mirror of
https://github.com/UNITRONIX/BetterDesk.git
synced 2026-09-10 09:35:39 +00:00
a710580b7a
Implement RBAC Phase 52: add server-side role & permission handlers and wire API routes, plus frontend UI, styles and translations. Server: new role_handlers.go exposing endpoints to list roles, get effective role permissions, list/set/delete role permission overrides; routes registered in server.go with permission checks (PermUserView / PermServerConfig). Protects super-admin defaults and validates inputs. Frontend (management & web UI): add permissions page assets (CSS, JS, view), add i18n strings for en/pl/zh, update sidebar to filter items by canView, show user role badge in topbar and empty access-denied state when no permission. Add role badges styling in users.css and small UX/i18n improvements in organizationDetail.js. Also several route and service adjustments to support the new permissions UI. This change introduces RBAC UI/API plumbing for managing role-based permissions and overrides.
452 lines
9.4 KiB
CSS
452 lines
9.4 KiB
CSS
/* ─────────────────────────────────────────────────────────
|
|
* BetterDesk Console — Permissions Page (RBAC Phase 52)
|
|
* ───────────────────────────────────────────────────────── */
|
|
|
|
/* ── Page Layout ────────────────────────────────────────── */
|
|
|
|
.permissions-page {
|
|
max-width: 960px;
|
|
}
|
|
|
|
.permissions-page .page-header {
|
|
margin-bottom: 8px;
|
|
}
|
|
|
|
.permissions-page .page-subtitle {
|
|
color: var(--text-secondary, #8b949e);
|
|
font-size: 14px;
|
|
margin: 4px 0 0;
|
|
}
|
|
|
|
/* ── Info Card ──────────────────────────────────────────── */
|
|
|
|
.permissions-info-card {
|
|
display: flex;
|
|
align-items: flex-start;
|
|
gap: 12px;
|
|
padding: 14px 18px;
|
|
margin-bottom: 24px;
|
|
background: var(--bg-secondary, #161b22);
|
|
border: 1px solid var(--border-primary, #30363d);
|
|
border-radius: 8px;
|
|
border-left: 3px solid var(--accent-blue, #58a6ff);
|
|
}
|
|
|
|
.permissions-info-card > .material-icons {
|
|
color: var(--accent-blue, #58a6ff);
|
|
font-size: 20px;
|
|
margin-top: 2px;
|
|
}
|
|
|
|
.permissions-info-card .info-content {
|
|
flex: 1;
|
|
}
|
|
|
|
.permissions-info-card .info-content strong {
|
|
display: block;
|
|
margin-bottom: 4px;
|
|
font-size: 13px;
|
|
color: var(--text-primary, #e6edf3);
|
|
}
|
|
|
|
.permissions-info-card .info-content p {
|
|
margin: 0;
|
|
font-size: 12px;
|
|
color: var(--text-secondary, #8b949e);
|
|
line-height: 1.5;
|
|
}
|
|
|
|
/* ── Toolbar / Role Selector ────────────────────────────── */
|
|
|
|
.permissions-toolbar {
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: space-between;
|
|
gap: 16px;
|
|
margin-bottom: 20px;
|
|
flex-wrap: wrap;
|
|
}
|
|
|
|
.permissions-toolbar .toolbar-left {
|
|
display: flex;
|
|
align-items: center;
|
|
gap: 12px;
|
|
}
|
|
|
|
.permissions-toolbar .toolbar-right {
|
|
display: flex;
|
|
align-items: center;
|
|
gap: 8px;
|
|
}
|
|
|
|
.role-selector {
|
|
display: flex;
|
|
align-items: center;
|
|
gap: 10px;
|
|
}
|
|
|
|
.role-selector label {
|
|
font-size: 13px;
|
|
color: var(--text-secondary, #8b949e);
|
|
white-space: nowrap;
|
|
}
|
|
|
|
.role-selector select {
|
|
min-width: 200px;
|
|
padding: 8px 12px;
|
|
background: var(--bg-secondary, #161b22);
|
|
border: 1px solid var(--border-primary, #30363d);
|
|
border-radius: 6px;
|
|
color: var(--text-primary, #e6edf3);
|
|
font-size: 13px;
|
|
cursor: pointer;
|
|
}
|
|
|
|
.role-selector select:focus {
|
|
outline: none;
|
|
border-color: var(--accent-blue, #58a6ff);
|
|
box-shadow: 0 0 0 2px rgba(88, 166, 255, 0.15);
|
|
}
|
|
|
|
/* ── Role Info Banner ───────────────────────────────────── */
|
|
|
|
.role-info-banner {
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: space-between;
|
|
gap: 16px;
|
|
padding: 16px 20px;
|
|
margin-bottom: 24px;
|
|
background: var(--bg-secondary, #161b22);
|
|
border: 1px solid var(--border-primary, #30363d);
|
|
border-radius: 8px;
|
|
}
|
|
|
|
.role-info-banner.hidden {
|
|
display: none;
|
|
}
|
|
|
|
.role-info-left {
|
|
display: flex;
|
|
align-items: center;
|
|
gap: 12px;
|
|
}
|
|
|
|
.role-info-icon {
|
|
font-size: 32px;
|
|
color: var(--accent-blue, #58a6ff);
|
|
}
|
|
|
|
.role-info-name {
|
|
font-size: 16px;
|
|
font-weight: 600;
|
|
color: var(--text-primary, #e6edf3);
|
|
}
|
|
|
|
.role-info-level {
|
|
font-size: 12px;
|
|
color: var(--text-secondary, #8b949e);
|
|
margin-top: 2px;
|
|
}
|
|
|
|
.role-info-right {
|
|
display: flex;
|
|
gap: 24px;
|
|
}
|
|
|
|
.role-info-stat {
|
|
text-align: center;
|
|
}
|
|
|
|
.role-info-stat .stat-num {
|
|
display: block;
|
|
font-size: 18px;
|
|
font-weight: 600;
|
|
color: var(--text-primary, #e6edf3);
|
|
}
|
|
|
|
.role-info-stat .stat-label {
|
|
font-size: 11px;
|
|
color: var(--text-secondary, #8b949e);
|
|
text-transform: uppercase;
|
|
letter-spacing: 0.5px;
|
|
}
|
|
|
|
/* ── Permissions Matrix ─────────────────────────────────── */
|
|
|
|
.permissions-matrix {
|
|
display: flex;
|
|
flex-direction: column;
|
|
gap: 16px;
|
|
}
|
|
|
|
.permissions-matrix.hidden {
|
|
display: none;
|
|
}
|
|
|
|
/* Category Card */
|
|
.perm-category {
|
|
background: var(--bg-secondary, #161b22);
|
|
border: 1px solid var(--border-primary, #30363d);
|
|
border-radius: 8px;
|
|
overflow: hidden;
|
|
}
|
|
|
|
.perm-category-header {
|
|
display: flex;
|
|
align-items: center;
|
|
gap: 10px;
|
|
padding: 12px 18px;
|
|
background: var(--bg-tertiary, #21262d);
|
|
border-bottom: 1px solid var(--border-primary, #30363d);
|
|
}
|
|
|
|
.perm-category-header .material-icons {
|
|
font-size: 18px;
|
|
color: var(--accent-blue, #58a6ff);
|
|
}
|
|
|
|
.perm-category-header h3 {
|
|
margin: 0;
|
|
font-size: 13px;
|
|
font-weight: 600;
|
|
color: var(--text-primary, #e6edf3);
|
|
text-transform: uppercase;
|
|
letter-spacing: 0.5px;
|
|
}
|
|
|
|
.perm-category-body {
|
|
padding: 0;
|
|
}
|
|
|
|
/* Permission Rows */
|
|
.perm-row {
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: space-between;
|
|
padding: 10px 18px;
|
|
border-bottom: 1px solid var(--border-secondary, #21262d);
|
|
transition: background 0.15s;
|
|
}
|
|
|
|
.perm-row:last-child {
|
|
border-bottom: none;
|
|
}
|
|
|
|
.perm-row:hover {
|
|
background: rgba(88, 166, 255, 0.04);
|
|
}
|
|
|
|
.perm-row.perm-override {
|
|
background: rgba(210, 153, 34, 0.06);
|
|
}
|
|
|
|
.perm-row.perm-override:hover {
|
|
background: rgba(210, 153, 34, 0.1);
|
|
}
|
|
|
|
.perm-info {
|
|
display: flex;
|
|
align-items: center;
|
|
gap: 10px;
|
|
flex: 1;
|
|
min-width: 0;
|
|
}
|
|
|
|
.perm-name {
|
|
font-size: 13px;
|
|
font-weight: 500;
|
|
color: var(--text-primary, #e6edf3);
|
|
white-space: nowrap;
|
|
}
|
|
|
|
.perm-key {
|
|
font-size: 11px;
|
|
font-family: var(--font-mono, 'SFMono-Regular', monospace);
|
|
color: var(--text-tertiary, #484f58);
|
|
white-space: nowrap;
|
|
}
|
|
|
|
.perm-badge {
|
|
display: inline-block;
|
|
padding: 1px 7px;
|
|
font-size: 10px;
|
|
font-weight: 600;
|
|
border-radius: 10px;
|
|
text-transform: uppercase;
|
|
letter-spacing: 0.5px;
|
|
white-space: nowrap;
|
|
}
|
|
|
|
.perm-badge.default {
|
|
background: rgba(88, 166, 255, 0.12);
|
|
color: var(--accent-blue, #58a6ff);
|
|
}
|
|
|
|
.perm-badge.override {
|
|
background: rgba(210, 153, 34, 0.15);
|
|
color: #d29922;
|
|
}
|
|
|
|
/* Permission Actions (toggle + revert) */
|
|
.perm-actions {
|
|
display: flex;
|
|
align-items: center;
|
|
gap: 8px;
|
|
flex-shrink: 0;
|
|
}
|
|
|
|
.btn-icon-sm {
|
|
display: inline-flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
width: 26px;
|
|
height: 26px;
|
|
border: none;
|
|
border-radius: 4px;
|
|
background: transparent;
|
|
cursor: pointer;
|
|
transition: background 0.15s;
|
|
}
|
|
|
|
.btn-icon-sm .material-icons {
|
|
font-size: 16px;
|
|
}
|
|
|
|
.btn-revert {
|
|
color: #d29922;
|
|
}
|
|
|
|
.btn-revert:hover {
|
|
background: rgba(210, 153, 34, 0.15);
|
|
}
|
|
|
|
/* Toggle Switch */
|
|
.toggle-label {
|
|
display: inline-flex;
|
|
align-items: center;
|
|
}
|
|
|
|
.toggle-switch {
|
|
appearance: none;
|
|
-webkit-appearance: none;
|
|
width: 40px;
|
|
height: 22px;
|
|
background: var(--bg-tertiary, #21262d);
|
|
border-radius: 11px;
|
|
position: relative;
|
|
cursor: pointer;
|
|
border: 1px solid var(--border-primary, #30363d);
|
|
transition: background 0.2s, border-color 0.2s;
|
|
flex-shrink: 0;
|
|
}
|
|
|
|
.toggle-switch::after {
|
|
content: '';
|
|
position: absolute;
|
|
top: 2px;
|
|
left: 2px;
|
|
width: 16px;
|
|
height: 16px;
|
|
background: var(--text-secondary, #8b949e);
|
|
border-radius: 50%;
|
|
transition: transform 0.2s, background 0.2s;
|
|
}
|
|
|
|
.toggle-switch:checked {
|
|
background: var(--accent-blue, #58a6ff);
|
|
border-color: var(--accent-blue, #58a6ff);
|
|
}
|
|
|
|
.toggle-switch:checked::after {
|
|
transform: translateX(18px);
|
|
background: #fff;
|
|
}
|
|
|
|
.toggle-switch:disabled {
|
|
opacity: 0.5;
|
|
cursor: not-allowed;
|
|
}
|
|
|
|
/* ── Empty / Locked States ──────────────────────────────── */
|
|
|
|
.permissions-empty,
|
|
.permissions-locked {
|
|
text-align: center;
|
|
padding: 48px 24px;
|
|
color: var(--text-secondary, #8b949e);
|
|
}
|
|
|
|
.permissions-empty.hidden,
|
|
.permissions-locked.hidden {
|
|
display: none;
|
|
}
|
|
|
|
.permissions-empty .material-icons,
|
|
.permissions-locked .material-icons {
|
|
font-size: 48px;
|
|
color: var(--text-tertiary, #484f58);
|
|
margin-bottom: 12px;
|
|
}
|
|
|
|
.permissions-empty h3,
|
|
.permissions-locked h3 {
|
|
font-size: 16px;
|
|
font-weight: 600;
|
|
color: var(--text-primary, #e6edf3);
|
|
margin: 0 0 8px;
|
|
}
|
|
|
|
.permissions-empty p,
|
|
.permissions-locked p {
|
|
font-size: 13px;
|
|
margin: 0;
|
|
line-height: 1.5;
|
|
}
|
|
|
|
/* ── Responsive ─────────────────────────────────────────── */
|
|
|
|
@media (max-width: 768px) {
|
|
.permissions-toolbar {
|
|
flex-direction: column;
|
|
align-items: stretch;
|
|
}
|
|
|
|
.permissions-toolbar .toolbar-left,
|
|
.permissions-toolbar .toolbar-right {
|
|
width: 100%;
|
|
}
|
|
|
|
.role-selector {
|
|
flex-direction: column;
|
|
align-items: stretch;
|
|
}
|
|
|
|
.role-selector select {
|
|
min-width: unset;
|
|
width: 100%;
|
|
}
|
|
|
|
.role-info-banner {
|
|
flex-direction: column;
|
|
gap: 12px;
|
|
}
|
|
|
|
.role-info-right {
|
|
justify-content: flex-start;
|
|
}
|
|
|
|
.perm-row {
|
|
padding: 8px 12px;
|
|
}
|
|
|
|
.perm-info {
|
|
flex-wrap: wrap;
|
|
gap: 4px;
|
|
}
|
|
|
|
.perm-key {
|
|
display: none;
|
|
}
|
|
}
|