CBSNexora/cbsnexora
4
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

WEB-575 Fix the WebApp to show the Menus and buttons (create, import, delete, edit) as per the grants of each profile (#3102)

Browse Source
This commit is contained in:
Soni Jay
2026-02-07 09:44:52 -06:00
committed by GitHub
parent 56dcc6064c
commit adecbc27b8
10 changed files with 151 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/app/core/shell/sidenav/sidenav.component.html
+8
View File
@@ -86,6 +86,7 @@
matTooltip="{{ 'tooltips.Navigation' | translate }}"
routerLinkActive="active-menu"
[routerLinkActiveOptions]="{ exact: false }"
*mifosxHasPermission="'READ_CLIENT'"
>
<mat-icon matListIcon>
<fa-icon icon="location-arrow" size="sm"></fa-icon>
@@ -98,6 +99,7 @@
matTooltip="{{ 'tooltips.Checker Inbox and Tasks' | translate }}"
routerLinkActive="active-menu"
[routerLinkActiveOptions]="{ exact: false }"
*mifosxHasPermission="'READ_MAKERCHECKER'"
>
<mat-icon matListIcon>
<i class="fa fa-check"></i>
@@ -110,6 +112,7 @@
matTooltip="{{ 'labels.menus.Collection Sheet' | translate }}"
routerLinkActive="active-menu"
[routerLinkActiveOptions]="{ exact: false }"
*mifosxHasPermission="'READ_COLLECTIONSHEET'"
>
<mat-icon matListIcon>
<i class="fa fa-tasks"></i>
@@ -122,6 +125,7 @@
matTooltip="{{ 'tooltips.Individual Collection Sheet' | translate }}"
routerLinkActive="active-menu"
[routerLinkActiveOptions]="{ exact: false }"
*mifosxHasPermission="'READ_COLLECTIONSHEET'"
>
<mat-icon matListIcon>
<i class="fa fa-tasks"></i>
@@ -134,6 +138,7 @@
matTooltip="{{ 'tooltips.Notifications' | translate }}"
routerLinkActive="active-menu"
[routerLinkActiveOptions]="{ exact: false }"
*mifosxHasPermission="'READ_NOTIFICATION'"
>
<mat-icon matListIcon>
<fa-icon icon="bell" size="sm"></fa-icon>
@@ -146,6 +151,7 @@
matTooltip="{{ 'tooltips.Frequent Postings' | translate }}"
routerLinkActive="active-menu"
[routerLinkActiveOptions]="{ exact: false }"
*mifosxHasPermission="'CREATE_JOURNALENTRY'"
>
<mat-icon matListIcon>
<fa-icon icon="sync" size="sm"></fa-icon>
@@ -158,6 +164,7 @@
matTooltip="{{ 'tooltips.Create Journal Entry' | translate }}"
routerLinkActive="active-menu"
[routerLinkActiveOptions]="{ exact: false }"
*mifosxHasPermission="'CREATE_JOURNALENTRY'"
>
<mat-icon matListIcon>
<fa-icon icon="plus" size="sm"></fa-icon>
@@ -170,6 +177,7 @@
matTooltip="{{ 'tooltips.Chart Of Accounts' | translate }}"
routerLinkActive="active-menu"
[routerLinkActiveOptions]="{ exact: false }"
*mifosxHasPermission="'READ_GLACCOUNT'"
>
<mat-icon matListIcon>
<fa-icon icon="sitemap" size="sm"></fa-icon>
src/app/core/shell/sidenav/sidenav.component.ts
+5 -2
View File
@@ -219,6 +219,9 @@ export class SidenavComponent implements OnInit, AfterViewInit {
position: string,
backdrop: boolean
): void {
if (!target) {
return;
}
setTimeout(() => this.popoverService.open(template, target, position, backdrop, {}), 200);
}
@@ -226,12 +229,12 @@ export class SidenavComponent implements OnInit, AfterViewInit {
* To show popovers
*/
ngAfterViewInit() {
if (this.configurationWizardService.showSideNav) {
if (this.configurationWizardService.showSideNav && this.logo) {
setTimeout(() => {
this.showPopover(this.templateLogo, this.logo.nativeElement, 'bottom', true);
});
}
if (this.configurationWizardService.showSideNavChartofAccounts) {
if (this.configurationWizardService.showSideNavChartofAccounts && this.chartOfAccounts) {
setTimeout(() => {
this.showPopover(this.templateChartOfAccounts, this.chartOfAccounts.nativeElement, 'top', true);
});
src/app/core/shell/toolbar/toolbar.component.html
+34 -14
View File
@@ -130,9 +130,15 @@
</mat-menu>
<mat-menu #institutionMenu="matMenu" [overlapTrigger]="false">
<button mat-menu-item routerLink="/clients" tabindex="0">{{ 'labels.menus.Clients' | translate }}</button>
<button mat-menu-item routerLink="/groups" tabindex="0">{{ 'labels.menus.Groups' | translate }}</button>
<button mat-menu-item routerLink="/centers" tabindex="0">{{ 'labels.menus.Centers' | translate }}</button>
<button mat-menu-item routerLink="/clients" tabindex="0" *mifosxHasPermission="'READ_CLIENT'">
{{ 'labels.menus.Clients' | translate }}
</button>
<button mat-menu-item routerLink="/groups" tabindex="0" *mifosxHasPermission="'READ_GROUP'">
{{ 'labels.menus.Groups' | translate }}
</button>
<button mat-menu-item routerLink="/centers" tabindex="0" *mifosxHasPermission="'READ_CENTER'">
{{ 'labels.menus.Centers' | translate }}
</button>
<span class="hide-lt-md">
<button mat-menu-item [routerLink]="['/accounting']" tabindex="0">
{{ 'labels.menus.Accounting' | translate }}
@@ -146,28 +152,42 @@
<!-- Toolbar Menus -->
<mat-menu #reportsMenu="matMenu" [overlapTrigger]="false">
<button mat-menu-item [routerLink]="['/reports']" tabindex="0">{{ 'labels.menus.All' | translate }}</button>
<button mat-menu-item [routerLink]="['/reports', 'Client']" tabindex="0">
<button mat-menu-item [routerLink]="['/reports']" tabindex="0" *mifosxHasPermission="'READ_REPORT'">
{{ 'labels.menus.All' | translate }}
</button>
<button mat-menu-item [routerLink]="['/reports', 'Client']" tabindex="0" *mifosxHasPermission="'READ_REPORT'">
{{ 'labels.menus.Clients' | translate }}
</button>
<button mat-menu-item [routerLink]="['/reports', 'Loan']" tabindex="0">{{ 'labels.menus.Loans' | translate }}</button>
<button mat-menu-item [routerLink]="['/reports', 'Savings']" tabindex="0">
<button mat-menu-item [routerLink]="['/reports', 'Loan']" tabindex="0" *mifosxHasPermission="'READ_REPORT'">
{{ 'labels.menus.Loans' | translate }}
</button>
<button mat-menu-item [routerLink]="['/reports', 'Savings']" tabindex="0" *mifosxHasPermission="'READ_REPORT'">
{{ 'labels.menus.Savings' | translate }}
</button>
<button mat-menu-item [routerLink]="['/reports', 'Fund']" tabindex="0">{{ 'labels.menus.Funds' | translate }}</button>
<button mat-menu-item [routerLink]="['/reports', 'Accounting']" tabindex="0">
<button mat-menu-item [routerLink]="['/reports', 'Fund']" tabindex="0" *mifosxHasPermission="'READ_REPORT'">
{{ 'labels.menus.Funds' | translate }}
</button>
<button mat-menu-item [routerLink]="['/reports', 'Accounting']" tabindex="0" *mifosxHasPermission="'READ_REPORT'">
{{ 'labels.menus.Accounting' | translate }}
</button>
</mat-menu>
<mat-menu #adminMenu="matMenu" [overlapTrigger]="false">
<button mat-menu-item (click)="navigateMenu('/appusers')" tabindex="0">{{ 'labels.menus.Users' | translate }}</button>
<button mat-menu-item [routerLink]="['/organization']" tabindex="0">
<button mat-menu-item [routerLink]="['/appusers']" tabindex="0" *mifosxHasPermission="'READ_USER'">
{{ 'labels.menus.Users' | translate }}
</button>
<button mat-menu-item [routerLink]="['/organization']" tabindex="0" *mifosxHasPermission="'READ_OFFICE'">
{{ 'labels.menus.Organization' | translate }}
</button>
<button mat-menu-item [routerLink]="['/system']" tabindex="0">{{ 'labels.menus.System' | translate }}</button>
<button mat-menu-item [routerLink]="['/products']" tabindex="0">{{ 'labels.menus.Products' | translate }}</button>
<button mat-menu-item routerLink="/templates" tabindex="0">{{ 'labels.menus.Templates' | translate }}</button>
<button mat-menu-item [routerLink]="['/system']" tabindex="0" *mifosxHasPermission="'READ_CONFIGURATION'">
{{ 'labels.menus.System' | translate }}
</button>
<button mat-menu-item [routerLink]="['/products']" tabindex="0" *mifosxHasPermission="'READ_PRODUCT'">
{{ 'labels.menus.Products' | translate }}
</button>
<button mat-menu-item routerLink="/templates" tabindex="0" *mifosxHasPermission="'READ_TEMPLATE'">
{{ 'labels.menus.Templates' | translate }}
</button>
</mat-menu>
<!-- Application User Help Menu -->
src/app/directives/has-permission/has-permission.directive.ts
+12
View File
@@ -12,6 +12,9 @@ import { Directive, Input, TemplateRef, ViewContainerRef, inject } from '@angula
/** Custom Services */
import { AuthenticationService } from '../../core/authentication/authentication.service';
/** Environment */
import { environment } from '../../../environments/environment';
/**
* Has Permission Directive
*/
@@ -24,6 +27,9 @@ export class HasPermissionDirective {
/** User Permissions */
private userPermissions: any[];
/** RBAC Feature Flag */
private rbacEnabled: boolean = environment.productionModeEnableRBAC;
/**
* Extracts User Permissions from User Credentials
* @param {TemplateRef} templateRef Template Reference
@@ -55,6 +61,7 @@ export class HasPermissionDirective {
* Checks if user is permitted.
* @param {string} permission Permission
* @returns {true}
* - RBAC is disabled (backward compatibility mode)
* -`ALL_FUNCTIONS`: user is a Super user.
* -`ALL_FUNCTIONS_READ`: user has all read permissions and passed permission is 'read' type.
* - User has special permission to access that feature.
@@ -63,6 +70,11 @@ export class HasPermissionDirective {
* - No value was passed to the has permission directive.
*/
private hasPermission(permission: string) {
// If RBAC is disabled, show all menus/buttons (backward compatibility)
if (!this.rbacEnabled) {
return true;
}
permission = permission.trim();
if (this.userPermissions.includes('ALL_FUNCTIONS')) {
return true;
src/assets/env.js
+4
View File
@@ -87,6 +87,10 @@
window['env']['mifosInterbankTransfersApiVersion'] = '';
window['env']['mifosInterbankTransfersEnabled'] = 'true';
// Enable Role-Based Access Control (RBAC) for menu/button permissions
// Set to true to enable RBAC, false (default) for backward compatibility
window['env']['productionModeEnableRBAC'] = false;
// OIDC Plugin Environment variables
window['env']['oidcServerEnabled'] = false;
window['env']['oidcBaseUrl'] = '';
src/assets/env.template.js
+4
View File
@@ -99,6 +99,10 @@
window['env']['mifosInterbankTransfersApiVersion'] = '$MIFOS_INTERBANK_TRANSFERS_API_VERSION';
window['env']['mifosInterbankTransfersEnabled'] = '$MIFOS_INTERBANK_TRANSFERS_ENABLED';
// Enable Role-Based Access Control (RBAC) for menu/button permissions
// Set to 'true' to enable RBAC, 'false' (default) for backward compatibility
window['env']['productionModeEnableRBAC'] = '$MIFOS_PRODUCTION_MODE_ENABLE_RBAC';
// OIDC Plugin Environment variables
window['env']['oidcServerEnabled'] = '$FINERACT_PLUGIN_OIDC_ENABLED';
window['env']['oidcBaseUrl'] = '$FINERACT_PLUGIN_OIDC_BASE_URL';
src/environments/environment.prod.ts
+9
View File
@@ -92,6 +92,15 @@ export const environment = {
complianceHideClientData:
loadedEnv['complianceHideClientData'] === 'true' || loadedEnv['complianceHideClientData'] === true || false,
/**
* Enable Role-Based Access Control (RBAC) for menus and buttons
* When enabled, menus/buttons visibility is controlled by user permissions
* When disabled (default), shows all menus/buttons for backward compatibility
* Set via MIFOS_PRODUCTION_MODE_ENABLE_RBAC env var
*/
productionModeEnableRBAC:
loadedEnv['productionModeEnableRBAC'] === 'true' || loadedEnv['productionModeEnableRBAC'] === true || false,
OIDC: {
// Support legacy FINERACT_PLUGIN_OIDC_* variable names for backward compatibility
oidcServerEnabled:
src/environments/environment.ts
+9
View File
@@ -94,6 +94,15 @@ export const environment = {
complianceHideClientData:
loadedEnv.complianceHideClientData === 'true' || loadedEnv.complianceHideClientData === true || false,
/**
* Enable Role-Based Access Control (RBAC) for menus and buttons
* When enabled, menus/buttons visibility is controlled by user permissions
* When disabled (default), shows all menus/buttons for backward compatibility
* Set via MIFOS_PRODUCTION_MODE_ENABLE_RBAC env var
*/
productionModeEnableRBAC:
loadedEnv.productionModeEnableRBAC === 'true' || loadedEnv.productionModeEnableRBAC === true || false,
OIDC: {
// Support legacy FINERACT_PLUGIN_OIDC_* variable names for backward compatibility
oidcServerEnabled: