jogosultsági szintek RBAC beállítva tesztelve
This commit is contained in:
Roo
@@ -41,152 +41,68 @@
|
||||
{{ saveNotification.message }}
|
||||
</div>
|
||||
|
||||
<!-- Save Button (top) -->
|
||||
<div v-if="hasModifications" class="mb-6 flex items-center gap-3">
|
||||
<button @click="savePermissions"
|
||||
class="px-6 py-2.5 bg-emerald-600 hover:bg-emerald-500 text-white font-semibold rounded-lg shadow-lg shadow-emerald-600/20 transition-all hover:scale-[1.02] active:scale-[0.98] flex items-center gap-2">
|
||||
<svg class="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
|
||||
<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M8 7H5a2 2 0 00-2 2v9a2 2 0 002 2h14a2 2 0 002-2V9a2 2 0 00-2-2h-3m-1 4l-3 3m0 0l-3-3m3 3V4" />
|
||||
</svg>
|
||||
{{ $t('permissions.save_changes') }}
|
||||
</button>
|
||||
<span class="text-sm text-slate-400">
|
||||
{{ $t('permissions.modified_count', { count: modifiedPermissions.size }) }}
|
||||
</span>
|
||||
</div>
|
||||
<!-- ── DUAL FILTERING: Domain (Row) Filter + Role (Column) Filter ── -->
|
||||
<div class="bg-slate-800/60 border border-slate-700 rounded-xl p-4 mb-6">
|
||||
<div class="flex flex-col sm:flex-row sm:items-center gap-4">
|
||||
<!-- Filter 1: Domain/Row Filter (Tab Group) -->
|
||||
<div class="flex-1">
|
||||
<label class="block text-xs font-semibold uppercase tracking-wider text-slate-400 mb-2">
|
||||
{{ $t('permissions.domain_filter') }}
|
||||
</label>
|
||||
<div class="flex flex-wrap gap-1.5">
|
||||
<button
|
||||
v-for="domain in domainOptions"
|
||||
:key="domain.value"
|
||||
@click="activeDomain = domain.value"
|
||||
class="px-3 py-1.5 text-xs font-medium rounded-lg transition"
|
||||
:class="activeDomain === domain.value
|
||||
? 'bg-indigo-600 text-white shadow-sm'
|
||||
: 'bg-slate-700/60 text-slate-400 hover:bg-slate-700 hover:text-white'"
|
||||
>
|
||||
{{ domain.label }}
|
||||
</button>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- Subscription Tier Banner -->
|
||||
<div class="bg-indigo-500/10 border border-indigo-500/20 rounded-xl p-4 mb-8 flex items-start gap-3">
|
||||
<svg class="w-5 h-5 text-indigo-400 flex-shrink-0 mt-0.5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
|
||||
<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M13 16h-1v-4h-1m1-4h.01M21 12a9 9 0 11-18 0 9 9 0 0118 0z" />
|
||||
</svg>
|
||||
<div class="text-sm text-indigo-300">
|
||||
<span class="font-semibold">{{ $t('permissions.current_tier') }}:</span>
|
||||
<span class="ml-2 px-2 py-0.5 rounded-full text-xs font-medium"
|
||||
:class="tierBadgeClass">
|
||||
{{ featureFlags.tier || 'free' }}
|
||||
</span>
|
||||
<span v-if="featureFlags.expires_at" class="ml-3 text-indigo-400/70">
|
||||
{{ $t('permissions.expires') }}: {{ formatDate(featureFlags.expires_at) }}
|
||||
</span>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- Permission Groups Grid -->
|
||||
<div class="grid grid-cols-1 lg:grid-cols-3 gap-6 mb-8">
|
||||
<!-- Superadmin Permissions -->
|
||||
<div class="bg-slate-800 rounded-xl border border-slate-700 p-6">
|
||||
<div class="flex items-center gap-3 mb-4">
|
||||
<div class="p-2 rounded-lg bg-purple-500/10 text-purple-400">
|
||||
<svg class="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
|
||||
<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 12.75L11.25 15 15 9.75m-3-7.036A11.959 11.959 0 013.598 6 11.99 11.99 0 003 9.749c0 5.592 3.824 10.29 9 11.623 5.176-1.332 9-6.03 9-11.622 0-1.31-.21-2.571-.598-3.751h-.152c-3.196 0-6.1-1.248-8.25-3.285z" />
|
||||
</svg>
|
||||
<!-- Filter 2: Role/Column Filter (Multi-select Pills) -->
|
||||
<div class="flex-1">
|
||||
<label class="block text-xs font-semibold uppercase tracking-wider text-slate-400 mb-2">
|
||||
{{ $t('permissions.role_filter') }}
|
||||
</label>
|
||||
<div class="flex flex-wrap gap-1.5">
|
||||
<button
|
||||
v-for="role in roles"
|
||||
:key="role.id"
|
||||
@click="toggleRoleFilter(role.id)"
|
||||
class="px-3 py-1.5 text-xs font-medium rounded-lg transition flex items-center gap-1.5"
|
||||
:class="filteredRoleIds.has(role.id)
|
||||
? role.rank >= 100
|
||||
? 'bg-purple-600/30 text-purple-300 border border-purple-500/30'
|
||||
: 'bg-indigo-600/30 text-indigo-300 border border-indigo-500/30'
|
||||
: 'bg-slate-700/60 text-slate-500 hover:bg-slate-700 hover:text-slate-300 border border-transparent'"
|
||||
>
|
||||
<!-- Check icon when selected -->
|
||||
<svg v-if="filteredRoleIds.has(role.id)" class="w-3 h-3" fill="none" stroke="currentColor" viewBox="0 0 24 24">
|
||||
<path stroke-linecap="round" stroke-linejoin="round" stroke-width="3" d="M5 13l4 4L19 7" />
|
||||
</svg>
|
||||
<span>{{ role.name }}</span>
|
||||
</button>
|
||||
</div>
|
||||
<h2 class="text-lg font-semibold text-white">{{ $t('permissions.superadmin') }}</h2>
|
||||
</div>
|
||||
<p class="text-sm text-slate-400 mb-4">{{ $t('permissions.superadmin_desc') }}</p>
|
||||
<div class="space-y-3">
|
||||
<div v-for="perm in superadminPerms" :key="perm.key" class="flex items-center justify-between py-2 border-b border-slate-700/50 last:border-0">
|
||||
<span class="text-sm text-slate-300">{{ $t(`permissions.perms.${perm.key}`) }}</span>
|
||||
<label class="relative inline-flex items-center cursor-pointer">
|
||||
<input type="checkbox" :checked="isPermEnabled('superadmin', perm.key)" class="sr-only peer"
|
||||
@change="handleToggle('superadmin', perm.key, $event)" />
|
||||
<div class="w-9 h-5 bg-slate-600 peer-focus:outline-none peer-focus:ring-2 peer-focus:ring-purple-500/50 rounded-full peer peer-checked:after:translate-x-full peer-checked:after:border-white after:content-[''] after:absolute after:top-[2px] after:left-[2px] after:bg-white after:border-slate-300 after:border after:rounded-full after:h-4 after:w-4 after:transition-all peer-checked:bg-purple-600"></div>
|
||||
</label>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- Garage Permissions -->
|
||||
<div class="bg-slate-800 rounded-xl border border-slate-700 p-6">
|
||||
<div class="flex items-center gap-3 mb-4">
|
||||
<div class="p-2 rounded-lg bg-cyan-500/10 text-cyan-400">
|
||||
<svg class="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
|
||||
<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M8.25 18.75a1.5 1.5 0 01-3 0m3 0a1.5 1.5 0 00-3 0m3 0h6m-9 0H3.375a1.125 1.125 0 01-1.125-1.125V14.25m17.25 4.5a1.5 1.5 0 01-3 0m3 0a1.5 1.5 0 00-3 0m3 0h1.125c.621 0 1.129-.504 1.09-1.124a17.902 17.902 0 00-3.213-9.193 2.056 2.056 0 00-1.58-.86H14.25M16.5 18.75h-2.25m0-11.177v-.958c0-.568-.422-1.048-.987-1.106a48.554 48.554 0 00-10.026 0 1.106 1.106 0 00-.987 1.106v7.635m12-6.677v6.677m0 4.5v-4.5m0 0h-12" />
|
||||
</svg>
|
||||
</div>
|
||||
<h2 class="text-lg font-semibold text-white">{{ $t('permissions.garages') }}</h2>
|
||||
</div>
|
||||
<p class="text-sm text-slate-400 mb-4">{{ $t('permissions.garages_desc') }}</p>
|
||||
<div class="space-y-3">
|
||||
<div v-for="perm in garagePerms" :key="perm.key" class="flex items-center justify-between py-2 border-b border-slate-700/50 last:border-0">
|
||||
<span class="text-sm text-slate-300">{{ $t(`permissions.perms.${perm.key}`) }}</span>
|
||||
<label class="relative inline-flex items-center cursor-pointer">
|
||||
<input type="checkbox" :checked="isPermEnabled('garage', perm.key)" class="sr-only peer"
|
||||
@change="handleToggle('garage', perm.key, $event)" />
|
||||
<div class="w-9 h-5 bg-slate-600 peer-focus:outline-none peer-focus:ring-2 peer-focus:ring-cyan-500/50 rounded-full peer peer-checked:after:translate-x-full peer-checked:after:border-white after:content-[''] after:absolute after:top-[2px] after:left-[2px] after:bg-white after:border-slate-300 after:border after:rounded-full after:h-4 after:w-4 after:transition-all peer-checked:bg-cyan-600"></div>
|
||||
</label>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- Package / Feature Flags -->
|
||||
<div class="bg-slate-800 rounded-xl border border-slate-700 p-6">
|
||||
<div class="flex items-center gap-3 mb-4">
|
||||
<div class="p-2 rounded-lg bg-amber-500/10 text-amber-400">
|
||||
<svg class="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
|
||||
<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M20.25 7.5l-.625 10.632a2.25 2.25 0 01-2.247 2.118H6.622a2.25 2.25 0 01-2.247-2.118L3.75 7.5m8.25 3v6.75m0 0l-3-3m3 3l3-3M3.375 7.5h17.25c.621 0 1.125-.504 1.125-1.125v-1.5c0-.621-.504-1.125-1.125-1.125H3.375c-.621 0-1.125.504-1.125 1.125v1.5c0 .621.504 1.125 1.125 1.125z" />
|
||||
</svg>
|
||||
</div>
|
||||
<h2 class="text-lg font-semibold text-white">{{ $t('permissions.feature_flags') }}</h2>
|
||||
</div>
|
||||
<p class="text-sm text-slate-400 mb-4">{{ $t('permissions.feature_flags_desc', { tier: featureFlags.tier || 'free' }) }}</p>
|
||||
<div class="space-y-3">
|
||||
<div v-for="[key, granted] in featureEntries" :key="key" class="flex items-center justify-between py-2 border-b border-slate-700/50 last:border-0">
|
||||
<div class="flex flex-col">
|
||||
<span class="text-sm text-slate-300">{{ formatFeatureLabel(key) }}</span>
|
||||
<span class="text-xs text-slate-500">{{ key }}</span>
|
||||
</div>
|
||||
<label class="relative inline-flex items-center cursor-pointer">
|
||||
<input type="checkbox" :checked="granted" class="sr-only peer"
|
||||
:disabled="true"
|
||||
@change="handleToggle('feature', key, $event)" />
|
||||
<div class="w-9 h-5 bg-slate-600 peer-focus:outline-none peer-focus:ring-2 peer-focus:ring-amber-500/50 rounded-full peer peer-checked:after:translate-x-full peer-checked:after:border-white after:content-[''] after:absolute after:top-[2px] after:left-[2px] after:bg-white after:border-slate-300 after:border after:rounded-full after:h-4 after:w-4 after:transition-all"
|
||||
:class="granted ? 'peer-checked:bg-amber-600' : ''"></div>
|
||||
</label>
|
||||
<!-- Quick toggle all -->
|
||||
<div class="mt-2 flex gap-2">
|
||||
<button @click="selectAllRoles" class="text-xs text-indigo-400 hover:text-indigo-300 transition">
|
||||
{{ $t('permissions.select_all') }}
|
||||
</button>
|
||||
<button @click="deselectAllRoles" class="text-xs text-slate-500 hover:text-slate-400 transition">
|
||||
{{ $t('permissions.deselect_all') }}
|
||||
</button>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- RBAC Permission Matrix -->
|
||||
<div class="bg-slate-800/50 border border-slate-700 rounded-xl p-6 mb-8">
|
||||
<h3 class="text-lg font-semibold text-white mb-4">{{ $t('permissions.rbac_title') }}</h3>
|
||||
<p class="text-sm text-slate-400 mb-6">{{ $t('permissions.rbac_desc') }}</p>
|
||||
|
||||
<div class="overflow-x-auto">
|
||||
<table class="w-full text-sm">
|
||||
<thead>
|
||||
<tr class="border-b border-slate-700">
|
||||
<th class="text-left py-3 px-4 text-slate-400 font-medium">{{ $t('permissions.action') }}</th>
|
||||
<th v-for="role in permissionMatrix" :key="role.role" class="text-center py-3 px-4 text-slate-400 font-medium">
|
||||
{{ role.role }}
|
||||
</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
<tr v-for="action in allActions" :key="action" class="border-b border-slate-700/50 hover:bg-slate-700/30">
|
||||
<td class="py-2.5 px-4 text-slate-300">{{ action }}</td>
|
||||
<td v-for="role in permissionMatrix" :key="role.role" class="text-center py-2.5 px-4">
|
||||
<span v-if="hasPermission(role, action)" class="inline-flex items-center justify-center w-6 h-6 rounded-full bg-emerald-400/10">
|
||||
<svg class="w-4 h-4 text-emerald-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
|
||||
<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M5 13l4 4L19 7" />
|
||||
</svg>
|
||||
</span>
|
||||
<span v-else class="inline-flex items-center justify-center w-6 h-6 rounded-full bg-slate-700">
|
||||
<svg class="w-4 h-4 text-slate-500" fill="none" stroke="currentColor" viewBox="0 0 24 24">
|
||||
<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M6 18L18 6M6 6l12 12" />
|
||||
</svg>
|
||||
</span>
|
||||
</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- Save Button (bottom) -->
|
||||
<div v-if="hasModifications" class="flex items-center gap-3 pb-8">
|
||||
<!-- ── STICKY SAVE BUTTON ── -->
|
||||
<div v-if="hasModifications" class="sticky top-0 z-20 -mx-4 px-4 py-3 bg-slate-800/95 backdrop-blur-sm border-b border-slate-700 mb-4 flex items-center gap-3 rounded-t-xl">
|
||||
<button @click="savePermissions"
|
||||
class="px-6 py-2.5 bg-emerald-600 hover:bg-emerald-500 text-white font-semibold rounded-lg shadow-lg shadow-emerald-600/20 transition-all hover:scale-[1.02] active:scale-[0.98] flex items-center gap-2">
|
||||
<svg class="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
|
||||
@@ -198,6 +114,146 @@
|
||||
class="px-4 py-2.5 bg-slate-700 hover:bg-slate-600 text-slate-300 font-medium rounded-lg transition">
|
||||
{{ $t('permissions.discard') }}
|
||||
</button>
|
||||
<span class="text-sm text-slate-400 ml-auto">
|
||||
{{ $t('permissions.modified_count', { count: modifiedRoles.size }) }}
|
||||
</span>
|
||||
</div>
|
||||
|
||||
<!-- ── 2D PERMISSION MATRIX TABLE ── -->
|
||||
<div class="overflow-x-auto rounded-xl border border-slate-700 bg-slate-800/40">
|
||||
<table class="w-full text-sm">
|
||||
<!-- Table Header: Roles as Columns -->
|
||||
<thead>
|
||||
<tr class="border-b border-slate-700">
|
||||
<!-- Top-left blank cell -->
|
||||
<th class="sticky left-0 z-10 bg-slate-800/95 min-w-[200px] p-3 text-left">
|
||||
<div class="flex items-center gap-2">
|
||||
<svg class="w-4 h-4 text-slate-500" fill="none" stroke="currentColor" viewBox="0 0 24 24">
|
||||
<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 12h6m-6 4h6m2 5H7a2 2 0 01-2-2V5a2 2 0 012-2h5.586a1 1 0 01.707.293l5.414 5.414a1 1 0 01.293.707V19a2 2 0 01-2 2z" />
|
||||
</svg>
|
||||
<span class="text-xs font-semibold uppercase tracking-wider text-slate-400">
|
||||
{{ $t('permissions.permission') }}
|
||||
</span>
|
||||
</div>
|
||||
</th>
|
||||
<!-- Role columns -->
|
||||
<th
|
||||
v-for="role in filteredRoles"
|
||||
:key="role.id"
|
||||
class="min-w-[120px] p-3 text-center border-l border-slate-700"
|
||||
:class="role.rank >= 100 ? 'bg-purple-900/10' : ''"
|
||||
>
|
||||
<div class="flex flex-col items-center gap-1">
|
||||
<span
|
||||
class="text-xs font-semibold px-2 py-0.5 rounded-full"
|
||||
:class="roleHeaderClass(role)"
|
||||
>
|
||||
{{ role.name }}
|
||||
</span>
|
||||
<span class="text-[10px] text-slate-500">Rank {{ role.rank }}</span>
|
||||
<span v-if="role.is_system" class="text-[10px] text-indigo-400">system</span>
|
||||
</div>
|
||||
</th>
|
||||
</tr>
|
||||
</thead>
|
||||
|
||||
<!-- Table Body: Permissions as Rows -->
|
||||
<tbody>
|
||||
<!-- Domain group separator -->
|
||||
<template v-for="domain in filteredDomains" :key="domain">
|
||||
<!-- Domain header row -->
|
||||
<tr class="border-b border-slate-700/50">
|
||||
<td
|
||||
colspan="1"
|
||||
class="sticky left-0 z-10 bg-slate-800/95 px-3 py-2 text-xs font-bold uppercase tracking-wider"
|
||||
:class="domainColorClass(domain)"
|
||||
>
|
||||
<div class="flex items-center gap-2">
|
||||
<span>{{ domain }}</span>
|
||||
<span class="text-[10px] text-slate-500 font-normal normal-case">
|
||||
({{ getDomainPermissions(domain).length }})
|
||||
</span>
|
||||
</div>
|
||||
</td>
|
||||
<!-- Fill remaining columns with the same background -->
|
||||
<td
|
||||
v-for="role in filteredRoles"
|
||||
:key="'hdr-' + role.id"
|
||||
class="border-l border-slate-700/50 bg-slate-800/60 px-3 py-2"
|
||||
></td>
|
||||
</tr>
|
||||
|
||||
<!-- Permission rows for this domain -->
|
||||
<tr
|
||||
v-for="perm in getDomainPermissions(domain)"
|
||||
:key="perm.id"
|
||||
class="border-b border-slate-700/30 hover:bg-slate-700/20 transition"
|
||||
>
|
||||
<!-- Permission label (sticky left column) -->
|
||||
<td class="sticky left-0 z-10 bg-slate-800/95 p-3 border-r border-slate-700/50">
|
||||
<div class="flex flex-col min-w-0 max-w-[200px]">
|
||||
<span class="text-sm text-slate-200 truncate font-medium">{{ formatPermissionLabel(perm) }}</span>
|
||||
<span class="text-xs text-slate-500 truncate font-mono">{{ perm.code }}</span>
|
||||
<span v-if="perm.description" class="text-[11px] text-slate-500 truncate mt-0.5">{{ perm.description }}</span>
|
||||
</div>
|
||||
</td>
|
||||
|
||||
<!-- Checkbox cells for each role -->
|
||||
<td
|
||||
v-for="role in filteredRoles"
|
||||
:key="'cell-' + role.id + '-' + perm.id"
|
||||
class="p-3 text-center border-l border-slate-700/30"
|
||||
:class="getCellClass(role, perm)"
|
||||
>
|
||||
<label
|
||||
class="relative inline-flex items-center justify-center"
|
||||
:class="isRoleLocked(role)
|
||||
? 'cursor-not-allowed'
|
||||
: 'cursor-pointer'"
|
||||
>
|
||||
<input
|
||||
type="checkbox"
|
||||
:checked="isPermEnabled(role.id, perm.id)"
|
||||
class="sr-only peer"
|
||||
:disabled="isRoleLocked(role)"
|
||||
@change="handleToggle(role.id, perm.id, $event)"
|
||||
/>
|
||||
<!-- Toggle track -->
|
||||
<div
|
||||
class="w-9 h-5 rounded-full transition-all duration-200 after:content-[''] after:absolute after:top-[2px] after:left-[2px] after:bg-white after:border-slate-300 after:border after:rounded-full after:h-4 after:w-4 after:transition-all after:duration-200"
|
||||
:class="getToggleClass(role, perm)"
|
||||
></div>
|
||||
</label>
|
||||
</td>
|
||||
</tr>
|
||||
</template>
|
||||
|
||||
<!-- Empty state -->
|
||||
<tr v-if="filteredPermissions.length === 0">
|
||||
<td :colspan="filteredRoles.length + 1" class="p-8 text-center text-slate-500 text-sm">
|
||||
{{ $t('permissions.no_permissions') }}
|
||||
</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
|
||||
<!-- Bottom Save Button -->
|
||||
<div v-if="hasModifications" class="mt-6 flex items-center gap-3 pb-8">
|
||||
<button @click="savePermissions"
|
||||
class="px-6 py-2.5 bg-emerald-600 hover:bg-emerald-500 text-white font-semibold rounded-lg shadow-lg shadow-emerald-600/20 transition-all hover:scale-[1.02] active:scale-[0.98] flex items-center gap-2">
|
||||
<svg class="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
|
||||
<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M8 7H5a2 2 0 00-2 2v9a2 2 0 002 2h14a2 2 0 002-2V9a2 2 0 00-2-2h-3m-1 4l-3 3m0 0l-3-3m3 3V4" />
|
||||
</svg>
|
||||
{{ $t('permissions.save_changes') }}
|
||||
</button>
|
||||
<button @click="discardChanges"
|
||||
class="px-4 py-2.5 bg-slate-700 hover:bg-slate-600 text-slate-300 font-medium rounded-lg transition">
|
||||
{{ $t('permissions.discard') }}
|
||||
</button>
|
||||
<span class="text-sm text-slate-400">
|
||||
{{ $t('permissions.modified_count', { count: modifiedRoles.size }) }}
|
||||
</span>
|
||||
</div>
|
||||
</template>
|
||||
</div>
|
||||
@@ -210,143 +266,237 @@ definePageMeta({
|
||||
middleware: 'auth',
|
||||
})
|
||||
|
||||
// ── Types ──────────────────────────────────────────────────────────
|
||||
|
||||
interface SystemRole {
|
||||
id: number
|
||||
name: string
|
||||
description: string | null
|
||||
rank: number
|
||||
is_system: boolean
|
||||
is_active: boolean
|
||||
permission_ids: number[]
|
||||
}
|
||||
|
||||
interface SystemPermission {
|
||||
id: number
|
||||
code: string
|
||||
domain: string
|
||||
action: string
|
||||
description: string | null
|
||||
is_system: boolean
|
||||
}
|
||||
|
||||
interface DomainOption {
|
||||
value: string
|
||||
label: string
|
||||
}
|
||||
|
||||
// ── State ──────────────────────────────────────────────────────────
|
||||
|
||||
const loading = ref(true)
|
||||
const error = ref<string | null>(null)
|
||||
|
||||
interface FeatureFlagsResponse {
|
||||
tier: string
|
||||
features: Record<string, boolean>
|
||||
expires_at: string | null
|
||||
}
|
||||
const roles = ref<SystemRole[]>([])
|
||||
const permissions = ref<SystemPermission[]>([])
|
||||
|
||||
interface PermissionMatrixEntry {
|
||||
role: string
|
||||
actions: string[]
|
||||
}
|
||||
// ── Filter State ───────────────────────────────────────────────────
|
||||
|
||||
interface PermissionMatrixResponse {
|
||||
matrix: PermissionMatrixEntry[]
|
||||
all_actions: string[]
|
||||
}
|
||||
const activeDomain = ref<string>('__all__')
|
||||
const filteredRoleIds = ref<Set<number>>(new Set())
|
||||
|
||||
const featureFlags = ref<FeatureFlagsResponse>({
|
||||
tier: 'free',
|
||||
features: {},
|
||||
expires_at: null,
|
||||
})
|
||||
// ── Editing State ──────────────────────────────────────────────────
|
||||
|
||||
const permissionMatrix = ref<PermissionMatrixEntry[]>([])
|
||||
const allActions = ref<string[]>([])
|
||||
|
||||
// ── Editing State ───────────────────────────────────────────────────
|
||||
|
||||
// Track modified permissions: key = "group:permKey", value = boolean
|
||||
const modifiedPermissions = ref<Map<string, boolean>>(new Map())
|
||||
|
||||
// Track original values for discard: key = "group:permKey", value = boolean
|
||||
const originalPermissions = ref<Map<string, boolean>>(new Map())
|
||||
|
||||
// Save notification
|
||||
const modifiedRoles = ref<Map<number, Set<number>>>(new Map())
|
||||
const originalPermissions = ref<Map<number, number[]>>(new Map())
|
||||
const saveNotification = ref<{ type: 'success' | 'error'; message: string } | null>(null)
|
||||
|
||||
// ── Computed ───────────────────────────────────────────────────────
|
||||
// ── Computed: Domain Options ───────────────────────────────────────
|
||||
|
||||
const featureEntries = computed(() => {
|
||||
return Object.entries(featureFlags.value.features || {})
|
||||
const domainOptions = computed<DomainOption[]>(() => {
|
||||
const domains = new Set(permissions.value.map(p => p.domain))
|
||||
const options: DomainOption[] = [
|
||||
{ value: '__all__', label: $t('permissions.all_domains') },
|
||||
]
|
||||
for (const domain of Array.from(domains).sort()) {
|
||||
options.push({ value: domain, label: domain.charAt(0).toUpperCase() + domain.slice(1) })
|
||||
}
|
||||
return options
|
||||
})
|
||||
|
||||
// ── Computed: Filtered Domains (for table section headers) ─────────
|
||||
|
||||
const filteredDomains = computed<string[]>(() => {
|
||||
const domains = new Set(permissions.value.map(p => p.domain))
|
||||
const sorted = Array.from(domains).sort()
|
||||
if (activeDomain.value === '__all__') return sorted
|
||||
return sorted.filter(d => d === activeDomain.value)
|
||||
})
|
||||
|
||||
// ── Computed: Filtered Permissions ─────────────────────────────────
|
||||
|
||||
const filteredPermissions = computed<SystemPermission[]>(() => {
|
||||
if (activeDomain.value === '__all__') return permissions.value
|
||||
return permissions.value.filter(p => p.domain === activeDomain.value)
|
||||
})
|
||||
|
||||
// ── Computed: Filtered Roles ───────────────────────────────────────
|
||||
|
||||
const filteredRoles = computed<SystemRole[]>(() => {
|
||||
if (filteredRoleIds.value.size === 0) return roles.value
|
||||
return roles.value.filter(r => filteredRoleIds.value.has(r.id))
|
||||
})
|
||||
|
||||
// ── Computed: Has Modifications ────────────────────────────────────
|
||||
|
||||
const hasModifications = computed(() => {
|
||||
return modifiedPermissions.value.size > 0
|
||||
return modifiedRoles.value.size > 0
|
||||
})
|
||||
|
||||
const tierBadgeClass = computed(() => {
|
||||
const tier = featureFlags.value.tier
|
||||
if (tier === 'enterprise') return 'bg-purple-500/20 text-purple-300'
|
||||
if (tier === 'premium') return 'bg-amber-500/20 text-amber-300'
|
||||
return 'bg-slate-500/20 text-slate-300'
|
||||
})
|
||||
// ── Methods: Filter Helpers ────────────────────────────────────────
|
||||
|
||||
// Static permission definitions for the UI cards
|
||||
const superadminPerms = [
|
||||
{ key: 'user_mgmt', label: 'User Management', enabled: true },
|
||||
{ key: 'billing_admin', label: 'Billing Administration', enabled: true },
|
||||
{ key: 'robot_config', label: 'Robot Configuration', enabled: true },
|
||||
{ key: 'system_logs', label: 'System Logs Access', enabled: true },
|
||||
{ key: 'api_keys', label: 'API Key Management', enabled: false },
|
||||
]
|
||||
|
||||
const garagePerms = [
|
||||
{ key: 'vehicle_crud', label: 'Vehicle CRUD', enabled: true },
|
||||
{ key: 'service_booking', label: 'Service Booking', enabled: true },
|
||||
{ key: 'customer_view', label: 'Customer Data View', enabled: true },
|
||||
{ key: 'report_export', label: 'Report Export', enabled: false },
|
||||
{ key: 'bulk_import', label: 'Bulk Import', enabled: false },
|
||||
]
|
||||
|
||||
// ── Methods ────────────────────────────────────────────────────────
|
||||
|
||||
/**
|
||||
* Check if a permission is currently enabled (considering modifications).
|
||||
*/
|
||||
function isPermEnabled(group: string, key: string): boolean {
|
||||
const mapKey = `${group}:${key}`
|
||||
// If modified, return the modified value
|
||||
if (modifiedPermissions.value.has(mapKey)) {
|
||||
return modifiedPermissions.value.get(mapKey)!
|
||||
function toggleRoleFilter(roleId: number) {
|
||||
const newSet = new Set(filteredRoleIds.value)
|
||||
if (newSet.has(roleId)) {
|
||||
newSet.delete(roleId)
|
||||
} else {
|
||||
newSet.add(roleId)
|
||||
}
|
||||
// Otherwise return the default
|
||||
const perms = group === 'superadmin' ? superadminPerms : garagePerms
|
||||
const perm = perms.find(p => p.key === key)
|
||||
return perm ? perm.enabled : false
|
||||
filteredRoleIds.value = newSet
|
||||
}
|
||||
|
||||
function formatFeatureLabel(key: string): string {
|
||||
return key
|
||||
.replace(/^cost_category:/, '')
|
||||
.replace(/_/g, ' ')
|
||||
function selectAllRoles() {
|
||||
filteredRoleIds.value = new Set(roles.value.map(r => r.id))
|
||||
}
|
||||
|
||||
function deselectAllRoles() {
|
||||
filteredRoleIds.value = new Set()
|
||||
}
|
||||
|
||||
// ── Methods: UI Helpers ────────────────────────────────────────────
|
||||
|
||||
function roleHeaderClass(role: SystemRole): string {
|
||||
if (role.rank >= 100) return 'bg-purple-500/20 text-purple-300'
|
||||
if (role.rank >= 80) return 'bg-indigo-500/20 text-indigo-300'
|
||||
if (role.rank >= 50) return 'bg-cyan-500/20 text-cyan-300'
|
||||
return 'bg-slate-500/20 text-slate-300'
|
||||
}
|
||||
|
||||
function domainColorClass(domain: string): string {
|
||||
const colorMap: Record<string, string> = {
|
||||
fleet: 'text-emerald-400',
|
||||
user: 'text-sky-400',
|
||||
finance: 'text-amber-400',
|
||||
permissions: 'text-purple-400',
|
||||
system: 'text-rose-400',
|
||||
service: 'text-teal-400',
|
||||
organization: 'text-orange-400',
|
||||
vehicle: 'text-cyan-400',
|
||||
subscription: 'text-pink-400',
|
||||
moderation: 'text-violet-400',
|
||||
}
|
||||
return colorMap[domain] || 'text-slate-400'
|
||||
}
|
||||
|
||||
function getCellClass(role: SystemRole, perm: SystemPermission): string {
|
||||
if (isRoleLocked(role)) {
|
||||
return isPermEnabled(role.id, perm.id) ? 'bg-purple-900/10' : 'bg-purple-900/5'
|
||||
}
|
||||
if (isPermEnabled(role.id, perm.id)) return 'bg-emerald-900/10'
|
||||
return ''
|
||||
}
|
||||
|
||||
function formatPermissionLabel(perm: SystemPermission): string {
|
||||
return perm.code
|
||||
.replace(/:/g, ' ')
|
||||
.replace(/\b\w/g, (c) => c.toUpperCase())
|
||||
}
|
||||
|
||||
function formatDate(dateStr: string): string {
|
||||
try {
|
||||
const d = new Date(dateStr)
|
||||
return d.toLocaleDateString('en-GB', { day: 'numeric', month: 'short', year: 'numeric' })
|
||||
} catch {
|
||||
return dateStr
|
||||
function getToggleClass(role: SystemRole, perm: SystemPermission): string {
|
||||
const enabled = isPermEnabled(role.id, perm.id)
|
||||
const locked = isRoleLocked(role)
|
||||
|
||||
// Base classes: circle position
|
||||
const baseClasses = 'peer-focus:outline-none peer-focus:ring-2'
|
||||
|
||||
if (locked) {
|
||||
// SUPERADMIN: show ON (green) when enabled, OFF (gray) when disabled — but always unclickable
|
||||
if (enabled) {
|
||||
return `${baseClasses} bg-emerald-600 peer-focus:ring-emerald-500/50 after:translate-x-full after:border-white`
|
||||
}
|
||||
return `${baseClasses} bg-slate-600`
|
||||
}
|
||||
|
||||
// Interactive toggles: use peer-checked for dynamic behavior
|
||||
if (enabled) {
|
||||
return `${baseClasses} bg-emerald-600 peer-focus:ring-emerald-500/50 peer-checked:after:translate-x-full peer-checked:after:border-white`
|
||||
}
|
||||
return `${baseClasses} bg-slate-600 peer-focus:ring-indigo-500/50 peer-checked:after:translate-x-full peer-checked:after:border-white peer-checked:bg-indigo-600`
|
||||
}
|
||||
|
||||
function hasPermission(role: PermissionMatrixEntry, action: string): boolean {
|
||||
return role.actions.includes(action)
|
||||
function getDomainPermissions(domain: string): SystemPermission[] {
|
||||
return filteredPermissions.value.filter(p => p.domain === domain)
|
||||
}
|
||||
|
||||
function handleToggle(group: string, key: string, event: Event) {
|
||||
// ── Methods: Permission Toggle Logic ───────────────────────────────
|
||||
|
||||
function isPermEnabled(roleId: number, permissionId: number): boolean {
|
||||
if (modifiedRoles.value.has(roleId)) {
|
||||
const rolePerms = modifiedRoles.value.get(roleId)!
|
||||
return rolePerms.has(permissionId)
|
||||
}
|
||||
const role = roles.value.find(r => r.id === roleId)
|
||||
return role ? role.permission_ids.includes(permissionId) : false
|
||||
}
|
||||
|
||||
function isRoleLocked(role: SystemRole): boolean {
|
||||
return role.is_system && role.rank >= 100
|
||||
}
|
||||
|
||||
function handleToggle(roleId: number, permissionId: number, event: Event) {
|
||||
const target = event.target as HTMLInputElement
|
||||
const newValue = target.checked
|
||||
const mapKey = `${group}:${key}`
|
||||
|
||||
// Store original value if not already tracked
|
||||
if (!originalPermissions.value.has(mapKey)) {
|
||||
const perms = group === 'superadmin' ? superadminPerms : garagePerms
|
||||
const perm = perms.find(p => p.key === key)
|
||||
originalPermissions.value.set(mapKey, perm ? perm.enabled : false)
|
||||
if (!originalPermissions.value.has(roleId)) {
|
||||
const role = roles.value.find(r => r.id === roleId)
|
||||
if (role) {
|
||||
originalPermissions.value.set(roleId, [...role.permission_ids])
|
||||
}
|
||||
}
|
||||
|
||||
// Update modified state
|
||||
const originalValue = originalPermissions.value.get(mapKey)
|
||||
if (newValue === originalValue) {
|
||||
// Reverted to original — remove from modified
|
||||
modifiedPermissions.value.delete(mapKey)
|
||||
let rolePerms = modifiedRoles.value.get(roleId)
|
||||
if (!rolePerms) {
|
||||
const original = originalPermissions.value.get(roleId) || []
|
||||
rolePerms = new Set(original)
|
||||
} else {
|
||||
modifiedPermissions.value.set(mapKey, newValue)
|
||||
rolePerms = new Set(rolePerms)
|
||||
}
|
||||
|
||||
// Force reactivity by replacing the Map
|
||||
modifiedPermissions.value = new Map(modifiedPermissions.value)
|
||||
if (newValue) {
|
||||
rolePerms.add(permissionId)
|
||||
} else {
|
||||
rolePerms.delete(permissionId)
|
||||
}
|
||||
|
||||
console.log(`[Permissions] Toggle: group=${group}, key=${key}, newValue=${newValue}`)
|
||||
const original = originalPermissions.value.get(roleId) || []
|
||||
const originalSet = new Set(original)
|
||||
|
||||
if (setsEqual(rolePerms, originalSet)) {
|
||||
modifiedRoles.value.delete(roleId)
|
||||
originalPermissions.value.delete(roleId)
|
||||
} else {
|
||||
modifiedRoles.value.set(roleId, rolePerms)
|
||||
}
|
||||
|
||||
modifiedRoles.value = new Map(modifiedRoles.value)
|
||||
}
|
||||
|
||||
function setsEqual(a: Set<number>, b: Set<number>): boolean {
|
||||
if (a.size !== b.size) return false
|
||||
for (const item of a) {
|
||||
if (!b.has(item)) return false
|
||||
}
|
||||
return true
|
||||
}
|
||||
|
||||
function clearSaveNotification() {
|
||||
@@ -355,6 +505,8 @@ function clearSaveNotification() {
|
||||
}, 5000)
|
||||
}
|
||||
|
||||
// ── Methods: Save / Discard ────────────────────────────────────────
|
||||
|
||||
async function savePermissions() {
|
||||
saveNotification.value = null
|
||||
|
||||
@@ -367,113 +519,116 @@ async function savePermissions() {
|
||||
return
|
||||
}
|
||||
|
||||
// Build payload: array of { action, granted }
|
||||
const payload: { action: string; granted: boolean }[] = []
|
||||
modifiedPermissions.value.forEach((granted, mapKey) => {
|
||||
// mapKey format: "superadmin:user_mgmt" or "garage:vehicle_crud"
|
||||
const action = mapKey.replace(/^(superadmin|garage):/, '').toUpperCase()
|
||||
payload.push({ action, granted })
|
||||
})
|
||||
|
||||
if (payload.length === 0) {
|
||||
if (modifiedRoles.value.size === 0) {
|
||||
saveNotification.value = { type: 'error', message: 'No changes to save' }
|
||||
clearSaveNotification()
|
||||
return
|
||||
}
|
||||
|
||||
// Send PATCH to the backend for each modified permission
|
||||
// We use the admin permissions override endpoint
|
||||
const updates: { roleId: number; permissionIds: number[] }[] = []
|
||||
modifiedRoles.value.forEach((permSet, roleId) => {
|
||||
updates.push({
|
||||
roleId,
|
||||
permissionIds: Array.from(permSet).sort((a, b) => a - b),
|
||||
})
|
||||
})
|
||||
|
||||
const results = await Promise.allSettled(
|
||||
payload.map(item =>
|
||||
$fetch('/api/v1/admin/permissions/override/0', {
|
||||
method: 'PATCH',
|
||||
updates.map(update =>
|
||||
$fetch(`/api/v1/admin/permissions/roles/${update.roleId}/permissions`, {
|
||||
method: 'PUT',
|
||||
headers: {
|
||||
Authorization: `Bearer ${token}`,
|
||||
'Content-Type': 'application/json',
|
||||
},
|
||||
body: {
|
||||
action: item.action,
|
||||
granted: item.granted,
|
||||
permission_ids: update.permissionIds,
|
||||
},
|
||||
})
|
||||
)
|
||||
)
|
||||
|
||||
// Check for failures
|
||||
const failures = results.filter(r => r.status === 'rejected')
|
||||
if (failures.length > 0) {
|
||||
const errors = failures.map(f => (f as PromiseRejectedResult).reason?.message || 'Unknown error')
|
||||
const errors = failures.map(f => {
|
||||
const reason = (f as PromiseRejectedResult).reason
|
||||
return reason?.data?.detail || reason?.message || 'Unknown error'
|
||||
})
|
||||
saveNotification.value = {
|
||||
type: 'error',
|
||||
message: `Failed to save ${failures.length} permission(s): ${errors.join('; ')}`,
|
||||
message: `Failed to save ${failures.length} role(s): ${errors.join('; ')}`,
|
||||
}
|
||||
clearSaveNotification()
|
||||
return
|
||||
}
|
||||
|
||||
// Success — clear modified state
|
||||
modifiedPermissions.value = new Map()
|
||||
for (const update of updates) {
|
||||
const role = roles.value.find(r => r.id === update.roleId)
|
||||
if (role) {
|
||||
role.permission_ids = update.permissionIds
|
||||
}
|
||||
}
|
||||
|
||||
modifiedRoles.value = new Map()
|
||||
originalPermissions.value = new Map()
|
||||
saveNotification.value = {
|
||||
type: 'success',
|
||||
message: `Successfully saved ${payload.length} permission change(s).`,
|
||||
message: `Successfully saved permissions for ${updates.length} role(s).`,
|
||||
}
|
||||
clearSaveNotification()
|
||||
|
||||
console.log('[Permissions] Save successful:', payload)
|
||||
} catch (err: any) {
|
||||
console.error('[Permissions] Save failed:', err)
|
||||
saveNotification.value = {
|
||||
type: 'error',
|
||||
message: err?.message || 'Failed to save permissions',
|
||||
message: err?.data?.detail || err?.message || 'Failed to save permissions',
|
||||
}
|
||||
clearSaveNotification()
|
||||
}
|
||||
}
|
||||
|
||||
function discardChanges() {
|
||||
modifiedPermissions.value = new Map()
|
||||
modifiedRoles.value = new Map()
|
||||
originalPermissions.value = new Map()
|
||||
saveNotification.value = null
|
||||
}
|
||||
|
||||
async function fetchFeatureFlags() {
|
||||
// ── Data Fetching ──────────────────────────────────────────────────
|
||||
|
||||
async function fetchRoles() {
|
||||
try {
|
||||
const tokenCookie = useCookie('access_token')
|
||||
const token = tokenCookie.value
|
||||
if (!token) {
|
||||
console.warn('[Permissions] No access token found for feature flags')
|
||||
console.warn('[Permissions] No access token found for roles')
|
||||
return
|
||||
}
|
||||
|
||||
const data = await $fetch<FeatureFlagsResponse>('/api/v1/subscriptions/feature-flags', {
|
||||
const data = await $fetch<SystemRole[]>('/api/v1/admin/permissions/roles', {
|
||||
headers: { Authorization: `Bearer ${token}` },
|
||||
})
|
||||
console.log('[Permissions] Feature flags loaded:', data)
|
||||
featureFlags.value = data
|
||||
roles.value = data
|
||||
} catch (err: any) {
|
||||
console.error('[Permissions] Feature flags fetch failed:', err?.message || err)
|
||||
// Keep default values
|
||||
console.error('[Permissions] Roles fetch failed:', err?.message || err)
|
||||
throw err
|
||||
}
|
||||
}
|
||||
|
||||
async function fetchPermissionMatrix() {
|
||||
async function fetchPermissions() {
|
||||
try {
|
||||
const tokenCookie = useCookie('access_token')
|
||||
const token = tokenCookie.value
|
||||
if (!token) {
|
||||
console.warn('[Permissions] No access token found for permission matrix')
|
||||
console.warn('[Permissions] No access token found for permissions')
|
||||
return
|
||||
}
|
||||
|
||||
const data = await $fetch<PermissionMatrixResponse>('/api/v1/admin/permissions/matrix', {
|
||||
const data = await $fetch<SystemPermission[]>('/api/v1/admin/permissions', {
|
||||
headers: { Authorization: `Bearer ${token}` },
|
||||
})
|
||||
console.log('[Permissions] Permission matrix loaded:', data)
|
||||
permissionMatrix.value = data.matrix
|
||||
allActions.value = data.all_actions
|
||||
permissions.value = data
|
||||
} catch (err: any) {
|
||||
console.error('[Permissions] Permission matrix fetch failed:', err?.message || err)
|
||||
console.error('[Permissions] Permissions fetch failed:', err?.message || err)
|
||||
throw err
|
||||
}
|
||||
}
|
||||
|
||||
@@ -481,10 +636,12 @@ async function fetchAll() {
|
||||
loading.value = true
|
||||
error.value = null
|
||||
try {
|
||||
await Promise.all([fetchFeatureFlags(), fetchPermissionMatrix()])
|
||||
await Promise.all([fetchRoles(), fetchPermissions()])
|
||||
// Initialize: show all roles by default
|
||||
filteredRoleIds.value = new Set(roles.value.map(r => r.id))
|
||||
} catch (err: any) {
|
||||
console.error('[Permissions] fetchAll failed:', err?.message || err)
|
||||
error.value = err?.message || 'Failed to load permissions data'
|
||||
error.value = err?.data?.detail || err?.message || 'Failed to load permissions data'
|
||||
} finally {
|
||||
loading.value = false
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user