snapshot of https://github.com/RocketChat/Rocket.Chat.git (develop, 2026-09-16; blobs > 131072B omitted)

apps/meteor/client/startup/audit.tsx

@@ -0,0 +1,86 @@
+import type { ReactNode } from 'react';
+import { lazy } from 'react';
+
+import { appLayout } from '../lib/appLayout';
+import { hasAllPermission } from '../lib/authorization';
+import { onToggledFeature } from '../lib/onToggledFeature';
+import { router } from '../providers/RouterProvider';
+import SettingsProvider from '../providers/SettingsProvider';
+import NotAuthorizedPage from '../views/notAuthorized/NotAuthorizedPage';
+import MainLayout from '../views/root/MainLayout';
+
+const AuditPage = lazy(() => import('../views/audit/AuditPage'));
+const AuditLogPage = lazy(() => import('../views/audit/AuditLogPage'));
+const SecurityLogsPage = lazy(() => import('../views/audit/SecurityLogsPage'));
+
+declare module '@rocket.chat/ui-contexts' {
+	interface IRouterPaths {
+		'audit-home': {
+			pathname: '/audit';
+			pattern: '/audit/:tab?';
+		};
+		'audit-log': {
+			pathname: '/audit-log';
+			pattern: '/audit-log';
+		};
+		'security-logs': {
+			pathname: '/security-logs';
+			pattern: '/security-logs';
+		};
+	}
+}
+
+export type PermissionGuardProps = { children: ReactNode; permission: string };
+
+const PermissionGuard = ({ children, permission }: PermissionGuardProps) => {
+	const canView = hasAllPermission(permission);
+
+	return <>{canView ? children : <NotAuthorizedPage />}</>;
+};
+
+let unregisterAuditRoutes: () => void;
+
+onToggledFeature('auditing', {
+	up: () => {
+		unregisterAuditRoutes = router.defineRoutes([
+			{
+				path: '/audit/:tab?',
+				id: 'audit-home',
+				element: appLayout.wrap(
+					<MainLayout>
+						<PermissionGuard permission='can-audit'>
+							<AuditPage />
+						</PermissionGuard>
+					</MainLayout>,
+				),
+			},
+			{
+				path: '/audit-log',
+				id: 'audit-log',
+				element: appLayout.wrap(
+					<MainLayout>
+						<PermissionGuard permission='can-audit-log'>
+							<AuditLogPage />
+						</PermissionGuard>
+					</MainLayout>,
+				),
+			},
+			{
+				path: '/security-logs',
+				id: 'security-logs',
+				element: appLayout.wrap(
+					<MainLayout>
+						<SettingsProvider>
+							<PermissionGuard permission='can-audit'>
+								<SecurityLogsPage />
+							</PermissionGuard>
+						</SettingsProvider>
+					</MainLayout>,
+				),
+			},
+		]);
+	},
+	down: () => {
+		unregisterAuditRoutes();
+	},
+});