Part of the Workspace Roles project. Depends on Release 0 frontend.
Goal: Allow Auditor members to navigate the workspace settings in read-only mode. Gate every core workspace page — Overview, Members, and Settings — so that write actions are hidden or disabled for Auditors, while the page itself remains accessible.
Overview page (src/pages/workspace/WorkspaceOverviewPage.tsx)
- Check
hasPolicyPermission(policy, login, FEATURE.OVERVIEW, FEATURE_ACCESS.WRITE)
- Show the page to anyone with at least
read access
- Hide the edit icon / save button for users without
write access
Members page (src/pages/workspace/WorkspaceMembersPage.tsx)
- Check
hasPolicyPermission(policy, login, FEATURE.MEMBERS, FEATURE_ACCESS.READ) to allow entry
- Disable "Invite member", "Remove", and role-change controls for Auditors (no
FEATURE.MEMBERS write access)
- Auditor sees the list but cannot mutate it
Profile / Settings pages
- Remaining workspace-settings pages (currency, description, categories, etc.) that are currently admin-only: confirm they are blocked from Auditor access via
hasPolicyPermission(..., FEATURE_ACCESS.WRITE) checks and redirect/hide appropriately
Issue Owner
Current Issue Owner: @Pujan92
Part of the Workspace Roles project. Depends on Release 0 frontend.
Goal: Allow Auditor members to navigate the workspace settings in read-only mode. Gate every core workspace page — Overview, Members, and Settings — so that write actions are hidden or disabled for Auditors, while the page itself remains accessible.
Overview page (
src/pages/workspace/WorkspaceOverviewPage.tsx)hasPolicyPermission(policy, login, FEATURE.OVERVIEW, FEATURE_ACCESS.WRITE)readaccesswriteaccessMembers page (
src/pages/workspace/WorkspaceMembersPage.tsx)hasPolicyPermission(policy, login, FEATURE.MEMBERS, FEATURE_ACCESS.READ)to allow entryFEATURE.MEMBERSwrite access)Profile / Settings pages
hasPolicyPermission(..., FEATURE_ACCESS.WRITE)checks and redirect/hide appropriatelyIssue Owner
Current Issue Owner: @Pujan92