From d6dcd82a53af2732c91be0531e31e7d251e4d219 Mon Sep 17 00:00:00 2001
From: daniel-c-harvey <the.real.daniel.harvey@gmail.com>
Date: Fri, 19 Jun 2026 21:57:00 -0400
Subject: [PATCH] fix: gate SuperRegister nav link to UserAdmin role

Provision User nav link was visible to all authenticated CMS users but its target page is UserAdmin-gated. Wraps the MudNavLink in HierarchicalRoleAuthorizeView matching the UserAdminMenu pattern.
---
 DeepDrftManager/Components/Layout/CmsLayout.razor | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/DeepDrftManager/Components/Layout/CmsLayout.razor b/DeepDrftManager/Components/Layout/CmsLayout.razor
index 8f9ae09..3378a97 100644
--- a/DeepDrftManager/Components/Layout/CmsLayout.razor
+++ b/DeepDrftManager/Components/Layout/CmsLayout.razor
@@ -29,7 +29,11 @@
             <MudNavLink Href="/releases" Match="NavLinkMatch.Prefix" Icon="@Icons.Material.Filled.LibraryMusic">Releases</MudNavLink>
             <MudNavLink Href="/tracks/upload" Match="NavLinkMatch.Prefix" Icon="@Icons.Material.Filled.UploadFile">Upload</MudNavLink>
             <UserAdminMenu />
-            <MudNavLink Href="/account/superregister" Match="NavLinkMatch.Prefix" Icon="@Icons.Material.Filled.PersonAdd">Provision User</MudNavLink>
+            <HierarchicalRoleAuthorizeView RolesList="@([SystemRoleConstants.UserAdmin])">
+                <Authorized>
+                    <MudNavLink Href="/account/superregister" Match="NavLinkMatch.Prefix" Icon="@Icons.Material.Filled.PersonAdd">Provision User</MudNavLink>
+                </Authorized>
+            </HierarchicalRoleAuthorizeView>
         </MudNavMenu>
     </MudDrawer>
     <MudMainContent Class="pt-14 pb-8">