feat(admin): disable adding user realated attrbiutes to active service

* added logic to check if consent is required for service
* if consent is required user related attributes are disabled in add req. att. dialog
* added tooltip to such attributes
* added alert to inform users that it is prefered to add attributes when service is disabled

Author: bodnara

apps/admin-gui/src/app/shared/components/attr-def-list/attr-def-list.component.html

@@ -29,6 +29,10 @@
               (click)="$event.stopPropagation()"
               [aria-label]="checkboxLabel(row)"
               [checked]="selection.isSelected(row)"
+              [disabled]="row.namespace | consentRelatedAttribute:serviceEnabled:consentRequired"
+              [matTooltip]="'ADMIN.ATTRIBUTES.CONSENT_RELATED_DISABLED' | translate"
+              [matTooltipDisabled]="!(row.namespace | consentRelatedAttribute:serviceEnabled:consentRequired)"
+              matTooltipPosition="left"
               color="primary">
             </mat-checkbox>
           </td>

apps/admin-gui/src/app/shared/components/attr-def-list/attr-def-list.component.ts

@@ -23,6 +23,7 @@ import {
   TableWrapperComponent,
 } from '@perun-web-apps/perun/utils';
 import { GuiAuthResolver, TableCheckbox } from '@perun-web-apps/perun/services';
+import { ConsentRelatedAttributePipe } from '../../pipes/consent-related-attribute.pipe';
 
 @Component({
   selector: 'app-attr-def-list',
@@ -33,7 +34,8 @@ export class AttrDefListComponent implements OnChanges, AfterViewInit {
   constructor(
     private dialog: MatDialog,
     private authResolver: GuiAuthResolver,
-    private tableCheckbox: TableCheckbox
+    private tableCheckbox: TableCheckbox,
+    private consentRelatedPipe: ConsentRelatedAttributePipe
   ) {}
 
   @Input()
@@ -56,6 +58,8 @@ export class AttrDefListComponent implements OnChanges, AfterViewInit {
   tableId: string;
   @Input()
   disableRouting = false;
+  @Input() consentRequired = false;
+  @Input() serviceEnabled = false;
 
   @Output()
   refreshEvent = new EventEmitter<void>();
@@ -72,6 +76,9 @@ export class AttrDefListComponent implements OnChanges, AfterViewInit {
   private sort: MatSort;
   pageSizeOptions = TABLE_ITEMS_COUNT_OPTIONS;
 
+  canBeSelected = (row: AttributeDefinition) =>
+    !this.consentRelatedPipe.transform(row.namespace, this.serviceEnabled, this.consentRequired);
+
   ngOnChanges() {
     if (!this.authResolver.isPerunAdminOrObserver()) {
       this.displayedColumns = this.displayedColumns.filter((column) => column !== 'id');
@@ -143,12 +150,15 @@ export class AttrDefListComponent implements OnChanges, AfterViewInit {
   }
 
   isAllSelected() {
-    return this.tableCheckbox.isAllSelected(
+    return this.tableCheckbox.isAllSelectedWithDisabledCheckbox(
       this.selection.selected.length,
       this.filterValue,
       this.child.paginator.pageSize,
       this.child.paginator.hasNextPage(),
-      this.dataSource
+      this.child.paginator.pageIndex,
+      this.dataSource,
+      this.sort,
+      this.canBeSelected
     );
   }
 
@@ -161,7 +171,8 @@ export class AttrDefListComponent implements OnChanges, AfterViewInit {
       this.sort,
       this.child.paginator.pageSize,
       this.child.paginator.pageIndex,
-      false
+      true,
+      this.canBeSelected
     );
   }
 

apps/admin-gui/src/app/shared/components/dialogs/add-required-attributes-dialog/add-required-attributes-dialog.component.html

@@ -2,6 +2,11 @@
   <h1 mat-dialog-title>{{'DIALOGS.ADD_REQUIRED_ATTRIBUTES.TITLE' | translate}}</h1>
   <mat-spinner *ngIf="loading" class="mr-auto ml-auto"></mat-spinner>
   <div *ngIf="!loading" mat-dialog-content class="dialog-container">
+    <app-alert
+      *ngIf="serviceEnabled$ | async"
+      [alert_type]="'warn'"
+      >{{'DIALOGS.ADD_REQUIRED_ATTRIBUTES.ACTIVE_WARN' | translate}}</app-alert
+    >
     <perun-web-apps-immediate-filter
       (filter)="applyFilter($event)"
       [placeholder]="'DIALOGS.ADD_REQUIRED_ATTRIBUTES.FILTER'">
@@ -10,7 +15,9 @@ <h1 mat-dialog-title>{{'DIALOGS.ADD_REQUIRED_ATTRIBUTES.TITLE' | translate}}</h1
       [selection]="selection"
       [definitions]="attrDefinitions"
       [disableRouting]="true"
-      [filterValue]="filterValue">
+      [filterValue]="filterValue"
+      [serviceEnabled]="serviceEnabled$ | async"
+      [consentRequired]="consentRequired$ | async">
     </app-attr-def-list>
   </div>
   <div mat-dialog-actions *ngIf="!loading">

apps/admin-gui/src/app/shared/components/dialogs/add-required-attributes-dialog/add-required-attributes-dialog.component.ts

@@ -3,11 +3,17 @@ import { MAT_DIALOG_DATA, MatDialogRef } from '@angular/material/dialog';
 import {
   AttributeDefinition,
   AttributesManagerService,
+  ConsentHub,
+  ConsentsManagerService,
+  FacilitiesManagerService,
+  Facility,
   ServicesManagerService,
 } from '@perun-web-apps/perun/openapi';
 import { NotificatorService } from '@perun-web-apps/perun/services';
 import { TranslateService } from '@ngx-translate/core';
 import { SelectionModel } from '@angular/cdk/collections';
+import { from, Observable } from 'rxjs';
+import { concatMap, distinct, map, mergeMap, reduce, startWith } from 'rxjs/operators';
 
 export interface AddRequiredAttributesDialogData {
   serviceId: number;
@@ -25,10 +31,29 @@ export class AddRequiredAttributesDialogComponent implements OnInit {
     @Inject(MAT_DIALOG_DATA) private data: AddRequiredAttributesDialogData,
     private serviceManager: ServicesManagerService,
     private attributesManager: AttributesManagerService,
+    private facilitiesService: FacilitiesManagerService,
+    private consentHubService: ConsentsManagerService,
     private notificator: NotificatorService,
     private translate: TranslateService
   ) {}
 
+  consentRequired$: Observable<boolean> = this.facilitiesService
+    .getAssignedFacilitiesByService(this.data.serviceId)
+    .pipe(
+      concatMap(from),
+      map((facility: Facility) => facility.id),
+      distinct(),
+      mergeMap((id: number) => this.consentHubService.getConsentHubByFacility(id)),
+      reduce((req, hub: ConsentHub) => req || hub.enforceConsents, false),
+      startWith(true)
+    );
+  serviceEnabled$: Observable<boolean> = this.serviceManager
+    .getServiceById(this.data.serviceId)
+    .pipe(
+      map((service) => service.enabled),
+      startWith(true)
+    );
+
   theme: string;
   serviceId: number;
 

apps/admin-gui/src/app/shared/pipes/consent-related-attribute.pipe.ts

@@ -0,0 +1,31 @@
+import { Pipe, PipeTransform } from '@angular/core';
+import { StoreService } from '@perun-web-apps/perun/services';
+
+@Pipe({
+  name: 'consentRelatedAttribute',
+})
+export class ConsentRelatedAttributePipe implements PipeTransform {
+  private USER_CONSENT_RELATED_ATT_NAMESPACE: string[] = [
+    'urn:perun:user_facility:attribute-def',
+    'urn:perun:user:attribute-def',
+    'urn:perun:member:attribute-def',
+    'urn:perun:member_group:attribute-def',
+    'urn:perun:member_resource:attribute-def',
+    'urn:perun:ues:attribute-def',
+  ];
+
+  constructor(private storeService: StoreService) {}
+
+  transform(attNamespace: string, serviceEnabled: boolean, enforceHubConsent: boolean): boolean {
+    const enforceInstanceConsent: boolean = this.storeService.get('enforce_consents') as boolean;
+    if (!enforceInstanceConsent || !enforceHubConsent || !serviceEnabled) {
+      return false;
+    }
+
+    // When consent is required mark consent related attributes
+    return this.USER_CONSENT_RELATED_ATT_NAMESPACE.reduce(
+      (acc: boolean, namespace) => acc || attNamespace.startsWith(namespace),
+      false
+    );
+  }
+}

apps/admin-gui/src/app/shared/shared.module.ts

@@ -171,6 +171,7 @@ import { AuditMessageDetailDialogComponent } from './components/dialogs/audit-me
 import { ParseEventNamePipe } from './pipes/parse-event-name.pipe';
 import { ConsentHubsListComponent } from './components/consent-hubs-list/consent-hubs-list.component';
 import { EditEnforceConsentsDialogComponent } from './components/dialogs/edit-enforce-consents-dialog/edit-enforce-consents-dialog.component';
+import { ConsentRelatedAttributePipe } from './pipes/consent-related-attribute.pipe';
 
 @NgModule({
   imports: [
@@ -435,8 +436,9 @@ import { EditEnforceConsentsDialogComponent } from './components/dialogs/edit-en
     ParseEventNamePipe,
     ConsentHubsListComponent,
     EditEnforceConsentsDialogComponent,
+    ConsentRelatedAttributePipe,
   ],
-  providers: [AnyToStringPipe, ExtSourceTypePipe],
+  providers: [AnyToStringPipe, ExtSourceTypePipe, ConsentRelatedAttributePipe],
 })
 export class SharedModule {
   constructor(private translate: TranslateService) {

apps/admin-gui/src/assets/config/defaultConfig.json

@@ -51,6 +51,7 @@
   "skip_oidc": false,
   "group_name_secondary_regex": "^[-a-zA-Z.0-9_ ]+$",
   "group_name_error_message": "Name cannot be empty and can contain only characters a-z, A-Z, numbers, spaces, dots, '_' and '-'",
+  "enforce_consents": false,
   "footer": {
     "columns": [
       {

apps/admin-gui/src/assets/i18n/en.json

@@ -1719,7 +1719,8 @@
       "ADD": "Add",
       "CANCEL": "Cancel",
       "SUCCESS": "Required attributes were added.",
-      "FILTER": "Filter"
+      "FILTER": "Filter",
+      "ACTIVE_WARN": "Service is active. Some attributes can only be added to disabled services. Preferably disable service before adding required attributes."
     },
     "REMOVE_REQUIRED_ATTRIBUTES": {
       "TITLE": "Remove required attributes",
@@ -2160,7 +2161,8 @@
       "IMPORT": "Import",
       "DELETE": "Delete",
       "SEARCH": "Filter by Id, name, entity, definition, or type",
-      "NO_ATTRIBUTES": "There are no attributes available."
+      "NO_ATTRIBUTES": "There are no attributes available.",
+      "CONSENT_RELATED_DISABLED": "Attribute requires user's permission. It can only be added, when service is disabled."
     },
     "USERS": {
       "TITLE": "Users",