Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Prevent a research user from carrying out actions when they are not part of an Organisation #450

Open
Tracked by #501
pjmonks opened this issue Sep 17, 2024 · 0 comments
Labels
enhancement New feature or request

Comments

@pjmonks
Copy link
Contributor

pjmonks commented Sep 17, 2024

Description

During registration of new users, there will be a part of the workflow where the research user account is created but they are not yet approved to be part of an Organisation yet. Until they are officially linked to an Organisation, the researcher user is not allowed to carry out a set of actions in mdm-explorer.

If a research user is signed in but not part of an organisation...

They will be allowed to access:

  • Anonymous access pages e.g. homepage, about, help etc
  • The "SDE" page to track their requests
  • Their user account page

They will not be allowed to access:

  • The "Browse" page
  • The "Search" page
  • The "Templates" page
  • The "Bookmarks" page
  • The "Data Specifications" page

Guards

Angular supports guards on page routes to allow/deny activation of components. This might be a good way to easily prevent page access from happening. See https://angular.dev/guide/routing/common-router-tasks#preventing-unauthorized-access for further details.

Disable Controls

Apart from guarding page route access, some kind of disabling/hiding of controls will probably be required based on a standard user check.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant