User profile controls that hide non-sales features from users outside sales

src/auth/current-user.js

@@ -0,0 +1,17 @@
+function createCurrentUser({ sendRuntimeMessage, appendBackgroundRequestLog, messageTypes }) {
+  let pending = null;
+  let allowed = false;
+  function ensure() {
+    if (!pending) {
+      pending = sendRuntimeMessage({ type: messageTypes.requestCurrentUser }).then(response => {
+        appendBackgroundRequestLog(response?.debugRequests);
+        const roles = response?.user?.roles;
+        allowed = response?.ok === true && Array.isArray(roles)
+          && roles.every(role => typeof role === "string") && !roles.includes("SALES_REP");
+        return allowed;
+      }).catch(() => { allowed = false; return false; });
+    }
+    return pending;
+  }
+  return { ensure, allowsCrmActivities: () => allowed };
+}