From 8852d460b7009f776a131e88cbf0cbad595a16d8 Mon Sep 17 00:00:00 2001
From: Classic298 <27028174+Classic298@users.noreply.github.com>
Date: Sat, 24 Oct 2026 07:44:47 +0200
Subject: [PATCH] fix: group permission toggles show while their feature is off
 (#32983)

Users > Groups and the default permissions showed toggles such as Web Search, Channels, Notes, API Keys or Rate Response even when the admin had turned that feature off for the whole instance, so changing them did nothing. Each of these toggles, and the sharing toggles for notes, folders and calendars, now only shows while its feature is on. Stored permission values are kept, so turning a feature back on restores each group's setting.

Refs #32830
---
 .../admin/Users/Groups/Permissions.svelte     | 527 ++++++++++--------
 1 file changed, 281 insertions(+), 246 deletions(-)

diff --git a/src/lib/components/admin/Users/Groups/Permissions.svelte b/src/lib/components/admin/Users/Groups/Permissions.svelte
index 4016d0d2eb..770c00dfe1 100644
--- a/src/lib/components/admin/Users/Groups/Permissions.svelte
+++ b/src/lib/components/admin/Users/Groups/Permissions.svelte
@@ -422,34 +422,54 @@
 			</div>
 		{/if}
 
-		<div class="flex flex-col w-full">
-			<div class="flex w-full justify-between my-1">
-				<div class=" self-center text-xs font-normal">
-					{$i18n.t('Notes Sharing')}
-				</div>
-				<Switch bind:state={permissions.sharing.notes} ariaLabel={$i18n.t('Notes Sharing')} />
-			</div>
-			{#if defaultPermissions?.sharing?.notes && !permissions.sharing.notes}
-				<div>
-					<div class="text-xs text-gray-500">
-						{$i18n.t('This is a default user permission and will remain enabled.')}
-					</div>
-				</div>
-			{/if}
-		</div>
-
-		{#if permissions.sharing.notes}
+		{#if $config?.features?.enable_notes}
 			<div class="flex flex-col w-full">
 				<div class="flex w-full justify-between my-1">
 					<div class=" self-center text-xs font-normal">
-						{$i18n.t('Notes Public Sharing')}
+						{$i18n.t('Notes Sharing')}
 					</div>
-					<Switch
-						bind:state={permissions.sharing.public_notes}
-						ariaLabel={$i18n.t('Notes Public Sharing')}
-					/>
+					<Switch bind:state={permissions.sharing.notes} ariaLabel={$i18n.t('Notes Sharing')} />
 				</div>
-				{#if defaultPermissions?.sharing?.public_notes && !permissions.sharing.public_notes}
+				{#if defaultPermissions?.sharing?.notes && !permissions.sharing.notes}
+					<div>
+						<div class="text-xs text-gray-500">
+							{$i18n.t('This is a default user permission and will remain enabled.')}
+						</div>
+					</div>
+				{/if}
+			</div>
+
+			{#if permissions.sharing.notes}
+				<div class="flex flex-col w-full">
+					<div class="flex w-full justify-between my-1">
+						<div class=" self-center text-xs font-normal">
+							{$i18n.t('Notes Public Sharing')}
+						</div>
+						<Switch
+							bind:state={permissions.sharing.public_notes}
+							ariaLabel={$i18n.t('Notes Public Sharing')}
+						/>
+					</div>
+					{#if defaultPermissions?.sharing?.public_notes && !permissions.sharing.public_notes}
+						<div>
+							<div class="text-xs text-gray-500">
+								{$i18n.t('This is a default user permission and will remain enabled.')}
+							</div>
+						</div>
+					{/if}
+				</div>
+			{/if}
+		{/if}
+
+		{#if $config?.features?.enable_folders}
+			<div class="flex flex-col w-full">
+				<div class="flex w-full justify-between my-1">
+					<div class=" self-center text-xs font-normal">
+						{$i18n.t('Folders Sharing')}
+					</div>
+					<Switch bind:state={permissions.sharing.folders} ariaLabel={$i18n.t('Folders Sharing')} />
+				</div>
+				{#if defaultPermissions?.sharing?.folders && !permissions.sharing.folders}
 					<div>
 						<div class="text-xs text-gray-500">
 							{$i18n.t('This is a default user permission and will remain enabled.')}
@@ -459,22 +479,6 @@
 			</div>
 		{/if}
 
-		<div class="flex flex-col w-full">
-			<div class="flex w-full justify-between my-1">
-				<div class=" self-center text-xs font-normal">
-					{$i18n.t('Folders Sharing')}
-				</div>
-				<Switch bind:state={permissions.sharing.folders} ariaLabel={$i18n.t('Folders Sharing')} />
-			</div>
-			{#if defaultPermissions?.sharing?.folders && !permissions.sharing.folders}
-				<div>
-					<div class="text-xs text-gray-500">
-						{$i18n.t('This is a default user permission and will remain enabled.')}
-					</div>
-				</div>
-			{/if}
-		</div>
-
 		{#if permissions.chat.share}
 			<div class="flex flex-col w-full">
 				<div class="flex w-full justify-between my-1">
@@ -515,7 +519,7 @@
 			</div>
 		{/if}
 
-		{#if permissions.features.calendar}
+		{#if $config?.features?.enable_calendar && permissions.features.calendar}
 			<div class="flex flex-col w-full">
 				<div class="flex w-full justify-between my-1">
 					<div class=" self-center text-xs font-normal">
@@ -779,24 +783,26 @@
 			{/if}
 		</div>
 
-		<div class="flex flex-col w-full">
-			<div class="flex w-full justify-between my-1">
-				<div class=" self-center text-xs font-normal">
-					{$i18n.t('Allow Rate Response')}
-				</div>
-				<Switch
-					bind:state={permissions.chat.rate_response}
-					ariaLabel={$i18n.t('Allow Rate Response')}
-				/>
-			</div>
-			{#if defaultPermissions?.chat?.rate_response && !permissions.chat.rate_response}
-				<div>
-					<div class="text-xs text-gray-500">
-						{$i18n.t('This is a default user permission and will remain enabled.')}
+		{#if $config?.features?.enable_message_rating}
+			<div class="flex flex-col w-full">
+				<div class="flex w-full justify-between my-1">
+					<div class=" self-center text-xs font-normal">
+						{$i18n.t('Allow Rate Response')}
 					</div>
+					<Switch
+						bind:state={permissions.chat.rate_response}
+						ariaLabel={$i18n.t('Allow Rate Response')}
+					/>
 				</div>
-			{/if}
-		</div>
+				{#if defaultPermissions?.chat?.rate_response && !permissions.chat.rate_response}
+					<div>
+						<div class="text-xs text-gray-500">
+							{$i18n.t('This is a default user permission and will remain enabled.')}
+						</div>
+					</div>
+				{/if}
+			</div>
+		{/if}
 
 		<div class="flex flex-col w-full">
 			<div class="flex w-full justify-between my-1">
@@ -959,231 +965,260 @@
 	<div>
 		<div class=" mb-2 text-sm font-normal">{$i18n.t('Features Permissions')}</div>
 
-		<div class="flex flex-col w-full">
-			<div class="flex w-full justify-between my-1">
-				<div class=" self-center text-xs font-normal">
-					{$i18n.t('API Keys')}
+		{#if $config?.features?.enable_api_keys}
+			<div class="flex flex-col w-full">
+				<div class="flex w-full justify-between my-1">
+					<div class=" self-center text-xs font-normal">
+						{$i18n.t('API Keys')}
+					</div>
+					<Switch bind:state={permissions.features.api_keys} ariaLabel={$i18n.t('API Keys')} />
 				</div>
-				<Switch bind:state={permissions.features.api_keys} ariaLabel={$i18n.t('API Keys')} />
+				{#if defaultPermissions?.features?.api_keys && !permissions.features.api_keys}
+					<div>
+						<div class="text-xs text-gray-500">
+							{$i18n.t('This is a default user permission and will remain enabled.')}
+						</div>
+					</div>
+				{/if}
 			</div>
-			{#if defaultPermissions?.features?.api_keys && !permissions.features.api_keys}
-				<div>
-					<div class="text-xs text-gray-500">
-						{$i18n.t('This is a default user permission and will remain enabled.')}
-					</div>
-				</div>
-			{/if}
-		</div>
+		{/if}
 
-		<div class="flex flex-col w-full">
-			<div class="flex w-full justify-between my-1">
-				<div class=" self-center text-xs font-normal">
-					{$i18n.t('Notes')}
+		{#if $config?.features?.enable_notes}
+			<div class="flex flex-col w-full">
+				<div class="flex w-full justify-between my-1">
+					<div class=" self-center text-xs font-normal">
+						{$i18n.t('Notes')}
+					</div>
+					<Switch bind:state={permissions.features.notes} ariaLabel={$i18n.t('Notes')} />
 				</div>
-				<Switch bind:state={permissions.features.notes} ariaLabel={$i18n.t('Notes')} />
+				{#if defaultPermissions?.features?.notes && !permissions.features.notes}
+					<div>
+						<div class="text-xs text-gray-500">
+							{$i18n.t('This is a default user permission and will remain enabled.')}
+						</div>
+					</div>
+				{/if}
 			</div>
-			{#if defaultPermissions?.features?.notes && !permissions.features.notes}
-				<div>
-					<div class="text-xs text-gray-500">
-						{$i18n.t('This is a default user permission and will remain enabled.')}
-					</div>
-				</div>
-			{/if}
-		</div>
+		{/if}
 
-		<div class="flex flex-col w-full">
-			<div class="flex w-full justify-between my-1">
-				<div class=" self-center text-xs font-normal">
-					{$i18n.t('Channels')}
+		{#if $config?.features?.enable_channels}
+			<div class="flex flex-col w-full">
+				<div class="flex w-full justify-between my-1">
+					<div class=" self-center text-xs font-normal">
+						{$i18n.t('Channels')}
+					</div>
+					<Switch bind:state={permissions.features.channels} ariaLabel={$i18n.t('Channels')} />
 				</div>
-				<Switch bind:state={permissions.features.channels} ariaLabel={$i18n.t('Channels')} />
+				{#if defaultPermissions?.features?.channels && !permissions.features.channels}
+					<div>
+						<div class="text-xs text-gray-500">
+							{$i18n.t('This is a default user permission and will remain enabled.')}
+						</div>
+					</div>
+				{/if}
 			</div>
-			{#if defaultPermissions?.features?.channels && !permissions.features.channels}
-				<div>
-					<div class="text-xs text-gray-500">
-						{$i18n.t('This is a default user permission and will remain enabled.')}
-					</div>
-				</div>
-			{/if}
-		</div>
+		{/if}
 
-		<div class="flex flex-col w-full">
-			<div class="flex w-full justify-between my-1">
-				<div class=" self-center text-xs font-normal">
-					{$i18n.t('Encrypted Channels')}
+		{#if $config?.features?.enable_channels && $config?.features?.enable_encrypted_channels}
+			<div class="flex flex-col w-full">
+				<div class="flex w-full justify-between my-1">
+					<div class=" self-center text-xs font-normal">
+						{$i18n.t('Encrypted Channels')}
+					</div>
+					<Switch
+						bind:state={permissions.features.encrypted_channels}
+						ariaLabel={$i18n.t('Encrypted Channels')}
+					/>
 				</div>
-				<Switch
-					bind:state={permissions.features.encrypted_channels}
-					ariaLabel={$i18n.t('Encrypted Channels')}
-				/>
+				{#if defaultPermissions?.features?.encrypted_channels && !permissions.features.encrypted_channels}
+					<div>
+						<div class="text-xs text-gray-500">
+							{$i18n.t('This is a default user permission and will remain enabled.')}
+						</div>
+					</div>
+				{/if}
 			</div>
-			{#if defaultPermissions?.features?.encrypted_channels && !permissions.features.encrypted_channels}
-				<div>
-					<div class="text-xs text-gray-500">
-						{$i18n.t('This is a default user permission and will remain enabled.')}
-					</div>
-				</div>
-			{/if}
-		</div>
+		{/if}
 
-		<div class="flex flex-col w-full">
-			<div class="flex w-full justify-between my-1">
-				<div class=" self-center text-xs font-normal">
-					{$i18n.t('Folders')}
+		{#if $config?.features?.enable_folders}
+			<div class="flex flex-col w-full">
+				<div class="flex w-full justify-between my-1">
+					<div class=" self-center text-xs font-normal">
+						{$i18n.t('Folders')}
+					</div>
+					<Switch bind:state={permissions.features.folders} ariaLabel={$i18n.t('Folders')} />
 				</div>
-				<Switch bind:state={permissions.features.folders} ariaLabel={$i18n.t('Folders')} />
+				{#if defaultPermissions?.features?.folders && !permissions.features.folders}
+					<div>
+						<div class="text-xs text-gray-500">
+							{$i18n.t('This is a default user permission and will remain enabled.')}
+						</div>
+					</div>
+				{/if}
 			</div>
-			{#if defaultPermissions?.features?.folders && !permissions.features.folders}
-				<div>
-					<div class="text-xs text-gray-500">
-						{$i18n.t('This is a default user permission and will remain enabled.')}
-					</div>
-				</div>
-			{/if}
-		</div>
+		{/if}
 
-		<div class="flex flex-col w-full">
-			<div class="flex w-full justify-between my-1">
-				<div class=" self-center text-xs font-normal">
-					{$i18n.t('Direct Tool Servers')}
+		{#if $config?.features?.enable_direct_integrations}
+			<div class="flex flex-col w-full">
+				<div class="flex w-full justify-between my-1">
+					<div class=" self-center text-xs font-normal">
+						{$i18n.t('Direct Tool Servers')}
+					</div>
+					<Switch
+						bind:state={permissions.features.direct_tool_servers}
+						ariaLabel={$i18n.t('Direct Tool Servers')}
+					/>
 				</div>
-				<Switch
-					bind:state={permissions.features.direct_tool_servers}
-					ariaLabel={$i18n.t('Direct Tool Servers')}
-				/>
+				{#if defaultPermissions?.features?.direct_tool_servers && !permissions.features.direct_tool_servers}
+					<div>
+						<div class="text-xs text-gray-500">
+							{$i18n.t('This is a default user permission and will remain enabled.')}
+						</div>
+					</div>
+				{/if}
 			</div>
-			{#if defaultPermissions?.features?.direct_tool_servers && !permissions.features.direct_tool_servers}
-				<div>
-					<div class="text-xs text-gray-500">
-						{$i18n.t('This is a default user permission and will remain enabled.')}
-					</div>
-				</div>
-			{/if}
-		</div>
+		{/if}
 
-		<div class="flex flex-col w-full">
-			<div class="flex w-full justify-between my-1">
-				<div class=" self-center text-xs font-normal">
-					{$i18n.t('Web Search')}
+		{#if $config?.features?.enable_web_search}
+			<div class="flex flex-col w-full">
+				<div class="flex w-full justify-between my-1">
+					<div class=" self-center text-xs font-normal">
+						{$i18n.t('Web Search')}
+					</div>
+					<Switch bind:state={permissions.features.web_search} ariaLabel={$i18n.t('Web Search')} />
 				</div>
-				<Switch bind:state={permissions.features.web_search} ariaLabel={$i18n.t('Web Search')} />
+				{#if defaultPermissions?.features?.web_search && !permissions.features.web_search}
+					<div>
+						<div class="text-xs text-gray-500">
+							{$i18n.t('This is a default user permission and will remain enabled.')}
+						</div>
+					</div>
+				{/if}
 			</div>
-			{#if defaultPermissions?.features?.web_search && !permissions.features.web_search}
-				<div>
-					<div class="text-xs text-gray-500">
-						{$i18n.t('This is a default user permission and will remain enabled.')}
-					</div>
-				</div>
-			{/if}
-		</div>
+		{/if}
 
-		<div class="flex flex-col w-full">
-			<div class="flex w-full justify-between my-1">
-				<div class=" self-center text-xs font-normal">
-					{$i18n.t('Image Generation')}
+		{#if $config?.features?.enable_image_generation}
+			<div class="flex flex-col w-full">
+				<div class="flex w-full justify-between my-1">
+					<div class=" self-center text-xs font-normal">
+						{$i18n.t('Image Generation')}
+					</div>
+					<Switch
+						bind:state={permissions.features.image_generation}
+						ariaLabel={$i18n.t('Image Generation')}
+					/>
 				</div>
-				<Switch
-					bind:state={permissions.features.image_generation}
-					ariaLabel={$i18n.t('Image Generation')}
-				/>
+				{#if defaultPermissions?.features?.image_generation && !permissions.features.image_generation}
+					<div>
+						<div class="text-xs text-gray-500">
+							{$i18n.t('This is a default user permission and will remain enabled.')}
+						</div>
+					</div>
+				{/if}
 			</div>
-			{#if defaultPermissions?.features?.image_generation && !permissions.features.image_generation}
-				<div>
-					<div class="text-xs text-gray-500">
-						{$i18n.t('This is a default user permission and will remain enabled.')}
-					</div>
-				</div>
-			{/if}
-		</div>
+		{/if}
 
-		<div class="flex flex-col w-full">
-			<div class="flex w-full justify-between my-1">
-				<div class=" self-center text-xs font-normal">
-					{$i18n.t('Code Interpreter')}
+		{#if $config?.features?.enable_code_interpreter}
+			<div class="flex flex-col w-full">
+				<div class="flex w-full justify-between my-1">
+					<div class=" self-center text-xs font-normal">
+						{$i18n.t('Code Interpreter')}
+					</div>
+					<Switch
+						bind:state={permissions.features.code_interpreter}
+						ariaLabel={$i18n.t('Code Interpreter')}
+					/>
 				</div>
-				<Switch
-					bind:state={permissions.features.code_interpreter}
-					ariaLabel={$i18n.t('Code Interpreter')}
-				/>
+				{#if defaultPermissions?.features?.code_interpreter && !permissions.features.code_interpreter}
+					<div>
+						<div class="text-xs text-gray-500">
+							{$i18n.t('This is a default user permission and will remain enabled.')}
+						</div>
+					</div>
+				{/if}
 			</div>
-			{#if defaultPermissions?.features?.code_interpreter && !permissions.features.code_interpreter}
-				<div>
-					<div class="text-xs text-gray-500">
-						{$i18n.t('This is a default user permission and will remain enabled.')}
-					</div>
-				</div>
-			{/if}
-		</div>
+		{/if}
 
-		<div class="flex flex-col w-full">
-			<div class="flex w-full justify-between my-1">
-				<div class=" self-center text-xs font-normal">
-					{$i18n.t('Memories')}
+		{#if $config?.features?.enable_memories}
+			<div class="flex flex-col w-full">
+				<div class="flex w-full justify-between my-1">
+					<div class=" self-center text-xs font-normal">
+						{$i18n.t('Memories')}
+					</div>
+					<Switch bind:state={permissions.features.memories} ariaLabel={$i18n.t('Memories')} />
 				</div>
-				<Switch bind:state={permissions.features.memories} ariaLabel={$i18n.t('Memories')} />
+				{#if defaultPermissions?.features?.memories && !permissions.features.memories}
+					<div>
+						<div class="text-xs text-gray-500">
+							{$i18n.t('This is a default user permission and will remain enabled.')}
+						</div>
+					</div>
+				{/if}
 			</div>
-			{#if defaultPermissions?.features?.memories && !permissions.features.memories}
-				<div>
-					<div class="text-xs text-gray-500">
-						{$i18n.t('This is a default user permission and will remain enabled.')}
-					</div>
-				</div>
-			{/if}
-		</div>
+		{/if}
 
-		<div class="flex flex-col w-full">
-			<Tooltip
-				className="flex w-full justify-between my-1"
-				content={$i18n.t(
-					'Warning: Enabling this will allow users to run scheduled prompts automatically.'
-				)}
-				placement="top-start"
-			>
-				<div class=" self-center text-xs font-normal">
-					{$i18n.t('Automations')}
-				</div>
-				<Switch bind:state={permissions.features.automations} ariaLabel={$i18n.t('Automations')} />
-			</Tooltip>
-			{#if defaultPermissions?.features?.automations && !permissions.features.automations}
-				<div>
-					<div class="text-xs text-gray-500">
-						{$i18n.t('This is a default user permission and will remain enabled.')}
+		{#if $config?.features?.enable_automations}
+			<div class="flex flex-col w-full">
+				<Tooltip
+					className="flex w-full justify-between my-1"
+					content={$i18n.t(
+						'Warning: Enabling this will allow users to run scheduled prompts automatically.'
+					)}
+					placement="top-start"
+				>
+					<div class=" self-center text-xs font-normal">
+						{$i18n.t('Automations')}
 					</div>
-				</div>
-			{/if}
-		</div>
-
-		<div class="flex flex-col w-full">
-			<div class="flex w-full justify-between my-1">
-				<div class=" self-center text-xs font-normal">
-					{$i18n.t('Calendar')}
-				</div>
-				<Switch bind:state={permissions.features.calendar} ariaLabel={$i18n.t('Calendar')} />
+					<Switch
+						bind:state={permissions.features.automations}
+						ariaLabel={$i18n.t('Automations')}
+					/>
+				</Tooltip>
+				{#if defaultPermissions?.features?.automations && !permissions.features.automations}
+					<div>
+						<div class="text-xs text-gray-500">
+							{$i18n.t('This is a default user permission and will remain enabled.')}
+						</div>
+					</div>
+				{/if}
 			</div>
-			{#if defaultPermissions?.features?.calendar && !permissions.features.calendar}
-				<div>
-					<div class="text-xs text-gray-500">
-						{$i18n.t('This is a default user permission and will remain enabled.')}
-					</div>
-				</div>
-			{/if}
-		</div>
+		{/if}
 
-		<div class="flex flex-col w-full">
-			<div class="flex w-full justify-between my-1">
-				<div class=" self-center text-xs font-normal">
-					{$i18n.t('User Webhooks')}
-				</div>
-				<Switch bind:state={permissions.features.webhooks} ariaLabel={$i18n.t('User Webhooks')} />
-			</div>
-			{#if defaultPermissions?.features?.webhooks && !permissions.features.webhooks}
-				<div>
-					<div class="text-xs text-gray-500">
-						{$i18n.t('This is a default user permission and will remain enabled.')}
+		{#if $config?.features?.enable_calendar}
+			<div class="flex flex-col w-full">
+				<div class="flex w-full justify-between my-1">
+					<div class=" self-center text-xs font-normal">
+						{$i18n.t('Calendar')}
 					</div>
+					<Switch bind:state={permissions.features.calendar} ariaLabel={$i18n.t('Calendar')} />
 				</div>
-			{/if}
-		</div>
+				{#if defaultPermissions?.features?.calendar && !permissions.features.calendar}
+					<div>
+						<div class="text-xs text-gray-500">
+							{$i18n.t('This is a default user permission and will remain enabled.')}
+						</div>
+					</div>
+				{/if}
+			</div>
+		{/if}
+
+		{#if $config?.features?.enable_user_webhooks}
+			<div class="flex flex-col w-full">
+				<div class="flex w-full justify-between my-1">
+					<div class=" self-center text-xs font-normal">
+						{$i18n.t('User Webhooks')}
+					</div>
+					<Switch bind:state={permissions.features.webhooks} ariaLabel={$i18n.t('User Webhooks')} />
+				</div>
+				{#if defaultPermissions?.features?.webhooks && !permissions.features.webhooks}
+					<div>
+						<div class="text-xs text-gray-500">
+							{$i18n.t('This is a default user permission and will remain enabled.')}
+						</div>
+					</div>
+				{/if}
+			</div>
+		{/if}
 	</div>
 
 	<hr class=" border-gray-100/30 dark:border-gray-850/30" />