Skip to content

[Workspace Roles] Release 1: Auditor role — navigation guards and core workspace pages #90497

Description

@flodnv

Part of the Workspace Roles project. Depends on Release 0 frontend.

Goal: Allow Auditor members to navigate the workspace settings in read-only mode. Gate every core workspace page — Overview, Members, and Settings — so that write actions are hidden or disabled for Auditors, while the page itself remains accessible.

Overview page (src/pages/workspace/WorkspaceOverviewPage.tsx)

  • Check hasPolicyPermission(policy, login, FEATURE.OVERVIEW, FEATURE_ACCESS.WRITE)
  • Show the page to anyone with at least read access
  • Hide the edit icon / save button for users without write access

Members page (src/pages/workspace/WorkspaceMembersPage.tsx)

  • Check hasPolicyPermission(policy, login, FEATURE.MEMBERS, FEATURE_ACCESS.READ) to allow entry
  • Disable "Invite member", "Remove", and role-change controls for Auditors (no FEATURE.MEMBERS write access)
  • Auditor sees the list but cannot mutate it

Profile / Settings pages

  • Remaining workspace-settings pages (currency, description, categories, etc.) that are currently admin-only: confirm they are blocked from Auditor access via hasPolicyPermission(..., FEATURE_ACCESS.WRITE) checks and redirect/hide appropriately
Issue OwnerCurrent Issue Owner: @Pujan92

Metadata

Metadata

Labels

Type

No type

Projects

Status
Done

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions