Skip to content

[Workspace Roles] Release 1: Auditor role — navigation guards and core workspace pages #90497

Description

@flodnv

Part of the Workspace Roles project. Depends on Release 0 frontend.

Goal: Allow Auditor members to navigate the workspace settings in read-only mode. Gate every core workspace page — Overview, Members, and Settings — so that write actions are hidden or disabled for Auditors, while the page itself remains accessible.

Overview page (src/pages/workspace/WorkspaceOverviewPage.tsx)

  • Check hasPolicyPermission(policy, login, FEATURE.OVERVIEW, FEATURE_ACCESS.WRITE)
  • Show the page to anyone with at least read access
  • Hide the edit icon / save button for users without write access

Members page (src/pages/workspace/WorkspaceMembersPage.tsx)

  • Check hasPolicyPermission(policy, login, FEATURE.MEMBERS, FEATURE_ACCESS.READ) to allow entry
  • Disable "Invite member", "Remove", and role-change controls for Auditors (no FEATURE.MEMBERS write access)
  • Auditor sees the list but cannot mutate it

Profile / Settings pages

  • Remaining workspace-settings pages (currency, description, categories, etc.) that are currently admin-only: confirm they are blocked from Auditor access via hasPolicyPermission(..., FEATURE_ACCESS.WRITE) checks and redirect/hide appropriately
Issue OwnerCurrent Issue Owner: @Pujan92

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Labels

Type

No type

Projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions