Prod code list security (#467)

* feat: make contributor editable for a structure #362 * feat: add autorization for code list page #364 * Delete demo.js
InseeFr · Aug 4, 2023 · 041ee85 · 041ee85
1 parent a1e742f
commit 041ee85
Show file tree

Hide file tree

Showing 4 changed files with 20 additions and 12 deletions.
diff --git a/packages/codelists/src/components/codelist-detail/view.js b/packages/codelists/src/components/codelist-detail/view.js
@@ -15,7 +15,7 @@ import {
 	CreationUpdateItems,
 	PublicationFemale,
 	useTitle,
-	ConfirmationDelete,
+	ConfirmationDelete, Auth,
 } from 'bauhaus-utilities';
 import D, { D1, D2 } from '../../i18n/build-dictionary';
 import { CollapsiblePanel } from '../collapsible-panel';
@@ -67,9 +67,11 @@ export const CodeListDetailView = ({
 			)}
 			<ActionToolbar>
 				<ReturnButton action={handleBack} col={col} />
-				<ValidationButton callback={publish} object={codelist} />
-				{updatable && <UpdateButton action={handleUpdate} col={col} />}
-				{deletable && <DeleteButton action={handleDelete} col={col} />}
+				<Auth.AuthGuard roles={[Auth.ADMIN]}>
+					<ValidationButton callback={publish} object={codelist} />
+					{updatable && <UpdateButton action={handleUpdate} col={col} />}
+					{deletable && <DeleteButton action={handleDelete} col={col} />}
+				</Auth.AuthGuard>
 			</ActionToolbar>
 			<ErrorBloc error={serverSideError} />
 			{

diff --git a/packages/codelists/src/components/codelist-partial-detail/view.js b/packages/codelists/src/components/codelist-partial-detail/view.js
@@ -15,7 +15,7 @@ import {
 	ValidationButton,
 	PublicationFemale,
 	useTitle,
-	ConfirmationDelete, CreationUpdateItems,
+	ConfirmationDelete, CreationUpdateItems, Auth,
 } from 'bauhaus-utilities';
 import D, { D1, D2 } from '../../i18n/build-dictionary';
 import { CollapsiblePanel } from '../collapsible-panel';
@@ -63,9 +63,11 @@ export const CodeListPartialDetailView = ({
 			)}
 			<ActionToolbar>
 				<ReturnButton action={handleBack} col={col} />
-				<ValidationButton callback={publish} object={codelist} />
-				{updatable && <UpdateButton action={handleUpdate} col={col} />}
-				{deletable && <DeleteButton action={handleDelete} col={col} />}
+				<Auth.AuthGuard roles={[Auth.ADMIN]}>
+					<ValidationButton callback={publish} object={codelist} />
+					{updatable && <UpdateButton action={handleUpdate} col={col} />}
+					{deletable && <DeleteButton action={handleDelete} col={col} />}
+				</Auth.AuthGuard>
 			</ActionToolbar>
 			<ErrorBloc error={serverSideError} />
 			{

diff --git a/packages/codelists/src/components/home/home.js b/packages/codelists/src/components/home/home.js
@@ -8,7 +8,7 @@ import {
 import { API } from '../../apis';
 import { formatLabel } from '../../utils';
 import D from '../../i18n/build-dictionary';
-import { useTitle, SearchableList } from 'bauhaus-utilities';
+import { useTitle, SearchableList, Auth } from 'bauhaus-utilities';
 
 function CodeListsList() {
 	useTitle(D.codelistsTitle, D.codelistsTitle)
@@ -30,7 +30,9 @@ function CodeListsList() {
 		<div className="container codelists-list">
 			<div className="row">
 				<VerticalMenu>
-					<NewButton action="/codelists/create" wrapper={false} />
+					<Auth.AuthGuard roles={[Auth.ADMIN]}>
+						<NewButton action="/codelists/create" wrapper={false} />
+					</Auth.AuthGuard>
 				</VerticalMenu>
 				<div className="col-md-8 text-center pull-right">
 					<PageTitle title={D.codelistTitle} col={12} offset={0} />

diff --git a/packages/codelists/src/components/home/partial-home.js b/packages/codelists/src/components/home/partial-home.js
@@ -8,7 +8,7 @@ import {
 import { API } from '../../apis';
 import { formatLabel } from '../../utils';
 import D from '../../i18n/build-dictionary';
-import { useTitle, SearchableList } from 'bauhaus-utilities';
+import { useTitle, SearchableList, Auth } from 'bauhaus-utilities';
 
 function CodeListsPartialHome() {
 	useTitle(D.codelistsPartialTitle, D.codelistsPartialTitle);
@@ -30,7 +30,9 @@ function CodeListsPartialHome() {
 		<div className="container codelists-list">
 			<div className="row">
 				<VerticalMenu>
-					<NewButton action="/codelists-partial/create" wrapper={false} />
+					<Auth.AuthGuard roles={[Auth.ADMIN]}>
+						<NewButton action="/codelists-partial/create" wrapper={false} />
+					</Auth.AuthGuard>
 				</VerticalMenu>
 				<div className="col-md-8 text-center pull-right">
 					<PageTitle title={D.codelistTitle} col={12} offset={0} />