704 lines
28 KiB
TypeScript
704 lines
28 KiB
TypeScript
import { useEffect, useMemo, useState } from "react";
|
|
import type { ApiSettings, AuthInfo, CampaignListItem } from "../../../types";
|
|
import {
|
|
ArrowRightLeft,
|
|
Check,
|
|
KeyRound,
|
|
Trash2,
|
|
XCircle
|
|
} from "lucide-react";
|
|
import {
|
|
fetchResourceAccessExplanation,
|
|
getCampaignShares,
|
|
campaignShareTargetProvider,
|
|
revokeCampaignShare,
|
|
upsertCampaignShare,
|
|
type CampaignShare,
|
|
type ResourceAccessExplanationResponse } from
|
|
"../../../api/campaigns";
|
|
import {
|
|
Button,
|
|
decideOwnershipTransfer,
|
|
listOwnershipTransfers,
|
|
ReferenceSelect,
|
|
ResourceAccessExplanation,
|
|
requestResourceOwnership,
|
|
startOwnershipTransfer,
|
|
type OwnershipTransfer,
|
|
type ReferenceOption,
|
|
type ReferenceOptionProvider
|
|
} from "@govoplan/core-webui";
|
|
import { Card } from "@govoplan/core-webui";
|
|
import { ConfirmDialog } from "@govoplan/core-webui";
|
|
import { DataGrid, type DataGridColumn } from "@govoplan/core-webui";
|
|
import { Dialog } from "@govoplan/core-webui";
|
|
import { FormField } from "@govoplan/core-webui";
|
|
import { StatusBadge, TableActionGroup, hasScope, i18nMessage, useUnsavedDraftGuard } from "@govoplan/core-webui";
|
|
type TargetType = "user" | "group";
|
|
|
|
export default function CampaignAccessCard({
|
|
settings,
|
|
auth,
|
|
campaign,
|
|
onChanged,
|
|
onError
|
|
|
|
|
|
|
|
|
|
|
|
}: {settings: ApiSettings;auth: AuthInfo;campaign: CampaignListItem;onChanged: () => Promise<void>;onError: (message: string) => void;}) {
|
|
const [available, setAvailable] = useState<boolean | null>(null);
|
|
const [targets, setTargets] = useState<{
|
|
users: readonly ReferenceOption[];
|
|
groups: readonly ReferenceOption[];
|
|
}>({ users: [], groups: [] });
|
|
const [shares, setShares] = useState<CampaignShare[]>([]);
|
|
const [ownerOpen, setOwnerOpen] = useState(false);
|
|
const [requestOpen, setRequestOpen] = useState(false);
|
|
const [shareOpen, setShareOpen] = useState(false);
|
|
const [revokeTarget, setRevokeTarget] = useState<CampaignShare | null>(null);
|
|
const [ownerType, setOwnerType] = useState<TargetType>(campaign.owner_group_id ? "group" : "user");
|
|
const [ownerId, setOwnerId] = useState(campaign.owner_group_id || campaign.owner_user_id || "");
|
|
const [ownerReason, setOwnerReason] = useState("");
|
|
const [ownerExpiryDays, setOwnerExpiryDays] = useState(7);
|
|
const [ownerRequestKey, setOwnerRequestKey] = useState("");
|
|
const [requestTargetType, setRequestTargetType] = useState<TargetType>("user");
|
|
const [requestGroupId, setRequestGroupId] = useState("");
|
|
const [requestReason, setRequestReason] = useState("");
|
|
const [requestKey, setRequestKey] = useState("");
|
|
const [shareType, setShareType] = useState<TargetType>("user");
|
|
const [shareTargetId, setShareTargetId] = useState("");
|
|
const [sharePermission, setSharePermission] = useState<"read" | "write">("read");
|
|
const [accessExplanationOpen, setAccessExplanationOpen] = useState(false);
|
|
const [accessExplanation, setAccessExplanation] = useState<ResourceAccessExplanationResponse | null>(null);
|
|
const [accessExplanationLoading, setAccessExplanationLoading] = useState(false);
|
|
const [ownershipTransfers, setOwnershipTransfers] = useState<OwnershipTransfer[]>([]);
|
|
const [busy, setBusy] = useState(false);
|
|
const currentOwnerType: TargetType = campaign.owner_group_id ? "group" : "user";
|
|
const currentOwnerId = campaign.owner_group_id || campaign.owner_user_id || "";
|
|
const actorId = auth.principal?.membership_id || auth.user.id;
|
|
const actorGroupIds = new Set(
|
|
auth.principal?.group_ids ?? auth.groups.map((group) => group.id)
|
|
);
|
|
const actorIsCurrentOwner = (
|
|
currentOwnerType === "user"
|
|
? currentOwnerId === actorId
|
|
: actorGroupIds.has(currentOwnerId)
|
|
);
|
|
const canProposeOwnership = actorIsCurrentOwner && hasScope(
|
|
auth,
|
|
"campaigns:campaign:share"
|
|
);
|
|
const canRequestOwnership = !actorIsCurrentOwner && hasScope(
|
|
auth,
|
|
"campaigns:campaign:read"
|
|
);
|
|
const ownerDirty = ownerOpen && (
|
|
ownerType !== currentOwnerType
|
|
|| ownerId !== currentOwnerId
|
|
|| Boolean(ownerReason)
|
|
|| ownerExpiryDays !== 7
|
|
);
|
|
const requestDirty = requestOpen && (
|
|
requestTargetType !== "user"
|
|
|| Boolean(requestGroupId)
|
|
|| Boolean(requestReason)
|
|
);
|
|
const shareDirty = shareOpen && (shareType !== "user" || Boolean(shareTargetId) || sharePermission !== "read");
|
|
const canExplainResourceAccess =
|
|
hasScope(auth, "admin:users:read") ||
|
|
hasScope(auth, "admin:roles:read") ||
|
|
hasScope(auth, "access:membership:read") ||
|
|
hasScope(auth, "access:role:read");
|
|
const userTargetProvider = useMemo(
|
|
() => campaignShareTargetProvider(settings, campaign.id, "user"),
|
|
[campaign.id, settings.accessToken, settings.apiBaseUrl, settings.apiKey]
|
|
);
|
|
const groupTargetProvider = useMemo(
|
|
() => campaignShareTargetProvider(settings, campaign.id, "group"),
|
|
[campaign.id, settings.accessToken, settings.apiBaseUrl, settings.apiKey]
|
|
);
|
|
|
|
useUnsavedDraftGuard({
|
|
dirty: ownerDirty || requestDirty || shareDirty,
|
|
onSave: saveActiveDialog,
|
|
onDiscard: () => {
|
|
closeOwnerDialog();
|
|
closeRequestDialog();
|
|
closeShareDialog();
|
|
}
|
|
});
|
|
|
|
async function load() {
|
|
let nextShares: CampaignShare[] = [];
|
|
let nextTransfers: OwnershipTransfer[] = [];
|
|
try {
|
|
nextTransfers = await listOwnershipTransfers(settings, {
|
|
resourceType: "campaign",
|
|
resourceId: campaign.id,
|
|
limit: 100
|
|
});
|
|
setOwnershipTransfers(nextTransfers);
|
|
} catch (err) {
|
|
onError(err instanceof Error ? err.message : String(err));
|
|
}
|
|
try {
|
|
nextShares = (await getCampaignShares(settings, campaign.id))
|
|
.filter((item) => !item.revoked_at);
|
|
setShares(nextShares);
|
|
setAvailable(true);
|
|
} catch (err) {
|
|
const message = err instanceof Error ? err.message : String(err);
|
|
if (message.startsWith("403 ")) {
|
|
setAvailable(false);
|
|
} else {
|
|
onError(message);
|
|
}
|
|
}
|
|
const userIds = uniqueTargetIds(
|
|
nextShares,
|
|
nextTransfers,
|
|
"user",
|
|
campaign.owner_user_id
|
|
);
|
|
const groupIds = uniqueTargetIds(
|
|
nextShares,
|
|
nextTransfers,
|
|
"group",
|
|
campaign.owner_group_id
|
|
);
|
|
const controller = new AbortController();
|
|
try {
|
|
const [users, groups] = await Promise.all([
|
|
resolveReferenceOptions(userTargetProvider, userIds, controller.signal),
|
|
resolveReferenceOptions(groupTargetProvider, groupIds, controller.signal)
|
|
]);
|
|
setTargets({ users, groups });
|
|
} catch (err) {
|
|
onError(err instanceof Error ? err.message : String(err));
|
|
}
|
|
}
|
|
|
|
useEffect(() => {
|
|
setOwnerType(campaign.owner_group_id ? "group" : "user");
|
|
setOwnerId(campaign.owner_group_id || campaign.owner_user_id || "");
|
|
void load();
|
|
}, [
|
|
campaign.id,
|
|
campaign.owner_group_id,
|
|
campaign.owner_user_id,
|
|
groupTargetProvider,
|
|
settings.accessToken,
|
|
settings.apiBaseUrl,
|
|
settings.apiKey,
|
|
userTargetProvider
|
|
]);
|
|
|
|
const ownerTargetProvider = ownerType === "user" ? userTargetProvider : groupTargetProvider;
|
|
const shareTargetProvider = shareType === "user" ? userTargetProvider : groupTargetProvider;
|
|
const targetMap = useMemo(() => new Map([
|
|
...targets.users.map((item) => [`user:${item.value}`, item] as const),
|
|
...targets.groups.map((item) => [`group:${item.value}`, item] as const)]
|
|
), [targets]);
|
|
|
|
const ownerLabel = campaign.owner_group_id ?
|
|
targetMap.get(`group:${campaign.owner_group_id}`)?.label || "i18n:govoplan-campaign.group_owner.55630670" :
|
|
targetMap.get(`user:${campaign.owner_user_id || ""}`)?.label || "i18n:govoplan-campaign.user_owner.86e3faab";
|
|
|
|
function closeOwnerDialog() {
|
|
setOwnerOpen(false);
|
|
setOwnerType(currentOwnerType);
|
|
setOwnerId(currentOwnerId);
|
|
setOwnerReason("");
|
|
setOwnerExpiryDays(7);
|
|
setOwnerRequestKey("");
|
|
}
|
|
|
|
function openOwnerDialog() {
|
|
setOwnerType(currentOwnerType);
|
|
setOwnerId("");
|
|
setOwnerReason("");
|
|
setOwnerExpiryDays(7);
|
|
setOwnerRequestKey(crypto.randomUUID());
|
|
setOwnerOpen(true);
|
|
}
|
|
|
|
function closeRequestDialog() {
|
|
setRequestOpen(false);
|
|
setRequestTargetType("user");
|
|
setRequestGroupId("");
|
|
setRequestReason("");
|
|
setRequestKey("");
|
|
}
|
|
|
|
function openRequestDialog() {
|
|
setRequestTargetType("user");
|
|
setRequestGroupId("");
|
|
setRequestReason("");
|
|
setRequestKey(crypto.randomUUID());
|
|
setRequestOpen(true);
|
|
}
|
|
|
|
function closeShareDialog() {
|
|
setShareOpen(false);
|
|
setShareType("user");
|
|
setShareTargetId("");
|
|
setSharePermission("read");
|
|
}
|
|
|
|
async function saveActiveDialog(): Promise<boolean> {
|
|
if (ownerDirty) return saveOwner();
|
|
if (requestDirty) return requestOwnership();
|
|
if (shareDirty) return saveShare();
|
|
return true;
|
|
}
|
|
|
|
async function saveOwner(): Promise<boolean> {
|
|
if (!ownerId || ownerId === currentOwnerId && ownerType === currentOwnerType) {
|
|
return false;
|
|
}
|
|
setBusy(true);
|
|
try {
|
|
await startOwnershipTransfer(settings, {
|
|
resource: {
|
|
module_id: "campaigns",
|
|
resource_type: "campaign",
|
|
resource_id: campaign.id
|
|
},
|
|
target_owner: { type: ownerType, id: ownerId },
|
|
idempotency_key: ownerRequestKey || crypto.randomUUID(),
|
|
reason: ownerReason.trim() || null,
|
|
expiry_days: ownerExpiryDays
|
|
});
|
|
closeOwnerDialog();
|
|
await load();
|
|
return true;
|
|
} catch (err) {onError(err instanceof Error ? err.message : String(err));return false;} finally
|
|
{setBusy(false);}
|
|
}
|
|
|
|
async function requestOwnership(): Promise<boolean> {
|
|
const targetId = requestTargetType === "user" ? actorId : requestGroupId;
|
|
if (!targetId) return false;
|
|
setBusy(true);
|
|
try {
|
|
await requestResourceOwnership(settings, {
|
|
resource: {
|
|
module_id: "campaigns",
|
|
resource_type: "campaign",
|
|
resource_id: campaign.id
|
|
},
|
|
target_owner: { type: requestTargetType, id: targetId },
|
|
idempotency_key: requestKey || crypto.randomUUID(),
|
|
reason: requestReason.trim() || null,
|
|
expiry_days: 7
|
|
});
|
|
closeRequestDialog();
|
|
await load();
|
|
return true;
|
|
} catch (err) {
|
|
onError(err instanceof Error ? err.message : String(err));
|
|
return false;
|
|
} finally {
|
|
setBusy(false);
|
|
}
|
|
}
|
|
|
|
async function performOwnershipAction(
|
|
transfer: OwnershipTransfer,
|
|
action: "owner-approval" | "acceptance" | "decline" | "cancel"
|
|
) {
|
|
setBusy(true);
|
|
try {
|
|
await decideOwnershipTransfer(settings, transfer.id, action);
|
|
await onChanged();
|
|
await load();
|
|
} catch (err) {
|
|
onError(err instanceof Error ? err.message : String(err));
|
|
} finally {
|
|
setBusy(false);
|
|
}
|
|
}
|
|
|
|
async function saveShare(): Promise<boolean> {
|
|
if (!shareTargetId) return false;
|
|
setBusy(true);
|
|
try {
|
|
await upsertCampaignShare(settings, campaign.id, { target_type: shareType, target_id: shareTargetId, permission: sharePermission });
|
|
setShareOpen(false);
|
|
setShareTargetId("");
|
|
await load();
|
|
return true;
|
|
} catch (err) {onError(err instanceof Error ? err.message : String(err));return false;} finally
|
|
{setBusy(false);}
|
|
}
|
|
|
|
async function revoke() {
|
|
if (!revokeTarget) return;
|
|
setBusy(true);
|
|
try {
|
|
await revokeCampaignShare(settings, campaign.id, revokeTarget.id);
|
|
setRevokeTarget(null);
|
|
await load();
|
|
} catch (err) {onError(err instanceof Error ? err.message : String(err));} finally
|
|
{setBusy(false);}
|
|
}
|
|
|
|
async function openAccessExplanation() {
|
|
if (!auth.user?.id) return;
|
|
setAccessExplanationOpen(true);
|
|
setAccessExplanation(null);
|
|
setAccessExplanationLoading(true);
|
|
try {
|
|
setAccessExplanation(await fetchResourceAccessExplanation(settings, {
|
|
userId: auth.user.id,
|
|
resourceType: "campaign",
|
|
resourceId: campaign.id,
|
|
action: "campaigns:campaign:read",
|
|
tenantId: (auth.active_tenant ?? auth.tenant)?.id
|
|
}));
|
|
} catch (err) {
|
|
onError(err instanceof Error ? err.message : String(err));
|
|
setAccessExplanationOpen(false);
|
|
} finally {
|
|
setAccessExplanationLoading(false);
|
|
}
|
|
}
|
|
|
|
const columns = useMemo<DataGridColumn<CampaignShare>[]>(() => [
|
|
{
|
|
id: "target",
|
|
header: "i18n:govoplan-campaign.shared_with.6203f449",
|
|
width: "minmax(220px, 1fr)",
|
|
minWidth: 190,
|
|
maxWidth: 560,
|
|
resizable: true,
|
|
sticky: "start",
|
|
sortable: true,
|
|
filterable: true,
|
|
value: (row) => targetMap.get(`${row.target_type}:${row.target_id}`)?.label || row.target_id,
|
|
render: (row) => {
|
|
const target = targetMap.get(`${row.target_type}:${row.target_id}`);
|
|
return <div><strong>{target?.label || row.target_id}</strong><div className="muted small-note">{row.target_type}{target?.description ? i18nMessage("i18n:govoplan-campaign.value.48afe802", { value0: target.description }) : ""}</div></div>;
|
|
}
|
|
},
|
|
{ id: "permission", header: "i18n:govoplan-campaign.access.2f81a22d", width: 120, resizable: false, sortable: true, filterable: true, value: (row) => row.permission, render: (row) => <StatusBadge status={row.permission === "write" ? "active" : "built"} label={row.permission === "write" ? "i18n:govoplan-campaign.can_edit.cb0ab3da" : "i18n:govoplan-campaign.can_view.1b3e4006"} /> },
|
|
{ id: "actions", header: "i18n:govoplan-campaign.actions.c3cd636a", width: 72, resizable: false, sticky: "end", align: "right", render: (row) => <TableActionGroup actions={[{ id: "remove", label: "i18n:govoplan-campaign.remove.e963907d", icon: <Trash2 aria-hidden="true" />, variant: "danger", onClick: () => setRevokeTarget(row) }]} /> }],
|
|
[targetMap]);
|
|
|
|
const canAcceptForGroup = hasScope(
|
|
auth,
|
|
"campaigns:ownership:accept_group"
|
|
);
|
|
|
|
return (
|
|
<>
|
|
<Card title="i18n:govoplan-campaign.ownership_and_sharing.867283c0" actions={<div className="button-row compact-actions">{canProposeOwnership ? <Button onClick={openOwnerDialog}><ArrowRightLeft size={16} aria-hidden="true" /> Transfer ownership</Button> : null}{canRequestOwnership ? <Button onClick={openRequestDialog}><ArrowRightLeft size={16} aria-hidden="true" /> Request ownership</Button> : null}<Button onClick={() => setShareOpen(true)} disabled={available !== true}>i18n:govoplan-campaign.share.09ca55ca</Button><Button onClick={() => void openAccessExplanation()} disabled={!canExplainResourceAccess}><KeyRound size={16} aria-hidden="true" /> i18n:govoplan-campaign.explain_access.4d5fac37</Button></div>}>
|
|
<p><strong>i18n:govoplan-campaign.owner.719379ae</strong> {ownerLabel}</p>
|
|
<p className="muted small-note">Ownership changes require acceptance by the new owner. They never transfer private encryption keys. A completed transfer clears owner-scoped mail profile selection and requires revalidation.</p>
|
|
{ownershipTransfers.length > 0 ? (
|
|
<section className="campaign-ownership-transfers">
|
|
<h3>Ownership requests and history</h3>
|
|
<div className="campaign-ownership-transfer-list">
|
|
{ownershipTransfers.map((transfer) => {
|
|
const actions = ownershipTransferActions(transfer, {
|
|
actorId,
|
|
actorGroupIds,
|
|
canShare: hasScope(auth, "campaigns:campaign:share"),
|
|
canAcceptForGroup
|
|
});
|
|
return (
|
|
<div className="campaign-ownership-transfer" key={transfer.id}>
|
|
<div className="campaign-ownership-transfer-main">
|
|
<span>
|
|
<strong>{ownershipSubjectLabel(transfer.target_owner, targetMap)}</strong>
|
|
<small>{ownershipPendingParty(transfer)}</small>
|
|
</span>
|
|
<StatusBadge status={transfer.status} label={transfer.status.replace(/_/g, " ")} />
|
|
</div>
|
|
<div className="campaign-ownership-transfer-meta">
|
|
<span>{transfer.kind.replace(/_/g, " ")}</span>
|
|
<span>Expires {formatOwnershipDate(transfer.expires_at)}</span>
|
|
{transfer.reason ? <span>{transfer.reason}</span> : null}
|
|
</div>
|
|
{actions.length > 0 ? (
|
|
<div className="button-row compact-actions">
|
|
{actions.map((action) => (
|
|
<Button
|
|
key={action.id}
|
|
variant={action.variant}
|
|
disabled={busy}
|
|
onClick={() => void performOwnershipAction(transfer, action.id)}
|
|
>
|
|
{action.id === "acceptance" || action.id === "owner-approval" ? <Check size={15} aria-hidden="true" /> : <XCircle size={15} aria-hidden="true" />}
|
|
{action.label}
|
|
</Button>
|
|
))}
|
|
</div>
|
|
) : null}
|
|
</div>
|
|
);
|
|
})}
|
|
</div>
|
|
</section>
|
|
) : null}
|
|
{available === true ? (
|
|
<DataGrid id={`campaign-${campaign.id}-shares`} rows={shares} columns={columns} getRowKey={(row) => row.id} emptyText="i18n:govoplan-campaign.this_campaign_has_no_explicit_shares.978012d1" />
|
|
) : (
|
|
<p className="muted small-note">
|
|
{available === null
|
|
? "i18n:govoplan-campaign.loading_campaign_access.056299e3"
|
|
: "Explicit shares are visible only to authorized campaign access managers."}
|
|
</p>
|
|
)}
|
|
</Card>
|
|
|
|
<Dialog open={ownerOpen} className="campaign-access-dialog" title="Transfer campaign ownership" onClose={() => !busy && closeOwnerDialog()} footer={<><Button onClick={closeOwnerDialog} disabled={busy}>i18n:govoplan-campaign.cancel.77dfd213</Button><Button variant="primary" onClick={() => void saveOwner()} disabled={busy || !ownerId || ownerType === currentOwnerType && ownerId === currentOwnerId}>Propose transfer</Button></>}>
|
|
<FormField label="i18n:govoplan-campaign.owner_type.6b86eacc"><select value={ownerType} onChange={(event) => {const next = event.target.value as TargetType;setOwnerType(next);setOwnerId("");}}><option value="user">i18n:govoplan-campaign.user.9f8a2389</option><option value="group">i18n:govoplan-campaign.group.171a0606</option></select></FormField>
|
|
<FormField label="i18n:govoplan-campaign.owner.89ff3122">
|
|
<ReferenceSelect
|
|
value={ownerId}
|
|
onChange={(value) => setOwnerId(value)}
|
|
provider={ownerTargetProvider}
|
|
selectedOption={targetMap.get(`${ownerType}:${ownerId}`) ?? null}
|
|
disabled={busy}
|
|
placeholder="i18n:govoplan-campaign.select.349ac8fb"
|
|
/>
|
|
</FormField>
|
|
<FormField label="Reason" help="Optional context shown to the proposed owner and retained in the decision history.">
|
|
<textarea rows={3} maxLength={4000} value={ownerReason} onChange={(event) => setOwnerReason(event.target.value)} />
|
|
</FormField>
|
|
<FormField label="Expires after">
|
|
<select value={ownerExpiryDays} onChange={(event) => setOwnerExpiryDays(Number(event.target.value))}>
|
|
<option value={1}>1 day</option>
|
|
<option value={3}>3 days</option>
|
|
<option value={7}>7 days</option>
|
|
<option value={14}>14 days</option>
|
|
<option value={30}>30 days</option>
|
|
</select>
|
|
</FormField>
|
|
<p className="muted small-note">The current owner remains responsible until the target accepts. The transfer is cancelled safely if it expires.</p>
|
|
</Dialog>
|
|
|
|
<Dialog open={requestOpen} className="campaign-access-dialog" title="Request campaign ownership" onClose={() => !busy && closeRequestDialog()} footer={<><Button onClick={closeRequestDialog} disabled={busy}>i18n:govoplan-campaign.cancel.77dfd213</Button><Button variant="primary" onClick={() => void requestOwnership()} disabled={busy || requestTargetType === "group" && !requestGroupId}>Submit request</Button></>}>
|
|
<FormField label="Requested owner">
|
|
<select value={requestTargetType} onChange={(event) => { setRequestTargetType(event.target.value as TargetType); setRequestGroupId(""); }}>
|
|
<option value="user">My account</option>
|
|
{canAcceptForGroup && auth.groups.length > 0 ? <option value="group">A group I manage</option> : null}
|
|
</select>
|
|
</FormField>
|
|
{requestTargetType === "group" ? (
|
|
<FormField label="Group">
|
|
<select value={requestGroupId} onChange={(event) => setRequestGroupId(event.target.value)}>
|
|
<option value="">Select a group</option>
|
|
{auth.groups.map((group) => <option key={group.id} value={group.id}>{group.name}</option>)}
|
|
</select>
|
|
</FormField>
|
|
) : null}
|
|
<FormField label="Reason" help="Optional context for the current owner.">
|
|
<textarea rows={3} maxLength={4000} value={requestReason} onChange={(event) => setRequestReason(event.target.value)} />
|
|
</FormField>
|
|
<p className="muted small-note">The current owner must approve this request. You must then accept once more before ownership changes.</p>
|
|
</Dialog>
|
|
|
|
<Dialog open={shareOpen} className="campaign-access-dialog" title="i18n:govoplan-campaign.share_campaign.b605982b" onClose={() => !busy && closeShareDialog()} footer={<><Button onClick={closeShareDialog} disabled={busy}>i18n:govoplan-campaign.cancel.77dfd213</Button><Button variant="primary" onClick={() => void saveShare()} disabled={busy || !shareTargetId}>i18n:govoplan-campaign.save_share.bcf6ed94</Button></>}>
|
|
<FormField label="i18n:govoplan-campaign.target_type.a45f8055"><select value={shareType} onChange={(event) => {const next = event.target.value as TargetType;setShareType(next);setShareTargetId("");}}><option value="user">i18n:govoplan-campaign.user.9f8a2389</option><option value="group">i18n:govoplan-campaign.group.171a0606</option></select></FormField>
|
|
<FormField label="i18n:govoplan-campaign.user_or_group.53406ef0">
|
|
<ReferenceSelect
|
|
value={shareTargetId}
|
|
onChange={(value) => setShareTargetId(value)}
|
|
provider={shareTargetProvider}
|
|
selectedOption={targetMap.get(`${shareType}:${shareTargetId}`) ?? null}
|
|
disabled={busy}
|
|
placeholder="i18n:govoplan-campaign.select.349ac8fb"
|
|
/>
|
|
</FormField>
|
|
<FormField label="i18n:govoplan-campaign.access.2f81a22d"><select value={sharePermission} onChange={(event) => setSharePermission(event.target.value as "read" | "write")}><option value="read">i18n:govoplan-campaign.can_view.1b3e4006</option><option value="write">i18n:govoplan-campaign.can_edit_and_operate.77acb15e</option></select></FormField>
|
|
</Dialog>
|
|
|
|
<Dialog open={accessExplanationOpen} className="campaign-access-dialog" title="i18n:govoplan-core.access_explanation.75ee7f62" onClose={() => { if (!accessExplanationLoading) { setAccessExplanationOpen(false); setAccessExplanation(null); } }} footer={<Button onClick={() => { setAccessExplanationOpen(false); setAccessExplanation(null); }} disabled={accessExplanationLoading}>i18n:govoplan-campaign.close.bbfa773e</Button>}>
|
|
<ResourceAccessExplanation loading={accessExplanationLoading} explanation={accessExplanation} fallbackResourceLabel={campaign.name || campaign.external_id || campaign.id} />
|
|
</Dialog>
|
|
|
|
<ConfirmDialog open={Boolean(revokeTarget)} title="i18n:govoplan-campaign.remove_campaign_share.2c2d42eb" message="i18n:govoplan-campaign.remove_this_user_s_or_group_s_explicit_access_to.5ff07672" confirmLabel="i18n:govoplan-campaign.remove_share.69c932e1" tone="danger" busy={busy} onCancel={() => setRevokeTarget(null)} onConfirm={() => void revoke()} />
|
|
</>);
|
|
|
|
}
|
|
|
|
function uniqueTargetIds(
|
|
shares: readonly CampaignShare[],
|
|
transfers: readonly OwnershipTransfer[],
|
|
targetType: TargetType,
|
|
ownerId?: string | null
|
|
): string[] {
|
|
return [...new Set([
|
|
...(ownerId ? [ownerId] : []),
|
|
...shares
|
|
.filter((share) => share.target_type === targetType)
|
|
.map((share) => share.target_id),
|
|
...transfers.flatMap((transfer) => [
|
|
...(transfer.current_owner.type === targetType
|
|
? [transfer.current_owner.id]
|
|
: []),
|
|
...(transfer.target_owner.type === targetType
|
|
? [transfer.target_owner.id]
|
|
: [])
|
|
])
|
|
])];
|
|
}
|
|
|
|
type OwnershipUiAction = {
|
|
id: "owner-approval" | "acceptance" | "decline" | "cancel";
|
|
label: string;
|
|
variant?: "primary" | "danger";
|
|
};
|
|
|
|
function ownershipTransferActions(
|
|
transfer: OwnershipTransfer,
|
|
context: {
|
|
actorId: string;
|
|
actorGroupIds: ReadonlySet<string>;
|
|
canShare: boolean;
|
|
canAcceptForGroup: boolean;
|
|
}
|
|
): OwnershipUiAction[] {
|
|
const controlsCurrent = controlsOwnershipSubject(
|
|
transfer.current_owner,
|
|
context
|
|
);
|
|
const controlsTarget = controlsOwnershipSubject(
|
|
transfer.target_owner,
|
|
context
|
|
);
|
|
if (transfer.status === "awaiting_owner_approval") {
|
|
return [
|
|
...(controlsCurrent && context.canShare
|
|
? [
|
|
{
|
|
id: "owner-approval" as const,
|
|
label: "Approve",
|
|
variant: "primary" as const
|
|
},
|
|
{
|
|
id: "decline" as const,
|
|
label: "Decline",
|
|
variant: "danger" as const
|
|
}
|
|
]
|
|
: []),
|
|
...(controlsTarget
|
|
? [
|
|
{
|
|
id: "cancel" as const,
|
|
label: "Cancel request",
|
|
variant: "danger" as const
|
|
}
|
|
]
|
|
: [])
|
|
];
|
|
}
|
|
if (transfer.status === "awaiting_target_acceptance") {
|
|
return [
|
|
...(controlsTarget
|
|
? [
|
|
{
|
|
id: "acceptance" as const,
|
|
label: "Accept ownership",
|
|
variant: "primary" as const
|
|
},
|
|
{
|
|
id: "decline" as const,
|
|
label: "Decline",
|
|
variant: "danger" as const
|
|
}
|
|
]
|
|
: []),
|
|
...(controlsCurrent && context.canShare
|
|
? [
|
|
{
|
|
id: "cancel" as const,
|
|
label: "Cancel transfer",
|
|
variant: "danger" as const
|
|
}
|
|
]
|
|
: [])
|
|
];
|
|
}
|
|
return [];
|
|
}
|
|
|
|
function controlsOwnershipSubject(
|
|
subject: { type: string; id: string },
|
|
context: {
|
|
actorId: string;
|
|
actorGroupIds: ReadonlySet<string>;
|
|
canAcceptForGroup: boolean;
|
|
}
|
|
): boolean {
|
|
if (subject.type === "group") {
|
|
return (
|
|
context.canAcceptForGroup
|
|
&& context.actorGroupIds.has(subject.id)
|
|
);
|
|
}
|
|
return subject.type === "user" && subject.id === context.actorId;
|
|
}
|
|
|
|
function ownershipSubjectLabel(
|
|
subject: { type: string; id: string },
|
|
targets: ReadonlyMap<string, ReferenceOption>
|
|
): string {
|
|
return (
|
|
targets.get(`${subject.type}:${subject.id}`)?.label
|
|
|| `${subject.type} ${subject.id}`
|
|
);
|
|
}
|
|
|
|
function ownershipPendingParty(transfer: OwnershipTransfer): string {
|
|
if (transfer.status === "awaiting_owner_approval") {
|
|
return "Waiting for the current owner";
|
|
}
|
|
if (transfer.status === "awaiting_target_acceptance") {
|
|
return "Waiting for the proposed owner";
|
|
}
|
|
if (transfer.status === "awaiting_recovery_approvals") {
|
|
return `Waiting for recovery quorum (${transfer.approvals.length}/${transfer.required_approvals})`;
|
|
}
|
|
if (transfer.status === "recovery_scheduled") {
|
|
return transfer.execute_after
|
|
? `Recovery available after ${formatOwnershipDate(transfer.execute_after)}`
|
|
: "Recovery approval complete";
|
|
}
|
|
return transfer.decisions.at(-1)?.action.replace(/_/g, " ") || transfer.status;
|
|
}
|
|
|
|
function formatOwnershipDate(value: string): string {
|
|
const date = new Date(value);
|
|
if (Number.isNaN(date.getTime())) return value;
|
|
return new Intl.DateTimeFormat(undefined, {
|
|
dateStyle: "medium",
|
|
timeStyle: "short"
|
|
}).format(date);
|
|
}
|
|
|
|
async function resolveReferenceOptions(
|
|
provider: ReferenceOptionProvider,
|
|
values: readonly string[],
|
|
signal: AbortSignal
|
|
): Promise<readonly ReferenceOption[]> {
|
|
if (!values.length) return [];
|
|
if (!provider.resolve) {
|
|
return provider.search("", {
|
|
selectedValues: values,
|
|
limit: Math.min(200, Math.max(1, values.length)),
|
|
signal
|
|
});
|
|
}
|
|
return provider.resolve(values, {
|
|
selectedValues: values,
|
|
limit: Math.min(200, Math.max(1, values.length)),
|
|
signal
|
|
});
|
|
}
|