Dashboard: Do not allow users without edit permission to a folder to see new…

Dashboard: Do not allow users without edit permission to a folder to see new dashboard page (#28249)

Dashboard: Do not allow users without edit permission to a folder to see new…
Dashboard: Do not allow users without edit permission to a folder to see new dashboard page (#28249)
f22b768c · Torkel Ödegaard · GitHub · fa45731b · f22b768c
Commit f22b768c authored Oct 14, 2020 by Torkel Ödegaard Committed by GitHub Oct 14, 2020
Show whitespace changes
Inline Side-by-side

Showing with 3 additions and 0 deletions

public/app/routes/routes.ts
+3 -0

No files found.
--- a/public/app/routes/routes.ts
+++ b/public/app/routes/routes.ts
 import './dashboard_loaders';
 import './ReactContainer';
 import { applyRouteRegistrationHandlers } from './registry';
+import { contextSrv } from 'app/core/services/context_srv';
+
 // Pages
 import LdapPage from 'app/features/admin/ldap/LdapPage';
 import UserAdminPage from 'app/features/admin/UserAdminPage';
@@ -70,6 +72,7 @@ export function setupAngularRoutes($routeProvider: route.IRouteProvider, $locati
      routeInfo: DashboardRouteInfo.New,
      reloadOnSearch: false,
      resolve: {
+        roles: () => (contextSrv.hasEditPermissionInFolders ? [contextSrv.user.orgRole] : ['Admin']),
        component: importDashboardPage,
      },
    })