mirror of
https://github.com/hanzoai/calendar.git
synced 2026-10-30 14:46:43 +00:00
fe190f20f3
* refactor: replace isTeamAdminOrOwner with PBAC permissions - Remove isTeamAdminOrOwner from team-members-view.tsx, rely on server-side permissions - Replace role checks in addMembersToEventTypes.handler.ts with eventType.update permission - Follow PBAC refactoring guide patterns for consistent permission checking - Fix TypeScript any type usage and unused variable warnings Co-Authored-By: [email protected] <[email protected]> * use enum --------- Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
75 lines
2.6 KiB
TypeScript
75 lines
2.6 KiB
TypeScript
"use client";
|
|
|
|
import { useState } from "react";
|
|
|
|
import LicenseRequired from "@calcom/features/ee/common/components/LicenseRequired";
|
|
import { MemberInvitationModalWithoutMembers } from "@calcom/features/ee/teams/components/MemberInvitationModal";
|
|
import MemberList from "@calcom/features/ee/teams/components/MemberList";
|
|
import type { MemberPermissions } from "@calcom/features/users/components/UserTable/types";
|
|
import { useLocale } from "@calcom/lib/hooks/useLocale";
|
|
import type { RouterOutputs } from "@calcom/trpc/react";
|
|
|
|
interface TeamMembersViewProps {
|
|
team: NonNullable<RouterOutputs["viewer"]["teams"]["get"]>;
|
|
facetedTeamValues?: {
|
|
roles: { id: string; name: string }[];
|
|
teams: RouterOutputs["viewer"]["teams"]["get"][];
|
|
attributes: {
|
|
id: string;
|
|
name: string;
|
|
options: {
|
|
value: string;
|
|
}[];
|
|
}[];
|
|
};
|
|
attributes?: {
|
|
id: string;
|
|
name: string;
|
|
options: {
|
|
value: string;
|
|
}[];
|
|
}[];
|
|
permissions: MemberPermissions;
|
|
}
|
|
|
|
export const TeamMembersView = ({ team, facetedTeamValues, permissions }: TeamMembersViewProps) => {
|
|
const { t } = useLocale();
|
|
const [showMemberInvitationModal, setShowMemberInvitationModal] = useState(false);
|
|
const [_showInviteLinkSettingsModal, setShowInviteLinkSettingsModal] = useState(false);
|
|
|
|
// Use PBAC permissions - server-side permission check should be done in parent component
|
|
const canLoggedInUserSeeMembers = permissions?.canListMembers ?? false;
|
|
|
|
return (
|
|
<LicenseRequired>
|
|
<div>
|
|
{canLoggedInUserSeeMembers && (
|
|
<div className="mb-6">
|
|
<MemberList
|
|
team={team}
|
|
isOrgAdminOrOwner={false}
|
|
setShowMemberInvitationModal={setShowMemberInvitationModal}
|
|
facetedTeamValues={facetedTeamValues}
|
|
permissions={permissions}
|
|
/>
|
|
</div>
|
|
)}
|
|
{!canLoggedInUserSeeMembers && (
|
|
<div className="border-subtle rounded-xl border p-6" data-testid="members-privacy-warning">
|
|
<h2 className="text-default">{t("only_admin_can_see_members_of_team")}</h2>
|
|
</div>
|
|
)}
|
|
{showMemberInvitationModal && team && team.id && (
|
|
<MemberInvitationModalWithoutMembers
|
|
hideInvitationModal={() => setShowMemberInvitationModal(false)}
|
|
showMemberInvitationModal={showMemberInvitationModal}
|
|
teamId={team.id}
|
|
token={team.inviteToken?.token}
|
|
onSettingsOpen={() => setShowInviteLinkSettingsModal(true)}
|
|
/>
|
|
)}
|
|
</div>
|
|
</LicenseRequired>
|
|
);
|
|
};
|