feat: roles SPA Users, Profile, API keys, Activity

web/src/views/ApiKeysView.vue

@@ -50,7 +50,7 @@ const anyDialogOpen = computed(
 )
 const description = computed(() =>
 	seesEveryKey.value
-		? t("Keys act as the user who created them. As an owner you see everyone's keys.")
+		? t("Keys act as the user who created them. You see everyone's keys.")
 		: t('Keys act as you, with your role. You only see your own keys.'),
 )
 const sessionName = computed(
@@ -308,6 +308,20 @@ onMounted(loadKeys)
 				</template>
 			</UAlert>
 
+			<UAlert
+				color="info"
+				variant="soft"
+				icon="i-lucide-info"
+				:close="false"
+				:title="t('Keys follow their creator\'s role')"
+				:description="
+					t(
+						'A key can do what its creator\'s role can do, today. If the person\'s role changes, their keys change with it.',
+					)
+				"
+				:ui="{ root: 'items-start gap-2.5 px-3.5 py-2.5', description: 'text-toned' }"
+			/>
+
 			<UEmpty
 				v-if="isEmpty"
 				variant="naked"
@@ -332,6 +346,8 @@ onMounted(loadKeys)
 					:keys="keys"
 					:loading="loadState === 'loading'"
 					:show-created-by="seesEveryKey"
+					:caller-id="session.session?.id"
+					:caller-role="permissions.role"
 					@revoke="confirmRevoke"
 				/>
 				<ApiKeyCardList
@@ -339,6 +355,8 @@ onMounted(loadKeys)
 					:keys="keys"
 					:loading="loadState === 'loading'"
 					:show-created-by="seesEveryKey"
+					:caller-id="session.session?.id"
+					:caller-role="permissions.role"
 					@revoke="confirmRevoke"
 				/>
 			</template>