feat: [UIE-8935] - IAM RBAC: permission check for linode configurations tab

[aaleksee-akamai]

Description 📝

Implement the new RBAC permission hook in Linodes configuration tab

Changes 🔄

1. Permissions Refactor
   Replaced usage of useRestrictedGlobalGrantCheck and related grant checks with a new usePermissions hook throughout Linodes configuration tab
   All permission checks for editing, cloning, adding, rebooting, and deleting linode configs now use the new usePermissions API, improving consistency and maintainability.

2. Test Coverage
   Added new tests for permission-based UI states:
   Tests for enabling/disabling the "Add Configuration" button and submit button based on user permissions.
   Added tests for the LinodeConfigActionMenu to verify that action items are enabled/disabled according to permissions.

3. Files Affected:

• LinodeConfigs.tsx + LinodeConfigs.test.tsx
• LinodeConfigActionMenu.tsx + LinodeConfigActionMenu.test.tsx (new test file)
• ConfigRow.tsx
• LinodeConfigDialog.tsx & LinodeConfigDialog.test.tsx
• InterfaceSelect.tsx + InterfaceSelect.test.tsx

Target release date 🗓️

July 9th

Preview 📷

Before	After

How to test 🧪

Prerequisites

(How to setup test environment)

• devcloud IAM account or local devenv setup or mock data

Verification steps

(How to verify changes)

• Confirm the buttons are disabled according the grant model with IAM is off, and according to the RBAC model when IAM is on.

Author Checklists

As an Author, to speed up the review process, I considered 🤔

👀 Doing a self review
❔ Our contribution guidelines
🤏 Splitting feature into small PRs
➕ Adding a changeset
🧪 Providing/improving test coverage
🔐 Removing all sensitive information from the code and PR description
🚩 Using a feature flag to protect the release
👣 Providing comprehensive reproduction steps
📑 Providing or updating our documentation
🕛 Scheduling a pair reviewing session
📱 Providing mobile support
♿ Providing accessibility support

• I have read and considered all applicable items listed above.

As an Author, before moving this PR from Draft to Open, I confirmed ✅

• All unit tests are passing
• TypeScript compilation succeeded without errors
• Code passes all linting rules

[cpathipa]

Do we need this in future ?

[aaleksee-akamai]

no, I've forgot that, thanks!

[mjac0bs]

Thanks @aaleksee-akamai - approving for the functionality and code review, but tests need to pass before merging this. The linode-config.spec.ts failures are relevant. I think we'll need to mock the correct permissions there, because the tests are trying to access aspects of the UI that are now disabled with these changes.

Confirmed that the different linode config actions are enabled/disabled via mocks. For anyone else testing this with mocks in the future:

• Legacy MSW
• Updated response to enable all the buttons in serverHandlers.ts:

  http.get('*/iam/users/:username/permissions/:entity_type/:entity_id', () => {
    return HttpResponse.json([
      'reboot_linode',
      'view_linode',
      'update_linode_config_profile',
      'clone_linode',
      'delete_linode_config_profile',
      'create_linode_config_profile',
    ]);
  }),

[aaleksee-akamai]

Thanks @aaleksee-akamai - approving for the functionality and code review, but tests need to pass before merging this. The linode-config.spec.ts failures are relevant. I think we'll need to mock the correct permissions there, because the tests are trying to access aspects of the UI that are now disabled with these changes.

Confirmed that the different linode config actions are enabled/disabled via mocks. For anyone else testing this with mocks in the future:

• Legacy MSW
• Updated response to enable all the buttons in serverHandlers.ts:

  http.get('*/iam/users/:username/permissions/:entity_type/:entity_id', () => {
    return HttpResponse.json([
      'reboot_linode',
      'view_linode',
      'update_linode_config_profile',
      'clone_linode',
      'delete_linode_config_profile',
      'create_linode_config_profile',
    ]);
  }),

Just in case - you always can use the presets for User Permissions:

[jdamore-linode]

Hey @aaleksee-akamai, don't hesitate to ping us in #cloud-manager or ping me directly if you need any help tackling these tests 👍

[cpathipa]

@aaleksee-akamai When the flag is disabled the config button is disable and there is no way user can add their configurations.

[jdamore-linode]

Thanks @aaleksee-akamai and @corya-akamai! Approved pending CI, but linode-config.spec.ts and upgrade-linode-interfaces.spec.ts both passed locally so I'm expecting it to succeed 👍 thanks again!

[linode-gh-bot]

Cloud Manager UI test results

🔺 1 failing test on test run #11 ↗︎

❌ Failing	✅ Passing	↪️ Skipped	🕐 Duration
1 Failing	673 Passing	5 Skipped	119m 38s

Details

Failing Tests
	Spec	Test
❌	object-storage.e2e.spec.ts	Cloud Manager Cypress Tests→object storage end-to-end tests » object storage end-to-end tests

Troubleshooting

Use this command to re-run the failing tests:

pnpm cy:run -s "cypress/e2e/core/objectStorage/object-storage.e2e.spec.ts"