Skip to content

feat(esign): choose which roles and permissions may use each drive - #109

Merged
lorenzocorallo merged 2 commits into
mainfrom
feat/esign-drive-access
Oct 17, 2026
Merged

lorenzocorallo merged 2 commits into
mainfrom
feat/esign-drive-access

Conversation

@lorenzocorallo

Copy link
Copy Markdown
Member

Dashboard side of per-drive access (backend PR linked in PoliNetworkOrg/backend; roles from PoliNetworkOrg/auth#62 via auth-kit#2).

  • Signatures › Drives (esign:drives:manage): a card per drive with Request signatures and Be asked to sign rules. Chips for roles (people icon) and permissions (key icon), an inline picker listing the IdP's roles and permissions, "Default: …" while empty, Save/Discard per drive; keys the IdP no longer knows show as warning chips.
  • New request: only drives the user may request with are offered; signers who may not sign documents of the chosen drives are left out of the list with the reason, and an already added one shows a warning and blocks creation.
  • Permission esign:drives:manage added; middleware esignDrivesManageMiddleware registered in the security test.

Checked: pnpm check, typecheck, test, build; headless browser against the local backend: restricting Archive to Socio removed it from a Direttivo user's drive picker; restricting who signs Archive left nobody eligible and explained it; rules reset after.

Draft until the backend release, then bump @polinetwork/backend.

Signatures › Drives (esign:drives:manage) shows each drive with two rules, Request signatures and Be asked to sign,
made of roles and permissions from the IdP. Empty rules keep the default. On a new request, signers who may not sign
the chosen drives' documents are left out, with the reason; the backend filters drives and requests.
@coderabbitai

coderabbitai Bot commented Oct 17, 2026 •

Copy link
Copy Markdown
Contributor

Review in Change Stack →

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: be5f050a-11a7-4e98-b1ee-5f5bfb6ff5ac
📥 Commits

Reviewing files that changed from the base of the PR and between 7377acd and 22b40d7.

⛔ Files ignored due to path filters: 1
  • pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml
📒 Files selected for processing: 13
  • docs/design.md
  • docs/esign/TRACKER.md
  • docs/esign/contracts.md
  • package.json
  • src/components/shell/nav.ts
  • src/features/esign/drives-page.tsx
  • src/features/esign/drives.functions.ts
  • src/features/esign/new-request-page.tsx
  • src/routeTree.gen.ts
  • src/routes/dashboard/esign/drives.tsx
  • src/server/auth.middleware.ts
  • src/server/permissions.ts
  • tests/server-security.test.mjs
✨ Finishing Touches
📝 Generate docstrings
  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@lorenzocorallo
lorenzocorallo marked this pull request as ready for review October 17, 2026 12:12
@lorenzocorallo
lorenzocorallo merged commit a645b95 into main Oct 17, 2026
1 of 2 checks passed
@lorenzocorallo
lorenzocorallo deleted the feat/esign-drive-access branch October 17, 2026 12:13
BIA3IA pushed a commit that referenced this pull request Oct 20, 2026
)

* feat(esign): choose which roles and permissions may use each drive

Signatures › Drives (esign:drives:manage) shows each drive with two rules, Request signatures and Be asked to sign,
made of roles and permissions from the IdP. Empty rules keep the default. On a new request, signers who may not sign
the chosen drives' documents are left out, with the reason; the backend filters drives and requests.

* build(deps): use @polinetwork/backend 1.10.0 for drive access
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant