From bb6a64837e6806eab2eb34611f378052d878a307 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ga=C5=A1per=20Grom?= <gasper.grom@gmail.com>
Date: Mon, 16 Dec 2024 16:43:38 +0100
Subject: [PATCH 1/3] Limit github onboarding to team users

---
 .../github/components/github-connect.vue      | 20 ++++++++++++-------
 frontend/src/config/permissions/index.ts      | 20 +++++++++++++++++++
 2 files changed, 33 insertions(+), 7 deletions(-)

diff --git a/frontend/src/config/integrations/github/components/github-connect.vue b/frontend/src/config/integrations/github/components/github-connect.vue
index 3bcc98a47c..9f1bb2a212 100644
--- a/frontend/src/config/integrations/github/components/github-connect.vue
+++ b/frontend/src/config/integrations/github/components/github-connect.vue
@@ -9,13 +9,12 @@
         content="Onboarding new data for GitHub is currently disabled due to some issues we are experiencing.
       Please contact support if you need to onboard new data or update settings."
         placement="top"
+        :disabled="isTeam"
       >
-        <span>
-          <lf-button type="secondary" disabled @click="isSettingsDrawerOpen = true">
-            <lf-icon name="link-simple" />
-            Connect
-          </lf-button>
-        </span>
+        <lf-button type="secondary" :disabled="!isTeam" @click="isSettingsDrawerOpen = true">
+          <lf-icon name="link-simple" />
+          Connect
+        </lf-button>
       </el-tooltip>
     </div>
     <lf-github-settings-drawer v-if="isSettingsDrawerOpen" v-model="isSettingsDrawerOpen" :integration="null" />
@@ -23,12 +22,19 @@
 </template>
 
 <script setup lang="ts">
-import { ref } from 'vue';
+import { ref, computed } from 'vue';
 import LfButton from '@/ui-kit/button/Button.vue';
 import LfIcon from '@/ui-kit/icon/Icon.vue';
 import LfGithubSettingsDrawer from '@/config/integrations/github/components/settings/github-settings-drawer.vue';
+import { isTeamUser } from '@/config/permissions';
+import { useAuthStore } from '@/modules/auth/store/auth.store';
+import { storeToRefs } from 'pinia';
 
 const isSettingsDrawerOpen = ref(false);
+
+const { user } = storeToRefs(useAuthStore());
+
+const isTeam = computed(() => isTeamUser(user.value));
 </script>
 
 <script lang="ts">
diff --git a/frontend/src/config/permissions/index.ts b/frontend/src/config/permissions/index.ts
index b0f95db269..b697fbd537 100644
--- a/frontend/src/config/permissions/index.ts
+++ b/frontend/src/config/permissions/index.ts
@@ -1,5 +1,6 @@
 import { LfRole } from '@/shared/modules/permissions/types/Roles';
 import { LfPermission } from '@/shared/modules/permissions/types/Permissions';
+import { User } from '@/modules/auth/types/User.type';
 import readonly from './readonly';
 import admin from './admin';
 import projectAdmin from './projectAdmin';
@@ -9,3 +10,22 @@ export const lfPermissions: Record<LfRole, Record<LfPermission, boolean>> = {
   admin,
   projectAdmin,
 };
+
+const teamUsers: string[] = [
+  'fc795a2e-9bd6-4b2d-817b-c357d1d59a2a',
+  'df7f38f0-e994-4954-b680-edd9930a2e02',
+  '5418959c-7410-40a8-bce7-a3635291bd29',
+  'f1004da4-f99c-4a9d-b718-6447128d961d',
+  'af964295-bc82-436c-8cce-843cd0a6b2ef',
+  'a9745d27-1d2e-4f6f-adda-aeb7c9553cbb',
+  'd2e45678-b867-4a14-950a-b6f72319d44b',
+  '208c0a98-6290-42c5-a1a4-b2ec3451d97b',
+  '10cc0c77-2ed8-487d-9e40-688a46786fe5',
+  '5e127804-4382-4648-bed7-12c34846d5ce',
+  '893c09e1-8f33-4464-80fe-9db431d82ba3',
+  'cbc5ec8f-76c2-49f0-8288-c61c5c238d6d',
+  '815a59ef-bb99-42ea-b6b8-fe30a1c1e2e1',
+  // '0fbf4c1b-3774-4a7a-a126-7a722ed8ff93',
+];
+
+export const isTeamUser = (user: User | null) => user && teamUsers.includes(user.id);

From 946ccb801f432b6131922fb27a0977ce3f429a3c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ga=C5=A1per=20Grom?= <gasper.grom@gmail.com>
Date: Mon, 16 Dec 2024 17:45:13 +0100
Subject: [PATCH 2/3] Fix texts

---
 .../config/integrations/github/components/github-connect.vue  | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/frontend/src/config/integrations/github/components/github-connect.vue b/frontend/src/config/integrations/github/components/github-connect.vue
index 9f1bb2a212..d308003dd4 100644
--- a/frontend/src/config/integrations/github/components/github-connect.vue
+++ b/frontend/src/config/integrations/github/components/github-connect.vue
@@ -6,8 +6,8 @@
       <!--        Details-->
       <!--      </lf-button>-->
       <el-tooltip
-        content="Onboarding new data for GitHub is currently disabled due to some issues we are experiencing.
-      Please contact support if you need to onboard new data or update settings."
+        content="Onboarding new data for GitHub is currently being
+        managed by the CM dev team. Please reach out in Slack (#lfx-cm) to get your project onboarded."
         placement="top"
         :disabled="isTeam"
       >

From 27602d8817a2aec96b57e931177841afbbf627ef Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ga=C5=A1per=20Grom?= <gasper.grom@gmail.com>
Date: Thu, 19 Dec 2024 10:33:45 +0100
Subject: [PATCH 3/3] Team users from env

---
 frontend/scripts/docker-entrypoint.sh    |  1 +
 frontend/src/config.js                   |  6 ++++++
 frontend/src/config/permissions/index.ts | 18 ++----------------
 3 files changed, 9 insertions(+), 16 deletions(-)

diff --git a/frontend/scripts/docker-entrypoint.sh b/frontend/scripts/docker-entrypoint.sh
index 70c6060588..b18c79d38f 100755
--- a/frontend/scripts/docker-entrypoint.sh
+++ b/frontend/scripts/docker-entrypoint.sh
@@ -37,6 +37,7 @@ declare -a ENV_VARIABLES=(
   "VUE_APP_IS_TWITTER_ENABLED"
   "VUE_APP_DATADOG_RUM_APPLICATION_ID"
   "VUE_APP_DATADOG_RUM_CLIENT_TOKEN"
+  "VUE_APP_TEAM_USER_IDS"
 )
 
 for ENV_VAR in "${ENV_VARIABLES[@]}"
diff --git a/frontend/src/config.js b/frontend/src/config.js
index 40eaccfff6..6ca1752024 100644
--- a/frontend/src/config.js
+++ b/frontend/src/config.js
@@ -74,6 +74,9 @@ const defaultConfig = {
       clientToken: import.meta.env.VUE_APP_DATADOG_RUM_CLIENT_TOKEN,
     },
   },
+  permissions: {
+    teamUserIds: import.meta.env.VUE_APP_TEAM_USER_IDS,
+  },
 };
 
 const composedConfig = {
@@ -140,6 +143,9 @@ const composedConfig = {
       clientToken: 'CROWD_VUE_APP_DATADOG_RUM_CLIENT_TOKEN',
     },
   },
+  permissions: {
+    teamUserIds: 'CROWD_VUE_APP_TEAM_USER_IDS',
+  },
 };
 
 const config = defaultConfig.backendUrl
diff --git a/frontend/src/config/permissions/index.ts b/frontend/src/config/permissions/index.ts
index b697fbd537..5b4e0fe22f 100644
--- a/frontend/src/config/permissions/index.ts
+++ b/frontend/src/config/permissions/index.ts
@@ -1,6 +1,7 @@
 import { LfRole } from '@/shared/modules/permissions/types/Roles';
 import { LfPermission } from '@/shared/modules/permissions/types/Permissions';
 import { User } from '@/modules/auth/types/User.type';
+import config from '@/config';
 import readonly from './readonly';
 import admin from './admin';
 import projectAdmin from './projectAdmin';
@@ -11,21 +12,6 @@ export const lfPermissions: Record<LfRole, Record<LfPermission, boolean>> = {
   projectAdmin,
 };
 
-const teamUsers: string[] = [
-  'fc795a2e-9bd6-4b2d-817b-c357d1d59a2a',
-  'df7f38f0-e994-4954-b680-edd9930a2e02',
-  '5418959c-7410-40a8-bce7-a3635291bd29',
-  'f1004da4-f99c-4a9d-b718-6447128d961d',
-  'af964295-bc82-436c-8cce-843cd0a6b2ef',
-  'a9745d27-1d2e-4f6f-adda-aeb7c9553cbb',
-  'd2e45678-b867-4a14-950a-b6f72319d44b',
-  '208c0a98-6290-42c5-a1a4-b2ec3451d97b',
-  '10cc0c77-2ed8-487d-9e40-688a46786fe5',
-  '5e127804-4382-4648-bed7-12c34846d5ce',
-  '893c09e1-8f33-4464-80fe-9db431d82ba3',
-  'cbc5ec8f-76c2-49f0-8288-c61c5c238d6d',
-  '815a59ef-bb99-42ea-b6b8-fe30a1c1e2e1',
-  // '0fbf4c1b-3774-4a7a-a126-7a722ed8ff93',
-];
+const teamUsers: string[] = (config.permissions.teamUserIds || '').split(',');
 
 export const isTeamUser = (user: User | null) => user && teamUsers.includes(user.id);