windmill-components 1.677.1 → 1.695.0

package/package/components/ShareModal.svelte

@@ -1,16 +1,16 @@
 <script lang="ts">import TableCustom from './TableCustom.svelte';
-import { GroupService, UserService, GranularAclService } from '../gen';
+import { GroupService, UserService, GranularAclService, ResourceService, FolderService } from '../gen';
 import { createEventDispatcher } from 'svelte';
 import { userStore, workspaceStore } from '../stores';
 import { Alert, Button, Drawer } from './common';
 import DrawerContent from './common/drawer/DrawerContent.svelte';
-import Tooltip from './Tooltip.svelte';
 import { sendUserToast } from '../toast';
 import { isOwner } from '../utils';
 import ToggleButtonGroup from './common/toggleButton-v2/ToggleButtonGroup.svelte';
 import ToggleButton from './common/toggleButton-v2/ToggleButton.svelte';
 import Select from './select/Select.svelte';
 import { safeSelectItems } from './select/utils.svelte';
+import Toggle from './Toggle.svelte';
 import { Trash } from 'lucide-svelte';
 const dispatch = createEventDispatcher();
 let kind;
@@ -23,13 +23,100 @@ let acls = $state([]);
 let groups = $state([]);
 let usernames = $state([]);
 let drawer = $state();
+let linkedVarPaths = $state([]);
+let alsoApplyToLinked = $state(true);
+let defaultPerms = $state([]);
+let defaultPermsLabel = $state('');
+async function loadDefaultPerms() {
+    const currentPath = path;
+    const parts = currentPath.split('/');
+    if (parts[0] === 'f' && parts.length >= 2) {
+        const folderName = parts[1];
+        defaultPermsLabel = `Folder f/${folderName} permissions`;
+        try {
+            const folder = await FolderService.getFolder({
+                workspace: $workspaceStore,
+                name: folderName
+            });
+            if (path !== currentPath)
+                return;
+            const perms = [];
+            for (const owner of folder.owners) {
+                perms.push({ label: owner, write: true });
+            }
+            for (const [owner, write] of Object.entries(folder.extra_perms ?? {})) {
+                if (!folder.owners.includes(owner)) {
+                    perms.push({ label: owner, write });
+                }
+            }
+            defaultPerms = perms;
+        }
+        catch {
+            if (path !== currentPath)
+                return;
+            defaultPerms = [];
+        }
+    }
+    else if (parts[0] === 'u' && parts.length >= 2) {
+        defaultPermsLabel = `User u/${parts[1]} permissions`;
+        defaultPerms = [{ label: `u/${parts[1]}`, write: true }];
+    }
+    else if (parts[0] === 'g' && parts.length >= 2) {
+        defaultPermsLabel = `Group g/${parts[1]} permissions`;
+        defaultPerms = [{ label: `g/${parts[1]}`, write: true }];
+    }
+    else {
+        defaultPerms = [];
+        defaultPermsLabel = '';
+    }
+}
+function collectVarRefs(value) {
+    const paths = [];
+    function walk(v) {
+        if (typeof v === 'string' && v.startsWith('$var:')) {
+            paths.push(v.substring('$var:'.length));
+        }
+        else if (Array.isArray(v)) {
+            v.forEach(walk);
+        }
+        else if (v && typeof v === 'object') {
+            Object.values(v).forEach(walk);
+        }
+    }
+    walk(value);
+    return [...new Set(paths)];
+}
+async function loadLinkedVarPaths() {
+    if (kind !== 'resource') {
+        linkedVarPaths = [];
+        return;
+    }
+    const currentPath = path;
+    try {
+        const resource = await ResourceService.getResource({
+            workspace: $workspaceStore,
+            path: currentPath
+        });
+        if (path !== currentPath)
+            return;
+        linkedVarPaths = collectVarRefs(resource.value);
+    }
+    catch {
+        if (path !== currentPath)
+            return;
+        linkedVarPaths = [];
+    }
+}
 let own = $state(false);
 export async function openDrawer(newPath, kind_l, isOwnerOverride) {
     path = newPath;
     kind = kind_l;
+    alsoApplyToLinked = true;
     loadAcls();
     loadGroups();
     loadUsernames();
+    loadLinkedVarPaths();
+    loadDefaultPerms();
     if (isOwnerOverride !== undefined) {
         own = isOwnerOverride;
     }
@@ -58,6 +145,21 @@ async function deleteAcl(owner) {
             kind,
             requestBody: { owner }
         });
+        if (alsoApplyToLinked) {
+            for (const varPath of linkedVarPaths) {
+                try {
+                    await GranularAclService.removeGranularAcls({
+                        workspace: $workspaceStore,
+                        path: varPath,
+                        kind: 'variable',
+                        requestBody: { owner }
+                    });
+                }
+                catch (err) {
+                    sendUserToast(`Failed to update variable ${varPath}: ${err}`, true);
+                }
+            }
+        }
         loadAcls();
         dispatch('change', { path, kind });
     }
@@ -72,111 +174,147 @@ async function addAcl(owner, write) {
         kind,
         requestBody: { owner, write }
     });
+    if (alsoApplyToLinked) {
+        for (const varPath of linkedVarPaths) {
+            try {
+                await GranularAclService.addGranularAcls({
+                    workspace: $workspaceStore,
+                    path: varPath,
+                    kind: 'variable',
+                    requestBody: { owner, write }
+                });
+            }
+            catch (err) {
+                sendUserToast(`Failed to update variable ${varPath}: ${err}`, true);
+            }
+        }
+    }
     loadAcls();
     dispatch('change', { path, kind });
 }
 </script>
 
 <Drawer bind:this={drawer}>
-	<DrawerContent title="Share {path}" on:close={drawer?.closeDrawer}>
-		<div class="flex flex-col gap-2">
-			<h1 class="text-sm font-semibold text-emphasis">{path}</h1>
-			<span class="text-xs font-semibold text-emphasis"
-				>Extra Permissions ({acls?.length ?? 0}) &nbsp; <Tooltip
-					>Items already have default permissions. If belonging to an user or group, that group or
-					user owns it and can write to it as well as modify its permisions and move it. Folders
-					have read/write that apply to the whole folder and are additive to the items permissions.</Tooltip
-				></span
-			>
-			{#if !own}
-				<Alert type="warning" title="Not owner"
-					>Since you do not own this item, you cannot modify its permission</Alert
-				>
-			{/if}
-			<div>
-				{#if own}
-					<div class="flex flex-row flex-wrap gap-2 items-center">
-						<div>
-							<ToggleButtonGroup bind:selected={ownerKind} on:selected={() => (owner = '')}>
-								{#snippet children({ item })}
-									<ToggleButton value="user" label="User" {item} />
-									<ToggleButton value="group" label="Group" {item} />
-								{/snippet}
-							</ToggleButtonGroup>
+	<DrawerContent title="Permissions for {path}" on:close={drawer?.closeDrawer}>
+		<div class="flex flex-col gap-4">
+			{#if defaultPerms.length > 0}
+				<div class="flex flex-col gap-1">
+					<span class="text-sm font-semibold text-emphasis">{defaultPermsLabel}</span>
+					{#each defaultPerms as perm (perm.label)}
+						<div class="flex items-center justify-between text-xs text-primary">
+							<span>{perm.label}</span>
+							<span class="text-tertiary">{perm.write ? 'Writer' : 'Viewer'}</span>
 						</div>
-						{#key ownerKind}
-							<Select
-								items={safeSelectItems(
-									(ownerKind === 'user' ? usernames : groups).map((x) => x.toString())
-								)}
-								bind:value={owner}
-								class="grow min-w-48"
-							/>
-						{/key}
-						<Button
-							size="lg"
-							variant="accent"
-							disabled={!newOwner}
-							on:click={() => addAcl(newOwner, write)}>Add permission</Button
-						>
+					{/each}
+				</div>
+			{/if}
+			<div class="flex flex-col gap-2">
+				<span class="text-sm font-semibold text-emphasis"
+					>Extra permissions ({acls?.length ?? 0})</span
+				>
+				{#if linkedVarPaths.length > 0}
+					<div class="flex flex-col gap-1.5 p-3 border rounded bg-surface-secondary text-xs">
+						<Toggle
+							size="xs"
+							bind:checked={alsoApplyToLinked}
+							options={{ right: 'Also apply to linked variables' }}
+						/>
+						<ul class="text-2xs text-secondary list-disc ml-4">
+							{#each linkedVarPaths as varPath (varPath)}
+								<li>{varPath}</li>
+							{/each}
+						</ul>
 					</div>
 				{/if}
-				{#if acls?.length > 0}
-					<TableCustom>
-
-						{#snippet headerRow()}
-												<tr >
-								<th>owner</th>
-								<th></th>
-								<th></th>
-							</tr>
-											{/snippet}
-						{#snippet body()}
-							<tbody>
-								{#each acls as [owner, write]}
-									<tr>
-										<td>{owner}</td>
-										<td
-											>{#if own}
-												<div>
-													<ToggleButtonGroup
-														selected={write ? 'writer' : 'viewer'}
-														on:selected={async (e) => {
-															const role = e.detail
-															if (role == 'writer') {
-																await addAcl(owner, true)
-															} else {
-																await addAcl(owner, false)
-															}
-															loadAcls()
-														}}
-													>
-														{#snippet children({ item })}
-															<ToggleButton value="viewer" small label="Viewer" {item} />
-															<ToggleButton value="writer" small label="Writer" {item} />
-														{/snippet}
-													</ToggleButtonGroup>
-												</div>
-											{:else}{write}{/if}</td
-										>
-										<td>
-											{#if own}
-												<Button
-													variant="default"
-													destructive
-													size="xs"
-													on:click={() => deleteAcl(owner)}
-													startIcon={{ icon: Trash }}
-												/>
-											{/if}
-										</td>
-									</tr>
-								{/each}
-							</tbody>
-						{/snippet}
-					</TableCustom>
+				{#if !own}
+					<Alert type="warning" title="Not owner"
+						>Since you do not own this item, you cannot modify its permission</Alert
+					>
 				{/if}
+				<div>
+					{#if own}
+						<div class="flex flex-row flex-wrap gap-2 items-center">
+							<div>
+								<ToggleButtonGroup bind:selected={ownerKind} on:selected={() => (owner = '')}>
+									{#snippet children({ item })}
+										<ToggleButton value="user" label="User" {item} />
+										<ToggleButton value="group" label="Group" {item} />
+									{/snippet}
+								</ToggleButtonGroup>
+							</div>
+							{#key ownerKind}
+								<Select
+									items={safeSelectItems(
+										(ownerKind === 'user' ? usernames : groups).map((x) => x.toString())
+									)}
+									bind:value={owner}
+									class="grow min-w-48"
+								/>
+							{/key}
+							<Button
+								size="lg"
+								variant="accent"
+								disabled={!newOwner}
+								on:click={() => addAcl(newOwner, write)}>Add permission</Button
+							>
+						</div>
+					{/if}
+					{#if acls?.length > 0}
+						<TableCustom>
+							{#snippet headerRow()}
+								<tr>
+									<th>owner</th>
+									<th></th>
+									<th></th>
+								</tr>
+							{/snippet}
+							{#snippet body()}
+								<tbody>
+									{#each acls as [owner, write]}
+										<tr>
+											<td>{owner}</td>
+											<td
+												>{#if own}
+													<div>
+														<ToggleButtonGroup
+															selected={write ? 'writer' : 'viewer'}
+															on:selected={async (e) => {
+																const role = e.detail
+																if (role == 'writer') {
+																	await addAcl(owner, true)
+																} else {
+																	await addAcl(owner, false)
+																}
+																loadAcls()
+															}}
+														>
+															{#snippet children({ item })}
+																<ToggleButton value="viewer" small label="Viewer" {item} />
+																<ToggleButton value="writer" small label="Writer" {item} />
+															{/snippet}
+														</ToggleButtonGroup>
+													</div>
+												{:else}{write}{/if}</td
+											>
+											<td>
+												{#if own}
+													<Button
+														variant="default"
+														destructive
+														size="xs"
+														on:click={() => deleteAcl(owner)}
+														startIcon={{ icon: Trash }}
+													/>
+												{/if}
+											</td>
+										</tr>
+									{/each}
+								</tbody>
+							{/snippet}
+						</TableCustom>
+					{/if}
+				</div>
 			</div>
-		</div>
-	</DrawerContent>
+		</div></DrawerContent
+	>
 </Drawer>

package/package/components/ShareModal.svelte.d.ts

@@ -16,7 +16,7 @@ declare const ShareModal: $$__sveltets_2_IsomorphicComponent<Record<string, neve
 } & {
     [evt: string]: CustomEvent<any>;
 }, {}, {
-    openDrawer: (newPath: string, kind_l: "resource" | "volume" | "script" | "flow" | "app" | "variable" | "schedule" | "raw_app" | "group_" | "http_trigger" | "websocket_trigger" | "kafka_trigger" | "nats_trigger" | "postgres_trigger" | "mqtt_trigger" | "gcp_trigger" | "sqs_trigger" | "email_trigger", isOwnerOverride?: boolean) => Promise<void>;
+    openDrawer: (newPath: string, kind_l: "resource" | "volume" | "script" | "flow" | "app" | "variable" | "schedule" | "raw_app" | "group_" | "http_trigger" | "websocket_trigger" | "kafka_trigger" | "nats_trigger" | "postgres_trigger" | "mqtt_trigger" | "gcp_trigger" | "azure_trigger" | "sqs_trigger" | "email_trigger", isOwnerOverride?: boolean) => Promise<void>;
 }, "">;
 type ShareModal = InstanceType<typeof ShareModal>;
 export default ShareModal;