Fix permissions for change-own-password-view and user-profile-view
This commit is contained in:
parent
f77f876996
commit
0aedc77fd4
@ -45,8 +45,9 @@ const routes: Routes = [
|
|||||||
},
|
},
|
||||||
{
|
{
|
||||||
path: 'users',
|
path: 'users',
|
||||||
loadChildren: './users/users.module#UsersModule',
|
loadChildren: './users/users.module#UsersModule'
|
||||||
data: { basePerm: 'users.can_see_name' }
|
// No baseperm, because change own password is ok, even if the
|
||||||
|
// user does not have users.can_see_name
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
path: 'tags',
|
path: 'tags',
|
||||||
|
@ -12,7 +12,8 @@ const routes: Routes = [
|
|||||||
{
|
{
|
||||||
path: '',
|
path: '',
|
||||||
component: UserListComponent,
|
component: UserListComponent,
|
||||||
pathMatch: 'full'
|
pathMatch: 'full',
|
||||||
|
data: { basePerm: 'users.can_see_name' }
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
path: 'password',
|
path: 'password',
|
||||||
@ -47,8 +48,9 @@ const routes: Routes = [
|
|||||||
},
|
},
|
||||||
{
|
{
|
||||||
path: ':id',
|
path: ':id',
|
||||||
component: UserDetailComponent,
|
component: UserDetailComponent
|
||||||
data: { basePerm: 'users.can_see_name' }
|
// No basePerm, because user is allowed to see the own profile page.
|
||||||
|
// Other user detail pages are empty if user does not have user.can_see_name.
|
||||||
}
|
}
|
||||||
];
|
];
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user