mirror of
https://github.com/Sea-Haven-Industries/shoc-frontend-new.git
synced 2026-10-07 09:19:19 +00:00
5bcc0f7081
- Delete sits in the view-mode footer for Admin and Scheduler only; the row delete icon is gone - Confirmation states the open work-order count and links to exactly those work orders - Sites without open work orders confirm with the plain permanent-removal copy - A server refusal keeps the site and shows the error
44 lines
1.6 KiB
TypeScript
44 lines
1.6 KiB
TypeScript
export function getPrimaryUserRole(
|
|
userRoles: string | null | undefined,
|
|
fallback = "User",
|
|
): string {
|
|
return userRoles?.split(",")[0]?.trim() || fallback;
|
|
}
|
|
|
|
export function isAdminUser(userRoles: string | null | undefined): boolean {
|
|
return hasUserRole(userRoles, "admin");
|
|
}
|
|
|
|
export function hasUserRole(userRoles: string | null | undefined, expectedRole: string): boolean {
|
|
if (!userRoles) {
|
|
return false;
|
|
}
|
|
const normalizedExpectedRole = expectedRole.trim().toLowerCase();
|
|
return userRoles
|
|
.split(",")
|
|
.map((role) => role.trim().toLowerCase())
|
|
.includes(normalizedExpectedRole);
|
|
}
|
|
|
|
/**
|
|
* SH-336's `viewAllDispatchersOnDashboard` permission. The codebase has no
|
|
* permission model, so it is derived from role: Admin and Scheduler may pick any
|
|
* dispatcher (or the whole company) on the Dashboard; a Dispatcher may not and
|
|
* is locked to their own work orders. Unknown roles default to the restrictive
|
|
* (Dispatcher) behaviour so no one accidentally gains a company-wide view.
|
|
*/
|
|
export function canViewAllDispatchersOnDashboard(userRoles: string | null | undefined): boolean {
|
|
if (!userRoles) {
|
|
return false;
|
|
}
|
|
const roles = userRoles.split(",").map((role) => role.trim().toLowerCase());
|
|
return roles.includes("admin") || roles.includes("scheduler");
|
|
}
|
|
|
|
/**
|
|
* Site deletion is limited to Admin and Scheduler (the server enforces the DeleteSites team
|
|
* permission; this only hides the control from roles that would get a 403).
|
|
*/
|
|
export function canDeleteSites(userRoles: string | null | undefined): boolean {
|
|
return hasUserRole(userRoles, "admin") || hasUserRole(userRoles, "scheduler");
|
|
}
|