feat(contracts): Add contracts permission to subscription tiers

- Add contracts_enabled field to SubscriptionPlan model
- Add contracts toggle to plan create/edit modal in platform settings
- Hide contracts menu item for tenants without contracts permission
- Protect /contracts routes with canUse('contracts') check
- Add HasContractsPermission to contracts API ViewSets
- Add contracts to PlanPermissions interface and feature definitions

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
poduck
2025-12-05 23:28:51 -05:00
parent 35f4301fe1
commit 023ea7f020
12 changed files with 105 additions and 13 deletions

View File

@@ -9,6 +9,7 @@ import { QueryClient, QueryClientProvider } from '@tanstack/react-query';
import { useCurrentUser, useMasquerade, useLogout } from './hooks/useAuth';
import { useCurrentBusiness } from './hooks/useBusiness';
import { useUpdateBusiness } from './hooks/useBusiness';
import { usePlanFeatures } from './hooks/usePlanFeatures';
import { setCookie } from './utils/cookies';
// Import Login Page
@@ -192,6 +193,7 @@ const AppContent: React.FC = () => {
const updateBusinessMutation = useUpdateBusiness();
const masqueradeMutation = useMasquerade();
const logoutMutation = useLogout();
const { canUse } = usePlanFeatures();
// Apply dark mode class and persist to localStorage
React.useEffect(() => {
@@ -810,7 +812,7 @@ const AppContent: React.FC = () => {
<Route
path="/contracts"
element={
hasAccess(['owner', 'manager']) ? (
hasAccess(['owner', 'manager']) && canUse('contracts') ? (
<Contracts />
) : (
<Navigate to="/" />
@@ -820,7 +822,7 @@ const AppContent: React.FC = () => {
<Route
path="/contracts/templates"
element={
hasAccess(['owner', 'manager']) ? (
hasAccess(['owner', 'manager']) && canUse('contracts') ? (
<ContractTemplates />
) : (
<Navigate to="/" />

View File

@@ -162,12 +162,14 @@ const Sidebar: React.FC<SidebarProps> = ({ business, user, isCollapsed, toggleCo
label={t('nav.staff')}
isCollapsed={isCollapsed}
/>
<SidebarItem
to="/contracts"
icon={FileSignature}
label={t('nav.contracts', 'Contracts')}
isCollapsed={isCollapsed}
/>
{canUse('contracts') && (
<SidebarItem
to="/contracts"
icon={FileSignature}
label={t('nav.contracts', 'Contracts')}
isCollapsed={isCollapsed}
/>
)}
<SidebarItem
to="/time-blocks"
icon={CalendarOff}

View File

@@ -60,12 +60,14 @@ export const useCurrentBusiness = () => {
white_label: false,
custom_oauth: false,
plugins: false,
tasks: false,
export_data: false,
video_conferencing: false,
two_factor_auth: false,
masked_calling: false,
pos_system: false,
mobile_app: false,
contracts: false,
},
};
},

View File

@@ -91,6 +91,7 @@ export const FEATURE_NAMES: Record<FeatureKey, string> = {
masked_calling: 'Masked Calling',
pos_system: 'POS System',
mobile_app: 'Mobile App',
contracts: 'Contracts',
};
/**
@@ -111,4 +112,5 @@ export const FEATURE_DESCRIPTIONS: Record<FeatureKey, string> = {
masked_calling: 'Use masked phone numbers to protect privacy',
pos_system: 'Process in-person payments with Point of Sale',
mobile_app: 'Access SmoothSchedule on mobile devices',
contracts: 'Create and manage contracts with customers',
};

View File

@@ -51,6 +51,8 @@ export interface SubscriptionPlan {
masked_calling_price_per_minute_cents: number;
proxy_number_enabled: boolean;
proxy_number_monthly_fee_cents: number;
// Contracts feature
contracts_enabled: boolean;
// Default credit settings
default_auto_reload_enabled: boolean;
default_auto_reload_threshold_cents: number;
@@ -82,6 +84,8 @@ export interface SubscriptionPlanCreate {
masked_calling_price_per_minute_cents?: number;
proxy_number_enabled?: boolean;
proxy_number_monthly_fee_cents?: number;
// Contracts feature
contracts_enabled?: boolean;
// Default credit settings
default_auto_reload_enabled?: boolean;
default_auto_reload_threshold_cents?: number;

View File

@@ -523,6 +523,7 @@ const StripeSettingsTab: React.FC = () => {
};
const TiersSettingsTab: React.FC = () => {
const { t } = useTranslation();
const { data: plans, isLoading, error } = useSubscriptionPlans();
const createPlanMutation = useCreateSubscriptionPlan();
const updatePlanMutation = useUpdateSubscriptionPlan();
@@ -864,6 +865,8 @@ const PlanModal: React.FC<PlanModalProps> = ({ plan, onSave, onClose, isLoading
masked_calling_price_per_minute_cents: plan?.masked_calling_price_per_minute_cents ?? 5,
proxy_number_enabled: plan?.proxy_number_enabled ?? false,
proxy_number_monthly_fee_cents: plan?.proxy_number_monthly_fee_cents ?? 200,
// Contracts feature
contracts_enabled: plan?.contracts_enabled ?? false,
// Default credit settings
default_auto_reload_enabled: plan?.default_auto_reload_enabled ?? false,
default_auto_reload_threshold_cents: plan?.default_auto_reload_threshold_cents ?? 1000,
@@ -1251,6 +1254,25 @@ const PlanModal: React.FC<PlanModalProps> = ({ plan, onSave, onClose, isLoading
)}
</div>
{/* Contracts Feature */}
<div className="p-4 border border-gray-200 dark:border-gray-700 rounded-lg">
<div className="flex items-center justify-between">
<div>
<h4 className="text-sm font-medium text-gray-900 dark:text-white">Contracts</h4>
<p className="text-xs text-gray-500 dark:text-gray-400">Allow tenants to create and manage contracts with customers</p>
</div>
<label className="flex items-center gap-2">
<input
type="checkbox"
checked={formData.contracts_enabled || false}
onChange={(e) => setFormData((prev) => ({ ...prev, contracts_enabled: e.target.checked }))}
className="rounded border-gray-300 text-blue-600 focus:ring-blue-500"
/>
<span className="text-sm text-gray-700 dark:text-gray-300">Enabled</span>
</label>
</div>
</div>
{/* Default Credit Settings */}
<div className="p-4 border border-gray-200 dark:border-gray-700 rounded-lg">
<h4 className="text-sm font-medium text-gray-900 dark:text-white mb-3">Default Credit Settings</h4>

View File

@@ -46,6 +46,7 @@ export interface PlanPermissions {
masked_calling: boolean;
pos_system: boolean;
mobile_app: boolean;
contracts: boolean;
}
export interface Business {

View File

@@ -9,9 +9,37 @@ from rest_framework import viewsets, status
from rest_framework.decorators import action
from rest_framework.views import APIView
from rest_framework.response import Response
from rest_framework.permissions import IsAuthenticated, AllowAny
from rest_framework.permissions import IsAuthenticated, AllowAny, BasePermission
from .models import ContractTemplate, ServiceContractRequirement, Contract, ContractSignature
class HasContractsPermission(BasePermission):
"""
Permission class to check if the tenant has contracts feature enabled.
"""
message = "Contracts feature is not enabled for your subscription plan."
def has_permission(self, request, view):
user = request.user
if not user or not user.is_authenticated:
return False
# Platform users (superuser, platform_manager, etc.) can access
if hasattr(user, 'role') and user.role in ['superuser', 'platform_manager', 'platform_support']:
return True
# Get tenant from user
tenant = getattr(user, 'tenant', None)
if not tenant:
return False
# Check if tenant's subscription plan has contracts enabled
subscription_plan = getattr(tenant, 'subscription_plan', None)
if subscription_plan:
return getattr(subscription_plan, 'contracts_enabled', False)
return False
from .serializers import (
ContractTemplateSerializer, ContractTemplateListSerializer,
ServiceContractRequirementSerializer, ContractSerializer, ContractListSerializer,
@@ -32,10 +60,10 @@ def get_client_ip(request):
class ContractTemplateViewSet(viewsets.ModelViewSet):
"""
CRUD for contract templates.
Permissions: owner/manager only
Permissions: owner/manager only, must have contracts feature enabled
"""
queryset = ContractTemplate.objects.all()
permission_classes = [IsAuthenticated]
permission_classes = [IsAuthenticated, HasContractsPermission]
def get_serializer_class(self):
if self.action == "list":
@@ -136,7 +164,7 @@ class ServiceContractRequirementViewSet(viewsets.ModelViewSet):
"""Manage which contracts are required for which services"""
queryset = ServiceContractRequirement.objects.all()
serializer_class = ServiceContractRequirementSerializer
permission_classes = [IsAuthenticated]
permission_classes = [IsAuthenticated, HasContractsPermission]
def get_queryset(self):
qs = super().get_queryset().select_related("service", "template")
@@ -155,7 +183,7 @@ class ContractViewSet(viewsets.ModelViewSet):
Includes sending, viewing, and PDF download.
"""
queryset = Contract.objects.all()
permission_classes = [IsAuthenticated]
permission_classes = [IsAuthenticated, HasContractsPermission]
def get_serializer_class(self):
if self.action == "list":

View File

@@ -0,0 +1,18 @@
# Generated by Django 5.2.8 on 2025-12-06 03:49
from django.db import migrations, models
class Migration(migrations.Migration):
dependencies = [
('platform_admin', '0011_update_subscription_plan_business_tier'),
]
operations = [
migrations.AddField(
model_name='subscriptionplan',
name='contracts_enabled',
field=models.BooleanField(default=False, help_text='Whether tenants can use the contracts feature'),
),
]

View File

@@ -285,6 +285,12 @@ class SubscriptionPlan(models.Model):
help_text="Monthly fee per proxy number in cents"
)
# Contracts Feature
contracts_enabled = models.BooleanField(
default=False,
help_text="Whether tenants can use the contracts feature"
)
# Default Credit Settings (for new tenants on this tier)
default_auto_reload_enabled = models.BooleanField(
default=False,

View File

@@ -117,6 +117,8 @@ class SubscriptionPlanSerializer(serializers.ModelSerializer):
'masked_calling_enabled', 'masked_calling_price_per_minute_cents',
# Proxy Number Settings
'proxy_number_enabled', 'proxy_number_monthly_fee_cents',
# Contracts Feature
'contracts_enabled',
# Default Credit Settings
'default_auto_reload_enabled', 'default_auto_reload_threshold_cents',
'default_auto_reload_amount_cents',
@@ -145,6 +147,8 @@ class SubscriptionPlanCreateSerializer(serializers.ModelSerializer):
'masked_calling_enabled', 'masked_calling_price_per_minute_cents',
# Proxy Number Settings
'proxy_number_enabled', 'proxy_number_monthly_fee_cents',
# Contracts Feature
'contracts_enabled',
# Default Credit Settings
'default_auto_reload_enabled', 'default_auto_reload_threshold_cents',
'default_auto_reload_amount_cents',

View File

@@ -184,6 +184,7 @@ def current_business_view(request):
'masked_calling': tenant.can_use_masked_phone_numbers or plan_permissions.get('masked_calling', False),
'pos_system': tenant.can_use_pos or plan_permissions.get('pos_system', False),
'mobile_app': tenant.can_use_mobile_app or plan_permissions.get('mobile_app', False),
'contracts': getattr(tenant.subscription_plan, 'contracts_enabled', False) if tenant.subscription_plan else False,
}
business_data = {