feat: add more group permissions (#1453)

* feat: add more group permissions

* feat: restrict access with app permissions

* feat: restrict access with search-engine permissions

* feat: restrict access with media permissions

* refactor: remove permissions for users, groups and invites

* test: adjust app router tests with app permissions

* fix: integration page accessible without session

* fix: search for users, groups and integrations shown to unauthenticated users

* chore: address pull request feedback

packages/spotlight/src/modes/command/index.tsx

@@ -1,11 +1,11 @@
 import { Group, Text, useMantineColorScheme } from "@mantine/core";
 import {
+  IconBox,
   IconCategoryPlus,
   IconFileImport,
   IconLanguage,
   IconMailForward,
   IconMoon,
-  IconPackage,
   IconPlug,
   IconSun,
   IconUserPlus,
@@ -113,9 +113,10 @@ export const commandMode = {
           },
           {
             commandKey: "newApp",
-            icon: IconPackage,
+            icon: IconBox,
             name: tOption("newApp.label"),
             useInteraction: interaction.link(() => ({ href: "/manage/apps/new" })),
+            hidden: !session?.user.permissions.includes("app-create"),
           },
           {
             commandKey: "newIntegration",