Disable local users when LocalAuthDisabled = true

[braginini]

Summary by CodeRabbit

• New Features
  • Added an account setting to disable local authentication.
  • Invite user button now shows an informational tooltip when local authentication is disabled, explaining the state and linking to documentation; when enabled, the button and invite flow behave as before.
  • No changes to public APIs or invite flow.

_{✏️ Tip: You can customize this high-level summary in your review settings.}

[coderabbitai]

📝 Walkthrough

Walkthrough

Added an optional local_auth_disabled boolean to Account.settings and updated the UsersTable invite flow to disable the invite button and show an explanatory FullTooltip when local authentication is disabled.

Changes

Cohort / File(s)	Summary
Account Interface Extension src/interfaces/Account.ts	Added optional local_auth_disabled?: boolean to Account.settings.
User Invite UI Behavior src/modules/users/UsersTable.tsx	Introduced localAuthDisabled derived from account settings; compute isDisabled combining permission and localAuthDisabled; render a shared button element and wrap it in FullTooltip (with message and "Learn more" link) when local auth is disabled, otherwise render as before inside UserInviteModal.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~12 minutes

Poem

🐰 A tiny flag, tucked in settings tight,
When local keys sleep, the invite grows light,
A tooltip whispers where invites once flew,
"Learn more" it says, guiding the crew ✨

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the main change: adding a local_auth_disabled flag and disabling the invite user functionality when local authentication is disabled.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing touches

• 📝 Generate docstrings

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch feature/disable-local-users

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 2

🤖 Fix all issues with AI agents

In `@src/modules/users/UsersTable.tsx`:
- Around line 352-355: The external InlineLink in UsersTable (usage of
InlineLink with href "https://docs.netbird.io/..." in UsersTable.tsx) opens in a
new tab via target="_blank" but lacks rel="noopener noreferrer"; update that
InlineLink instance to include rel="noopener noreferrer" to prevent reverse
tabnabbing and ensure safe external linking.
- Around line 340-365: The FullTooltip wrapper is forcing "ml-auto" which
overrides caller alignment; update the conditional render where
localAuthDisabled is handled (the FullTooltip around {button} in UsersTable.tsx)
to use the caller-provided className instead of hardcoded "ml-auto" — e.g.,
remove the literal ml-auto and pass through a prop/className variable so
consumers control alignment; ensure FullTooltip still receives any needed
default classes but does not unconditionally apply ml-auto.