Function applyGroupLocksForUser

public/js/adminFolderAccess.js:963–1015

(username, grantsBox, groupMask, groupsForUser = [])

}

function applyGroupLocksForUser(username, grantsBox, groupMask, groupsForUser = []) {
  if (!grantsBox || !groupMask) return;

  const groupLabel = groupsForUser.length
    ? `${tf("granted_via_groups", "Granted via groups")}: ${groupsForUser.join(", ")}`
    : tf("granted_via_groups", "Granted via groups");

  const safeSelect = (folder) => {
    return `.folder-access-row[data-folder="${escapeFolderSelectorValue(folder)}"]`;
  };

  Object.keys(groupMask).forEach(folder => {
    const row = grantsBox.querySelector(safeSelect(folder));
    const caps = groupMask[folder] || {};
    if (!row) return;

    const groupNote = row.querySelector('.group-flag-note');
    if (groupNote) {
      groupNote.style.display = 'inline-flex';
      groupNote.classList.add('pill-note-strong');
      groupNote.textContent = tf('granted_via_groups', 'Granted via groups');
      if (groupsForUser.length) {
        groupNote.textContent += `: ${groupsForUser.join(', ')}`;
      }
    }

    Object.keys(caps).forEach(cap => {
      if (!caps[cap]) return;
      const input = row.querySelector(`input[data-cap="${cap}"]`);
      if (!input) return;
      input.checked = true;
      input.disabled = true;
      input.setAttribute("data-group-lock", "1");
      input.title = groupLabel;

      const permGroup = input.closest(".perm-group");
      if (permGroup) {
        permGroup.classList.add("group-locked");
      }
    });

    // Keep the synthetic Write meta toggle aligned with locked granular caps
    const lockedGranular = ['create','upload','edit','rename','copy','delete','extract']
      .some(cap => caps[cap]);
    const writeInput = row.querySelector('input[data-cap="write"]');
    if (writeInput && lockedGranular) {
      writeInput.checked = true;
      writeInput.disabled = true;
      writeInput.setAttribute("data-group-lock", "1");
      writeInput.title = groupLabel;
    }
  });
}

export async function populateAdminUserHubSelect(selectEl, onMetaUpdate) {
  if (!selectEl) return;