From c3f7735e7393d60d2b1b3d9cd21c871d813b790d Mon Sep 17 00:00:00 2001 From: Guilhem Lemouel Date: Wed, 28 Oct 2026 03:18:16 -0700 Subject: [PATCH] fix: gate fork creation in the move picker on the fork capability Co-Authored-By: Claude Opus 5.5 --- .../src/lib/components/sessions/WorkspaceFamilyPicker.svelte | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/frontend/src/lib/components/sessions/WorkspaceFamilyPicker.svelte b/frontend/src/lib/components/sessions/WorkspaceFamilyPicker.svelte index 4510ffd7ea..cc71b87016 100644 --- a/frontend/src/lib/components/sessions/WorkspaceFamilyPicker.svelte +++ b/frontend/src/lib/components/sessions/WorkspaceFamilyPicker.svelte @@ -19,7 +19,7 @@ } from '$lib/utils/workspaceHierarchy' import { useForkableWorkspaces } from '$lib/utils/useForkableWorkspaces.svelte' import { canCreateFork } from '$lib/utils/editInFork' - import { capabilitiesIn, isRestricted } from '$lib/roleCapabilities' + import { canFork, capabilitiesIn } from '$lib/roleCapabilities' import { forkAccentStyle } from '$lib/utils/forkColor' import { WorkspaceService } from '$lib/gen' import { useSessionReadOnly } from './sessionPermissions.svelte' @@ -183,8 +183,7 @@ ? moveFrom !== 'admins' && !fromRulesetsResource.loading && !fromUserInfoResource.loading && - // A restricted role would get the default role in the fork it creates. - !isRestricted( + canFork( capabilitiesIn( fromUserInfo, $userWorkspaces.find((w) => w.id === moveFrom)