feat(FR-2893): disable upload button when host lacks upload-file permission (#7412)

Resolves #7411(FR-2893)

test-server: 10.122.10.107

## Summary

`FolderExplorerModalV2` already fetches the caller's host-level permission set via `useMergedAllowedStorageHostPermission`, and that set carries both `download-file` and `upload-file`. Until now only `download-file` was consumed; write/upload/edit were hard-coded to `true` and stayed enabled regardless of host permission. This PR splits the upload gate from the generic write gate, wires V2 to the host `upload-file` capability, and surfaces _why_ the button is disabled via a tooltip.

## Component changes (`BAIFileExplorer` / `ExplorerActionControls`)

- New optional `enableUpload?: boolean` prop on `BAIFileExplorer` and `ExplorerActionControls`.
- `enableUpload` gates: upload dropdown, mobile upload button, drag-drop overlay.
- `enableWrite` continues to gate: mkdir, create-file, inline rename.
- Default is `enableUpload = false` (opt-in), matching the convention of the other capability props (`enableDownload` / `enableDelete` / `enableWrite` / `enableEdit`).
- When `enableUpload` is falsy, the upload button's tooltip shows `comp:FileExplorer.NoUploadPermissionForHost` so users understand why the action is disabled.

## V2 wiring (`FolderExplorerModalV2`)

```tsx
const hasUploadContentPermission = _.includes(
  unitedAllowedPermissionByVolume[vfolderNode?.host ?? ''],
  'upload-file',
);
...
enableWrite={hasWriteContentPermission}    // = true (unchanged; FR-2619 follow-up)
enableUpload={hasUploadContentPermission}  // new gate
enableEdit={hasUploadContentPermission}    // edit save = overwrite upload
```

`enableEdit` is gated by `upload-file` because the in-app text editor saves by overwriting the file via the upload API (`VFolderTextFileEditorModal` → `uploadFiles`). If the user lacks `upload-file`, the save would fail server-side anyway; disabling upfront keeps the UX honest.

## V1 wiring (`FolderExplorerModal`)

Since the new default is opt-in (`enableUpload = false`), V1 now explicitly passes `enableUpload={hasWriteContentPermission}` to preserve its previous bundled behavior. V1 still gates by `write_content` from the vfolder entity permission — adopting the host `upload-file` check would broaden V1's behavior change and is out of scope for this PR.

## i18n

New key `comp:FileExplorer.NoUploadPermissionForHost` added to `en.json` (source) and translated into all 20 target languages via the `fw:i18n-translator` agent (de, el, es, fi, fr, id, it, ja, ko, mn, ms, pl, pt, pt-BR, ru, th, tr, vi, zh-CN, zh-TW).

Korean: "호스트에 대한 업로드 권한이 없습니다."

## Out of scope

- `hasWriteContentPermission` and `hasDeleteContentPermission` remain hard-coded to `true`. There is no host-level permission for mkdir / create-file / rename / delete today; FR-2619 will revisit when the backend exposes the effective permission set.
- Separately, the storage host currently accepts uploads even when `upload-file` is not granted (server-side gap, observed during the Hyundai Mobis investigation). That belongs on the backend and is being tracked separately.

## Test plan

- [ ] V2 explorer — user without `upload-file` on the folder's host:
    - Upload dropdown, mobile upload button, drag-drop overlay, and file-edit save are all disabled.
    - Hovering the upload button shows the "no upload permission" tooltip (and the localized version when the UI language is switched).
- [ ] V2 explorer — mkdir / create-file / inline rename remain enabled regardless of `upload-file`.
- [ ] V2 explorer — user with `upload-file`: all upload and edit actions behave as before.
- [ ] V2 explorer — `download-file` gating is unchanged.
- [ ] V1 `FolderExplorerModal` — no behavior change: `write_content` continues to gate upload, mkdir, create-file, rename, and edit. Same disabled-vs-enabled outcome as `main`.

Author: ironAiken2

packages/backend.ai-ui/src/components/baiClient/FileExplorer/BAIFileExplorer.tsx

@@ -58,6 +58,11 @@ export interface BAIFileExplorerProps {
   enableDownload?: boolean;
   enableDelete?: boolean;
   enableWrite?: boolean;
+  // Gates upload entry points (upload dropdown + drag-drop). Defaults to
+  // `enableWrite` for backwards compatibility — callers that need to gate
+  // upload independently (e.g., on the `upload-file` host permission) should
+  // pass this explicitly.
+  enableUpload?: boolean;
   enableEdit?: boolean;
   onChangeFetchKey?: (fetchKey: string) => void;
   ref?: React.Ref<BAIFileExplorerRef>;
@@ -81,6 +86,7 @@ const BAIFileExplorer: React.FC<BAIFileExplorerProps> = ({
   enableDownload = false,
   enableDelete = false,
   enableWrite = false,
+  enableUpload = false,
   enableEdit = false,
   onDeleteFilesInBackground,
   deletingFilePaths,
@@ -301,7 +307,7 @@ const BAIFileExplorer: React.FC<BAIFileExplorerProps> = ({
         currentPath,
       }}
     >
-      {isDragMode && (
+      {isDragMode && enableUpload && (
         <DragAndDrop
           portalContainer={fileDropContainerRef?.current || undefined}
           onUpload={(files, currentPath) => onUpload(files, currentPath)}
@@ -326,6 +332,7 @@ const BAIFileExplorer: React.FC<BAIFileExplorerProps> = ({
             enableDownload={enableDownload}
             enableDelete={enableDelete}
             enableWrite={enableWrite}
+            enableUpload={enableUpload}
             onUpload={(files, currentPath) => onUpload(files, currentPath)}
             onDeleteFilesInBackground={onDeleteFilesInBackground}
             onClearSelection={() => setSelectedItems([])}

packages/backend.ai-ui/src/components/baiClient/FileExplorer/ExplorerActionControls.tsx

@@ -51,6 +51,13 @@ interface ExplorerActionControlsProps {
   enableDownload?: boolean;
   enableDelete?: boolean;
   enableWrite?: boolean;
+  // Gates the upload entry points (dropdown + drag-drop). The corresponding
+  // server operation is `upload-file` on the storage host, which is distinct
+  // from generic write capability (mkdir / create-file / rename) and from
+  // file edit (which is also an upload underneath). Defaults to `enableWrite`
+  // so callers that don't pass it explicitly keep the previous bundled
+  // behavior.
+  enableUpload?: boolean;
   // onClickRefresh?: (key: string) => void;
   extra?: React.ReactNode;
 }
@@ -64,6 +71,7 @@ const ExplorerActionControls: React.FC<ExplorerActionControlsProps> = ({
   enableDownload = false,
   enableDelete = false,
   enableWrite = false,
+  enableUpload = enableWrite,
   extra,
 }) => {
   const { t } = useTranslation();
@@ -178,7 +186,7 @@ const ExplorerActionControls: React.FC<ExplorerActionControlsProps> = ({
           </Button>
         </Tooltip>
         <Dropdown
-          disabled={!enableWrite}
+          disabled={!enableUpload}
           trigger={['click']}
           open={openUploadDropdown}
           onOpenChange={toggleUploadDropdown}
@@ -237,8 +245,16 @@ const ExplorerActionControls: React.FC<ExplorerActionControlsProps> = ({
             );
           }}
         >
-          <Tooltip title={!lg && t('general.button.Upload')}>
-            <Button icon={<UploadOutlined />} disabled={!enableWrite}>
+          <Tooltip
+            title={
+              !enableUpload
+                ? t('comp:FileExplorer.NoUploadPermissionForHost')
+                : !lg
+                  ? t('general.button.Upload')
+                  : undefined
+            }
+          >
+            <Button icon={<UploadOutlined />} disabled={!enableUpload}>
               {lg && t('general.button.Upload')}
             </Button>
           </Tooltip>

packages/backend.ai-ui/src/locale/de.json

@@ -333,6 +333,7 @@
     "ModifiedAt": "Modifiziert bei",
     "MoreOptions": "Weitere Optionen",
     "Name": "Name",
+    "NoUploadPermissionForHost": "Sie haben keine Hochlade-Berechtigung für diesen Host.",
     "PleaseEnterAFileName": "Please enter the file name.",
     "PleaseEnterAFolderName": "Bitte geben Sie den Ordneramen ein.",
     "RenameSuccess": "Der Name wurde erfolgreich geändert.",

packages/backend.ai-ui/src/locale/el.json

@@ -333,6 +333,7 @@
     "ModifiedAt": "Τροποποιημένος",
     "MoreOptions": "Περισσότερες επιλογές",
     "Name": "Ονομα",
+    "NoUploadPermissionForHost": "Δεν έχετε άδεια μεταφόρτωσης για αυτόν τον κεντρικό χώρο αποθήκευσης.",
     "PleaseEnterAFileName": "Please enter the file name.",
     "PleaseEnterAFolderName": "Εισαγάγετε το όνομα του φακέλου.",
     "RenameSuccess": "Το όνομα έχει αλλάξει με επιτυχία.",

packages/backend.ai-ui/src/locale/en.json

@@ -339,6 +339,7 @@
     "ModifiedAt": "Modified At",
     "MoreOptions": "More options",
     "Name": "Name",
+    "NoUploadPermissionForHost": "You don't have upload permission for this host.",
     "PleaseEnterAFileName": "Please enter the file name.",
     "PleaseEnterAFolderName": "Please enter the folder name.",
     "RenameSuccess": "The name has been successfully changed.",

packages/backend.ai-ui/src/locale/es.json

@@ -333,6 +333,7 @@
     "ModifiedAt": "Modificado en",
     "MoreOptions": "Más opciones",
     "Name": "Nombre",
+    "NoUploadPermissionForHost": "No tiene permiso de carga para este host.",
     "PleaseEnterAFileName": "Please enter the file name.",
     "PleaseEnterAFolderName": "Ingrese el nombre de la carpeta.",
     "RenameSuccess": "El nombre ha sido cambiado con éxito.",

packages/backend.ai-ui/src/locale/fi.json

@@ -333,6 +333,7 @@
     "ModifiedAt": "Muutettu",
     "MoreOptions": "Lisää vaihtoehtoja",
     "Name": "Nimi",
+    "NoUploadPermissionForHost": "Sinulla ei ole latausoikeutta tälle tallennuspalvelimelle.",
     "PleaseEnterAFileName": "Please enter the file name.",
     "PleaseEnterAFolderName": "Anna kansionimi.",
     "RenameSuccess": "Nimi on muutettu onnistuneesti.",

packages/backend.ai-ui/src/locale/fr.json

@@ -333,6 +333,7 @@
     "ModifiedAt": "Modifié à",
     "MoreOptions": "Plus d'options",
     "Name": "Nom",
+    "NoUploadPermissionForHost": "Vous n'avez pas la permission de téléverser sur cet hôte.",
     "PleaseEnterAFileName": "Please enter the file name.",
     "PleaseEnterAFolderName": "Veuillez saisir le nom du dossier.",
     "RenameSuccess": "Le nom a été modifié avec succès.",

packages/backend.ai-ui/src/locale/id.json

@@ -333,6 +333,7 @@
     "ModifiedAt": "Dimodifikasi di",
     "MoreOptions": "Opsi lainnya",
     "Name": "Nama",
+    "NoUploadPermissionForHost": "Anda tidak memiliki izin unggah untuk host ini.",
     "PleaseEnterAFileName": "Please enter the file name.",
     "PleaseEnterAFolderName": "Harap masukkan nama folder.",
     "RenameSuccess": "Namanya telah berhasil diubah.",

packages/backend.ai-ui/src/locale/it.json

@@ -333,6 +333,7 @@
     "ModifiedAt": "Modificato a",
     "MoreOptions": "Più opzioni",
     "Name": "Nome",
+    "NoUploadPermissionForHost": "Non si dispone del permesso di caricamento per questo host.",
     "PleaseEnterAFileName": "Please enter the file name.",
     "PleaseEnterAFolderName": "Immettere il nome della cartella.",
     "RenameSuccess": "Il nome è stato cambiato con successo.",