-
Notifications
You must be signed in to change notification settings - Fork 2.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[Workspace Feeds] Start issue new card flow page can be accessed by non-admin member #48481
Comments
Triggered auto assignment to @garrettmknight ( |
@mountiny Who's this meant to be starred/waiting on? |
@VickyStash will handle this one so waiting for her to comment tomorrow and assign her. There will be no payments required for this change as its part of the project so I think I can unassign you |
Hi, I'm Viktoryia from Callstack - expert contributor group - and I would like to work on this issue. |
The PR has been opened for the review |
This one is deployed, closing. |
### Problem
For the card settings and new card creation flow, we added a couple of new pages to the app that should only be accessible by admins. For example, the IssueNewCardPage is accessible by policy members, too, which means that the API throws an error as only admins are allowed to access this page and its data.
Solution
Ensure to only allow admins to load this page using the AccessOrNotFoundWrapper component and check for PAID and ADMIN conditions.
Make audit of the new pages we added for workspace feeds to ensure those that are for admins only also use this wrapper
The text was updated successfully, but these errors were encountered: