feat: [UIE-9423] - IAM Parent/Child: permissions switch account

[aaleksee-akamai]

Description 📝

This PR updates the logic to check permissions for switching account

Changes 🔄

List any change(s) relevant to the reviewer.

• Update logic for switching account
• Add tests

Scope 🚢

Upon production release, changes in this PR will be visible to:

• All customers
• Some customers (e.g. in Beta or Limited Availability)
• No customers / Not applicable

Target release date 🗓️

11/18

Preview 📷

Before	After
📷
📷
📷
📷
📷
📷

How to test 🧪

Prerequisites

(How to setup test environment)

• IAM parent/child DevCloud account (IAM Delegation (Parent/Child) flag should be enabled)
• use MSW CRUD mode
• use Custom User Account Permissions preset to test permissions

Reproduction steps

(How to reproduce the issue, if applicable)

• click on User menu
• go to /account/billing (iamRbacPrimaryNavChanges flag needs to be off)
• go to /billing (iamRbacPrimaryNavChanges flag needs to be on)

Verification steps

(How to verify changes)

IAM Delegation flag is ON:

account is parent:

• the button is enabled if user has create_child_account_token permission
• the button is disabled if user doesn't create_child_account_token permission

account isn't a parent:

• there is no button to switch account

IAM Delegation flag is OFF:

account is parent or proxy:

• the button is always enabled

account isn't a parent:

• there is no button to switch account

Author Checklists

As an Author, to speed up the review process, I considered 🤔

👀 Doing a self review
❔ Our contribution guidelines
🤏 Splitting feature into small PRs
➕ Adding a changeset
🧪 Providing/improving test coverage
🔐 Removing all sensitive information from the code and PR description
🚩 Using a feature flag to protect the release
👣 Providing comprehensive reproduction steps
📑 Providing or updating our documentation
🕛 Scheduling a pair reviewing session
📱 Providing mobile support
♿ Providing accessibility support

• I have read and considered all applicable items listed above.

As an Author, before moving this PR from Draft to Open, I confirmed ✅

• All tests and CI checks are passing
• TypeScript compilation succeeded without errors
• Code passes all linting rules

[abailly-akamai]

This may be the right logic but my feeling is that we need to introduce the delegate user here. This will be confirmed once we start using the API, but once a parent switches over to act on an third party child-account, it becomes user_type='delegate' during that session.

[linode-gh-bot]

Cloud Manager UI test results

🔺 4 failing tests on test run #4 ↗︎

❌ Failing	✅ Passing	↪️ Skipped	🕐 Duration
4 Failing	855 Passing	13 Skipped	44m 4s

Details

Failing Tests
	Spec	Test
❌	update-stackscripts.spec.ts	Cloud Manager Cypress Tests→Update stackscripts » updates a StackScript
❌	create-firewall.spec.ts	Cloud Manager Cypress Tests→create firewall » "before all" hook for "creates a firewall without a linode"
❌	create-firewall.spec.ts	Cloud Manager Cypress Tests→restricted user cannot create firewall » "before each" hook for "confirms the create button is disabled on the Firewall Landing page"
❌	create-stackscripts.spec.ts	Cloud Manager Cypress Tests→Create stackscripts » creates a StackScript and deploys a Linode with it

Troubleshooting

Use this command to re-run the failing tests:

pnpm cy:run -s "cypress/e2e/core/stackscripts/update-stackscripts.spec.ts,cypress/e2e/core/firewalls/create-firewall.spec.ts,cypress/e2e/core/stackscripts/create-stackscripts.spec.ts"

[mpolotsk-akamai]

Everything works as expected. Thanks!

[abailly-akamai]

Approving while waiting for API. We may want to revisit this (see comments) once we're getting really endpoints but meanwhile logic looks good

[aaleksee-akamai]

Approving while waiting for API. We may want to revisit this (see comments) once we're getting really endpoints but meanwhile logic looks good

makes sense, I'll add a comment to this UIE-9566 since it's related to account switching