         required: field_desc.is_required,
         hidden: field_desc.is_hidden,
         default_value: field_desc.default_value,

package/src/form_field_readonly.js

@@ -0,0 +1,61 @@
+/***********************************************************************
+ *          form_field_readonly.js
+ *
+ *      Is this field of the form read-only?
+ *
+ *      Pure, so the rule can be tested without a DOM: the gclass turns
+ *      the answer into `readonly`/`disabled` on a control, this decides
+ *      the answer. Same split as form_toolbar_plan.js and
+ *      treedb_write_plan.js.
+ *
+ *      The rule it exists to state ONCE: **`writable` governs the WRITE
+ *      of a column's VALUE, and an fkey is not written — it is LINKED.**
+ *      An fkey column is normally declared with no `writable` flag at
+ *      all (`treedb_authzs`'s `users.roles` is `['fkey']`, and so is
+ *      almost every fkey in the tree), so reading "not writable" as "not
+ *      editable" takes away the only way to link a record to its parent
+ *      — with `users.roles`, the only way to give a person a role.
+ *
+ *      The other half of this rule is already written down in
+ *      c_yui_treedb_topic_with_form.js, where the record travels back:
+ *      the form sends "the writable cols, the fkeys (a link is edited by
+ *      linking) and the pkey". The two halves have to agree, and when
+ *      they did not, the form disabled the control whose value the save
+ *      path was still waiting for.
+ *
+ *      A `file` column is an fkey too (flagged `['fkey','file']`) and is
+ *      NOT covered: it answers `type: "file"`, its bytes travel beside
+ *      the record, and the SDK declares as legal a `file` column that
+ *      only a load fills.
+ *
+ *          Copyright (c) 2026, ArtGins.
+ *          All Rights Reserved.
+ ***********************************************************************/
+
+
+/***************************************************************
+ *  field_is_readonly(form_readonly, field_desc) -> boolean
+ *
+ *      form_readonly   the FORM is read-only: a record opened to be
+ *                      looked at, or a store nobody may write. It is
+ *                      a property of the opening, not of the schema,
+ *                      and it wins over everything.
+ *      field_desc      as treedb_get_field_desc() answers it
+ *                      (`type`, `is_writable`).
+ ***************************************************************/
+function field_is_readonly(form_readonly, field_desc)
+{
+    if(form_readonly) {
+        return true;
+    }
+
+    let desc = field_desc || {};
+    if(desc.type === "fkey") {
+        return false;
+    }
+
+    return !desc.is_writable;
+}
+
+
+export {field_is_readonly};

package/src/form_field_readonly.test.js

@@ -0,0 +1,50 @@
+import {describe, it, expect} from "vitest";
+import {field_is_readonly} from "./form_field_readonly.js";
+
+describe("field_is_readonly", () => {
+
+    it("a form opened to LOOK has no editable field, fkey included", () => {
+        /*  A record opened to be read: the schema does not enter into it. */
+        expect(field_is_readonly(true, {type: "fkey", is_writable: false}))
+            .toBe(true);
+        expect(field_is_readonly(true, {type: "fkey", is_writable: true}))
+            .toBe(true);
+        expect(field_is_readonly(true, {type: "string", is_writable: true}))
+            .toBe(true);
+    });
+
+    it("an fkey is EDITABLE without `writable`: a link is edited by linking", () => {
+        /*  `treedb_authzs`'s `users.roles` is declared `['fkey']` and
+         *  nothing else -- as almost every fkey in the tree is. Reading
+         *  that as "not editable" left a user with no way to be given a
+         *  role, while the save path was still sending the column. */
+        expect(field_is_readonly(false, {type: "fkey", is_writable: false}))
+            .toBe(false);
+    });
+
+    it("a plain column still needs `writable`", () => {
+        expect(field_is_readonly(false, {type: "string", is_writable: false}))
+            .toBe(true);
+        expect(field_is_readonly(false, {type: "string", is_writable: true}))
+            .toBe(false);
+        expect(field_is_readonly(false, {type: "enum", is_writable: false}))
+            .toBe(true);
+    });
+
+    it("a `file` column is NOT covered by the fkey exemption", () => {
+        /*  It is an fkey (`['fkey','file']`) but answers `type: "file"`,
+         *  and the SDK declares as legal a `file` column that only a load
+         *  fills. */
+        expect(field_is_readonly(false, {type: "file", is_writable: false, is_file: true}))
+            .toBe(true);
+        expect(field_is_readonly(false, {type: "file", is_writable: true, is_file: true}))
+            .toBe(false);
+    });
+
+    it("no descriptor is read-only, not editable", () => {
+        /*  Nothing known about a field is not a reason to let it be
+         *  written. */
+        expect(field_is_readonly(false, undefined)).toBe(true);
+        expect(field_is_readonly(false, {})).toBe(true);
+    });
+});