Workspace costs do not show in UI for a TRE User who is a workspace owner.

[marrobi]

Log into the TRE with a user that isn't a TRE Admin, but is a Workspace Owner, they will not see the costs.

This is the TRE level token is being evaluated, not workspace level.

[marrobi]

Why does this:

AzureTRE/ui/app/src/components/shared/SecuredByRole.tsx

Line 18 in 35a73a2

const userRoles = props.workspaceAuth ? workspaceCtx.roles : appRoles.roles;

Only check one set of roles, not combined?

[jjgriff93]

Yeah this is problematic for cases where you want to check for roles in either context. A quick fix for the workspace costs is to add another SecuredByRole element for the non-workspace context with the same element in it. A better fix would be for the component to accept two properties:

<SecuredByRole allowedAppRoles={['a', 'b']} allowedWorkspaceRoles={['a']} element={
   <div></div>
}/>

[marrobi]

The issue is on the root dashboard, the workspace context does not exist. Other than also pass the workspace ID and get the roles, any ideas?