Release 3.30.1

package.json

@@ -42,7 +42,7 @@
     "@fortawesome/free-regular-svg-icons": "^6.5.1",
     "@fortawesome/free-solid-svg-icons": "^6.5.1",
     "@ngneat/until-destroy": "^10.0.0",
-    "@sentry/browser": "^7.91.0",
+    "@sentry/browser": "^7.92.0",
     "angulartics2": "^12.2.1",
     "assert": "^2.1.0",
     "crypto-es": "^2.1.0",

src/app/core/common-components/entity-form/entity-form/entity-form.component.spec.ts

@@ -56,7 +56,7 @@ describe("EntityFormComponent", () => {
     expect(component).toBeTruthy();
   });
 
-  it("should remove fields without read permissions", async () => {
+  it("should remove fields without read permissions when entity is not new", async () => {
     component.fieldGroups = [
       { fields: ["foo", "bar"] },
       { fields: ["name"] },
@@ -67,6 +67,27 @@ describe("EntityFormComponent", () => {
       { subject: "Child", action: "read", fields: ["foo", "name"] },
     ]);
 
+    component.entity._rev = "foo";
+
+    component.ngOnChanges({ entity: true, form: true } as any);
+
+    expect(component.fieldGroups).toEqual([
+      { fields: ["foo"] },
+      { fields: ["name"] },
+    ]);
+  });
+
+  it("should remove fields without create permissions when entity is new", async () => {
+    component.fieldGroups = [
+      { fields: ["foo", "bar"] },
+      { fields: ["name"] },
+      { fields: ["birthday"] },
+    ];
+
+    TestBed.inject(EntityAbility).update([
+      { subject: "Child", action: "create", fields: ["foo", "name"] },
+    ]);
+
     component.ngOnChanges({ entity: true, form: true } as any);
 
     expect(component.fieldGroups).toEqual([

src/app/core/common-components/entity-form/entity-form/entity-form.component.ts

@@ -139,11 +139,13 @@ export class EntityFormComponent<T extends Entity = Entity>
     fieldGroups: FieldGroup[],
     entity: Entity,
   ): FieldGroup[] {
+    const action = entity.isNew ? "create" : "read";
+
     return fieldGroups
       .map((group) => {
         group.fields = group.fields.filter((field) =>
           this.ability.can(
-            "read",
+            action,
             entity,
             typeof field === "string" ? field : field.id,
           ),