ec1ec2e65f
Replace ID-token claim reads with org store lookups in useAuth and usePermissions; add currentOrgRoles to useOrgStore; update role names to Logto org role conventions (admin/member); remove username from Layout (no longer derived from token claims). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
31 lines
953 B
TypeScript
31 lines
953 B
TypeScript
import { useOrgStore } from '../auth/useOrganization';
|
|
|
|
const ROLE_PERMISSIONS: Record<string, string[]> = {
|
|
'admin': [
|
|
'tenant:manage', 'billing:manage', 'team:manage', 'apps:manage',
|
|
'apps:deploy', 'secrets:manage', 'observe:read', 'observe:debug',
|
|
'settings:manage',
|
|
],
|
|
'member': ['apps:deploy', 'observe:read', 'observe:debug'],
|
|
};
|
|
|
|
export function usePermissions() {
|
|
const { currentOrgRoles } = useOrgStore();
|
|
const roles = currentOrgRoles ?? [];
|
|
|
|
const permissions = new Set<string>();
|
|
for (const role of roles) {
|
|
const perms = ROLE_PERMISSIONS[role];
|
|
if (perms) perms.forEach((p) => permissions.add(p));
|
|
}
|
|
|
|
return {
|
|
has: (permission: string) => permissions.has(permission),
|
|
canManageApps: permissions.has('apps:manage'),
|
|
canDeploy: permissions.has('apps:deploy'),
|
|
canManageTenant: permissions.has('tenant:manage'),
|
|
canViewObservability: permissions.has('observe:read'),
|
|
roles,
|
|
};
|
|
}
|