Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Disable readonly access to admin pages, for users without 'admin' role #160

Closed
nadouani opened this issue Mar 27, 2017 · 0 comments
Closed
Assignees
Labels
Milestone

Comments

@nadouani
Copy link
Contributor

Request Type

Bug

Work Environment

Any

Problem Description

Currently, the Administration menu is not displayed to non-admin users. that said, there is no access check to the the administration pages if the non-admin user knows the URLs.

This access is just readonly, since the backend APIs doesn't allow any admin actions to non-admin users.

@nadouani nadouani added the bug label Mar 27, 2017
@nadouani nadouani added this to the 2.10.2 milestone Mar 27, 2017
@nadouani nadouani self-assigned this Mar 27, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant