changed README.md

README.md

@@ -88,7 +88,8 @@ Client configuration
             IdentityServerConstants.StandardScopes.OpenId,
             IdentityServerConstants.StandardScopes.Profile,
             IdentityServerConstants.StandardScopes.Email,
-            "jp_api.is4"
+            "jp_api.is4",
+            "role"
         }
     },
 
@@ -126,6 +127,12 @@ Api resource configuration
     }
 ```
 
+Identity Resource:
+```
+    new IdentityResource("role", new List<string>(){"roles"}),
+```
+
+
 ## Table of Contents ##
 
 - [Several break changes](#several-break-changes)

src/Frontend/Jp.AdminUI/src/app/core/auth/auth-guard-only-admin.service.ts

@@ -1,5 +1,6 @@
 import { Injectable } from '@angular/core';
-import { ActivatedRouteSnapshot, CanActivate, RouterStateSnapshot } from '@angular/router';
+import { ActivatedRouteSnapshot, CanActivate, Router, RouterStateSnapshot } from '@angular/router';
+import { SettingsService } from '@core/settings/settings.service';
 import { Observable } from 'rxjs';
 import { filter, map, tap } from 'rxjs/operators';
 
@@ -11,17 +12,24 @@ export class AuthGuardOnlyAdmin implements CanActivate {
 
   constructor(
     private authService: AuthService,
+    private settings: SettingsService,
+    private router: Router
   ) {
     this.authService.isAuthenticated$.subscribe(i => this.isAuthenticated = i);
   }
-
   canActivate(
     route: ActivatedRouteSnapshot,
     state: RouterStateSnapshot,
   ): Observable<boolean> {
     return this.authService.isDoneLoading$
       .pipe(filter(isDone => isDone))
       .pipe(tap(_ => this.isAuthenticated || this.authService.login(state.url)))
-      .pipe(map(_ => this.isAuthenticated));
+      .pipe(map(_ => {
+        if (this.isAuthenticated && this.settings.getUserClaims()["role"] === "Administrator") {
+          return true;
+        }
+        this.router.navigate(['/not-found']);
+        return false;
+      }));
   }
 }