Organizations list links to BillingEntities even if the user cannot access the linked BillingEntity

appuio / cloud-portal

APPUiO Cloud Portal (Web Frontend)

Apache License 2.0

5 stars 0 forks source link

Organizations list links to BillingEntities even if the user cannot access the linked BillingEntity #540

Closed corvus-ch closed 1 year ago

corvus-ch commented 1 year ago

Description

On the list of Organizations, each entry has a link to the corresponding BillingEntity. That link is shown even if the user does not have access to the BillingEntity.

Additional Context

No response

Logs

No response

Expected Behavior

Only link when if user can view the target billing entity
Silent fail if permission check fails

Steps To Reproduce

No response