Closed tfjanjua closed 1 month ago
This issue https://github.com/eclipse-tractusx/portal-backend/issues/831 was created on backend repo with the assumption that this issue could be resolved from backend side but the issue needs to be resolved from the frontend side.
@tfjanjua thank you for analysing!
In general, it would be great if you could not link to closed systems like your entry "entry" environment, such an example link is much more friendly in the open: https://portal-backend.example.org/api/services/serviceRelease/inReview?size=15&page=0&status=InReview&sorting=DateDesc
Closing this issue as related PR has been merged
Current Behavior
Service Management
->Admin Board
page is not showing the Services and responding 403 Forbidden error.Expected Behavior
Service Manager
should be able to see services list onAdmin Board
page ORService Manager
should not seeAdmin Board
sub-menu option underService Management
menu if Service Manager doesn't supposed to have related permissions.Steps To Reproduce
Findings
Service Management
->Admin Board
page is calling the API: https://portal-backend.entry.cofinity-x.com/api/services/serviceRelease/inReview?size=15&page=0&status=InReview&sorting=DateDescand this API has following permissions:
but
Service Manager
user account doesn’t have such permissions, I can shareService Manager
user account’s access token and its existing list of permissions, if required.From frontend: I found that frontend is showing or hiding this Admin Board page on the basis of following roles:
So, the issue seems to be at the frontend side that
APPROVE_SERVICE_RELEASE
variable as wrong role value (activate_subscription
) which needs to be corrected byapprove_service_release
value so, that thisAdmin Board
page would only be visible to the users who would have same roles as API roles.