Skip to content

fix(FR-2502): allow admin to see all vfolders across projects/domains#6525

Merged
graphite-app[bot] merged 1 commit intomainfrom
04-09-fix_fr-2502_allow_admin_to_see_all_vfolders_across_projects_domains
Apr 10, 2026
Merged

fix(FR-2502): allow admin to see all vfolders across projects/domains#6525
graphite-app[bot] merged 1 commit intomainfrom
04-09-fix_fr-2502_allow_admin_to_see_all_vfolders_across_projects_domains

Conversation

@nowgnuesLee
Copy link
Copy Markdown
Contributor

@nowgnuesLee nowgnuesLee commented Apr 9, 2026

Resolves #6524 (FR-2502)

Summary

  • AdminVFolderNodeListPage was restricted to the current domain via scope_id: domain:${domainName}, so superadmin could only see folders owned by themselves and not vfolders created by other users
  • Remove scope_id from the admin query (all three vfolder_nodes calls: main list, active count, deleted count) so superadmin sees all vfolders across projects/domains
  • Matches the existing pattern in AdminComputeSessionListPage which intentionally omits scope_id for the same reason
  • Drop the now-unused useCurrentDomainValue import and domainName local

Stack

Depends on #6467 (FR-2476), which adds permission: read_attribute to the same queries. The permission fix alone does not make other users' folders visible; removing the domain scope is also required.

Test plan

  • /admin-data page shows vfolders owned by other users (across all projects/domains)
  • Active and deleted folder tab counts reflect all vfolders
  • Existing filters (name/status/type/permission/usage mode) still work

Verification

=== Relay: PASS ===
=== Lint: PASS ===
=== Format: PASS ===
=== TypeScript: PASS ===
=== ALL PASS ===

Copy link
Copy Markdown
Contributor Author

nowgnuesLee commented Apr 9, 2026


How to use the Graphite Merge Queue

Add either label to this PR to merge it via the merge queue:

  • flow:merge-queue - adds this PR to the back of the merge queue
  • flow:hotfix - for urgent changes, fast-track this PR to the front of the merge queue

You must have a Graphite account in order to use the merge queue. Sign up using this link.

An organization admin has required the Graphite Merge Queue in this repository.

Please do not merge from GitHub as this will restart CI on PRs being processed by the merge queue.

This stack of pull requests is managed by Graphite. Learn more about stacking.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Apr 9, 2026

Coverage report for ./react

St.
Category Percentage Covered / Total
🔴 Statements 9.1% 1750/19237
🔴 Branches 8.17% 1100/13456
🔴 Functions 5.51% 288/5231
🔴 Lines 8.78% 1641/18689

Test suite run success

854 tests passing in 39 suites.

Report generated by 🧪jest coverage report action from f34a79a

@graphite-app graphite-app Bot changed the base branch from 04-07-fix_fr-2476_add_missing_permission_argument_to_admin_vfolder_queries to graphite-base/6525 April 9, 2026 04:04
@graphite-app graphite-app Bot force-pushed the graphite-base/6525 branch from a26a287 to 9f3cb82 Compare April 9, 2026 04:08
@graphite-app graphite-app Bot force-pushed the 04-09-fix_fr-2502_allow_admin_to_see_all_vfolders_across_projects_domains branch from b55c07a to 6f93712 Compare April 9, 2026 04:08
@graphite-app graphite-app Bot changed the base branch from graphite-base/6525 to main April 9, 2026 04:08
@graphite-app graphite-app Bot force-pushed the 04-09-fix_fr-2502_allow_admin_to_see_all_vfolders_across_projects_domains branch from 6f93712 to 956744d Compare April 9, 2026 04:08
@github-actions github-actions Bot added the bug label Apr 9, 2026
@nowgnuesLee nowgnuesLee marked this pull request as ready for review April 10, 2026 03:13
Copilot AI review requested due to automatic review settings April 10, 2026 03:13
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Removes the domain-scoped restriction from the admin vfolder list query so superadmins can view vfolders across all projects/domains on /admin-data.

Changes:

  • Dropped scope_id from the vfolder_nodes Relay query (main list + active/deleted counts).
  • Removed the now-unused useCurrentDomainValue import and domainName local variable.
  • Added an inline comment documenting that omitting scope_id is intentional for superadmin visibility.

Copy link
Copy Markdown
Member

@yomybaby yomybaby left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@graphite-app
Copy link
Copy Markdown

graphite-app Bot commented Apr 10, 2026

Merge activity

…#6525)

Resolves #6524 (FR-2502)

## Summary
- `AdminVFolderNodeListPage` was restricted to the current domain via `scope_id: domain:${domainName}`, so superadmin could only see folders owned by themselves and not vfolders created by other users
- Remove `scope_id` from the admin query (all three `vfolder_nodes` calls: main list, active count, deleted count) so superadmin sees all vfolders across projects/domains
- Matches the existing pattern in `AdminComputeSessionListPage` which intentionally omits `scope_id` for the same reason
- Drop the now-unused `useCurrentDomainValue` import and `domainName` local

## Stack
Depends on #6467 (FR-2476), which adds `permission: read_attribute` to the same queries. The permission fix alone does not make other users' folders visible; removing the domain scope is also required.

## Test plan
- [ ] `/admin-data` page shows vfolders owned by other users (across all projects/domains)
- [ ] Active and deleted folder tab counts reflect all vfolders
- [ ] Existing filters (name/status/type/permission/usage mode) still work

## Verification
```
=== Relay: PASS ===
=== Lint: PASS ===
=== Format: PASS ===
=== TypeScript: PASS ===
=== ALL PASS ===
```
@graphite-app graphite-app Bot force-pushed the 04-09-fix_fr-2502_allow_admin_to_see_all_vfolders_across_projects_domains branch from 956744d to f34a79a Compare April 10, 2026 09:37
@graphite-app graphite-app Bot merged commit f34a79a into main Apr 10, 2026
11 checks passed
@graphite-app graphite-app Bot deleted the 04-09-fix_fr-2502_allow_admin_to_see_all_vfolders_across_projects_domains branch April 10, 2026 09:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Admin data page does not show vfolders created by other users

3 participants