Accessing current user roles

[BibiSebi]

Is your feature request related to a problem? Please describe.
The developer of a plugin would like to show/hide parts of the plugin based on the current user's roles. This is not possible at the moment as we are not passing the user information to the field plugin.

Describe the solution you'd like
useFieldPlugin() could expose the current user's roles and id. However we need to check if this can be exploited in any way.

Additional context
This request originates from a Discord thread.

[marckraw]

We're developing and maintaining a suite of plugins for our in-house "site builder" platform, which is powered by Storyblok.

As our plugins grow in complexity, we've identified a need to leverage the roles and permissions systems. This would allow us to dynamically show or hide elements within our plugins based on specific user access levels.

Consider a scenario where we have a plugin that displays various options depending on the user's role. To implement this functionality effectively, we need a way to access information about the user's assigned role or individual permissions within Storyblok. For instance, if a user has publishing rights for stories, we might want to present them with an expanded set of options within our plugin.

[marckraw]

Also, our specific use case is, that we have our own set of "fields" within custom plugin :) So based on the permissions we would like to show our internal plugin fields or not:

[pedrosousa13]

This would be great

[marckraw]

created the support ticket: https://support.storyblok.com/hc/en-us/requests/13886 this is becoming extra critical for us @BibiSebi

[Dawntraoz]

Resend your request internally, so we can consider this for development sooner. cc @demetriusfeijoo

[Dawntraoz]

In the latest package release, the userId was added back:

• Release - storyblok/field-plugin - 1.4.2

cc @marckraw. Should we keep it open for the roles, or can you make the proper request with the user ID to grab that information?

[marckraw]

@Dawntraoz amaaaaaazing! will test it right away today 🥇

[marckraw]

@Dawntraoz would be great if we can get the roles already, but we can start working with userId, will update comment after i test it today :)

[marckraw]

@Dawntraoz tested it out, and its there, thank you <3 If its possible, we would like to also have a user roles in there - right now, having the userId for our exploration phase we can find out what are his roles with management api, but perfect use case would be to have that information without the need to make management api request ourselves :)

[Dawntraoz]

Thanks for checking you are the best! 🎉

Good news from our side also @marckraw, in the plugin we are building now we will need to get the roles too, so we will take the time to make it available for the SDK 🙏 It's coming 💃🏻

[marckraw]

@Dawntraoz that is amazing! Looking forward to it :)
what information from the overall roles situation in storyblok you would like to expose there ? the role name, or all the information about permissions, field_permissions ?

Was working on getting the roles for the user with management api, but it involved more back and forth than I expected :P

• Right now, having a userId I know who is seeing the plugin, but to get his roles i have to do a request for the space and space roles
• then I need to check if he is the owner of the space or collaborator (as i checked out, owner of the space is not on the collaborators list so i have to look for his roles information in different place)
• if the user is the collaborator, i have to check if he has multi role or single and then merge fields from both roles, from space_roles endpoint.

Here is more or less what I do in the plugin to get all this info:

const determinePermission = async (args: DeterminePermissionArgs): Promise<Permission | Permission[]> => {
        const {plugin, store} = args;

        if (store.apis?.managementApi) {
            const currentSpaceDetails = await store.apis.managementApi.get(`/spaces/317084/`)
            const spaceRoles = currentSpaceDetails.data.space.space_roles

            // 1. check if the user is the owner of the space - which mean he has admin permissions
            const isOwner = currentSpaceDetails.data.space.owner.id === plugin?.data?.userId
            if(isOwner) {
                // If its owner, we return the role of the space, which is the role of the owner I think..
                return {
                    role: currentSpaceDetails.data.space.role,
                    permissions: null,
                    field_permissions: null,
                    space_role_ids: null,
                    space_roles: null
                }
            }

            // If it's not owner, we check the collaborators
            const userRole = currentSpaceDetails
                .data
                .space
                .collaborators
                .find((collaborator: any) => collaborator.user.id === plugin?.data?.userId)

            if(userRole) {
                // We found the user in the collaborators
                // Now we need to check what exact role he has
                // if its multi or single or what
                if(userRole.role === "multi") {
                    const userSpaceRoles = spaceRoles.filter((spaceRole: any) => userRole.space_role_ids.includes(spaceRole.id))

                    const mergePermissions = userSpaceRoles.reduce((acc: string[], role: any) => [...acc, ...role.permissions], [])
                    const mergeFieldPermissions = userSpaceRoles.reduce((acc: string[], role: any) => [...acc, ...role.field_permissions], [])
                    return {
                        role: "multi",
                        space_roles: userSpaceRoles,
                        permissions: mergePermissions,
                        field_permissions: mergeFieldPermissions,
                        space_role_ids: userRole.space_role_ids
                    }
                } else {
                    if(userRole.space_role_id) {
                        const userSpaceRole = spaceRoles.find((spaceRole: any) => userRole.space_role_id === spaceRole.id)                   
return {
                        role: userRole.role,
                            permissions: userSpaceRole.permissions,
                            field_permissions: userSpaceRole.field_permissions,
                            space_role_ids: [userRole.space_role_id],
                            space_roles: userSpaceRole
                        }
                    } else {
                        return {
                            role: userRole.role,
                            permissions: null,
                            field_permissions: null,
                            space_role_ids: null,
                            space_roles: null
                        }
                    }
                }
            } else {
                return {
                    role: null,
                    permissions: null,
                    field_permissions: null,
                    space_role_ids: null,
                    space_roles: null
                }
            }
          }
          return {
            role: null,
            permissions: null,
            field_permissions: null,
            space_role_ids: null,
            space_roles: null
        }
    }

At least that was my flow, but for sure i'm missing something :D

Anyway, would be nice to know, what is your idea of what will you exposed, so we can prepare ourselves accordingly :)

[Dawntraoz]

Hi @marckraw 👋 We are currently finishing a solution that may cover your company's needs, we decided to create an action called "requestUserContext" that will return a user object with the properties: isSpaceAdmin boolean and permissions JSON, something like this:

Initially, it won't be returned; you need to call it and await the result to get it, so it's not in the load process of the plugin but an additional feature, so it doesn't affect the plugin performance 🙏 Will this cover all your needs?