mirror of
https://github.com/sct/overseerr.git
synced 2025-12-30 17:49:17 +01:00
fix: add missing route guards to issues pages (#2235)
* fix: users should always be able to view their own issues * fix: apply route guards to issues pages instead * fix(api): only allow users w/ issue perms to edit comments / delete issues
This commit is contained in:
@@ -1,8 +1,20 @@
|
||||
import { NextPage } from 'next';
|
||||
import React from 'react';
|
||||
import IssueDetails from '../../../components/IssueDetails';
|
||||
import useRouteGuard from '../../../hooks/useRouteGuard';
|
||||
import { Permission } from '../../../hooks/useUser';
|
||||
|
||||
const IssuePage: NextPage = () => {
|
||||
useRouteGuard(
|
||||
[
|
||||
Permission.MANAGE_ISSUES,
|
||||
Permission.CREATE_ISSUES,
|
||||
Permission.VIEW_ISSUES,
|
||||
],
|
||||
{
|
||||
type: 'or',
|
||||
}
|
||||
);
|
||||
return <IssueDetails />;
|
||||
};
|
||||
|
||||
|
||||
@@ -1,8 +1,20 @@
|
||||
import { NextPage } from 'next';
|
||||
import React from 'react';
|
||||
import IssueList from '../../components/IssueList';
|
||||
import useRouteGuard from '../../hooks/useRouteGuard';
|
||||
import { Permission } from '../../hooks/useUser';
|
||||
|
||||
const IssuePage: NextPage = () => {
|
||||
useRouteGuard(
|
||||
[
|
||||
Permission.MANAGE_ISSUES,
|
||||
Permission.CREATE_ISSUES,
|
||||
Permission.VIEW_ISSUES,
|
||||
],
|
||||
{
|
||||
type: 'or',
|
||||
}
|
||||
);
|
||||
return <IssueList />;
|
||||
};
|
||||
|
||||
|
||||
Reference in New Issue
Block a user