From 9b15343a7997d08bd04498138d31576b379ab813 Mon Sep 17 00:00:00 2001
From: Tymoteusz Czech <2625371+Tymek@users.noreply.github.com>
Date: Tue, 17 Dec 2024 10:16:24 +0100
Subject: [PATCH] feat: authentication configuration permission (#8987)

New permission for SSO config.
---
 frontend/src/component/admin/auth/AuthSettings.tsx           | 4 ++--
 .../RolePermissionCategories/RolePermissionCategories.tsx    | 3 ++-
 src/lib/types/permissions.ts                                 | 5 +++++
 3 files changed, 9 insertions(+), 3 deletions(-)

diff --git a/frontend/src/component/admin/auth/AuthSettings.tsx b/frontend/src/component/admin/auth/AuthSettings.tsx
index af024707dc..59856f3bbd 100644
--- a/frontend/src/component/admin/auth/AuthSettings.tsx
+++ b/frontend/src/component/admin/auth/AuthSettings.tsx
@@ -8,7 +8,7 @@ import { ScimSettings } from './ScimSettings/ScimSettings';
 import { PasswordAuth } from './PasswordAuth/PasswordAuth';
 import { GoogleAuth } from './GoogleAuth/GoogleAuth';
 import { PermissionGuard } from 'component/common/PermissionGuard/PermissionGuard';
-import { ADMIN } from '@server/types/permissions';
+import { ADMIN, UPDATE_AUTH_CONFIGURATION } from '@server/types/permissions';
 import { PremiumFeature } from 'component/common/PremiumFeature/PremiumFeature';
 import { useState } from 'react';
 import { TabPanel } from 'component/common/TabNav/TabPanel/TabPanel';
@@ -51,7 +51,7 @@ export const AuthSettings = () => {
 
     return (
         <div>
-            <PermissionGuard permissions={ADMIN}>
+            <PermissionGuard permissions={[ADMIN, UPDATE_AUTH_CONFIGURATION]}>
                 <PageContent
                     withTabs
                     header={
diff --git a/frontend/src/component/admin/roles/RoleForm/RolePermissionCategories/RolePermissionCategories.tsx b/frontend/src/component/admin/roles/RoleForm/RolePermissionCategories/RolePermissionCategories.tsx
index d8097bc22a..e261f8d8fb 100644
--- a/frontend/src/component/admin/roles/RoleForm/RolePermissionCategories/RolePermissionCategories.tsx
+++ b/frontend/src/component/admin/roles/RoleForm/RolePermissionCategories/RolePermissionCategories.tsx
@@ -91,7 +91,8 @@ export const RolePermissionCategories = ({
                     .filter(
                         ({ label }) =>
                             granularAdminPermissionsEnabled ||
-                            label !== 'Instance maintenance',
+                            (label !== 'Instance maintenance' &&
+                                label !== 'Authentication'),
                     )
                     .map(({ label, type, permissions }) => (
                         <RolePermissionCategory
diff --git a/src/lib/types/permissions.ts b/src/lib/types/permissions.ts
index 2ce1d977a0..d179e93f88 100644
--- a/src/lib/types/permissions.ts
+++ b/src/lib/types/permissions.ts
@@ -43,6 +43,7 @@ export const DELETE_TAG_TYPE = 'DELETE_TAG_TYPE';
 
 export const UPDATE_MAINTENANCE_MODE = 'UPDATE_MAINTENANCE_MODE';
 export const UPDATE_INSTANCE_BANNERS = 'UPDATE_INSTANCE_BANNERS';
+export const UPDATE_AUTH_CONFIGURATION = 'UPDATE_AUTH_CONFIGURATION';
 
 // Project
 export const CREATE_FEATURE = 'CREATE_FEATURE';
@@ -148,6 +149,10 @@ export const ROOT_PERMISSION_CATEGORIES = [
         label: 'Instance maintenance',
         permissions: [UPDATE_MAINTENANCE_MODE, UPDATE_INSTANCE_BANNERS],
     },
+    {
+        label: 'Authentication',
+        permissions: [UPDATE_AUTH_CONFIGURATION],
+    },
 ];
 
 // Used on Frontend, to allow admin panel use for users with custom root roles