RocketChat · dionisio-bot · Jul 30, 2026 · Jul 9, 2026 · Jul 9, 2026 · Jul 9, 2026
diff --git a/.changeset/abac-classification-banners.md b/.changeset/abac-classification-banners.md
@@ -0,0 +1,5 @@
+---
+'@rocket.chat/meteor': minor
+---
+
+Adds classification banners to ABAC-managed rooms: admins can describe US-Government-style classification markings (levels, special access programs, releasability, colors) in a new JSON setting, and matching rooms display a colored classification banner above the room header for all members.
@@ -32,6 +32,13 @@ const SettingsPage = () => {
 				)}
 
 				<Accordion>
+					<AccordionItem title={t('ABAC_Classification_Banners')}>
+						<FieldGroup>
+							<SettingField settingId='ABAC_Classification_Banners_Enabled' />
+							<SettingField settingId='ABAC_Classification_Banners_Config' />
+						</FieldGroup>
+					</AccordionItem>
+
 					<AccordionItem title={t('LDAP_DataSync_ABAC')}>
 						<FieldGroup>
 							<SettingField settingId='LDAP_Background_Sync_ABAC_Attributes' />

@@ -0,0 +1,146 @@
+import type { IRoom, RoomType } from '@rocket.chat/core-typings';
+import { mockAppRoot } from '@rocket.chat/mock-providers';
+import type { Meta, StoryObj } from '@storybook/react';
+
+import ClassificationBanner from './ClassificationBanner';
+import type { ClassificationBannersConfig } from './lib/types';
+import FakeRoomProvider from '../../../../tests/mocks/client/FakeRoomProvider';
+import { createFakeLicenseInfo } from '../../../../tests/mocks/data';
+
+const config: ClassificationBannersConfig = {
+	version: 1,
+	enabled: true,
+	banner: {
+		style: 'classic',
+		uppercase: true,
+		monospace: false,
+		delimiter: ' // ',
+		colorMode: 'highest',
+		fallbackText: 'NO CLASSIFICATION DATA',
+		fallbackColor: '#6C727A',
+	},
+	attributes: [
+		{
+			id: 'classification',
+			source: 'clearance.level',
+			label: 'Classification level',
+			showInBanner: true,
+			showLabel: false,
+			bannerLabel: '',
+			labelSeparator: '',
+			valueSeparator: '/',
+			sortAlpha: false,
+			groupThreshold: 0,
+			multipleLabel: '',
+			drivesColor: true,
+			values: [
+				{ source: 'TS-SCI', label: 'TOP SECRET//SCI', color: '#fce100' },
+				{ source: 'TS', label: 'TOP SECRET', color: '#ff8c00' },
+				{ source: 'S', label: 'SECRET', color: '#c8102e' },
+				{ source: 'C', label: 'CONFIDENTIAL', color: '#0033a0' },
+				{ source: 'CUI', label: 'CUI', color: '#502b85' },
+				{ source: 'U', label: 'UNCLASSIFIED', color: '#007a33' },
+			],
+		},
+		{
+			id: 'sar',
+			source: 'access.programs',
+			label: 'Special access programs',
+			showInBanner: true,
+			showLabel: true,
+			bannerLabel: 'SAR',
+			labelSeparator: '-',
+			valueSeparator: '/',
+			sortAlpha: true,
+			groupThreshold: 4,
+			multipleLabel: 'MULTIPLE PROGRAMS',
+			drivesColor: false,
+			values: [
+				{ source: 'SAP-1042', label: 'APPLES', color: '#c8102e' },
+				{ source: 'SAP-2271', label: 'BANANAS', color: '#ff8c00' },
+				{ source: 'SAP-3380', label: 'ORANGES', color: '#0033a0' },
+				{ source: 'SAP-4419', label: 'PEACHES', color: '#007a33' },
+				{ source: 'SAP-5567', label: 'GRAPES', color: '#502b85' },
+			],
+		},
+		{
+			id: 'relto',
+			source: 'dissem.relto',
+			label: 'Releasable to',
+			showInBanner: true,
+			showLabel: true,
+			bannerLabel: 'RELTO',
+			labelSeparator: ' ',
+			valueSeparator: '/',
+			sortAlpha: false,
+			groupThreshold: 0,
+			multipleLabel: '',
+			drivesColor: false,
+			values: [
+				{ source: 'USA', label: 'USA', color: '#0033a0' },
+				{ source: 'FVEY', label: 'FVEY', color: '#007a33' },
+				{ source: 'NATO', label: 'NATO', color: '#502b85' },
+			],
+		},
+	],
+};
+
+const roomAttributes = [
+	{ key: 'clearance.level', values: ['TS'] },
+	{ key: 'access.programs', values: ['SAP-1042', 'SAP-2271', 'SAP-3380'] },
+	{ key: 'dissem.relto', values: ['USA'] },
+];
+
+const roomArgs: Partial<IRoom> = {
+	_id: 'classifiedRoom',
+	t: 'p' as RoomType,
+	name: 'operation-nightingale',
+	fname: 'operation-nightingale',
+	abacAttributes: roomAttributes,
+};
+
+const withBanner = (bannerConfig: ClassificationBannersConfig, room: Partial<IRoom> = roomArgs) =>
+	mockAppRoot()
+		.withJohnDoe()
+		.withSetting('ABAC_Enabled', true)
+		.withSetting('ABAC_Classification_Banners_Enabled', true)
+		.withSetting('ABAC_Classification_Banners_Config', JSON.stringify(bannerConfig))
+		.withEndpoint('GET', '/v1/licenses.info', () => ({
+			license: createFakeLicenseInfo({ activeModules: ['abac'] }),
+		}))
+		.wrap((children) => <FakeRoomProvider roomOverrides={room}>{children}</FakeRoomProvider>)
+		.buildStoryDecorator();
+
+export default {
+	component: ClassificationBanner,
+	parameters: {
+		layout: 'fullscreen',
+	},
+	decorators: [withBanner(config)],
+} satisfies Meta<typeof ClassificationBanner>;
+
+export const Classic: StoryObj<typeof ClassificationBanner> = {};
+
+export const TopSecret: StoryObj<typeof ClassificationBanner> = {
+	decorators: [withBanner(config, { ...roomArgs, abacAttributes: [{ key: 'clearance.level', values: ['TS-SCI'] }] })],
+};
+
+export const Unclassified: StoryObj<typeof ClassificationBanner> = {
+	decorators: [withBanner(config, { ...roomArgs, abacAttributes: [{ key: 'clearance.level', values: ['U'] }] })],
+};
+
+export const GroupedPrograms: StoryObj<typeof ClassificationBanner> = {
+	decorators: [
+		withBanner(config, {
+			...roomArgs,
+			abacAttributes: [
+				{ key: 'clearance.level', values: ['S'] },
+				{ key: 'access.programs', values: ['SAP-1042', 'SAP-2271', 'SAP-3380', 'SAP-4419', 'SAP-5567'] },
+			],
+		}),
+	],
+};
+
+export const Fallback: StoryObj<typeof ClassificationBanner> = {
+	decorators: [withBanner(config, { ...roomArgs, abacAttributes: [{ key: 'unmapped.attribute', values: ['whatever'] }] })],
+};
@@ -0,0 +1,53 @@
+import { Box } from '@rocket.chat/fuselage';
+import { useSetting } from '@rocket.chat/ui-contexts';
+import { useMemo } from 'react';
+import { useTranslation } from 'react-i18next';
+
+import { buildClassificationBanner, parseClassificationBannersConfig } from './lib/engine';
+import { useIsABACManagedRoom } from '../../admin/ABAC/hooks/useIsABACManagedRoom';
+import { useRoom } from '../contexts/RoomContext';
+
+const ClassificationBanner = () => {
+	const { t } = useTranslation();
+	const room = useRoom();
+	const isABACRoom = useIsABACManagedRoom(room);
+	const bannersEnabled = useSetting('ABAC_Classification_Banners_Enabled', false);
+	const rawConfig = useSetting('ABAC_Classification_Banners_Config', '');
+	const enabled = bannersEnabled && isABACRoom;
+
+	const banner = useMemo(() => {
+		if (!enabled) {
+			return null;
+		}
+
+		const config = parseClassificationBannersConfig(rawConfig);
+		return config?.enabled ? buildClassificationBanner(config, room.abacAttributes ?? []) : null;
+	}, [enabled, rawConfig, room.abacAttributes]);
+
+	if (!banner) {
+		return null;
+	}
+
+	return (
+		<Box
+			role='region'
+			aria-live='polite'
+			aria-label={t('ABAC_Room_Attributes')}
+			{...(banner.monospace && { fontFamily: 'mono' })}
+			backgroundColor={banner.backgroundColor}
+			color={banner.color}
+			textTransform={banner.uppercase ? 'uppercase' : 'none'}
+			fontScale='c2'
+			height='x20'
+			display='flex'
+			alignItems='center'
+			justifyContent='center'
+		>
+			<Box is='span' withTruncatedText>
+				{banner.text}
+			</Box>
+		</Box>
+	);
+};
+
+export default ClassificationBanner;
@@ -0,0 +1 @@
+export { default } from './ClassificationBanner';
@@ -0,0 +1,23 @@
+/**
+ * Picks a readable text color for a solid background fill.
+ *
+ * Computes each candidate's WCAG contrast ratio against the background (sRGB channels are
+ * gamma-decoded to linear light, then weighted by how strongly the eye perceives each: 21% red,
+ * 72% green, 7% blue) and keeps the higher-contrast one — so admins can pick any banner color
+ * and the label stays legible.
+ */
+export const readableTextColor = (hex: string): '#1F2329' | '#FFFFFF' => {
+	const luminanceOf = (color: string): number => {
+		const [r, g, b] = [0, 2, 4].map((offset) => parseInt(color.replace('#', '').slice(offset, offset + 2), 16) / 255);
+		const linearize = (channel: number): number => (channel <= 0.04045 ? channel / 12.92 : ((channel + 0.055) / 1.055) ** 2.4);
+		return 0.2126 * linearize(r) + 0.7152 * linearize(g) + 0.0722 * linearize(b);
+	};
+
+	const background = luminanceOf(hex);
+	const contrastWith = (ink: string): number => {
+		const text = luminanceOf(ink);
+		return (Math.max(background, text) + 0.05) / (Math.min(background, text) + 0.05);
+	};
+
+	return contrastWith('#1F2329') >= contrastWith('#FFFFFF') ? '#1F2329' : '#FFFFFF';
+};
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		export { default } from './ClassificationBanner';