permissins (per instance)

packages/web/src/appobj/SavedFileAppObject.js

@@ -10,8 +10,10 @@ import ScriptWriter from '../impexp/ScriptWriter';
 import { extractPackageName } from 'dbgate-tools';
 import useShowModal from '../modals/showModal';
 import InputTextModal from '../modals/InputTextModal';
+import useHasPermission from '../utility/useHasPermission';
 
 function Menu({ data, menuExt = null }) {
+  const hasPermission = useHasPermission();
   const showModal = useShowModal();
   const handleDelete = () => {
     axios.post('files/delete', data);
@@ -31,8 +33,12 @@ function Menu({ data, menuExt = null }) {
   };
   return (
     <>
-      <DropDownMenuItem onClick={handleDelete}>Delete</DropDownMenuItem>
-      <DropDownMenuItem onClick={handleRename}>Rename</DropDownMenuItem>
+      {hasPermission(`files/${data.folder}/write`) && (
+        <DropDownMenuItem onClick={handleDelete}>Delete</DropDownMenuItem>
+      )}
+      {hasPermission(`files/${data.folder}/write`) && (
+        <DropDownMenuItem onClick={handleRename}>Rename</DropDownMenuItem>
+      )}
       {menuExt}
     </>
   );

packages/web/src/charts/ChartToolbar.js

@@ -1,12 +1,17 @@
 import React from 'react';
+import useHasPermission from '../utility/useHasPermission';
 import ToolbarButton from '../widgets/ToolbarButton';
 
 export default function ChartToolbar({ save }) {
+  const hasPermission = useHasPermission();
+
   return (
     <>
-      <ToolbarButton onClick={save} icon="icon save">
-        Save
-      </ToolbarButton>
+      {hasPermission('files/charts/write') && (
+        <ToolbarButton onClick={save} icon="icon save">
+          Save
+        </ToolbarButton>
+      )}
     </>
   );
 }

packages/web/src/query/QueryToolbar.js

@@ -1,7 +1,9 @@
 import React from 'react';
+import useHasPermission from '../utility/useHasPermission';
 import ToolbarButton from '../widgets/ToolbarButton';
 
 export default function QueryToolbar({ execute, cancel, isDatabaseDefined, busy, save, format, isConnected, kill }) {
+  const hasPermission = useHasPermission();
   return (
     <>
       <ToolbarButton disabled={!isDatabaseDefined || busy} onClick={execute} icon="icon run">
@@ -13,9 +15,11 @@ export default function QueryToolbar({ execute, cancel, isDatabaseDefined, busy,
       <ToolbarButton disabled={!isConnected} onClick={kill} icon="icon close">
         Kill
       </ToolbarButton>
-      <ToolbarButton onClick={save} icon="icon save">
-        Save
-      </ToolbarButton>
+      {hasPermission('files/sql/write') && (
+        <ToolbarButton onClick={save} icon="icon save">
+          Save
+        </ToolbarButton>
+      )}
       <ToolbarButton onClick={format} icon="icon format-code">
         Format
       </ToolbarButton>

packages/web/src/query/ShellToolbar.js

@@ -1,7 +1,9 @@
 import React from 'react';
+import useHasPermission from '../utility/useHasPermission';
 import ToolbarButton from '../widgets/ToolbarButton';
 
 export default function ShellToolbar({ execute, cancel, busy, edit, save, editAvailable }) {
+  const hasPermission = useHasPermission();
   return (
     <>
       <ToolbarButton disabled={busy} onClick={execute} icon="icon run">
@@ -13,9 +15,11 @@ export default function ShellToolbar({ execute, cancel, busy, edit, save, editAv
       <ToolbarButton disabled={!editAvailable} onClick={edit} icon="icon show-wizard">
         Show wizard
       </ToolbarButton>
-      <ToolbarButton onClick={save} icon="icon save">
-        Save
-      </ToolbarButton>
+      {hasPermission('files/shell/write') && (
+        <ToolbarButton onClick={save} icon="icon save">
+          Save
+        </ToolbarButton>
+      )}
     </>
   );
 }

packages/web/src/tabs/PluginTab.js

@@ -9,6 +9,7 @@ import { extractPluginIcon, extractPluginAuthor } from '../plugins/manifestExtra
 import FormStyledButton from '../widgets/FormStyledButton';
 import axios from '../utility/axios';
 import { useInstalledPlugins } from '../utility/metadataLoaders';
+import useHasPermission from '../utility/useHasPermission';
 
 const WhitePage = styled.div`
   position: absolute;
@@ -56,6 +57,7 @@ function Delimiter() {
 }
 
 function PluginTabCore({ packageName }) {
+  const hasPermission = useHasPermission();
   const theme = useTheme();
   const installed = useInstalledPlugins();
   const info = useFetch({
@@ -98,10 +100,10 @@ function PluginTabCore({ packageName }) {
             <Version>{manifest.version && manifest.version}</Version>
           </HeaderLine>
           <HeaderLine>
-            {!installed.find((x) => x.name == packageName) && (
+            {hasPermission('plugins/install') && !installed.find((x) => x.name == packageName) && (
               <FormStyledButton type="button" value="Install" onClick={handleInstall} />
             )}
-            {!!installed.find((x) => x.name == packageName) && (
+            {hasPermission('plugins/install') && !!installed.find((x) => x.name == packageName) && (
               <FormStyledButton type="button" value="Uninstall" onClick={handleUninstall} />
             )}
           </HeaderLine>

packages/web/src/utility/useHasPermission.js

@@ -0,0 +1,10 @@
+import React from 'react';
+import { useConfig } from './metadataLoaders';
+import { compilePermissions, testPermission } from 'dbgate-tools';
+
+export default function useHasPermission() {
+  const config = useConfig();
+  const compiled = React.useMemo(() => compilePermissions(config.permissions), [config]);
+  const hasPermission = (tested) => testPermission(tested, compiled);
+  return hasPermission;
+}

packages/web/src/widgets/FilesWidget.js

@@ -8,6 +8,7 @@ import { WidgetsInnerContainer } from './WidgetStyles';
 import { SavedSqlFileAppObject, SavedShellFileAppObject, SavedChartFileAppObject } from '../appobj/SavedFileAppObject';
 import WidgetColumnBar, { WidgetColumnBarItem } from './WidgetColumnBar';
 import { useFiles } from '../utility/metadataLoaders';
+import useHasPermission from '../utility/useHasPermission';
 
 function ClosedTabsList() {
   const tabs = useOpenedTabs();
@@ -64,20 +65,27 @@ function SavedChartFilesList() {
 }
 
 export default function FilesWidget() {
+  const hasPermission = useHasPermission();
   return (
     <WidgetColumnBar>
       <WidgetColumnBarItem title="Recently closed tabs" name="closedTabs" height="20%">
         <ClosedTabsList />
       </WidgetColumnBarItem>
-      <WidgetColumnBarItem title="Saved SQL files" name="sqlFiles" height="20%">
-        <SavedSqlFilesList />
-      </WidgetColumnBarItem>
-      <WidgetColumnBarItem title="Saved shell files" name="shellFiles" height="20%">
-        <SavedShellFilesList />
-      </WidgetColumnBarItem>
-      <WidgetColumnBarItem title="Saved charts" name="charts" height="20%">
-        <SavedChartFilesList />
-      </WidgetColumnBarItem>
+      {hasPermission('files/sql/read') && (
+        <WidgetColumnBarItem title="Saved SQL files" name="sqlFiles" height="20%">
+          <SavedSqlFilesList />
+        </WidgetColumnBarItem>
+      )}
+      {hasPermission('files/shell/read') && (
+        <WidgetColumnBarItem title="Saved shell files" name="shellFiles" height="20%">
+          <SavedShellFilesList />
+        </WidgetColumnBarItem>
+      )}
+      {hasPermission('files/charts/read') && (
+        <WidgetColumnBarItem title="Saved charts" name="charts" height="20%">
+          <SavedChartFilesList />
+        </WidgetColumnBarItem>
+      )}
     </WidgetColumnBar>
   );
 }