User profile controls that hide non-sales features from users outside sales

dist/firefox/background.js

@@ -14,6 +14,7 @@ function createMessageTypes() {
     requestInstallBase: "opportunitiesExtension.requestInstallBase",
     requestCustomerServiceRequest: "opportunitiesExtension.requestCustomerServiceRequest",
     requestWlActions: "opportunitiesExtension.requestWlActions",
+    requestCurrentUser: "opportunitiesExtension.requestCurrentUser",
     requestConsumptionTrend: "opportunitiesExtension.requestConsumptionTrend",
     requestConsumptionPlanDetail: "opportunitiesExtension.requestConsumptionPlanDetail",
     requestRatecardByPlan: "opportunitiesExtension.requestRatecardByPlan"
@@ -643,6 +644,35 @@ function createSpaWorkloadActions({ fetchJson }) {
   return { requestWlActions };
 }
 
+// Source: src/services/spa/current-user.js
+function createSpaCurrentUser({ fetchJson }) {
+  async function requestCurrentUser() {
+    const debugRequests = [];
+    let user = null;
+    try {
+      const result = await fetchJson("https://spa.oracle.com/oalcrm/web/api/identity-management/users/current", {
+        method: "GET", credentials: "include", cache: "no-store", headers: { Accept: "application/json" }
+      }, "requestCurrentUser", debugRequests);
+      if (!result?.user || !Array.isArray(result.user.roles) || result.user.roles.some(role => typeof role !== "string")) {
+        throw new Error("requestCurrentUser returned invalid user roles.");
+      }
+      user = { id: result.user.id, name: result.user.name, roles: result.user.roles };
+      return { ok: true, user, debugRequests };
+    } catch (error) {
+      for (const entry of debugRequests) { entry.status = "failed"; entry.error = error.message; }
+      error.debugRequests = debugRequests;
+      throw error;
+    } finally {
+      // The identity token is not needed by content scripts or debug, including on failures.
+      for (const entry of debugRequests) {
+        entry.responseBody = JSON.stringify(user ? { user, token: "(redacted)" } : { error: "Identity response omitted." }, null, 2);
+        entry.responseBodyTruncated = false;
+      }
+    }
+  }
+  return { requestCurrentUser };
+}
+
 // Source: src/services/spa/consumption.js
 function createSpaConsumption({
   CONSUMPTION_TREND_REQUESTS,
@@ -1696,6 +1726,7 @@ function registerBackgroundMessages({
   requestInstallBase,
   requestCustomerServiceRequest,
   requestWlActions,
+  requestCurrentUser,
   requestConsumerTokenService,
   requestConsumptionTrend,
   requestConsumptionPlanDetail,
@@ -1777,6 +1808,14 @@ runtimeApi.runtime.onMessage.addListener((message, sender, sendResponse) => {
       return true;
     }
 
+    if (message.type === messageTypes.requestCurrentUser) {
+      requestCurrentUser().then(sendResponse).catch(error => sendResponse({
+        ok: false, error: error.message || "Unable to load current user.",
+        debugRequests: Array.isArray(error.debugRequests) ? error.debugRequests : []
+      }));
+      return true;
+    }
+
     if (message.type === messageTypes.requestWlActions) {
       requestWlActions(message).then(sendResponse).catch(error => sendResponse({
         ok: false, error: error.message || "Unable to load workload actions.",
@@ -1859,6 +1898,8 @@ function createBackgroundApplication(overrides = {}) {
     ...overrides
   };
   const messageTypes = createMessageTypes();
+  const spaCurrentUser = createSpaCurrentUser({ fetchJson: (...args) => httpBackgroundJson.fetchJson(...args) });
+  const requestCurrentUser = () => spaCurrentUser.requestCurrentUser();
   const contracts = createBackgroundContracts();
   const productsCacheState = createProductsCacheState();
   const authConsumerSession = createAuthConsumerSession({
@@ -1973,7 +2014,7 @@ function createBackgroundApplication(overrides = {}) {
   const requestOpptyProducts = (...args) => productsBackgroundJobs.requestOpptyProducts(...args);
   const runtimeApi = environment.browser || environment.chrome;
   function start() {
-    startBackgroundApplication({ messageTypes, getXsrfTokenCookie, refreshXsrfCookie, requestAccountPlans, requestInstallBase, requestCustomerServiceRequest, requestWlActions, requestConsumerTokenService, requestConsumptionTrend, requestConsumptionPlanDetail, requestRatecardByPlan, requestOpptyProducts, runtimeApi });
+    startBackgroundApplication({ messageTypes, requestCurrentUser, getXsrfTokenCookie, refreshXsrfCookie, requestAccountPlans, requestInstallBase, requestCustomerServiceRequest, requestWlActions, requestConsumerTokenService, requestConsumptionTrend, requestConsumptionPlanDetail, requestRatecardByPlan, requestOpptyProducts, runtimeApi });
   }
   return {
     start, contracts,