feat: [UIE-8934, UIE-8935, UIE-8939] - IAM RBAC: fix permission check for sub-entities

[aaleksee-akamai]

Description 📝

RBAC permission hook: update checks for sub-entities in Linodes Storage, Configuration, and Settings tabs.

Changes 🔄

List any change(s) relevant to the reviewer.

• Update permissions for sub-entities to check the parent entity instead
• Update tests
• Add an onOpen property to the action menu

Files Affected:

• ConfigActionMenu.tsx + ConfigActionMenu.test.tsx
• LinodeSettingsPasswordPanel.tsx + LinodeSettingsPasswordPanel.test.tsx
• LinodeDiskActionMenu.tsx + LinodeDiskActionMenu.test.tsx

Target release date 🗓️

July 29th

How to test 🧪

Prerequisites

(How to setup test environment)

You can test using a DevCloud IAM account or local devenv setup or mock data (use the User Permissions presets);

Note: The unrestricted account has full access — permission checks are skipped.

To test permissions using presets:

1. Enable MSW and use Legacy MSW Handlers.
2. Use the Custom Profile preset with the restricted option selected.
3. For account-related permissions (e.g. const { permissions } = usePermissions('account', ['create_firewall']) ), use the Custom User Account Permissions preset.
4. For entity-related permissions, use the Custom User Entity Permissions preset.
5. Click "Save" and "Apply".

Verification steps

(How to verify changes)

• Confirm the buttons/inputs are disabled according the grant model with IAM is off, and according to the RBAC model when IAM is on.

Author Checklists

As an Author, to speed up the review process, I considered 🤔

👀 Doing a self review
❔ Our contribution guidelines
🤏 Splitting feature into small PRs
➕ Adding a changeset
🧪 Providing/improving test coverage
🔐 Removing all sensitive information from the code and PR description
🚩 Using a feature flag to protect the release
👣 Providing comprehensive reproduction steps
📑 Providing or updating our documentation
🕛 Scheduling a pair reviewing session
📱 Providing mobile support
♿ Providing accessibility support

• I have read and considered all applicable items listed above.

As an Author, before moving this PR from Draft to Open, I confirmed ✅

• All tests and CI checks are passing
• TypeScript compilation succeeded without errors
• Code passes all linting rules

[jaalah-akamai]

✅ Enabling/Disabling IAM Feature Flag works as intended
✅ Configs + Action Menu perms look good

✅ Linode Settings Password is enabled/disabled based on IAM perm

[kwojtowiakamai]

✅ The buttons in the storage, configurations and settings tabs are correctly enabled/disabled based on the permissions/grants for both IAM and non-IAM users.

[linode-gh-bot]

Cloud Manager UI test results

🔺 2 failing tests on test run #3 ↗︎

❌ Failing	✅ Passing	↪️ Skipped	🕐 Duration
2 Failing	680 Passing	5 Skipped	125m 57s

Details

Failing Tests
	Spec	Test
❌	object-storage-objects-multicluster.spec.ts	Cloud Manager Cypress Tests→Object Storage Multicluster objects » Object Storage Multicluster objects
❌	access-key.e2e.spec.ts	Cloud Manager Cypress Tests→object storage access key end-to-end tests » object storage access key end-to-end tests

Troubleshooting

Use this command to re-run the failing tests:

pnpm cy:run -s "cypress/e2e/core/objectStorageMulticluster/object-storage-objects-multicluster.spec.ts,cypress/e2e/core/objectStorage/access-key.e2e.spec.ts"

[corya-akamai]

Cloud Manager UI test results

🔺 2 failing tests on test run #3 ↗︎

❌ Failing ✅ Passing ↪️ Skipped 🕐 Duration
2 Failing 680 Passing 5 Skipped 125m 57s

Details

Failing Tests
Spec Test
❌ object-storage-objects-multicluster.spec.ts Cloud Manager Cypress Tests→Object Storage Multicluster objects » Object Storage Multicluster objects
❌ access-key.e2e.spec.ts Cloud Manager Cypress Tests→object storage access key end-to-end tests » object storage access key end-to-end tests

Troubleshooting

Use this command to re-run the failing tests:

pnpm cy:run -s "cypress/e2e/core/objectStorageMulticluster/object-storage-objects-multicluster.spec.ts,cypress/e2e/core/objectStorage/access-key.e2e.spec.ts"

@jdamore-linode We good to merge with the Object-storeage failures?

[jdamore-linode]

@corya-akamai yep, you're good to go! 👍 Sorry for the trouble with the OBJ tests!