Skip to content

[Due for payment 2025-10-09] [$500] Abide by a member's preferred workspace restriction domain security group setting #67977

Description

@trjExpensify

If you haven’t already, check out our contributing guidelines for onboarding and email contributors@expensify.com to request to join our Slack channel!


Version Number: v9.1.89-13
Reproducible in staging?: Y
Reproducible in production?: Y
If this was caught during regression testing, add the test name, ID and link from TestRail: N/A
Email or phone of affected tester (no customers):
Logs: https://stackoverflow.com/c/expensify/questions/4856
Expensify/Expensify Issue URL:
Issue reported by: @zsgreenwald @NicMendonca
Slack conversation (hyperlinked to channel name): #retain

Action Performed:

  1. Go to staging.expensify.com > Settings > Domains
  2. Verify a private domain
  3. Go to Domains > Groups > Edit > Group Permissions
  4. Enable Preferred workspace > select a NewDot compatible workspace
  5. Go over to staging.new.expensify.com
  6. Click the + Global create button > Create expense
  7. Verify the participant selector step is skipped
  8. Verify the To: on the confirmation page is read-only and pointing to the same workspace as step 4.
  9. Close the Create expense modal
  10. Go to a DM
  11. Click the + DM create button
  12. Verify the Create expense menu item is hidden
  13. Have another member send you an IOUReport
  14. Go to the IOUReport
  15. Click the + create button on the IOUReport
  16. Verify the Create expense menu item is hidden.

Expected Result:

Make this feature setting compatible with NewDot, such that it's intended restrictions of 1) not allowing the member to create IOUReports and 2) freely choosing which workspace to submit their expenses to are adhered to.

Domain Group Setting:

Image

NewDot Restrictions:

Global create menu > Create expense

  • Always skip the participant selector
  • Make the To field on the confirmation page read-only and set to the preferred workspace configured in the domain securityGroup.
Image

DM/Group/Room create menus

  • Hide Create expense from the menu.
  • Hide Pay <name> from the menu.
  • Hide Split expense from the menu
Image

IOUReports create menu

  • Hide Create expense from the menu.
Image

Actual Result:

This setting is currently rendered useless and is not being adhered to in NewDot currently. Members can freely create iouReports off-workspace and pick from any workspace they are a member of to during the Create expense flow throughout the app.

Note: We don't currently return the hasPreferredPolicy setting flag of securityGroups in Onyx here, nor during AppInit in Web-E here - but those looks like the base of getting this added to use in App relatively easily prior to migrated domain control config to NewDot.

Workaround:

None.

Platforms:

Select the officially supported platforms where the issue was reproduced:

  • Android: App
  • Android: mWeb Chrome
  • iOS: App
  • iOS: mWeb Safari
  • iOS: mWeb Chrome
  • Windows: Chrome
  • MacOS: Chrome / Safari
  • MacOS: Desktop
Platforms Tested: On which of our officially supported platforms was this issue tested:
  • Android: App
  • Android: mWeb Chrome
  • iOS: App
  • iOS: mWeb Safari
  • iOS: mWeb Chrome
  • Windows: Chrome
  • MacOS: Chrome / Safari
  • MacOS: Desktop

Screenshots/Videos

in-line above.

View all open jobs on GitHub

Upwork Automation - Do Not Edit
  • Upwork Job URL: https://www.upwork.com/jobs/~021953868349827332263
  • Upwork Job ID: 1953868349827332263
  • Last Price Increase: 2025-08-22
Issue OwnerCurrent Issue Owner: @
Issue OwnerCurrent Issue Owner: @trjExpensify

Metadata

Metadata

Labels

Awaiting PaymentAuto-added when associated PR is deployed to productionExternalAdded to denote the issue can be worked on by a contributorNewFeatureSomething to build that is a new item.WeeklyKSv2

Type

No type

Fields

No fields configured for issues without a type.

Projects

Status
Done

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions