Support read-only mode in the GUI

app/app.js

 'use strict';
 /**
  * Provides the main app class.
  *
  * @module app
  */
 
 // Create a global for debug console access to YUI context.
 var yui;
 
@@ skipping 201 matching lines @@
         environment_node.set('text', environment_name);
       }
       // Create an environment facade to interact with.
       // allow env as an attr/option to ease testing
       if (this.get('env')) {
         this.env = this.get('env');
       } else {
         this.env = new juju.Environment(
             { socket_url: this.get('socket_url'),
               user: this.get('user'),
-              password: this.get('password')});
+              password: this.get('password'),
+              readOnly: this.get('readOnly')});

[teknico, 2013/01/15 16:45:43]

No need for camel case here, "readonly" is an established technical word
nowadays. Almost 10M hits on Google <http://www.google.com/search?q="readonly">.

       }
       // Create a charm store.
       if (this.get('charm_store')) {
         // This path is for tests.
         this.charm_store = this.get('charm_store');
       } else {
         this.charm_store = new juju.CharmStore({
           datasource: this.get('charm_store_url')});
       }
       // Create notifications controller
       this.notifications = new juju.NotificationController({
         app: this,
         env: this.env,
         notifications: this.db.notifications});
 
       // Event subscriptions
 
       this.on('*:navigateTo', function(e) {
         console.log('navigateTo', e);
         this.navigate(e.url);
       }, this);
 
+      // Notify user attempts to modify the environment without permission.
+      this.env.on('permissionDenied', this.onEnvPermissionDenied, this);
+
       // When the provider type becomes available, display it.
       this.env.after('providerTypeChange', this.onProviderTypeChange);
 
       // Once the user logs in we need to redraw.
       this.env.after('login', this.onLogin, this);
 
       // Feed environment changes directly into the database.
       this.env.on('delta', this.db.on_delta, this.db);
 
       // Feed delta changes to the notifications system
@@ skipping 305 matching lines @@
       }
       // If there has not been a successful login attempt,
       // do not let the route dispatch proceed.
       if (!this.env.userIsAuthenticated) {
         return;
       }
       next();
     },
 
     /**
+     * Notify with an error when the user tries to change the environment
+     * without permission.
+     *
+     * @method onEnvPermissionDenied
+     * @private
+     * @param {Object} evt An event object (with "title" and "message"
+         attributes).
+     * @return {undefined} Mutates only.
+     */
+    onEnvPermissionDenied: function(evt) {
+      this.db.notifications.add(
+          new models.Notification({
+            title: evt.title,
+            message: evt.message,
+            level: 'error'
+          })
+      );
+    },
+
+    /**
      * Hide the login mask and redispatch the router.
      *
      * When the environment gets a response from a login attempt,
      * it fires a login event, to which this responds.
      *
      * @method onLogin
      * @private
      */
     onLogin: function() {
       Y.one('body > #login-mask').hide();
@@ skipping 240 matching lines @@
     'juju-views',
     'juju-view-login',
     'io',
     'json-parse',
     'app-base',
     'app-transitions',
     'base',
     'node',
     'model']
 });