diff --git a/app/models/user.py b/app/models/user.py
index bf5d4feaa..b74c8c2af 100644
--- a/app/models/user.py
+++ b/app/models/user.py
@@ -169,6 +169,19 @@ class User(UserMixin):
return self.id in template_folder.get("users_with_permission", [])
+ def template_folders_for_service(self, service=None):
+ """
+ Returns list of template folders that a user can view for a given service
+ """
+ if not service.has_permission('edit_folder_permissions'):
+ return service.all_template_folders
+
+ return [
+ template_folder
+ for template_folder in service.all_template_folders
+ if self.id in template_folder.get("users_with_permission", [])
+ ]
+
def belongs_to_service(self, service_id):
return str(service_id) in self.services
@@ -268,6 +281,10 @@ class InvitedUser(object):
data['permissions'] = sorted(self.permissions)
return data
+ def template_folders_for_service(self, service=None):
+ # only used on the manage users page to display the count, so okay to not be fully fledged for now
+ return [{'id': x} for x in self.folder_permissions]
+
class InvitedOrgUser(object):
diff --git a/app/templates/views/manage-users.html b/app/templates/views/manage-users.html
index 645f67f1d..d97e1a269 100644
--- a/app/templates/views/manage-users.html
+++ b/app/templates/views/manage-users.html
@@ -57,6 +57,20 @@
{% endif %}
{% endif %}
+ {# only show if the service has folders #}
+ {% if current_service.has_permission('edit_folder_permissions') and current_service.all_template_folders %}
+
+ {% set folder_count = user.template_folders_for_service(current_service) | length %}
+
+ {% if folder_count == 0 %}
+ Cannot see any folders
+ {% elif folder_count != current_service.all_template_folders | length %}
+ Can see {{ folder_count }} folder{% if folder_count > 1 %}s{% endif %}
+ {% else %}
+ Can see all folders
+ {% endif%}
+
+ {% endif %}
{% if current_user.has_permissions('manage_service') %}
diff --git a/tests/app/main/views/test_manage_users.py b/tests/app/main/views/test_manage_users.py
index 5e8df8324..5450e647d 100644
--- a/tests/app/main/views/test_manage_users.py
+++ b/tests/app/main/views/test_manage_users.py
@@ -878,6 +878,73 @@ def test_no_permission_manage_users_page(
assert "Team members" not in resp_text
+@pytest.mark.parametrize('folders_user_can_see, expected_message', [
+ (3, 'Can see all folders'),
+ (2, 'Can see 2 folders'),
+ (1, 'Can see 1 folder'),
+ (0, 'Cannot see any folders'),
+])
+def test_manage_user_page_shows_how_many_folders_user_can_view(
+ client_request,
+ service_one,
+ mock_get_template_folders,
+ mock_get_users_by_service,
+ mock_get_invites_for_service,
+ api_user_active,
+ folders_user_can_see,
+ expected_message
+):
+ service_one['permissions'] = ['edit_folder_permissions']
+ mock_get_template_folders.return_value = [
+ {'id': 'folder-id-1', 'name': 'f1', 'parent_id': None, 'users_with_permission': []},
+ {'id': 'folder-id-2', 'name': 'f2', 'parent_id': None, 'users_with_permission': []},
+ {'id': 'folder-id-3', 'name': 'f3', 'parent_id': None, 'users_with_permission': []},
+ ]
+ for i in range(folders_user_can_see):
+ mock_get_template_folders.return_value[i]['users_with_permission'].append(api_user_active.id)
+
+ page = client_request.get('main.manage_users', service_id=service_one['id'])
+
+ user_div = page.select_one("h3[title='notify@digital.cabinet-office.gov.uk']").parent
+ assert user_div.select_one('.tick-cross-list-hint:last-child').text.strip() == expected_message
+
+
+def test_manage_user_page_doesnt_show_folder_hint_if_service_has_no_folders(
+ client_request,
+ service_one,
+ mock_get_template_folders,
+ mock_get_users_by_service,
+ mock_get_invites_for_service,
+ api_user_active,
+):
+ service_one['permissions'] = ['edit_folder_permissions']
+ mock_get_template_folders.return_value = []
+
+ page = client_request.get('main.manage_users', service_id=service_one['id'])
+
+ user_div = page.select_one("h3[title='notify@digital.cabinet-office.gov.uk']").parent
+ assert user_div.find('.tick-cross-list-hint:last-child') is None
+
+
+def test_manage_user_page_doesnt_show_folder_hint_if_service_cant_edit_folder_permissions(
+ client_request,
+ service_one,
+ mock_get_template_folders,
+ mock_get_users_by_service,
+ mock_get_invites_for_service,
+ api_user_active
+):
+ service_one['permissions'] = []
+ mock_get_template_folders.return_value = [
+ {'id': 'folder-id-1', 'name': 'f1', 'parent_id': None, 'users_with_permission': [api_user_active.id]},
+ ]
+
+ page = client_request.get('main.manage_users', service_id=service_one['id'])
+
+ user_div = page.select_one("h3[title='notify@digital.cabinet-office.gov.uk']").parent
+ assert user_div.find('.tick-cross-list-hint:last-child') is None
+
+
def test_remove_user_from_service(
client_request,
active_user_with_permissions,