daniel/deepdrft
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 13 Wiki Activity

fix: gate SuperRegister nav link to UserAdmin role

Browse Source 
Provision User nav link was visible to all authenticated CMS users but its target page is UserAdmin-gated. Wraps the MudNavLink in HierarchicalRoleAuthorizeView matching the UserAdminMenu pattern.
This commit is contained in:
daniel-c-harvey
2026-06-19 21:57:00 -04:00
parent f1276faabc
commit d6dcd82a53
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
DeepDrftManager/Components/Layout/CmsLayout.razor
+4
View File
@@ -29,7 +29,11 @@
<MudNavLink Href="/releases" Match="NavLinkMatch.Prefix" Icon="@Icons.Material.Filled.LibraryMusic">Releases</MudNavLink>
<MudNavLink Href="/tracks/upload" Match="NavLinkMatch.Prefix" Icon="@Icons.Material.Filled.UploadFile">Upload</MudNavLink>
<UserAdminMenu />
<HierarchicalRoleAuthorizeView RolesList="@([SystemRoleConstants.UserAdmin])">
<Authorized>
<MudNavLink Href="/account/superregister" Match="NavLinkMatch.Prefix" Icon="@Icons.Material.Filled.PersonAdd">Provision User</MudNavLink>
</Authorized>
</HierarchicalRoleAuthorizeView>
</MudNavMenu>
</MudDrawer>
<MudMainContent Class="pt-14 pb-8">