From 98c981f4f3c0d991a8d4f486acb630a20b0995b2 Mon Sep 17 00:00:00 2001
From: Sergei Maertens <sergei@maykinmedia.nl>
Date: Mon, 30 Dec 2024 17:57:04 +0100
Subject: [PATCH] :sparkles: [#4650] Add option to skip ownership checks to
 options UI

---
 .../variables/prefill/PrefillSummary.js       |  2 ++
 .../prefill/objects_api/ObjectsAPIFields.js   | 31 ++++++++++++-----
 .../prefill/objects_api/SkipOwnershipCheck.js | 34 +++++++++++++++++++
 3 files changed, 59 insertions(+), 8 deletions(-)
 create mode 100644 src/openforms/js/components/admin/form_design/variables/prefill/objects_api/SkipOwnershipCheck.js

diff --git a/src/openforms/js/components/admin/form_design/variables/prefill/PrefillSummary.js b/src/openforms/js/components/admin/form_design/variables/prefill/PrefillSummary.js
index a6265f56b4..6d072ea52d 100644
--- a/src/openforms/js/components/admin/form_design/variables/prefill/PrefillSummary.js
+++ b/src/openforms/js/components/admin/form_design/variables/prefill/PrefillSummary.js
@@ -94,6 +94,8 @@ const PrefillSummary = ({
           }
           isOpen={modalOpen}
           closeModal={() => setModalOpen(false)}
+          // FIXME: push this down to the plugin-specific components, somehow
+          extraModifiers={plugin === 'objects_api' ? ['large'] : undefined}
         >
           <ErrorBoundary>
             <PrefillConfigurationForm
diff --git a/src/openforms/js/components/admin/form_design/variables/prefill/objects_api/ObjectsAPIFields.js b/src/openforms/js/components/admin/form_design/variables/prefill/objects_api/ObjectsAPIFields.js
index 98dcf49ce1..bfbfee1101 100644
--- a/src/openforms/js/components/admin/form_design/variables/prefill/objects_api/ObjectsAPIFields.js
+++ b/src/openforms/js/components/admin/form_design/variables/prefill/objects_api/ObjectsAPIFields.js
@@ -27,6 +27,7 @@ import ErrorBoundary from 'components/errors/ErrorBoundary';
 import {get} from 'utils/fetch';
 
 import CopyConfigurationFromRegistrationBackend from './CopyConfigurationFromRegistrationBackend';
+import SkipOwnershipCheck from './SkipOwnershipCheck';
 import useStatus from './useStatus';
 
 const PLUGIN_ID = 'objects_api';
@@ -82,7 +83,7 @@ const ObjectsAPIFields = () => {
   const {values, setFieldValue, setValues} = useFormikContext();
   const {
     plugin,
-    options: {objecttypeUuid, objecttypeVersion, objectsApiGroup},
+    options: {objecttypeUuid, objecttypeVersion, objectsApiGroup, skipOwnershipCheck},
   } = values;
   const {showCopyButton, toggleShowCopyButton} = useStatus();
 
@@ -90,6 +91,7 @@ const ObjectsAPIFields = () => {
     objectsApiGroup: null,
     objecttypeUuid: '',
     objecttypeVersion: null,
+    skipOwnershipCheck: false,
     authAttributePath: undefined,
     variablesMapping: [],
   };
@@ -235,13 +237,26 @@ const ObjectsAPIFields = () => {
             objectTypeFieldName="options.objecttypeUuid"
           />
         </ErrorBoundary>
-        <AuthAttributePath
-          name={'options.authAttributePath'}
-          objectsApiGroup={objectsApiGroup}
-          objecttypeUuid={objecttypeUuid}
-          objecttypeVersion={objecttypeVersion}
-          required
-        />
+      </Fieldset>
+
+      <Fieldset
+        title={
+          <FormattedMessage
+            description="Objects API ownership check fieldset title"
+            defaultMessage="Ownership checks"
+          />
+        }
+      >
+        <SkipOwnershipCheck />
+        {!skipOwnershipCheck && (
+          <AuthAttributePath
+            name={'options.authAttributePath'}
+            objectsApiGroup={objectsApiGroup}
+            objecttypeUuid={objecttypeUuid}
+            objecttypeVersion={objecttypeVersion}
+            required
+          />
+        )}
       </Fieldset>
 
       <Fieldset
diff --git a/src/openforms/js/components/admin/form_design/variables/prefill/objects_api/SkipOwnershipCheck.js b/src/openforms/js/components/admin/form_design/variables/prefill/objects_api/SkipOwnershipCheck.js
new file mode 100644
index 0000000000..b6b7fa2137
--- /dev/null
+++ b/src/openforms/js/components/admin/form_design/variables/prefill/objects_api/SkipOwnershipCheck.js
@@ -0,0 +1,34 @@
+import {useField} from 'formik';
+import {FormattedMessage} from 'react-intl';
+
+import FormRow from 'components/admin/forms/FormRow';
+import {Checkbox} from 'components/admin/forms/Inputs';
+
+const SkipOwnershipCheck = () => {
+  const [fieldProps] = useField({name: 'options.skipOwnershipCheck', type: 'checkbox'});
+  return (
+    <FormRow>
+      <Checkbox
+        label={
+          <FormattedMessage
+            description="Objects API registration: skipOwnershipCheck label"
+            defaultMessage="Skip ownership check"
+          />
+        }
+        helpText={
+          <FormattedMessage
+            description="Objects API registration: skipOwnershipCheck helpText"
+            defaultMessage={`If enabled, then no access control on the referenced object is performed.
+            Ensure that it does not contain private data before checking this!
+          `}
+          />
+        }
+        {...fieldProps}
+      />
+    </FormRow>
+  );
+};
+
+SkipOwnershipCheck.propTypes = {};
+
+export default SkipOwnershipCheck;