feat(distribution): allow custom permissions from the host app

packages/distribution/addon/abilities/distribution.js

@@ -13,6 +13,7 @@ export default class DistributionAbility extends Ability {
   get canSendInquiries() {
     return (
       !this.config.ui.readonly &&
+      (this.config.permissions.sendInquiry?.(null) ?? true) &&
       this.distribution.controls.value?.send.edges.filter(
         hasStatus("SUSPENDED")
       ).length > 0
@@ -22,6 +23,7 @@ export default class DistributionAbility extends Ability {
   get canCreateInquiry() {
     return (
       !this.config.ui.readonly &&
+      (this.config.permissions.createInquiry?.() ?? true) &&
       this.distribution.controls.value?.create.edges.filter(hasStatus("READY"))
         .length > 0
     );
@@ -30,6 +32,7 @@ export default class DistributionAbility extends Ability {
   get canComplete() {
     return (
       !this.config.ui.readonly &&
+      (this.config.permissions.completeDistribution?.() ?? true) &&
       this.distribution.controls.value?.complete.edges.filter(
         hasStatus("READY")
       ).length > 0

packages/distribution/addon/abilities/inquiry.js

@@ -19,6 +19,14 @@ export default class InquiryAbility extends Ability {
     );
   }
 
+  get canSend() {
+    return this.config.permissions.sendInquiry?.(this.model) ?? true;
+  }
+
+  get canWithdraw() {
+    return this.config.permissions.withdrawInquiry?.(this.model) ?? true;
+  }
+
   get canAnswer() {
     return (
       !this.config.ui.readonly &&
@@ -39,4 +47,13 @@ export default class InquiryAbility extends Ability {
       )
     );
   }
+
+  get canCompleteChildWorkItem() {
+    return (
+      this.config.permissions.completeInquiryChildWorkItem?.(
+        this.model,
+        this.task
+      ) ?? true
+    );
+  }
 }

packages/distribution/addon/components/cd-inquiry-answer-form.hbs

@@ -29,6 +29,19 @@
       />
     </div>
 
+    {{#if
+      (and
+        (not this.buttons.length)
+        (can "edit answer form of inquiry" this.inquiry)
+      )
+    }}
+      <div class="uk-alert uk-alert-warning uk-flex uk-flex-middle">
+        <UkIcon @icon="warning" class="uk-margin-small-right" />
+        {{t "caluma.distribution.answer.complete-not-allowed"}}
+        {{t "caluma.distribution.not-allowed-hint"}}
+      </div>
+    {{/if}}
+
     <content.form />
 
     {{#each this.buttons as |buttonConfig|}}

packages/distribution/addon/components/cd-inquiry-answer-form.js

@@ -12,6 +12,7 @@ import inquiryAnswerQuery from "@projectcaluma/ember-distribution/gql/queries/in
 export default class CdInquiryAnswerFormComponent extends Component {
   @service intl;
   @service router;
+  @service abilities;
   @service notification;
 
   @config config;
@@ -27,16 +28,25 @@ export default class CdInquiryAnswerFormComponent extends Component {
   }
 
   get buttons() {
-    return this.inquiry?.childCase.workItems.edges.map((edge) => {
-      const config = this.config.inquiry.answer.buttons[edge.node.task.slug];
+    return this.inquiry?.childCase.workItems.edges
+      .map((edge) => {
+        const config = this.config.inquiry.answer.buttons[edge.node.task.slug];
 
-      return {
-        workItemId: decodeId(edge.node.id),
-        color: config.color,
-        isFormButton: edge.node.task.__typename === "CompleteWorkflowFormTask",
-        label: this.intl.t(config.label),
-      };
-    });
+        return this.abilities.can(
+          "complete child work item of inquiry",
+          this.inquiry,
+          { task: edge.node.task.slug }
+        )
+          ? {
+              workItemId: decodeId(edge.node.id),
+              color: config.color,
+              isFormButton:
+                edge.node.task.__typename === "CompleteWorkflowFormTask",
+              label: this.intl.t(config.label),
+            }
+          : null;
+      })
+      .filter(Boolean);
   }
 
   @dropTask

packages/distribution/addon/components/cd-inquiry-dialog/inquiry-part.hbs

@@ -45,11 +45,17 @@
             {{t "caluma.distribution.edit.link"}}
           </LinkTo>
         </li>
-        <li>
-          <a href="" {{on "click" (perform this.withdraw)}} data-test-withdraw>
-            {{t "caluma.distribution.withdraw.link"}}
-          </a>
-        </li>
+        {{#if (can "withdraw inquiry" @inquiry)}}
+          <li>
+            <a
+              href=""
+              {{on "click" (perform this.withdraw)}}
+              data-test-withdraw
+            >
+              {{t "caluma.distribution.withdraw.link"}}
+            </a>
+          </li>
+        {{/if}}
       {{else if (can "answer inquiry" @inquiry)}}
         <li>
           <LinkTo

packages/distribution/addon/components/cd-inquiry-edit-form.hbs

@@ -13,9 +13,19 @@
 
     <hr />
 
+    {{#if (cannot "send inquiry" this.inquiry)}}
+      <div class="uk-alert uk-alert-warning uk-flex uk-flex-middle">
+        <UkIcon @icon="warning" class="uk-margin-small-right" />
+        {{t "caluma.distribution.edit.send-not-allowed"}}
+        {{t "caluma.distribution.not-allowed-hint"}}
+      </div>
+    {{/if}}
+
     <content.form />
 
-    {{#if (can "edit inquiry" this.inquiry)}}
+    {{#if
+      (and (can "edit inquiry" this.inquiry) (can "send inquiry" this.inquiry))
+    }}
       <DocumentValidity @document={{content.document}} as |isValid validate|>
         <UkButton
           @type="submit"

packages/distribution/addon/config.js

@@ -65,6 +65,7 @@ export default function config(target, property) {
               },
             },
           },
+          permissions: {},
         },
         getOwner(this).lookup("service:calumaOptions")?.distribution ?? {}
       );

packages/distribution/tests/unit/abilities/distribution-test.js

@@ -80,4 +80,20 @@ module("Unit | Ability | distribution", function (hooks) {
 
     assert.false(ability.canComplete);
   });
+
+  test("it respects configured custom permissions", async function (assert) {
+    const ability = this.owner.lookup("ability:distribution");
+
+    this.owner.lookup("service:caluma-options").distribution = {
+      permissions: {
+        completeDistribution: () => false,
+        createInquiry: () => false,
+        sendInquiry: () => false,
+      },
+    };
+
+    assert.false(ability.canComplete);
+    assert.false(ability.canCreateInquiry);
+    assert.false(ability.canSendInquiries);
+  });
 });

packages/distribution/tests/unit/abilities/inquiry-test.js

@@ -0,0 +1,35 @@
+import { setupMirage } from "ember-cli-mirage/test-support";
+import { setupTest } from "ember-qunit";
+import { module, test } from "qunit";
+
+module("Unit | Ability | inquiry", function (hooks) {
+  setupTest(hooks);
+  setupMirage(hooks);
+
+  hooks.beforeEach(async function () {
+    this.owner.lookup("service:caluma-options").currentGroupId = 1;
+  });
+
+  test("it respects configured custom permissions", async function (assert) {
+    assert.expect(4);
+
+    const ability = this.owner.lookup("ability:inquiry");
+
+    ability.task = "test-task";
+
+    this.owner.lookup("service:caluma-options").distribution = {
+      permissions: {
+        sendInquiry: () => false,
+        withdrawInquiry: () => false,
+        completeInquiryChildWorkItem: (_, task) => {
+          assert.strictEqual(task, "test-task");
+          return false;
+        },
+      },
+    };
+
+    assert.false(ability.canSend);
+    assert.false(ability.canWithdraw);
+    assert.false(ability.canCompleteChildWorkItem);
+  });
+});

packages/distribution/tests/unit/config-test.js

@@ -78,6 +78,7 @@ module("Unit | config", function (hooks) {
           },
         },
       },
+      permissions: {},
       ui: { small: false, stack: false, readonly: false },
       warningPeriod: 1,
     });

packages/distribution/translations/de.yaml

@@ -16,11 +16,15 @@ caluma:
 
     last-modified: "Zuletzt bearbeitet von {user} am {date} um {time}"
     details: "Details"
+    not-allowed-hint:
+      "Sie können jedoch das Formular bearbeiten und die Eingabedaten werden
+      automatisch gespeichert."
 
     edit:
       link: "Bearbeiten"
       send: "Senden"
       send-error: "Fehler beim Senden der Anfrage"
+      send-not-allowed: "Sie sind nicht berechtigt diese Anfrage zu versenden."
 
     answer:
       link: "Beantworten"
@@ -30,6 +34,7 @@ caluma:
       revise: "Überarbeiten"
 
       complete-error: "Fehler beim Abschliessen der Aufgabe"
+      complete-not-allowed: "Sie sind nicht berechtigt diese Antwort zu versenden."
 
     new:
       title: "Neue Anfrage"

packages/distribution/translations/en.yaml

@@ -17,11 +17,15 @@ caluma:
 
     last-modified: "Last modified by {user} on {date} at {time}"
     details: "Details"
+    not-allowed-hint:
+      "However, you can edit the form and the input will be saved
+      automatically."
 
     edit:
       link: "Edit"
       send: "Send"
       send-error: "Error while sending the inquiry"
+      send-not-allowed: "You are not allowed to send this inquiry."
 
     answer:
       link: "Answer"
@@ -31,6 +35,7 @@ caluma:
       revise: "Revise"
 
       complete-error: "Error while completing the work item"
+      complete-not-allowed: "You are not allowed to send this inquiry answer."
 
     new:
       title: "New inquiry"

packages/distribution/translations/fr.yaml

@@ -16,11 +16,15 @@ caluma:
 
     last-modified: "Dernière modification par {user} le {date} à {time}"
     details: "Détails"
+    not-allowed-hint:
+      "Vous pouvez toutefois modifier le formulaire et les données seront
+      automatiquement enregistrées."
 
     edit:
       link: "Modifier"
       send: "Envoyer"
       send-error: "Erreur lors de l'envoi de la demande"
+      send-not-allowed: "Vous n'êtes pas autorisé à envoyer cette demande."
 
     answer:
       link: "Répondre"
@@ -30,6 +34,7 @@ caluma:
       revise: "Réviser"
 
       complete-error: "Erreur lors de la clôture de la tâche"
+      complete-not-allowed: "Vous n'êtes pas autorisé à envoyer cette réponse."
 
     new:
       title: "Nouvelle demande"