feat: access manager

Author: arunjaindev

src/Assets/IconV2/ic-crown.svg

@@ -49,6 +49,7 @@ import {
     CDMaterialType,
     GlobalVariableDTO,
     GlobalVariableOptionType,
+    UserRole,
 } from './Types'
 import { ApiResourceType, STAGE_MAP } from '../Pages'
 import { RefVariableType, VariableTypeFormat } from './CIPipeline.Types'
@@ -70,13 +71,6 @@ export const getTeamListMin = (): Promise<TeamList> => {
     })
 }
 
-interface UserRole extends ResponseType {
-    result?: {
-        roles: string[]
-        superAdmin: boolean
-    }
-}
-
 export const SourceTypeMap = {
     BranchFixed: 'SOURCE_TYPE_BRANCH_FIXED',
     WEBHOOK: 'WEBHOOK',

src/Assets/IconV2/ic-user-key.svg

@@ -21,20 +21,23 @@ import { showError } from '../../Helper'
 
 /**
  * @description It will return isSuperAdmin and would be set to false by default, might need few optimizations like dep, etc
- * @returns {useSuperAdminType} isSuperAdmin
+ * @returns {useSuperAdminType} isSuperAdmin, canManageAllAccess
  */
 export const useSuperAdmin = (): useSuperAdminType => {
-    const [isSuperAdmin, setSuperAdmin] = useState<boolean>(false)
+    const [result, setResult] = useState<useSuperAdminType>({ isSuperAdmin: false, canManageAllAccess: false })
 
     useEffect(() => {
         getUserRole()
-            .then((response) => {
-                setSuperAdmin(response.result.superAdmin ?? false)
+            .then(({ result }) => {
+                setResult({
+                    isSuperAdmin: result.superAdmin ?? false,
+                    canManageAllAccess: result.canManageAllAccess ?? false,
+                })
             })
             .catch((error) => {
                 showError(error)
             })
     }, [])
 
-    return { isSuperAdmin }
+    return result
 }

src/Common/Common.service.ts

@@ -16,4 +16,9 @@
 
 export interface useSuperAdminType {
     isSuperAdmin: boolean
+    /**
+     * ENT Only
+     * User can give access to all other users
+     */
+    canManageAllAccess?: boolean
 }

src/Common/Hooks/UseSuperAdmin/UseSuperAdmin.tsx

@@ -1074,3 +1074,15 @@ export type GlobalVariableOptionType = Omit<GlobalVariableDTO, 'name'> & {
     value: string
     variableType: Extract<RefVariableType, RefVariableType.GLOBAL>
 }
+
+export interface UserRole extends ResponseType {
+    result?: {
+        roles: string[]
+        superAdmin: boolean
+        /**
+         * ENT Only
+         * Defines if a user is access manager and can manage all access
+         */
+        canManageAllAccess?: boolean
+    }
+}

src/Common/Hooks/UseSuperAdmin/types.ts

@@ -12,6 +12,7 @@ import { ReactComponent as ICCircleLoader } from '@IconsV2/ic-circle-loader.svg'
 import { ReactComponent as ICClock } from '@IconsV2/ic-clock.svg'
 import { ReactComponent as ICCloseSmall } from '@IconsV2/ic-close-small.svg'
 import { ReactComponent as ICContainer } from '@IconsV2/ic-container.svg'
+import { ReactComponent as ICCrown } from '@IconsV2/ic-crown.svg'
 import { ReactComponent as ICDockerhub } from '@IconsV2/ic-dockerhub.svg'
 import { ReactComponent as ICEcr } from '@IconsV2/ic-ecr.svg'
 import { ReactComponent as ICEnv } from '@IconsV2/ic-env.svg'
@@ -41,6 +42,7 @@ import { ReactComponent as ICSuccess } from '@IconsV2/ic-success.svg'
 import { ReactComponent as ICSuspended } from '@IconsV2/ic-suspended.svg'
 import { ReactComponent as ICTimeoutTwoDash } from '@IconsV2/ic-timeout-two-dash.svg'
 import { ReactComponent as ICUnknown } from '@IconsV2/ic-unknown.svg'
+import { ReactComponent as ICUserKey } from '@IconsV2/ic-user-key.svg'
 import { ReactComponent as ICWarning } from '@IconsV2/ic-warning.svg'
 
 // eslint-disable-next-line no-restricted-imports
@@ -60,6 +62,7 @@ export const iconMap = {
     'ic-clock': ICClock,
     'ic-close-small': ICCloseSmall,
     'ic-container': ICContainer,
+    'ic-crown': ICCrown,
     'ic-dockerhub': ICDockerhub,
     'ic-ecr': ICEcr,
     'ic-env': ICEnv,
@@ -89,6 +92,7 @@ export const iconMap = {
     'ic-suspended': ICSuspended,
     'ic-timeout-two-dash': ICTimeoutTwoDash,
     'ic-unknown': ICUnknown,
+    'ic-user-key': ICUserKey,
     'ic-warning': ICWarning,
 }
 

src/Common/Types.ts

@@ -30,6 +30,7 @@ import {
     PluginType,
 } from '../Common'
 import { BASE_CONFIGURATION_ENV_ID, EnvironmentTypeEnum, PatchOperationType } from './constants'
+import { SelectPickerOptionType } from './Components'
 
 export enum EnvType {
     CHART = 'helm_charts',
@@ -761,10 +762,29 @@ export type MetaPossibleRoles = Record<
 
 export interface CustomRoleAndMeta {
     customRoles: CustomRoles[]
-    possibleRolesMeta: MetaPossibleRoles
-    possibleRolesMetaForHelm: MetaPossibleRoles
+    possibleRolesMetaForDevtron: MetaPossibleRoles
+    possibleJobRoles: SelectPickerOptionType<string>[]
     possibleRolesMetaForCluster: MetaPossibleRoles
-    possibleRolesMetaForJob: MetaPossibleRoles
+}
+
+export interface UserRoleConfig {
+    // can be '' if access manager has no base access
+    baseRole: string
+    /**
+     * Only for devtron apps, ENT Only
+     */
+    additionalRoles?: Set<string>
+    /**
+     * Only for devtron apps, ENT Only
+     */
+    accessManagerRoles?: Set<string>
+}
+
+export type RoleType = keyof UserRoleConfig
+
+export type RoleSelectorOptionType = Pick<SelectPickerOptionType, 'label' | 'description'> & {
+    value: string
+    roleType: RoleType
 }
 
 interface CommonTabArgsType {