feat: better navigation in backoffice

apps/edr-freight-web/backoffice/src/pages/NoAccessPage.tsx

@@ -0,0 +1,32 @@
+import { ShieldOff } from "lucide-react";
+
+import { useAuth } from "@/auth/useAuth";
+import { Button } from "@/components/ui/button";
+
+/**
+ * Terminal page for an account with no freight permissions and no IAM admin
+ * role. Reached via `resolveLandingPath`, which needs one destination that can
+ * never bounce — every other page is permission-gated.
+ */
+export default function NoAccessPage() {
+  const { user, logout } = useAuth();
+
+  return (
+    <div className="flex min-h-screen items-center justify-center p-6">
+      <div className="w-full max-w-md space-y-4 rounded-lg border p-8 text-center">
+        <ShieldOff className="mx-auto h-10 w-10 text-muted-foreground" />
+        <h1 className="text-lg font-semibold">No access assigned</h1>
+        <p className="text-sm text-muted-foreground">
+          Your account has no permissions assigned yet, so there are no pages to
+          show. Contact your administrator to have a position or role assigned.
+        </p>
+        {user?.email ? (
+          <p className="text-xs text-muted-foreground">Signed in as {user.email}</p>
+        ) : null}
+        <Button variant="outline" onClick={logout}>
+          Log out
+        </Button>
+      </div>
+    </div>
+  );
+}

apps/edr-freight-web/backoffice/src/pages/auth/LoginPage.tsx

@@ -64,7 +64,9 @@ const LoginPage = () => {
 
     try {
       await verifyMfa({ email: normalizedIdentifier, otp: otp.trim() });
-      navigate("/dashboard/overview", { replace: true });
+      // "/" resolves to the user's own landing page once the session lands —
+      // not every user can see the overview.
+      navigate("/", { replace: true });
     } catch (err) {
       setError(extractApiError(err).message);
     } finally {

apps/edr-freight-web/backoffice/src/pages/ruleEngine/CargoTypesPage.tsx

@@ -30,6 +30,7 @@ import {
 } from "lucide-react";
 
 import { useAuth } from "@/auth/useAuth";
+import { resolveLandingPath } from "@/lib/landing";
 import { canAccessRuleEngineResource } from "@/lib/permissions";
 import RuleEngineFormDialog from "@/components/ruleEngine/RuleEngineFormDialog";
 import {
@@ -239,8 +240,8 @@ const CargoTypesPage = () => {
     [levelNodes, term],
   );
 
-  if (!config) return <Navigate to="/dashboard/overview" replace />;
-  if (!canView) return <Navigate to="/dashboard/overview" replace />;
+  if (!config) return <Navigate to={resolveLandingPath(user)} replace />;
+  if (!canView) return <Navigate to={resolveLandingPath(user)} replace />;
   // A bad/stale :id (after data loads) → fall back to the root list.
   if (!isLoading && currentId && !current) return <Navigate to={BASE_PATH} replace />;
 

apps/edr-freight-web/backoffice/src/pages/ruleEngine/RuleEngineResourcePage.tsx

@@ -1,4 +1,5 @@
 import { useAuth } from "@/auth/useAuth";
+import { resolveLandingPath } from "@/lib/landing";
 import {
     canAccessRuleEngineResource,
     canApproveRuleEngineChange,
@@ -584,7 +585,7 @@ const RuleEngineResourcePage = () => {
   }
 
   if (!canView) {
-    return <Navigate to="/dashboard/overview" replace />;
+    return <Navigate to={resolveLandingPath(user)} replace />;
   }
 
   const openCreate = () => {