fix: add permission check to edit the company profile

intershop · Jun 16, 2021 · 2096b26 · 2096b26
1 parent f1eb525
commit 2096b26
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 1 deletion.
diff --git a/src/app/pages/account-profile/account-profile-page.module.ts b/src/app/pages/account-profile/account-profile-page.module.ts
@@ -1,6 +1,7 @@
 import { NgModule } from '@angular/core';
 import { RouterModule, Routes } from '@angular/router';
 
+import { AuthorizationToggleGuard } from 'ish-core/authorization-toggle.module';
 import { SharedModule } from 'ish-shared/shared.module';
 
 import { AccountProfilePageComponent } from './account-profile-page.component';
@@ -45,7 +46,9 @@ const routes: Routes = [
   },
   {
     path: 'company',
+    canActivate: [AuthorizationToggleGuard],
     data: {
+      permission: 'APP_B2B_MANAGE_USERS',
       breadcrumbData: [
         { key: 'account.profile.link', link: '/account/profile' },
         { key: 'account.company_profile.heading' },

diff --git a/src/app/pages/account-profile/account-profile/account-profile.component.html b/src/app/pages/account-profile/account-profile/account-profile.component.html
@@ -88,6 +88,7 @@ <h3>{{ 'account.company_profile.detail.heading' | translate }}</h3>
   </div>
   <div class="col-2 col-lg-4">
     <a
+      *ishIsAuthorizedTo="'APP_B2B_MANAGE_USERS'"
       routerLink="/account/profile/company"
       class="btn-tool"
       title="{{ 'account.profile.update.link' | translate }}"

diff --git a/src/app/pages/account-profile/account-profile/account-profile.component.spec.ts b/src/app/pages/account-profile/account-profile/account-profile.component.spec.ts
@@ -3,6 +3,7 @@ import { FaIconComponent } from '@fortawesome/angular-fontawesome';
 import { TranslateModule } from '@ngx-translate/core';
 import { MockComponent, MockDirective } from 'ng-mocks';
 
+import { AuthorizationToggleModule } from 'ish-core/authorization-toggle.module';
 import { IdentityProviderCapabilityDirective } from 'ish-core/directives/identity-provider-capability.directive';
 import { ServerHtmlDirective } from 'ish-core/directives/server-html.directive';
 import { IdentityProviderModule } from 'ish-core/identity-provider.module';
@@ -27,7 +28,11 @@ describe('Account Profile Component', () => {
         MockComponent(FaIconComponent),
         MockDirective(ServerHtmlDirective),
       ],
-      imports: [IdentityProviderModule.forTesting(), TranslateModule.forRoot()],
+      imports: [
+        AuthorizationToggleModule.forTesting('APP_B2B_MANAGE_USERS'),
+        IdentityProviderModule.forTesting(),
+        TranslateModule.forRoot(),
+      ],
     }).compileComponents();
   });