feat: Hide UI elements through window postmessage

[gabriellsh]

Proposed changes (including videos or screenshots)

Made possible to hide some UI elements through the window.postMessage event.

Initial supported UI elements are:
Composer Toolbar
Room Toolbar
Message Toolbar
User actions toolbar

Issue(s)

CE-46

Steps to test or reproduce

Further comments

Example call to hide all UI elements

window.postMessage({
    event: 'overrideUi',
    hideActions: {
        roomToolbox:[
			'channel-settings',
			'team-info',
			'user-info-group',
			'user-info',
			'thread',
			'calls',
			'canned-responses',
			'clean-history',
			'contact-chat-history',
			'contact-profile',
			'discussions',
			'export-messages',
			'keyboard-shortcut-list',
			'members-list',
			'mentions',
			'otr',
			'pinned-messages',
			'push-notifications',
			'rocket-search',
			'room-info',
			'starred-messages',
			'start-call',
			'team-channels',
			'uploaded-files-list',
			'voip-room-info',
		],
		messageToolbox: [
			'reaction-message',
			'quote-message',
			'reply-in-thread',
			'forward-message',
			'reply-directly',
			'follow-message',
			'pin-message',
			'star-message',
			'permalink',
			'copy',
			'edit-message',
			'delete-message',
		],
		composerToolbox: [
			'video-message',
			'audio-message',
			'file-upload',
			'create-discussion',
			'webdav-add',
			'share-location'
		],
		userToolbox: [
			'openDirectMessage',
			'changeOwner',
			'changeLeader',
			'changeModerator',
			'openModerationConsole',
			'ignoreUser',
			'muteUser',
			'reportUser',
			'removeUser',
		],
    }
})

[changeset-bot]

🦋 Changeset detected

Latest commit: 93ca176

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 30 packages

Name	Type
@rocket.chat/meteor	Minor
@rocket.chat/ui-contexts	Major
@rocket.chat/fuselage-ui-kit	Major
@rocket.chat/gazzodown	Major
@rocket.chat/ui-client	Major
@rocket.chat/ui-video-conf	Major
@rocket.chat/uikit-playground	Patch
@rocket.chat/web-ui-registration	Major
@rocket.chat/ddp-streamer	Patch
@rocket.chat/omnichannel-transcript	Patch
@rocket.chat/livechat	Patch
@rocket.chat/core-typings	Minor
@rocket.chat/rest-typings	Minor
@rocket.chat/core-services	Patch
@rocket.chat/cron	Patch
@rocket.chat/model-typings	Patch
@rocket.chat/account-service	Patch
@rocket.chat/authorization-service	Patch
@rocket.chat/presence-service	Patch
@rocket.chat/queue-worker	Patch
@rocket.chat/stream-hub-service	Patch
@rocket.chat/api-client	Patch
@rocket.chat/license	Patch
@rocket.chat/omnichannel-services	Patch
@rocket.chat/pdf-worker	Patch
@rocket.chat/presence	Patch
rocketchat-services	Patch
@rocket.chat/ddp-client	Patch
@rocket.chat/models	Patch
@rocket.chat/instance-status	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[codecov]

Codecov Report

Attention: 44 lines in your changes are missing coverage. Please review.

Comparison is base (2fa8055) 49.47% compared to head (93ca176) 49.55%.

Additional details and impacted files

@@             Coverage Diff             @@
##           develop   #31184      +/-   ##
===========================================
+ Coverage    49.47%   49.55%   +0.08%     
===========================================
  Files         3312     3314       +2     
  Lines        81379    81447      +68     
  Branches     16659    16663       +4     
===========================================
+ Hits         40260    40364     +104     
+ Misses       36416    36372      -44     
- Partials      4703     4711       +8     

Flag	Coverage Δ
e2e	53.07% <70.66%> (+0.18%)	⬆️
e2e-api	40.70% <ø> (+0.03%)	⬆️
unit	76.67% <0.00%> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

[MHFDoge]

Small question, Is there a reason this was introduced strictly for users who embed via iframe, and not just made to work with the existing role-based permission system? I have personally run into several issues over multiple years with things on my workspace that could be quickly solved if a variation of this feature was made available to those who use the standard web interface provided by the server application itself.

[gabriellsh]

@MHFDoge it's actually not exclusive to iframe, you can use it anywhere you can inject a custom script. This comes from common user requests that try to embed rocket.chat in another application, so it fits this need without being to complex. Coupling the UI to the role-based permission system is not something we want to do.