Fix permissions for change-own-password-view and user-profile-view
This commit is contained in:
parent
f77f876996
commit
0aedc77fd4
@ -45,8 +45,9 @@ const routes: Routes = [
|
||||
},
|
||||
{
|
||||
path: 'users',
|
||||
loadChildren: './users/users.module#UsersModule',
|
||||
data: { basePerm: 'users.can_see_name' }
|
||||
loadChildren: './users/users.module#UsersModule'
|
||||
// No baseperm, because change own password is ok, even if the
|
||||
// user does not have users.can_see_name
|
||||
},
|
||||
{
|
||||
path: 'tags',
|
||||
|
@ -12,7 +12,8 @@ const routes: Routes = [
|
||||
{
|
||||
path: '',
|
||||
component: UserListComponent,
|
||||
pathMatch: 'full'
|
||||
pathMatch: 'full',
|
||||
data: { basePerm: 'users.can_see_name' }
|
||||
},
|
||||
{
|
||||
path: 'password',
|
||||
@ -47,8 +48,9 @@ const routes: Routes = [
|
||||
},
|
||||
{
|
||||
path: ':id',
|
||||
component: UserDetailComponent,
|
||||
data: { basePerm: 'users.can_see_name' }
|
||||
component: UserDetailComponent
|
||||
// No basePerm, because user is allowed to see the own profile page.
|
||||
// Other user detail pages are empty if user does not have user.can_see_name.
|
||||
}
|
||||
];
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user