Skip to content

fix: protect admin routes by role (#246)#255

Open
gTanusri wants to merge 1 commit into
rdodiya:gssoc_developfrom
gTanusri:feature/protected-admin-routes
Open

fix: protect admin routes by role (#246)#255
gTanusri wants to merge 1 commit into
rdodiya:gssoc_developfrom
gTanusri:feature/protected-admin-routes

Conversation

@gTanusri

@gTanusri gTanusri commented Jun 9, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Blocks users without admin permissions from rendering protected admin pages.
  • Adds role-aware redirects for full admin and limited staff access.
  • Hides admin sidebar items that the current role cannot access.
  • Adds an unauthorized page for restricted admin access.
  • Fixes an existing ApiService syntax issue that blocked frontend builds.

Issue

Closes #246

Verification

  • npm run build
  • npm run lint

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

bug(auth): non admin users can access protected admin pages

1 participant