19855efacc
Some checks failed
Tests / Go Tests (push) Has been cancelled
Tests / Python Tests (push) Has been cancelled
Tests / Integration Tests (push) Has been cancelled
Tests / Go Lint (push) Has been cancelled
Tests / Python Lint (push) Has been cancelled
Tests / Security Scan (push) Has been cancelled
Tests / All Checks Passed (push) Has been cancelled
Security Scanning / Secret Scanning (push) Has been cancelled
Security Scanning / Dependency Vulnerability Scan (push) Has been cancelled
Security Scanning / Go Security Scan (push) Has been cancelled
Security Scanning / Python Security Scan (push) Has been cancelled
Security Scanning / Node.js Security Scan (push) Has been cancelled
Security Scanning / Docker Image Security (push) Has been cancelled
Security Scanning / Security Summary (push) Has been cancelled
CI/CD Pipeline / Go Tests (push) Has been cancelled
CI/CD Pipeline / Python Tests (push) Has been cancelled
CI/CD Pipeline / Website Tests (push) Has been cancelled
CI/CD Pipeline / Linting (push) Has been cancelled
CI/CD Pipeline / Security Scan (push) Has been cancelled
CI/CD Pipeline / Docker Build & Push (push) Has been cancelled
CI/CD Pipeline / Integration Tests (push) Has been cancelled
CI/CD Pipeline / Deploy to Staging (push) Has been cancelled
CI/CD Pipeline / Deploy to Production (push) Has been cancelled
CI/CD Pipeline / CI Summary (push) Has been cancelled
ci/woodpecker/manual/build-ci-image Pipeline was successful
ci/woodpecker/manual/main Pipeline failed
All services: admin-v2, studio-v2, website, ai-compliance-sdk, consent-service, klausur-service, voice-service, and infrastructure. Large PDFs and compiled binaries excluded via .gitignore.
101 lines
2.7 KiB
TypeScript
101 lines
2.7 KiB
TypeScript
/**
|
|
* Role-based Access System for Admin v2
|
|
*
|
|
* Roles determine which categories and modules are visible
|
|
*/
|
|
|
|
import { CategoryId } from './navigation'
|
|
|
|
export type RoleId = 'developer' | 'manager' | 'auditor' | 'dsb'
|
|
|
|
export interface Role {
|
|
id: RoleId
|
|
name: string
|
|
description: string
|
|
icon: string
|
|
visibleCategories: CategoryId[]
|
|
color: string
|
|
}
|
|
|
|
export const roles: Role[] = [
|
|
{
|
|
id: 'developer',
|
|
name: 'Entwickler',
|
|
description: 'Voller Zugriff auf alle Bereiche',
|
|
icon: 'code',
|
|
visibleCategories: ['compliance-sdk', 'ai', 'infrastructure', 'education', 'communication', 'development', 'website'],
|
|
color: 'bg-primary-100 border-primary-300 text-primary-700',
|
|
},
|
|
{
|
|
id: 'manager',
|
|
name: 'Manager',
|
|
description: 'Executive Uebersicht',
|
|
icon: 'chart',
|
|
visibleCategories: ['compliance-sdk', 'communication', 'website'],
|
|
color: 'bg-blue-100 border-blue-300 text-blue-700',
|
|
},
|
|
{
|
|
id: 'auditor',
|
|
name: 'Auditor',
|
|
description: 'Compliance Pruefung',
|
|
icon: 'clipboard',
|
|
visibleCategories: ['compliance-sdk'],
|
|
color: 'bg-amber-100 border-amber-300 text-amber-700',
|
|
},
|
|
{
|
|
id: 'dsb',
|
|
name: 'DSB',
|
|
description: 'Datenschutzbeauftragter',
|
|
icon: 'shield',
|
|
visibleCategories: ['compliance-sdk'],
|
|
color: 'bg-purple-100 border-purple-300 text-purple-700',
|
|
},
|
|
]
|
|
|
|
// Storage key for localStorage
|
|
const ROLE_STORAGE_KEY = 'admin-v2-selected-role'
|
|
|
|
// Get role by ID
|
|
export function getRoleById(id: RoleId): Role | undefined {
|
|
return roles.find(role => role.id === id)
|
|
}
|
|
|
|
// Check if category is visible for a role
|
|
export function isCategoryVisibleForRole(categoryId: CategoryId, roleId: RoleId): boolean {
|
|
const role = getRoleById(roleId)
|
|
return role ? role.visibleCategories.includes(categoryId) : false
|
|
}
|
|
|
|
// Get stored role from localStorage (client-side only)
|
|
export function getStoredRole(): RoleId | null {
|
|
if (typeof window === 'undefined') return null
|
|
const stored = localStorage.getItem(ROLE_STORAGE_KEY)
|
|
if (stored && roles.some(r => r.id === stored)) {
|
|
return stored as RoleId
|
|
}
|
|
return null
|
|
}
|
|
|
|
// Store role in localStorage
|
|
export function storeRole(roleId: RoleId): void {
|
|
if (typeof window === 'undefined') return
|
|
localStorage.setItem(ROLE_STORAGE_KEY, roleId)
|
|
}
|
|
|
|
// Clear stored role
|
|
export function clearStoredRole(): void {
|
|
if (typeof window === 'undefined') return
|
|
localStorage.removeItem(ROLE_STORAGE_KEY)
|
|
}
|
|
|
|
// Check if this is a first-time visitor (no role stored)
|
|
export function isFirstTimeVisitor(): boolean {
|
|
return getStoredRole() === null
|
|
}
|
|
|
|
// Get visible categories for a role
|
|
export function getVisibleCategoriesForRole(roleId: RoleId): CategoryId[] {
|
|
const role = getRoleById(roleId)
|
|
return role ? role.visibleCategories : []
|
|
}
|