podkrepi-bg / api

Nest.js REST backend for charity platform Podkrepi.bg https://podkrepi.bg/swagger
https://podkrepi.bg
MIT License
82 stars 43 forks source link

Parts of the admin panel visible for the regular user #642

Closed slavcho closed 2 months ago

slavcho commented 3 months ago

Which area(s) of Podkrepi.bg are affected? (leave empty if unsure)

Authentication

Describe the Bug

Summary

The admin panel should only be accessible for the administrators of the system. When a regular user joins in, the admin panel url should be a 404 error page. Same goes for all the urls like:

/admin/campaigns

Screenshot

image

To Reproduce

Login as a regular user. Open the https://dev.podkrepi.bg/admin url. Click on the menus on the left hand side.

Expected Behavior

No access to any of the admin panels should be allowed for non admin users.

Which browser are you using? (if relevant)

No response

sashko9807 commented 2 months ago

Fixed with frontend#1854