access control by role plus by person in orgsettings

2026-05-14 18:13:42 +05:30
parent 69d81c78d0
commit d01e699250
4 changed files with 388 additions and 6 deletions
@@ -13,7 +13,7 @@ import { resolveOrgRoleKey } from '../utils/permissions';
 */
 export const usePermissions = () => {
    const { user } = useAuth();
-    const { orgPermissions, orgMembers } = useMockStore();
+    const { orgPermissions, orgMembers, userPermissionOverrides } = useMockStore();

    const orgRoleKey = useMemo(
        () => resolveOrgRoleKey(user, orgMembers),
@@ -24,10 +24,19 @@ export const usePermissions = () => {
        (moduleKey, action) => {
            if (!orgRoleKey) return false;
            if (orgRoleKey === 'OWNER') return true;
+
+            // Person-level override takes priority
+            if (user?.id && userPermissionOverrides) {
+                const override = userPermissionOverrides.find(
+                    o => o.userId === user.id && o.moduleKey === moduleKey && o.action === action
+                );
+                if (override) return override.effect === 'grant';
+            }
+
            const actions = orgPermissions[moduleKey]?.[orgRoleKey] || [];
            return actions.includes(action);
        },
-        [orgRoleKey, orgPermissions],
+        [orgRoleKey, orgPermissions, user, userPermissionOverrides],
    );

    const canAny = useCallback(