fix pnpm yaml

Author: raineer

apps/codebility/app/home/settings/page.tsx

@@ -28,46 +28,79 @@ type RolePermissions = {
 
 type PermissionKey = keyof RolePermissions;
 
-// Map specific settings routes to their respective permission keys.
+// Admin-only cards that require role_id = 1
+const ADMIN_ONLY_PATHS = [
+  "/home/settings/news-banners",
+  "/home/settings/services",
+];
+
+// Map specific settings routes to their respective permission keys
 const settingsPermissionMap: Record<string, PermissionKey> = {
   "/home/settings/profile": "resume",
   "/home/settings/permissions": "permissions",
   "/home/settings/roles": "roles",
-  "/home/settings/news-banners": "settings", // Admin-only feature
 };
 
 const Settings = () => {
-  // Move Supabase client initialization to state and useEffect
   const [supabase, setSupabase] = useState<any>(null);
-
-  // Instead of using useUser, assume roleId is known (e.g. passed as a prop or hardcoded)
-  const roleId = 2; // Replace with actual logic to obtain the user's roleId
-
-  const [rolePermissions, setRolePermissions] =
-    useState<RolePermissions | null>(null);
+  const [roleId, setRoleId] = useState<number | null>(null);
+  const [rolePermissions, setRolePermissions] = useState<RolePermissions | null>(null);
   const [loading, setLoading] = useState<boolean>(true);
 
-  // Initialize Supabase client safely
+  // Initialize Supabase client
   useEffect(() => {
     const client = createClientClientComponent();
     setSupabase(client);
   }, []);
 
-  // Helper function to check a permission
-  const hasPermission = (permission: PermissionKey): boolean => {
-    return !!rolePermissions?.[permission];
-  };
-
+  // Get current user's role_id by mapping auth email to codev.role_id
   useEffect(() => {
     if (!supabase) return;
 
+    async function fetchUserRole() {
+      try {
+        // Get auth user
+        const { data: { session }, error: sessionError } = await supabase.auth.getSession();
+        
+        if (sessionError || !session?.user?.email) {
+          console.error("Failed to get session:", sessionError);
+          setLoading(false);
+          return;
+        }
+
+        // Map email to codev profile to get role_id
+        const { data: codevData, error: codevError } = await supabase
+          .from("codev")
+          .select("role_id")
+          .eq("email_address", session.user.email)
+          .single();
+
+        if (codevError || !codevData) {
+          console.error("Failed to fetch user role:", codevError);
+          setLoading(false);
+          return;
+        }
+
+        setRoleId(codevData.role_id);
+      } catch (err) {
+        console.error("Error fetching user role:", err);
+        setLoading(false);
+      }
+    }
+
+    fetchUserRole();
+  }, [supabase]);
+
+  // Fetch role permissions once we have roleId
+  useEffect(() => {
+    if (!supabase || roleId === null) return;
+
     async function fetchRolePermissions() {
       try {
-        // Fetch the role permissions from the "roles" table.
         const { data: roleData, error: roleError } = await supabase
           .from("roles")
           .select(
-            "dashboard, kanban, time_tracker, interns, applicants, inhouse, clients, projects, settings, orgchart, resume, permissions, roles",
+            "dashboard, kanban, time_tracker, interns, applicants, inhouse, clients, projects, settings, orgchart, resume, permissions, roles"
           )
           .eq("id", roleId)
           .single();
@@ -77,16 +110,23 @@ const Settings = () => {
           setLoading(false);
           return;
         }
+
         setRolePermissions(roleData);
       } catch (err) {
         console.error("Error fetching role permissions:", err);
       } finally {
         setLoading(false);
       }
     }
+
     fetchRolePermissions();
   }, [supabase, roleId]);
 
+  // Helper function to check a permission
+  const hasPermission = (permission: PermissionKey): boolean => {
+    return !!rolePermissions?.[permission];
+  };
+
   if (loading) {
     return (
       <PageContainer>
@@ -95,20 +135,31 @@ const Settings = () => {
     );
   }
 
-  if (!rolePermissions) {
+  if (!rolePermissions || roleId === null) {
     return (
       <PageContainer>
         <div className="mx-auto p-4">Unable to determine permissions.</div>
       </PageContainer>
     );
   }
 
-  // Filter settings cards based on role permissions.
-  // For a card whose path exists in the mapping, use its permission key;
-  // otherwise, require the general "settings" permission.
+  // Filter settings cards based on role
   const filteredCards = settingsCardData.filter((card) => {
-    const permissionKey = settingsPermissionMap[card.path] || "settings";
-    return hasPermission(permissionKey);
+    // Rule 1: Admin-only cards (News Banners, Services)
+    // Only visible if user has role_id = 1 (Admin)
+    if (ADMIN_ONLY_PATHS.includes(card.path)) {
+      return roleId === 1;
+    }
+
+    // Rule 2: Check specific permission mapping
+    // For cards like Profile, Permissions, Roles
+    const permissionKey = settingsPermissionMap[card.path];
+    if (permissionKey) {
+      return hasPermission(permissionKey);
+    }
+
+    // Rule 3: Default fallback - require general "settings" permission
+    return hasPermission("settings");
   });
 
   return (
@@ -130,4 +181,4 @@ const Settings = () => {
   );
 };
 
-export default Settings;
+export default Settings;