add cancan for authorization

app/views/users/_form.html.erb

@@ -16,6 +16,9 @@
       <%= f.label :password, class: 'label' %>
       <%= f.password_field :password, required: user.new_record?, class: 'base-input' %>
     </div>
+    <% if f.object != current_user %>
+      <%= render 'role_select', f: %>
+    <% end %>
   </div>
   <div class="form-control pt-2">
     <%= f.button button_title, class: 'base-button' %>

app/views/users/_role_select.html.erb

@@ -0,0 +1,13 @@
+<div class="form-control">
+  <%= f.label :role, class: 'label' %>
+  <%= f.select :role, nil, {}, class: 'base-select' do %>
+    <option value="admin">Admin</option>
+    <option value="editor" disabled>Editor</option>
+    <option value="viewer" disabled>Viewer</option>
+  <% end %>
+  <a class="text-sm mt-3 px-4 py-2 bg-base-300 rounded-full block" target="_blank" href="<%= "#{Docuseal::CONSOLE_URL}/#{Docuseal.multitenant? ? 'plans' : 'on_premise'}" %>">
+    <%= svg_icon('info_circle', class: 'w-4 h-4 inline align-text-bottom') %>
+    Unlock more user roles with DocuSeal Enterprise.
+    <span class="link font-medium">Learn More</a>
+  </a>
+</div>

app/views/users/index.html.erb

@@ -3,9 +3,11 @@
   <div class="flex-grow">
     <div class="flex justify-between mb-4">
       <h1 class="text-4xl font-bold">Team</h1>
-      <%= link_to new_user_path, class: 'btn btn-primary btn-md gap-2', data: { turbo_frame: 'modal' } do %>
-        <%= svg_icon('plus', class: 'w-6 h-6') %>
-        <span>New User</span>
+      <% if can?(:create, User.new(account: current_account)) %>
+        <%= link_to new_user_path, class: 'btn btn-primary btn-md gap-2', data: { turbo_frame: 'modal' } do %>
+          <%= svg_icon('plus', class: 'w-6 h-6') %>
+          <span>New User</span>
+        <% end %>
       <% end %>
     </div>
     <div class="overflow-x-auto">
@@ -46,11 +48,15 @@
                 <%= user.last_sign_in_at ? l(user.last_sign_in_at.in_time_zone(current_account.timezone), format: :short, locale: current_account.locale) : '-' %>
               </td>
               <td class="flex items-center space-x-2 justify-end">
-                <%= link_to edit_user_path(user), class: 'btn btn-outline btn-xs', title: 'Edit', data: { turbo_frame: 'modal' } do %>
-                  Edit
+                <% if can?(:update, user) %>
+                  <%= link_to edit_user_path(user), class: 'btn btn-outline btn-xs', title: 'Edit', data: { turbo_frame: 'modal' } do %>
+                    Edit
+                  <% end %>
                 <% end %>
-                <%= button_to user_path(user), method: :delete, class: 'btn btn-outline btn-error btn-xs', title: 'Delete', data: { turbo_confirm: 'Are you sure?' } do %>
-                  Remove
+                <% if can?(:destroy, user) && user != current_user %>
+                  <%= button_to user_path(user), method: :delete, class: 'btn btn-outline btn-error btn-xs', title: 'Delete', data: { turbo_confirm: 'Are you sure?' } do %>
+                    Remove
+                  <% end %>
                 <% end %>
               </td>
             </tr>