Add permision check for tables & analytics (#2097)

<!--
Ensure the title clearly reflects what was changed.
Provide a clear and concise description of the changes made. The PR
should only contain the changes related to the issue, and no other
unrelated changes.
-->

Fixes OPS-3683, OPS-3875

Author: alexandrudanpop

packages/react-ui/src/app/features/navigation/lib/menu-links-hook.ts

@@ -55,13 +55,15 @@ export const useMenuLinks = () => {
         to: '/tables',
         label: t('Tables'),
         icon: TableProperties,
+        locked: !checkAccess(Permission.WRITE_TABLE),
       },
       ...(hasAnalyticsAccess
         ? [
             {
               to: '/analytics',
               label: t('Analytics'),
               icon: LucideBarChart2,
+              locked: !checkAccess(Permission.WRITE_ANALYTICS),
             },
           ]
         : []),

packages/react-ui/src/app/routes/openops-analytics/index.tsx

@@ -1,7 +1,10 @@
+import { Navigate } from 'react-router-dom';
+
+import { useAuthorization } from '@/app/common/hooks/authorization-hooks';
 import { flagsHooks } from '@/app/common/hooks/flags-hooks';
 import { useDefaultSidebarState } from '@/app/common/hooks/use-default-sidebar-state';
 import { useCandu } from '@/app/features/extensions/candu/use-candu';
-import { FlagId } from '@openops/shared';
+import { FlagId, Permission } from '@openops/shared';
 
 import {
   AnalyticsDashboardEmptyState,
@@ -14,7 +17,7 @@ import { useEmbedDashboard } from './use-embed-dashboard';
 
 const OpenOpsAnalyticsPage = () => {
   useDefaultSidebarState('minimized');
-
+  const { checkAccess } = useAuthorization();
   const { isCanduEnabled, canduClientToken, canduUserId } = useCandu();
   const { data: analyticsPublicUrl } = flagsHooks.useFlag<string | undefined>(
     FlagId.ANALYTICS_PUBLIC_URL,
@@ -36,6 +39,10 @@ const OpenOpsAnalyticsPage = () => {
     canduUserId,
   });
 
+  if (!checkAccess(Permission.WRITE_ANALYTICS)) {
+    return <Navigate to="/" replace />;
+  }
+
   if (!analyticsPublicUrl) {
     console.error('OpenOps Analytics URL is not defined');
     return null;

packages/react-ui/src/app/routes/openops-tables/index.tsx

@@ -1,13 +1,15 @@
 import { t } from 'i18next';
-import { useLocation } from 'react-router-dom';
+import { Navigate, useLocation } from 'react-router-dom';
 
+import { useAuthorization } from '@/app/common/hooks/authorization-hooks';
 import { flagsHooks } from '@/app/common/hooks/flags-hooks';
 import { useDefaultSidebarState } from '@/app/common/hooks/use-default-sidebar-state';
 import { useCandu } from '@/app/features/extensions/candu/use-candu';
-import { FlagId } from '@openops/shared';
+import { FlagId, Permission } from '@openops/shared';
 
 const OpenOpsTablesPage = () => {
   useDefaultSidebarState('minimized');
+  const { checkAccess } = useAuthorization();
   const { isCanduEnabled, canduClientToken, canduUserId } = useCandu();
   const parentData = encodeURIComponent(
     JSON.stringify({ isCanduEnabled, userId: canduUserId, canduClientToken }),
@@ -22,6 +24,10 @@ const OpenOpsTablesPage = () => {
     FlagId.OPENOPS_TABLES_PUBLIC_URL,
   );
 
+  if (!checkAccess(Permission.WRITE_TABLE)) {
+    return <Navigate to="/" replace />;
+  }
+
   if (!openopsTablesUrl) {
     console.error('OpenOps Tables URL is not defined');
     return null;