✨ User management: add resources page proxy

Author: WMC001

docker/init.sql

@@ -820,6 +820,7 @@ INSERT INTO nexent.role_permission_t (role_permission_id, user_role, permission_
 (6, 'SU', 'VISIBILITY', 'LEFT_NAV_MENU', '/models'),
 (7, 'SU', 'VISIBILITY', 'LEFT_NAV_MENU', '/memory'),
 (8, 'SU', 'VISIBILITY', 'LEFT_NAV_MENU', '/users'),
+(211, 'SU', 'VISIBILITY', 'LEFT_NAV_MENU', '/tenant-resources'),
 (9, 'SU', 'RESOURCE', 'AGENT', 'READ'),
 (10, 'SU', 'RESOURCE', 'AGENT', 'DELETE'),
 (11, 'SU', 'RESOURCE', 'KB', 'READ'),
@@ -846,6 +847,7 @@ INSERT INTO nexent.role_permission_t (role_permission_id, user_role, permission_
 (32, 'SU', 'RESOURCE', 'TENANT', 'READ'),
 (33, 'SU', 'RESOURCE', 'TENANT', 'UPDATE'),
 (34, 'SU', 'RESOURCE', 'TENANT', 'DELETE'),
+(213, 'SU', 'RESOURCE', 'TENANT.LIST', 'READ'),
 (35, 'SU', 'RESOURCE', 'TENANT.INFO', 'READ'),
 (36, 'SU', 'RESOURCE', 'TENANT.INFO', 'UPDATE'),
 (37, 'SU', 'RESOURCE', 'TENANT.INVITE', 'CREATE'),
@@ -868,6 +870,7 @@ INSERT INTO nexent.role_permission_t (role_permission_id, user_role, permission_
 (54, 'ADMIN', 'VISIBILITY', 'LEFT_NAV_MENU', '/models'),
 (55, 'ADMIN', 'VISIBILITY', 'LEFT_NAV_MENU', '/memory'),
 (56, 'ADMIN', 'VISIBILITY', 'LEFT_NAV_MENU', '/users'),
+(212, 'ADMIN', 'VISIBILITY', 'LEFT_NAV_MENU', '/tenant-resources'),
 (57, 'ADMIN', 'RESOURCE', 'AGENT', 'CREATE'),
 (58, 'ADMIN', 'RESOURCE', 'AGENT', 'READ'),
 (59, 'ADMIN', 'RESOURCE', 'AGENT', 'UPDATE'),

docker/sql/v1.8.0_0202_role_permission_update.sql

@@ -0,0 +1,21 @@
+-- =============================================================================
+-- File: v1.8.0_0202_role_permission_update.sql
+-- Description: Add /tenant-resources route permission and tenant list visibility for SU role
+-- Version: 1.8.0
+-- Date: 2026-02-02
+-- =============================================================================
+
+-- Add /tenant-resources LEFT_NAV_MENU permission for SU (Super Admin) role
+INSERT INTO nexent.role_permission_t (role_permission_id, user_role, permission_category, permission_type, permission_subtype)
+VALUES (211, 'SU', 'VISIBILITY', 'LEFT_NAV_MENU', '/tenant-resources')
+ON CONFLICT (role_permission_id) DO NOTHING;
+
+-- Add /tenant-resources LEFT_NAV_MENU permission for ADMIN (Tenant Admin) role
+INSERT INTO nexent.role_permission_t (role_permission_id, user_role, permission_category, permission_type, permission_subtype)
+VALUES (212, 'ADMIN', 'VISIBILITY', 'LEFT_NAV_MENU', '/tenant-resources')
+ON CONFLICT (role_permission_id) DO NOTHING;
+
+-- Add tenant list visibility permission for SU (Super Admin) role - controls tenant list display in resource page
+INSERT INTO nexent.role_permission_t (role_permission_id, user_role, permission_category, permission_type, permission_subtype)
+VALUES (213, 'SU', 'RESOURCE', 'TENANT.LIST', 'READ')
+ON CONFLICT (role_permission_id) DO NOTHING;

frontend/app/[locale]/tenant-resources/components/UserManageComp.tsx

@@ -1,6 +1,6 @@
 "use client";
 
-import React, { useState } from "react";
+import React, { useState, useEffect } from "react";
 import {
   Row,
   Col,
@@ -33,6 +33,7 @@ import McpList from "./resources/McpList";
 import { useDeployment } from "@/components/providers/deploymentProvider";
 import { useAuthorizationContext } from "@/components/providers/AuthorizationProvider";
 import { USER_ROLES } from "@/const/auth";
+import { Can } from "@/components/permission/Can";
 
 // Removed mockTenants - now using real data from API
 
@@ -232,8 +233,13 @@ export default function UserManageComp() {
   // Tenant management state for super admin operations
   const [tenantsState, setTenantsState] = useState<Tenant[]>([]);
 
-  // For non-super admins, use their current tenant (from user metadata or default)
-  const [tenantId, setTenantId] = useState<string | null>(tenants[0]?.tenant_id || null);
+  // For non-super admins, automatically select their first tenant when data loads
+  const [tenantId, setTenantId] = useState<string | null>(null);
+  useEffect(() => {
+    if (!isSuperAdmin && tenants.length > 0 && !tenantId) {
+      setTenantId(tenants[0].tenant_id);
+    }
+  }, [isSuperAdmin, tenants, tenantId]);
 
   // Get current tenant name
   const currentTenant = tenants.find((t) => t.tenant_id === tenantId);
@@ -267,23 +273,25 @@ export default function UserManageComp() {
         </div>
       </div>
       <Row className="h-full">
-        <Col className="h-full" style={{ width: 300 }}>
-          <div className="h-full pr-6">
-            <div className="sticky top-6">
-              <div className="bg-white dark:bg-gray-800 rounded-md shadow-sm p-3">
-                <TenantList
-                  selected={tenantId}
-                  onSelect={(id) => setTenantId(id)}
-                  tenants={tenants}
-                  onTenantsChange={setTenantsState}
-                  onTenantsRefetch={refetchTenants}
-                  loading={tenantsLoading}
-                  t={t}
-                />
+        <Can permission="tenant.list:read">
+          <Col className="h-full" style={{ width: 300 }}>
+            <div className="h-full pr-6">
+              <div className="sticky top-6">
+                <div className="bg-white dark:bg-gray-800 rounded-md shadow-sm p-3">
+                  <TenantList
+                    selected={tenantId}
+                    onSelect={(id) => setTenantId(id)}
+                    tenants={tenants}
+                    onTenantsChange={setTenantsState}
+                    onTenantsRefetch={refetchTenants}
+                    loading={tenantsLoading}
+                    t={t}
+                  />
+                </div>
               </div>
             </div>
-          </div>
-        </Col>
+          </Col>
+        </Can>
         <Col className="flex-1 p-6">
           <div className="bg-white dark:bg-gray-800 rounded-md shadow-sm p-4 min-h-[300px]">
             {/* Tenant name header */}

frontend/components/navigation/SideNavigation.tsx

@@ -59,6 +59,7 @@ const ROUTE_CONFIG: RouteConfig[] = [
   { path: "/models", Icon: Settings, labelKey: "sidebar.modelManagement", order: 9 },
   { path: "/memory", Icon: Database, labelKey: "sidebar.memoryManagement", order: 10 },
   { path: "/users", Icon: User, labelKey: "sidebar.userManagement", order: 11 },
+  { path: "/tenant-resources", Icon: Building2, labelKey: "sidebar.tenantResources", order: 12 },
 ];
 
 /**