Function mergeEnvAllowlist

apps/sim/ee/access-control/utils/permission-check.ts:108–127

* Merges the env allowlist into a permission config. * If `config` is null and no env allowlist is set, returns null. * If `config` is null but env allowlist is set, returns a default config with only allowedIntegrations set. * If both are set, intersects the two allowlists.

(config: PermissionGroupConfig | null)

 * If both are set, intersects the two allowlists.
 */
function mergeEnvAllowlist(config: PermissionGroupConfig | null): PermissionGroupConfig | null {
  const envAllowlist = getAllowedIntegrationsFromEnv()

  if (envAllowlist === null) {
    return config
  }

  if (config === null) {
    return { ...DEFAULT_PERMISSION_GROUP_CONFIG, allowedIntegrations: envAllowlist }
  }

  const merged =
    config.allowedIntegrations === null
      ? envAllowlist
      : config.allowedIntegrations
          .map((i) => i.toLowerCase())
          .filter((i) => envAllowlist.includes(i))

  return { ...config, allowedIntegrations: merged }
}

/**
 * The permission group that governs a user in a given context, with its parsed