Fix access graph feature not rendering in web UI (#65285)

api/client/webclient/webconfig.go

@@ -95,6 +95,9 @@ type WebConfig struct {
 	// IdentitySecurity contains identity security features and settings.
 	// The individual identity security entitlements should be read from the Entitlements field.
 	IdentitySecurity IdentitySecurity `json:"identitySecurity"`
+	// IsPolicyEnabled is true if [Features.Policy] = true
+	// Deprecated, use entitlements
+	IsPolicyEnabled bool `json:"isPolicyEnabled"`
 }
 
 // IdentitySecurity contains identity security features and settings.

lib/web/apiserver.go

@@ -2162,6 +2162,7 @@ func (h *Handler) getWebConfig(w http.ResponseWriter, r *http.Request, p httprou
 		PremiumSupport:                 clusterFeatures.GetSupportType() == proto.SupportType_SUPPORT_TYPE_PREMIUM,
 		PlayableDatabaseProtocols:      player.SupportedDatabaseProtocols,
 		SessionSummarizerEnabled:       sessionSummarizerEnabled,
+		IsPolicyEnabled:                modules.GetProtoEntitlement(&clusterFeatures, entitlements.Policy).Enabled,
 		// if Entitlements are not present, GetWebCfgEntitlements will return a map of entitlement to {enabled:false}
 		// if Entitlements are present, GetWebCfgEntitlements will populate the fields appropriately
 		Entitlements: GetWebCfgEntitlements(clusterFeatures.GetEntitlements()),

web/packages/teleport/src/config.ts

@@ -265,7 +265,7 @@ const cfg = {
   /** @deprecated Use entitlements instead; remove in v20 */
   saml: false,
   // isPolicyEnabled refers to the Teleport Policy product
-  /** @deprecated Use entitlements instead; remove in v20 */
+  /** @deprecated Use entitlements.Policy.enabled instead;*/
   isPolicyEnabled: false,
 
   ui: {