feat: enforce auth and permissions for eru readiness

Author: samshara

app/src/App/routes/SurgeRoutes.tsx

@@ -132,7 +132,7 @@ const eruReadinessForm = customWrapRoute({
     wrapperComponent: Auth,
     context: {
         title: 'ERU Readiness Update Form',
-        visibility: 'anything',
+        visibility: 'is-authenticated',
     },
 });
 

app/src/views/ActiveSurgeDeployments/SurgeMap/index.tsx

@@ -436,7 +436,7 @@ function SurgeMap(props: Props) {
                                                 rendererParams={rendererParams}
                                             />
                                         )}
-                                        label={strings.roleProfile}
+                                        label={strings.eruType}
                                         strongLabel
                                     />
                                     <TextOutput

app/src/views/EruReadinessForm/index.tsx

@@ -32,6 +32,7 @@ import Link from '#components/Link';
 import NonFieldError from '#components/NonFieldError';
 import Page from '#components/Page';
 import useGlobalEnums from '#hooks/domain/useGlobalEnums';
+import usePermissions from '#hooks/domain/usePermissions';
 import useAlertContext from '#hooks/useAlert';
 import useRouting from '#hooks/useRouting';
 import {
@@ -76,7 +77,15 @@ const defaultFormValues: FormType = {};
 export function Component() {
     const strings = useTranslation(i18n);
 
+    const {
+        isCountryAdmin,
+        isRegionAdmin,
+        isSuperUser,
+        isIfrcAdmin,
+    } = usePermissions();
+
     const { goBack } = useRouting();
+
     const alert = useAlertContext();
     const {
         deployments_eru_type: eruTypeOptions,
@@ -116,6 +125,7 @@ export function Component() {
             })),
         });
     };
+
     const {
         trigger: updateEruReadiness,
         pending: updateEruReadinessPending,
@@ -290,9 +300,19 @@ export function Component() {
                 fetchEruReadinessData(newValue);
             }
         },
-        [fetchEruReadinessData, setValue],
+        [
+            fetchEruReadinessData,
+            setValue,
+        ],
     );
 
+    const permittedEruOwners = eruOwnerResponse?.results?.filter((owner) => (
+        isSuperUser
+        || isIfrcAdmin
+        || isCountryAdmin(owner.national_society_country_details.id)
+        || isRegionAdmin(owner.national_society_country_details.region ?? undefined)
+    ));
+
     const eruTypes = useMemo(() => (
         value.eru_types?.map((eruType) => eruType.type).filter(isDefined)
     ), [value.eru_types]);
@@ -359,7 +379,7 @@ export function Component() {
                 >
                     <SelectInput
                         name="eru_owner"
-                        options={eruOwnerResponse?.results}
+                        options={permittedEruOwners}
                         onChange={handleEruOwnerChange}
                         value={value.eru_owner}
                         keySelector={eruOwnerKeySelector}

app/src/views/SurgeOverview/EmergencyResponseUnit/EmergencyResponseUnitReadiness/index.tsx

@@ -157,7 +157,11 @@ function EmergencyResponseUnitReadiness() {
             <Container
                 heading={resolveToString(
                     strings.eruReadinessCount,
-                    { count: eruReadinessResponse?.count ?? '-' },
+                    {
+                        count: (
+                            activeTab === 'eruType' ? groupedByEruType?.length
+                                : eruReadinessResponse?.count) ?? '-',
+                    },
                 )}
                 withHeaderBorder
                 actions={(