Hide member management controls without canManage and guard zero run time #116
Closed
weichen
wants to merge 1 commits from
fix/multiuser-project-collab into main
pull from: fix/multiuser-project-collab
merge into: :main
:main
:feature/rdm-two-trees-followup-w10
:fix/scratch-conversation-view-type
:feature/scratch-session-general-agent
:feature/project-access-lifecycle-u6-ui
:fix/multiuser-project-collab-r4
:fix/multiuser-project-collab-r3
:fix/multiuser-project-collab-r2
:feature/iam-link-u4-frontend-auto-discover
:fix/multiuser-project-collab
:feature/auth-one-time-password-r2
:feature/project-access-lifecycle-u1-frontend
:feature/iam-perm-ux-frontend
:feature/super-admin
:feature/iam-u3-account-ui
:feature/iam-u4-role-permission-ui
:feature/unified-document-renderer-task11
:feature/auth-password-management-frontend
:feature/auth-one-time-password
:fix/cockpit-cancel-guard
:debug/cockpit-render-log
:feature/document-visualization-cockpit-i4
:fix/admin-create-e2e-guard
:fix/account-chain-ui
:fix/admin-user-create-contract
:fix/duty-settings-gating
:feature/layered-python-env
:feature/rdm-duty-matrix
:fix/workbench-choice-browser-wait
:feature/workbench-flow-completion
:feature/frontend-u4-docs-instantiate
:feature/workbench-visual-redesign
:feature/work-companion-visibility
:feature/rdm-settings-completion
:feature/rdm-audit-export-entry
:feature/project-member-access
:fix/set-role-rename
:feature/rdm-increment-duties-page
:feature/rdm-increment-members-picker
:fix/settingdesc-managed-scope
:feature/rdm-increment-system-settings
:feature/svc-login-recovery-flow
:archive/admin-notes-repair-frontend-candidate
:feature/rdm-roles-reject-state
:feature/work-companion-ui
:feature/fe-u7-browser-e2e
:feature/surface-black-screen-recovery
:fix/surface-list-hydrate
:feature/fast-slow-display-u1
:feature/rdm-audit-capability-gate-changepw-form
:feature/rdm-audit-capability-gate
:feature/adminzone-contracts-fix
:feature/adminzone-plugin-sections
:feature/generative-ui-u6
:feature/me-refresh-on-auth
:feature/plugins-compiled-listing
:feature/rdm-e2e-acceptance
:fix/artifact-version-dedupe
:fix/genui-page-visibility
:feature/rdm-u4-audit-workspace
:feature/generative-ui-u5
:feature/login-clear-stale-key
:feature/admin-auth-gate-fix
:feature/generative-ui-u4
:feature/generative-ui-u2-contract-sync
:feature/generative-ui-u2-nodeids
:feature/ui-three-column-workbench
:feature/empty-state-preview-fix
:feature/preview-scroll-consolidate
:feature/sillytavern-review
:feature/agent-harness-p3b
:feature/base-extension-roadmap
:feature/agent-native-deliverables-r1
:chore/ignore-mimosa-cache
:feature/deliverable-docx-r1
:feature/project-inbox-r1
:feature/file-preview-caps
:feature/cardflow-r1
:fix/dep-vuln-bumps
:feature/chat-process-split-r1
:feature/chat-order-artifact-files
:feature/cross-session-reading
:feature/ui-capability-platform
:feature/visual-refresh-r4
:feature/auth-admin-accounts
:feature/task-sidebar-r1
:feature/prompt-library
:feature/chat-live-quality
:feature/chat-scroll-fix
:feature/polish-r1
:feature/workspaces-r1
:feature/command-bus-r1
:feature/inbox-r2
:feature/core-cards-commands-r1
:feature/ui-foundation-r0
Reference in New Issue
Block a user
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Why: 8788 multi-user verification showed ordinary project members see member-management controls (and trigger 403s), and the live status bar shows an enormous elapsed time when the run start time is the zero timestamp.
Changes:
canManagefromrdm.project.member.list; when false hides the add-member block and per-row role/remove buttons, shows a read-only hint, and skipsrdm.role.options.eventTimefalls back to now for non-positive parsed timestamps (e.g.0001-01-01T00:00:00Z).test/rdm-members-gating.test.tsx, eventTime cases intest/send.test.ts.Evidence: CI on PR HEAD is authoritative; worker ran tsc/vitest in its isolated workspace (SELF).
Impact: Frontend member section and store helper only. Depends on RDM returning
canManage(Agent-System-RDM fix/multiuser-project-collab); without it the section is read-only.Refs: Dev task fix/multiuser-project-collab; agent-exec transport
b496c44(agy).Superseded: Frontend main merged IAM U4 (#115), which already gates member management via rdm.perm.check. Remaining fixes (eventTime zero-time guard; skip rdm.role.options for non-managers) move to fix/multiuser-project-collab-r2 based on the new main.
Pull request closed