29th / personnel-v3

Personnel management system version 3
https://www.29th.org
2 stars 6 forks source link

Use better logic to determine access to management pages #222

Closed wilson29thid closed 7 months ago

wilson29thid commented 7 months ago

At the moment, you can only access /manage/ if you have permission to create a new record of some sort. With the exception of enlistments, because any user has permission to create enlistments.

But that also means that enlistment liaisons who don't have access to create other records won't be able to access /manage/.

So we need a better way to grant permission to /manage/. There's probably something obvious here...