ENG-3386: system-template badge + sectioned popover for standard reports

[adamsachs]

Ticket ENG-3386

Dependency chain. This PR is the top of a three-PR stack. Merge order:

1. fides#7999 — OSS schema (adds system_template_key + location_code on CustomReport, system_managed on CustomFieldDefinition, and the association table). Must merge first.
2. fidesplus#3407 — location-gated reconciler, schema exposure of system_template_key / system_managed, and 403 guards on the write paths.
3. This PR — surfaces both flags in the admin UI.

This PR's base branch is set to ENG-3386-custom-field-system-managed so the diff only shows FE changes. GitHub will auto-retarget to main after fides#7999 merges.

Description Of Changes

Admin UI surface for the regulatory reporting templates backend. Two surfaces are updated:

Custom reports popover — when the backend materialises a system-owned ICO/DPC/CNIL datamap report (driven by the tenant's selected fides locations — UK → ICO, Ireland → DPC, France → CNIL), this PR surfaces them:

• Sectioned layout: "Standard templates" appear above "Your reports", each with a label header. When only user reports exist the layout is unchanged.
• "Standard" tag: system-owned reports display an info-coloured Tag with a tooltip explaining they're out-of-the-box and cannot be deleted.
• Delete suppression: the trash-can button is hidden for system-template rows. (Backend also returns 403 as defense in depth.)

Custom-fields management UI — the gap CustomFieldDefinitions seeded by the reconciler (e.g. Controller's Representative, DPA 2018 Schedule 1 Condition) carry system_managed=true and are distinguished in the admin UI so they can't be accidentally edited or disabled:

• Lock icon (Carbon Locked, size 14, muted gray) rendered inline after the field name in the table, with a tooltip: "This field is built into Fides to support a reporting template. It's added and removed automatically based on your Fides location settings."
• Enabled toggle disabled for managed rows — deactivating a template-backing field would break the template silently.
• Edit button hidden in the Actions cell for managed rows.
• Edit form (navigable via the name link for read access) shows an info Alert at the top ("Managed by Fides"), disables every control via antd Form.disabled, and hides Save + Delete entirely.

Code Changes

• clients/admin-ui/src/types/api/models/CustomReportResponseMinimal.ts / CustomReportResponse.ts — adds system_template_key?: string | null (hand-edited pending type regeneration)
• clients/admin-ui/src/types/api/models/CustomFieldDefinition*.ts (×3) — adds system_managed?: boolean
• clients/admin-ui/src/features/common/custom-reports/CustomReportTemplates.tsx — sections + "Standard" tag + delete suppression
• clients/admin-ui/src/features/custom-fields/useCustomFieldsTable.tsx — lock icon next to managed row names, disabled toggle, hidden Edit button
• clients/admin-ui/src/features/custom-fields/CustomFieldForm.tsx — Alert + full-form disable + hidden Save/Delete for managed rows
• clients/admin-ui/cypress/e2e/datamap-report.cy.ts — two new popover tests
• clients/admin-ui/cypress/e2e/custom-fields.cy.ts — new System-managed custom fields describe block: lock presence, Edit suppression, edit-form guard
• clients/admin-ui/cypress/fixtures/custom-reports/minimal-with-system-template.json — new fixture
• clients/admin-ui/cypress/fixtures/custom-fields/list-with-system-field.json + detail-system-managed.json — new fixtures

Steps to Confirm

1. With fides#7999 + fidesplus#3407 running and the UK location selected, confirm the datamap Reports popover shows "Standard templates" and "Your reports" sections; ICO appears in the Standard section with a blue "Standard" tag and no trash icon.
2. Deselect UK on the Locations page, confirm ICO disappears (reconciliation runs as a background task on the PATCH).
3. Visit /settings/custom-fields; confirm the Fides-seeded gap fields (e.g. Controller's Representative) show a lock icon next to the name, the Enabled toggle is disabled, and no Edit button appears.
4. Click the name of a managed row — the edit form loads, shows the "Managed by Fides" alert, all controls are disabled, and Save/Delete are absent.
5. Run Cypress:

   npx cypress run --spec cypress/e2e/datamap-report.cy.ts --spec cypress/e2e/custom-fields.cy.ts

   Expected: all tests pass, including the new popover + custom-fields cases.

Pre-Merge Checklist

• Issue requirements met
• All CI pipelines succeeded
• CHANGELOG.md updated
  • Updates unreleased work already in Changelog, no new entry necessary (changelog on fidesplus side)
• UX feedback:
  • All UX related changes have been reviewed by a designer
• Followup issues:
  • Followup issues created — type regeneration after fides#7999 + fidesplus#3407 merge
  • No other followups
• Database migrations:
  • No migrations (schema lives in fides#7999)
• Documentation:
  • No documentation updates required (covered in fidesplus#3407)

🤖 Generated with Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
fides-plus-nightly	Ready	Preview, Comment	Apr 22, 2026 6:47pm

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
fides-privacy-center	Ignored		Apr 22, 2026 6:47pm

[github-actions]

Title	Lines	Statements	Branches	Functions
admin-ui		6.34% (2799/44129)	5.59% (1402/25069)	4.43% (579/13055)
fides-js		78.98% (1962/2484)	65.55% (1214/1852)	72.57% (336/463)
privacy-center		85.97% (331/385)	81.36% (179/220)	78.87% (56/71)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 84.98%. Comparing base (1e20083) to head (a79f5b2).

Additional details and impacted files

@@                          Coverage Diff                          @@
##           ENG-3386-custom-field-system-managed    #7910   +/-   ##
=====================================================================
  Coverage                                 84.98%   84.98%           
=====================================================================
  Files                                       631      631           
  Lines                                     41245    41245           
  Branches                                   4787     4787           
=====================================================================
  Hits                                      35050    35050           
  Misses                                     5110     5110           
  Partials                                   1085     1085           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.