feat: [UIE-9392] - IAM Delegation: permissions check for Parent Account (linode#13063)

Co-authored-by: Alban Bailly <abailly@akamai.com>

Author: mpolotsk-akamai

packages/manager/.changeset/pr-13063-upcoming-features-1762436208092.md

@@ -0,0 +1,5 @@
+---
+"@linode/manager": Upcoming Features
+---
+
+IAM Parent/Child: delegate permissions for parent account ([#13063](https://github.com/linode/manager/pull/13063))

packages/manager/src/features/IAM/Delegations/AccountDelegationsTableRow.tsx

@@ -5,6 +5,7 @@ import { InlineMenuAction } from 'src/components/InlineMenuAction/InlineMenuActi
 import { TableCell } from 'src/components/TableCell';
 import { TableRow } from 'src/components/TableRow/TableRow';
 
+import { usePermissions } from '../hooks/usePermissions';
 import { TruncatedList } from '../Shared/TruncatedList';
 import { UpdateDelegationsDrawer } from './UpdateDelegationsDrawer';
 
@@ -19,6 +20,9 @@ export const AccountDelegationsTableRow = ({ delegation, index }: Props) => {
   const theme = useTheme();
   const [isDrawerOpen, setIsDrawerOpen] = React.useState(false);
 
+  const { data: permissions } = usePermissions('account', [
+    'update_delegate_users',
+  ]);
   const handleUpdateDelegations = () => {
     setIsDrawerOpen(true);
   };
@@ -118,11 +122,17 @@ export const AccountDelegationsTableRow = ({ delegation, index }: Props) => {
           </Typography>
         )}
       </TableCell>
-      <TableCell sx={{ textAlign: 'right', whiteSpace: 'nowrap' }}>
+      <TableCell sx={{ textAlign: 'right', whiteSpace: 'nowrap', pr: 0 }}>
         <InlineMenuAction
           actionText="Update Delegations"
           buttonHeight={40}
+          disabled={!permissions.update_delegate_users}
           onClick={handleUpdateDelegations}
+          tooltip={
+            !permissions.update_delegate_users
+              ? 'You do not have permission to update delegations.'
+              : undefined
+          }
         />
       </TableCell>
       <UpdateDelegationsDrawer

packages/manager/src/features/IAM/Delegations/UpdateDelegationsDrawer.tsx

@@ -14,6 +14,7 @@ import { enqueueSnackbar } from 'notistack';
 import React from 'react';
 import { Controller, FormProvider, useForm } from 'react-hook-form';
 
+import { usePermissions } from '../hooks/usePermissions';
 import {
   DELEGATION_VALIDATION_ERROR,
   INTERNAL_ERROR_NO_CHANGES_SAVED,
@@ -50,6 +51,10 @@ export const UpdateDelegationsDrawer = ({
     filters: { user_type: 'parent' },
   });
 
+  const { data: permissions } = usePermissions('account', [
+    'update_delegate_users',
+  ]);
+
   const { mutateAsync: updateDelegates } =
     useUpdateChildAccountDelegatesQuery();
 
@@ -180,6 +185,10 @@ export const UpdateDelegationsDrawer = ({
               label: 'Update',
               loading: isSubmitting,
               type: 'submit',
+              disabled: !permissions?.update_delegate_users,
+              tooltipText: !permissions?.update_delegate_users
+                ? 'You do not have permission to update delegations.'
+                : undefined,
             }}
             secondaryButtonProps={{
               'data-testid': 'cancel',

packages/manager/src/routes/IAM/index.ts

@@ -138,7 +138,10 @@ const iamDelegationsRoute = createRoute({
   path: 'delegations',
   beforeLoad: async ({ context }) => {
     const isDelegationEnabled = context?.flags?.iamDelegation?.enabled;
-    if (!isDelegationEnabled) {
+    const profile = context?.profile;
+
+    const isChildAccount = profile?.user_type === 'child';
+    if (!isDelegationEnabled || isChildAccount) {
       throw redirect({
         to: '/iam/users',
       });