feat(FR-3357): surface failed users via bulk-error modal in RBAC user assignment

[ironAiken2]

Resolves #8362 (FR-3357)

Stacked on #8360 (FR-3355) → #8302 (FR-3334).

Summary

RBAC role user assignment reported partial failures of adminBulkAssignRole as a warning toast plus one persistent notification per failed user, and closed the assign modal unconditionally — the user lost the context of which users failed. This aligns the assignment flow with FR-3334's partial-failure UX.

AssignRoleModal

• Owns the bulk-assign mutation now (moved from RoleAssignmentTab), reporting back via onRequestClose(success) — the same contract as RoleScopePermissionEditModal. The parent only opens/closes the modal and refetches on success.
• On partial failure the modal stays open. Successfully assigned users are deselected; only the failed users remain in the select, so pressing Assign again retries exactly what failed.
• The select shows an error border via an empty-string field error (form.setFields with errors: ['']) — error status without a printed message. Changing the selection revalidates the required rule and clears the border.
• The shared BAIBulkErrorModal lists each failure (user email + server error message) on top of the assign modal. A wholly-rejected request counts every requested user as failed, with the message unwrapped by the shared reasonMessage helper.
• Cancel after a partial success reports success=true so the parent still refetches — some assignments reached the backend.
• Failed-user labels are resolved from an accumulated map of every option selected so far (the options list only holds the current search results, so failed users may no longer be in it when the failure arrives).

Supporting changes

• reasonMessage moved from RoleScopePermissionEditModal to react/src/helper/mutationError.ts and is now shared by both modals.
• The bulk-assign mutation, handleBulkAssign, and its per-user upsertNotification fallout removed from RoleAssignmentTab (the revoke flow is unchanged and out of scope).
• New i18n key rbac.UserAssignmentsPartialFailureDescription ("Some user assignments failed. Please check the items.") added to all 21 languages, mirroring FR-3334's PermissionsPartialFailureDescription copy. rbac.BulkAssignPartialFailure is kept — still used by ProjectAdminSettingModal.

How to test

The test server 10.82.0.151 is configured so that bulk RBAC requests always fail — use it to reproduce the partial-failure UX:

1. Point the WebUI at 10.82.0.151, open RBAC management → a role's detail drawer → Assignments tab → Assign User.
2. Select several users and click Assign → the modal stays open, the select keeps the failed users with a red border, and the bulk-error modal lists one row per failed user with the server message.
3. Close the error modal and change the selection → the red border clears. Assign again → only the remaining users are re-submitted.
4. On a normal backend, full success behaves as before: success message, modal closes, table refetches.

Verification

bash scripts/verify.sh → === ALL PASS === (Relay / Lint / Format / TypeScript / Vite warmup)

🤖 Generated with Claude Code

[ironAiken2]

Warning

This pull request is not mergeable via GitHub because a downstack PR is open. Once all requirements are satisfied, merge this PR as a stack on Graphite.
Learn more

• feat(FR-3357): surface failed users via bulk-error modal in RBAC user assignment #8363 👈 (View in Graphite)
• feat(FR-3355): show 'No changes made' message on no-op RBAC permission save #8360
• feat(FR-3334): add common bulk-error modal and preserve form state on partial bulk failure #8302
• main

---

How to use the Graphite Merge Queue

Add either label to this PR to merge it via the merge queue:

• flow:merge-queue - adds this PR to the back of the merge queue
• flow:hotfix - for urgent changes, fast-track this PR to the front of the merge queue

You must have a Graphite account in order to use the merge queue. Sign up using this link.

An organization admin has required the Graphite Merge Queue in this repository.

Please do not merge from GitHub as this will restart CI on PRs being processed by the merge queue.

This stack of pull requests is managed by Graphite. Learn more about stacking.

[github-actions]

Coverage Report for react-coverage (./react)

Status	Category	Percentage	Covered / Total
🔵	Lines	7.06%	2140 / 30304
🔵	Statements	5.8%	2443 / 42113
🔵	Functions	6.09%	355 / 5820
🔵	Branches	3.83%	1517 / 39571

File Coverage

File	Stmts	Branches	Functions	Lines	Uncovered Lines
Changed Files
react/src/components/AssignRoleModal.tsx	0%	0%	0%	0%	46-302
react/src/components/RoleAssignmentTab.tsx	0%	0%	0%	0%	48-369
react/src/components/RoleScopePermissionEditModal.tsx	0%	0%	0%	0%	52-877
react/src/helper/mutationError.ts	0%	0%	0%	0%	11-27

Generated in workflow #3142 for commit 032bb76 by the Vitest Coverage Report Action

[Copilot]

Pull request overview

Improves RBAC bulk user assignment by preserving failed users for retry and displaying per-user errors.

Changes:

• Moves assignment mutation handling into AssignRoleModal.
• Adds retry-preserving partial-failure UX and shared error formatting.
• Adds localized partial-failure descriptions across 21 locales.

Reviewed changes

Copilot reviewed 26 out of 26 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
react/src/components/AssignRoleModal.tsx	Implements assignment and partial-failure handling.
react/src/components/RoleAssignmentTab.tsx	Delegates assignment ownership to the modal.
react/src/components/RoleScopePermissionEditModal.tsx	Uses the shared mutation error helper.
react/src/helper/mutationError.ts	Extracts mutation rejection message formatting.
react/src/__generated__/AssignRoleModalBulkAssignMutation.graphql.ts	Renames the generated Relay mutation artifact.
resources/i18n/de.json	Adds German failure guidance.
resources/i18n/el.json	Adds Greek failure guidance.
resources/i18n/en.json	Adds English failure guidance.
resources/i18n/es.json	Adds Spanish failure guidance.
resources/i18n/fi.json	Adds Finnish failure guidance.
resources/i18n/fr.json	Adds French failure guidance.
resources/i18n/id.json	Adds Indonesian failure guidance.
resources/i18n/it.json	Adds Italian failure guidance.
resources/i18n/ja.json	Adds Japanese failure guidance.
resources/i18n/ko.json	Adds Korean failure guidance.
resources/i18n/mn.json	Adds Mongolian failure guidance.
resources/i18n/ms.json	Adds Malay failure guidance.
resources/i18n/pl.json	Adds Polish failure guidance.
resources/i18n/pt-BR.json	Adds Brazilian Portuguese failure guidance.
resources/i18n/pt.json	Adds Portuguese failure guidance.
resources/i18n/ru.json	Adds Russian failure guidance.
resources/i18n/th.json	Adds Thai failure guidance.
resources/i18n/tr.json	Adds Turkish failure guidance.
resources/i18n/vi.json	Adds Vietnamese failure guidance.
resources/i18n/zh-CN.json	Adds Simplified Chinese failure guidance.
resources/i18n/zh-TW.json	Adds Traditional Chinese failure guidance.