🗨️ feat: Granular Prompt Permissions via ACL and Permission Bits

feat: Implement prompt permissions management and access control middleware

fix: agent deletion process to remove associated permissions and ACL entries

fix: Import Permissions for enhanced access control in GrantAccessDialog

feat: use PromptGroup for access control

- Added migration script for PromptGroup permissions, categorizing groups into global view access and private groups.
- Created unit tests for the migration script to ensure correct categorization and permission granting.
- Introduced middleware for checking access permissions on PromptGroups and prompts via their groups.
- Updated routes to utilize new access control middleware for PromptGroups.
- Enhanced access role definitions to include roles specific to PromptGroups.
- Modified ACL entry schema and types to accommodate PromptGroup resource type.
- Updated data provider to include new access role identifiers for PromptGroups.

feat: add generic access management dialogs and hooks for resource permissions

fix: remove duplicate imports in FileContext component

fix: remove duplicate mongoose dependency in package.json

feat: add access permissions handling for dynamic resource types and add promptGroup roles

feat: implement centralized role localization and update access role types

refactor: simplify author handling in prompt group routes and enhance ACL checks

feat: implement addPromptToGroup functionality and update PromptForm to use it

feat: enhance permission handling in ChatGroupItem, DashGroupItem, and PromptForm components

chore: rename migration script for prompt group permissions and update package.json scripts

chore: update prompt tests

client/src/components/Prompts/Groups/ChatGroupItem.tsx

@@ -7,8 +7,9 @@ import {
   DropdownMenuContent,
   DropdownMenuTrigger,
 } from '@librechat/client';
+import { PERMISSION_BITS } from 'librechat-data-provider';
 import type { TPromptGroup } from 'librechat-data-provider';
-import { useLocalize, useSubmitMessage, useCustomLink, useAuthContext } from '~/hooks';
+import { useLocalize, useSubmitMessage, useCustomLink, useResourcePermissions } from '~/hooks';
 import VariableDialog from '~/components/Prompts/Groups/VariableDialog';
 import PreviewPrompt from '~/components/Prompts/PreviewPrompt';
 import ListCard from '~/components/Prompts/Groups/ListCard';
@@ -22,7 +23,6 @@ function ChatGroupItem({
   instanceProjectId?: string;
 }) {
   const localize = useLocalize();
-  const { user } = useAuthContext();
   const { submitPrompt } = useSubmitMessage();
   const [isPreviewDialogOpen, setPreviewDialogOpen] = useState(false);
   const [isVariableDialogOpen, setVariableDialogOpen] = useState(false);
@@ -32,7 +32,10 @@ function ChatGroupItem({
     () => instanceProjectId != null && group.projectIds?.includes(instanceProjectId),
     [group, instanceProjectId],
   );
-  const isOwner = useMemo(() => user?.id === group.author, [user, group]);
+
+  // Check permissions for the promptGroup
+  const { hasPermission } = useResourcePermissions('promptGroup', group._id || '');
+  const canEdit = hasPermission(PERMISSION_BITS.EDIT);
 
   const onCardClick: React.MouseEventHandler<HTMLButtonElement> = () => {
     const text = group.productionPrompt?.prompt;
@@ -108,10 +111,10 @@ function ChatGroupItem({
                 <TextSearch className="mr-2 h-4 w-4" aria-hidden="true" />
                 <span>{localize('com_ui_preview')}</span>
               </DropdownMenuItem>
-              {isOwner && (
+              {canEdit && (
                 <DropdownMenuGroup>
                   <DropdownMenuItem
-                    disabled={!isOwner}
+                    disabled={!canEdit}
                     className="cursor-pointer rounded-lg text-text-secondary hover:bg-surface-hover focus:bg-surface-hover disabled:cursor-not-allowed"
                     onClick={(e) => {
                       e.stopPropagation();

client/src/components/Prompts/Groups/DashGroupItem.tsx

@@ -1,7 +1,7 @@
 import { memo, useState, useRef, useMemo, useCallback, KeyboardEvent } from 'react';
 import { EarthIcon, Pen } from 'lucide-react';
 import { useNavigate, useParams } from 'react-router-dom';
-import { SystemRoles, type TPromptGroup } from 'librechat-data-provider';
+import { PERMISSION_BITS, type TPromptGroup } from 'librechat-data-provider';
 import {
   Input,
   Label,
@@ -13,7 +13,7 @@ import {
 } from '@librechat/client';
 import { useDeletePromptGroup, useUpdatePromptGroup } from '~/data-provider';
 import CategoryIcon from '~/components/Prompts/Groups/CategoryIcon';
-import { useLocalize, useAuthContext } from '~/hooks';
+import { useLocalize, useResourcePermissions } from '~/hooks';
 import { cn } from '~/utils';
 
 interface DashGroupItemProps {
@@ -25,12 +25,14 @@ function DashGroupItemComponent({ group, instanceProjectId }: DashGroupItemProps
   const params = useParams();
   const navigate = useNavigate();
   const localize = useLocalize();
-  const { user } = useAuthContext();
 
   const blurTimeoutRef = useRef<NodeJS.Timeout | null>(null);
   const [nameInputValue, setNameInputValue] = useState(group.name);
 
-  const isOwner = useMemo(() => user?.id === group.author, [user?.id, group.author]);
+  const { hasPermission } = useResourcePermissions('promptGroup', group._id || '');
+  const canEdit = hasPermission(PERMISSION_BITS.EDIT);
+  const canDelete = hasPermission(PERMISSION_BITS.DELETE);
+
   const isGlobalGroup = useMemo(
     () => instanceProjectId && group.projectIds?.includes(instanceProjectId),
     [group.projectIds, instanceProjectId],
@@ -105,78 +107,78 @@ function DashGroupItemComponent({ group, instanceProjectId }: DashGroupItemProps
               aria-label={localize('com_ui_global_group')}
             />
           )}
-          {(isOwner || user?.role === SystemRoles.ADMIN) && (
-            <>
-              <OGDialog>
-                <OGDialogTrigger asChild>
-                  <Button
-                    variant="ghost"
-                    onClick={(e) => e.stopPropagation()}
-                    className="h-8 w-8 p-0 hover:bg-surface-hover"
-                    aria-label={localize('com_ui_rename_prompt') + ' ' + group.name}
-                  >
-                    <Pen className="icon-sm text-text-primary" aria-hidden="true" />
-                  </Button>
-                </OGDialogTrigger>
-                <OGDialogTemplate
-                  showCloseButton={false}
-                  title={localize('com_ui_rename_prompt')}
-                  className="w-11/12 max-w-lg"
-                  main={
-                    <div className="flex w-full flex-col items-center gap-2">
-                      <div className="grid w-full items-center gap-2">
-                        <Input
-                          value={nameInputValue}
-                          onChange={(e) => setNameInputValue(e.target.value)}
-                          className="w-full"
-                          aria-label={localize('com_ui_rename_prompt') + ' ' + group.name}
-                        />
-                      </div>
+          {canEdit && (
+            <OGDialog>
+              <OGDialogTrigger asChild>
+                <Button
+                  variant="ghost"
+                  onClick={(e) => e.stopPropagation()}
+                  className="h-8 w-8 p-0 hover:bg-surface-hover"
+                  aria-label={localize('com_ui_rename_prompt') + ' ' + group.name}
+                >
+                  <Pen className="icon-sm text-text-primary" aria-hidden="true" />
+                </Button>
+              </OGDialogTrigger>
+              <OGDialogTemplate
+                showCloseButton={false}
+                title={localize('com_ui_rename_prompt')}
+                className="w-11/12 max-w-lg"
+                main={
+                  <div className="flex w-full flex-col items-center gap-2">
+                    <div className="grid w-full items-center gap-2">
+                      <Input
+                        value={nameInputValue}
+                        onChange={(e) => setNameInputValue(e.target.value)}
+                        className="w-full"
+                        aria-label={localize('com_ui_rename_prompt') + ' ' + group.name}
+                      />
                     </div>
-                  }
-                  selection={{
-                    selectHandler: handleSaveRename,
-                    selectClasses:
-                      'bg-surface-submit hover:bg-surface-submit-hover text-white disabled:hover:bg-surface-submit',
-                    selectText: localize('com_ui_save'),
-                    isLoading,
-                  }}
-                />
-              </OGDialog>
+                  </div>
+                }
+                selection={{
+                  selectHandler: handleSaveRename,
+                  selectClasses:
+                    'bg-surface-submit hover:bg-surface-submit-hover text-white disabled:hover:bg-surface-submit',
+                  selectText: localize('com_ui_save'),
+                  isLoading,
+                }}
+              />
+            </OGDialog>
+          )}
 
-              <OGDialog>
-                <OGDialogTrigger asChild>
-                  <Button
-                    variant="ghost"
-                    className="h-8 w-8 p-0 hover:bg-surface-hover"
-                    onClick={(e) => e.stopPropagation()}
-                    aria-label={localize('com_ui_delete_prompt') + ' ' + group.name}
-                  >
-                    <TrashIcon className="icon-sm text-text-primary" aria-hidden="true" />
-                  </Button>
-                </OGDialogTrigger>
-                <OGDialogTemplate
-                  showCloseButton={false}
-                  title={localize('com_ui_delete_prompt')}
-                  className="w-11/12 max-w-lg"
-                  main={
-                    <div className="flex w-full flex-col items-center gap-2">
-                      <div className="grid w-full items-center gap-2">
-                        <Label htmlFor="confirm-delete" className="text-left text-sm font-medium">
-                          {localize('com_ui_delete_confirm')} <strong>{group.name}</strong>
-                        </Label>
-                      </div>
+          {canDelete && (
+            <OGDialog>
+              <OGDialogTrigger asChild>
+                <Button
+                  variant="ghost"
+                  className="h-8 w-8 p-0 hover:bg-surface-hover"
+                  onClick={(e) => e.stopPropagation()}
+                  aria-label={localize('com_ui_delete_prompt') + ' ' + group.name}
+                >
+                  <TrashIcon className="icon-sm text-text-primary" aria-hidden="true" />
+                </Button>
+              </OGDialogTrigger>
+              <OGDialogTemplate
+                showCloseButton={false}
+                title={localize('com_ui_delete_prompt')}
+                className="w-11/12 max-w-lg"
+                main={
+                  <div className="flex w-full flex-col items-center gap-2">
+                    <div className="grid w-full items-center gap-2">
+                      <Label htmlFor="confirm-delete" className="text-left text-sm font-medium">
+                        {localize('com_ui_delete_confirm')} <strong>{group.name}</strong>
+                      </Label>
                     </div>
-                  }
-                  selection={{
-                    selectHandler: triggerDelete,
-                    selectClasses:
-                      'bg-red-600 dark:bg-red-600 hover:bg-red-700 dark:hover:bg-red-800 text-white',
-                    selectText: localize('com_ui_delete'),
-                  }}
-                />
-              </OGDialog>
-            </>
+                  </div>
+                }
+                selection={{
+                  selectHandler: triggerDelete,
+                  selectClasses:
+                    'bg-red-600 dark:bg-red-600 hover:bg-red-700 dark:hover:bg-red-800 text-white',
+                  selectText: localize('com_ui_delete'),
+                }}
+              />
+            </OGDialog>
           )}
         </div>
       </div>