Function UserForm

frontend/src/react/pages/settings/UsersPage.tsx:495–908

({
  user,
  onClose,
  onCreated,
  onUpdated,
}: Omit<CreateUserSheetProps, "open">)

}

function UserForm({
  user,
  onClose,
  onCreated,
  onUpdated,
}: Omit<CreateUserSheetProps, "open">) {
  const { t } = useTranslation();
  const createUser = useAppStore((state) => state.createUser);
  const updateUser = useAppStore((state) => state.updateUser);
  const patchWorkspaceIamPolicy = useAppStore(
    (state) => state.patchWorkspaceIamPolicy
  );
  const passwordRestriction = useAppStore(
    (s) => s.getWorkspaceProfile().passwordRestriction
  );
  const enforceIdentityDomain = useAppStore(
    (s) => s.getWorkspaceProfile().enforceIdentityDomain
  );
  const workspaceDomains = useAppStore((s) => s.getWorkspaceProfile().domains);

  const isEditMode =
    !!user && user.name !== "" && !user.name.endsWith("/unknown");

  const allowUpdate =
    !isEditMode || hasWorkspacePermissionV2("bb.users.update");

  // Capture initial values on mount. Because the parent keys this component
  // by user, it remounts fresh every time a different user is edited, so
  // these initial values always reflect the latest `user` prop.
  //
  // The empty deps array is intentional: we want the initial baseline
  // frozen at mount so dirty tracking compares against it. If we added
  // `userMapToRoles` to deps, a Pinia store refresh mid-edit would move
  // the baseline and incorrectly classify untouched fields as dirty
  // (or vice versa). Since the outer CreateUserSheet wrapper remounts
  // this component whenever the edited user changes, "mount-only" is the
  // right scope for the baseline.
  const initialRoles = useMemo(() => {
    if (!user || !isEditMode) {
      return [PresetRoleType.WORKSPACE_MEMBER];
    }
    // Read a one-shot snapshot of the workspace role map at mount. The parent
    // page loads the workspace IAM policy, so it is populated by the time an
    // edit sheet opens; reading via getState keeps this baseline mount-only.
    const roles = useAppStore
      .getState()
      .workspaceUserMapToRoles()
      .get(getUserFullNameByType(user));
    return roles ? [...roles] : [];
  }, []);
  const initialTitle = user?.title ?? "";
  const initialEmail = user?.email ?? "";
  const initialPhone = user?.phone ?? "";

  const [title, setTitle] = useState(initialTitle);
  const [email, setEmail] = useState(initialEmail);
  const [phone, setPhone] = useState(initialPhone);
  const [password, setPassword] = useState("");