Fix auditor access to people

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>

apps/console/src/pages/iam/organizations/people/_components/PeopleList.tsx

@@ -1,12 +1,15 @@
+import { getAssignableRoles } from "@probo/helpers";
 import { useTranslate } from "@probo/i18n";
 import { Tbody, Td, Th, Thead, Tr } from "@probo/ui";
 import type { ComponentProps } from "react";
+import { use } from "react";
 import { ConnectionHandler, graphql, usePaginationFragment } from "react-relay";
 
 import type { PeopleListFragment$key } from "#/__generated__/iam/PeopleListFragment.graphql";
 import type { PeopleListFragment_RefetchQuery } from "#/__generated__/iam/PeopleListFragment_RefetchQuery.graphql";
 import { type Order, SortableTable, SortableTh } from "#/components/SortableTable";
 import { useOrganizationId } from "#/hooks/useOrganizationId";
+import { CurrentUser } from "#/providers/CurrentUser";
 
 import { PeopleListItem } from "./PeopleListItem";
 
@@ -50,6 +53,8 @@ export function PeopleList(props: {
 
   const organizationId = useOrganizationId();
   const { __ } = useTranslate();
+  const { role } = use(CurrentUser);
+  const canManageRoles = getAssignableRoles(role).length > 0;
 
   const peoplePagination = usePaginationFragment<
     PeopleListFragment_RefetchQuery,
@@ -85,7 +90,7 @@ export function PeopleList(props: {
           <SortableTh field="FULL_NAME" onOrderChange={handleOrderChange}>{__("Name")}</SortableTh>
           <SortableTh field="STATE">{__("Status")}</SortableTh>
           <SortableTh field="EMAIL_ADDRESS" onOrderChange={handleOrderChange}>{__("Email")}</SortableTh>
-          <SortableTh field="ROLE" onOrderChange={handleOrderChange}>{__("Role")}</SortableTh>
+          {canManageRoles && <SortableTh field="ROLE" onOrderChange={handleOrderChange}>{__("Role")}</SortableTh>}
           <SortableTh field="CREATED_AT" onOrderChange={handleOrderChange}>{__("Created on")}</SortableTh>
           <Th></Th>
         </Tr>

apps/console/src/pages/iam/organizations/people/_components/PeopleListItem.tsx

@@ -213,6 +213,7 @@ export function PeopleListItem(props: {
           <Badge variant="info">{profile.source}</Badge>
         </div>
       </Td>
+      {availableRoles.length > 0 && (
         <Td
           noLink
           className={clsx(
@@ -243,6 +244,7 @@ export function PeopleListItem(props: {
             )}
           </Select>
         </Td>
+      )}
       <Td className={clsx(
         isRemoving && "opacity-60 pointer-events-none",
         isInactive && "opacity-50",

pkg/iam/iam_policies.go

@@ -318,6 +318,7 @@ var IAMViewerPolicy = policy.NewPolicy(
 	policy.Allow(
 		ActionOrganizationGet,
 		ActionMembershipList,
+		ActionInvitationList,
 	).
 		WithSID("org-viewer-access").
 		When(policy.Equals("principal.organization_id", "resource.organization_id")),