fix: [UIE-9671] - IAM: create Linode permission fix (#13118)

* fix: [UIE-9671] - IAM: create Linode permission fix

* fix: [UIE-9671] - test fix

Author: mpolotsk-akamai

packages/manager/.changeset/pr-13118-fixed-1763722681223.md

@@ -0,0 +1,5 @@
+---
+"@linode/manager": Fixed
+---
+
+IAM: The StackScript/Linode selector is enabled in the Create Linode flow when the user doesn’t have the create_linode permission ([#13118](https://github.com/linode/manager/pull/13118))

packages/manager/src/features/Linodes/LinodeCreate/Actions.tsx

@@ -83,7 +83,11 @@ export const Actions = ({ isAlertsBetaMode }: ActionProps) => {
 
   return (
     <Box sx={{ display: 'flex', gap: 1, justifyContent: 'flex-end' }}>
-      <Button buttonType="outlined" onClick={onOpenAPIAwareness}>
+      <Button
+        buttonType="outlined"
+        disabled={isDisabled}
+        onClick={onOpenAPIAwareness}
+      >
         View Code Snippets
       </Button>
       <Button

packages/manager/src/features/Linodes/LinodeCreate/Tabs/StackScripts/StackScriptSelectionRow.tsx

@@ -1,11 +1,13 @@
 /* eslint-disable jsx-a11y/label-has-associated-control */
 import { Radio, Stack, Typography } from '@linode/ui';
 import { truncate } from '@linode/utilities';
+import { useLocation } from '@tanstack/react-router';
 import React from 'react';
 
 import { InlineMenuAction } from 'src/components/InlineMenuAction/InlineMenuAction';
 import { TableCell } from 'src/components/TableCell';
 import { TableRow } from 'src/components/TableRow';
+import { usePermissions } from 'src/features/IAM/hooks/usePermissions';
 import { isLKEStackScript } from 'src/features/StackScripts/stackScriptUtils';
 
 import type { StackScript } from '@linode/api-v4';
@@ -21,6 +23,13 @@ interface Props {
 export const StackScriptSelectionRow = (props: Props) => {
   const { disabled, isSelected, onOpenDetails, onSelect, stackscript } = props;
 
+  const location = useLocation();
+  const { data: permissions } = usePermissions('account', ['create_linode']);
+
+  const rowIsDisabled =
+    disabled ||
+    (!permissions?.create_linode &&
+      location.pathname.includes('/linodes/create'));
   // Never show LKE StackScripts. We try to hide these from the user even though they
   // are returned by the API.
   if (isLKEStackScript(stackscript)) {
@@ -32,7 +41,7 @@ export const StackScriptSelectionRow = (props: Props) => {
       <TableCell>
         <Radio
           checked={isSelected}
-          disabled={disabled}
+          disabled={rowIsDisabled}
           id={`stackscript-${stackscript.id}`}
           onChange={onSelect}
         />
@@ -61,7 +70,11 @@ export const StackScriptSelectionRow = (props: Props) => {
         </label>
       </TableCell>
       <TableCell actionCell>
-        <InlineMenuAction actionText="Show Details" onClick={onOpenDetails} />
+        <InlineMenuAction
+          actionText="Show Details"
+          disabled={rowIsDisabled}
+          onClick={onOpenDetails}
+        />
       </TableCell>
     </TableRow>
   );

packages/manager/src/features/Linodes/LinodeCreate/shared/LinodeSelectTable.test.tsx

@@ -20,6 +20,7 @@ const queryMocks = vi.hoisted(() => ({
   userPermissions: vi.fn(() => ({
     data: {
       clone_linode: true,
+      create_linode: true,
     },
   })),
 }));

packages/manager/src/features/Linodes/LinodeCreate/shared/LinodeSelectTableRow.test.tsx

@@ -17,6 +17,7 @@ const queryMocks = vi.hoisted(() => ({
     data: {
       shutdown_linode: false,
       clone_linode: false,
+      create_linode: false,
     },
   })),
 }));
@@ -71,6 +72,7 @@ describe('LinodeSelectTableRow', () => {
       data: {
         shutdown_linode: false,
         clone_linode: true,
+        create_linode: true,
       },
     });
     const linode = linodeFactory.build();
@@ -182,6 +184,7 @@ describe('LinodeSelectTableRow', () => {
       data: {
         shutdown_linode: true,
         clone_linode: true,
+        create_linode: true,
       },
     });
 

packages/manager/src/features/Linodes/LinodeCreate/shared/LinodeSelectTableRow.tsx

@@ -33,6 +33,10 @@ export const LinodeSelectTableRow = (props: Props) => {
 
   const region = regions?.find((r) => r.id === linode.region);
 
+  const { data: accountPermissions } = usePermissions('account', [
+    'create_linode',
+  ]);
+
   const { data: permissions } = usePermissions(
     'linode',
     ['shutdown_linode', 'clone_linode'],
@@ -45,7 +49,9 @@ export const LinodeSelectTableRow = (props: Props) => {
         <FormControlLabel
           checked={selected}
           control={<Radio />}
-          disabled={!permissions.clone_linode}
+          disabled={
+            !permissions.clone_linode || !accountPermissions?.create_linode
+          }
           label={linode.label}
           onChange={onSelect}
           sx={{ gap: 2 }}