Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Publisher] Gate /reports/create route from non-admins #1011

Open
mxosman opened this issue Oct 19, 2023 · 0 comments
Open

[Publisher] Gate /reports/create route from non-admins #1011

mxosman opened this issue Oct 19, 2023 · 0 comments
Assignees

Comments

@mxosman
Copy link
Contributor

mxosman commented Oct 19, 2023

There are cases where a user does not have a role assigned or has a READ ONLY role (or similar non-admin role) that does not allow a user to create a record. Currently, the Create Record button in the Records page is only visible to admin users, but it does not prevent access to the /reports/create route if a user goes to the URL directly or via a Create Record task card in the home page that links to the URL.

Two action items to accomplish this are:

  • Gate the route from non-admin users
  • Come up with a solution for the Home page Create Record task cards (e.g. tooltip that explains that the user does not have permission to create a record... etc.)

Inspired by this Sentry error: https://recidiviz-inc.sentry.io/issues/4559224133/?environment=production&project=4504532096516096&query=is%3Aunresolved&referrer=issue-stream&stream_index=0

@mxosman mxosman self-assigned this Oct 19, 2023
@mxosman mxosman changed the title [Publisher] Gate reports/create route from non-admins [Publisher] Gate /reports/create route from non-admins Oct 19, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant