From c93ddcb3fb373dfa49d50c2a3be6cb874023f8f5 Mon Sep 17 00:00:00 2001 From: Sarah Gillespie <73313222+gillespi314@users.noreply.github.com> Date: Thu, 13 Nov 2025 12:46:19 -0600 Subject: [PATCH] Restrict UI permissions to resend profiles (#35688) --- changes/33288-ui-rbac-resend-profiles | 1 + .../hosts/details/HostDetailsPage/HostDetailsPage.tsx | 9 ++++++++- 2 files changed, 9 insertions(+), 1 deletion(-) create mode 100644 changes/33288-ui-rbac-resend-profiles diff --git a/changes/33288-ui-rbac-resend-profiles b/changes/33288-ui-rbac-resend-profiles new file mode 100644 index 0000000000..8d22cf4107 --- /dev/null +++ b/changes/33288-ui-rbac-resend-profiles @@ -0,0 +1 @@ +- Fixed UI bug where the option to resend MDM profiles for macOS hosts was incorrectly presented to non-admin and non-maintainer users. diff --git a/frontend/pages/hosts/details/HostDetailsPage/HostDetailsPage.tsx b/frontend/pages/hosts/details/HostDetailsPage/HostDetailsPage.tsx index f88206a1e9..ef028a6b41 100644 --- a/frontend/pages/hosts/details/HostDetailsPage/HostDetailsPage.tsx +++ b/frontend/pages/hosts/details/HostDetailsPage/HostDetailsPage.tsx @@ -1020,6 +1020,13 @@ const HostDetailsPage = ({ const isIosOrIpadosHost = isIPadOrIPhone(host.platform); const isAndroidHost = isAndroid(host.platform); + const canResendProfiles = + isDarwinHost && + (isGlobalAdmin || + isGlobalMaintainer || + isHostTeamAdmin || + isHostTeamMaintainer); + const showSoftwareLibraryTab = isPremiumTier; const showActivityCard = !isAndroidHost; @@ -1392,7 +1399,7 @@ const HostDetailsPage = ({ )} {showOSSettingsModal && (