nitesh
42424dff8b
Adds the frontend half of the per-tenant menu-access ceiling (TenantMenuAccessApiResource on the backend): a bank cannot show a top-nav section the platform operator has capped, no matter what any role inside that tenant grants itself — closing the gap where a role carrying ALL_FUNCTIONS (as "Clerk" was found to, in two tenants this session) bypassed every ordinary MENU_.../SIDEBAR_... permission check. - tenant-menu-access.service.ts: loads the current tenant's list once, into a plain Set (not an Observable the directive would have to subscribe to, since mifosxHasPermission's setter runs synchronously). A failed load is treated as "nothing disabled" so a network hiccup on login never hides the whole nav. - has-permission.directive.ts: checks the tenant's ceiling first, ahead of the ALL_FUNCTIONS bypass — that ordering is the actual fix. - shell.component.ts/html: the nav now waits on the list being loaded before rendering at all, so a disabled menu is never shown and then hidden a moment later. - New standalone platform-admin/menu-access screen (#/platform-admin/ menu-access), reachable without logging in — its own X-Api-Key is the real boundary, checked on the backend, not this route. Lets the operator pick any tenant and toggle its menu list. Redesigned per request: full-width layout, icon-matched toggle tiles (same icon per item as the real nav), live enabled-count, connection status. - Loan Origination and Investment now use their own MENU_LOAN_ORIGINATION / MENU_INVESTMENT codes (see backend 0542) instead of sharing MENU_ADVANCES / MENU_RBI, so all 27 nav items are independently controllable from this screen. Also: src/assets/env.js — restored 'socity_bank' to fineractPlatformTenantIds. The tenant now exists in the tenant-store database; the comment explaining its earlier removal was stale.
49 lines
1.3 KiB
TypeScript
49 lines
1.3 KiB
TypeScript
/**
|
|
* Copyright since 2025 Mifos Initiative
|
|
*
|
|
* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
*/
|
|
|
|
/** Angular Imports */
|
|
import { NgModule } from '@angular/core';
|
|
import { Routes, RouterModule } from '@angular/router';
|
|
|
|
// Not Found Component
|
|
import { NotFoundComponent } from './not-found/not-found.component';
|
|
import { CallbackComponent } from './zitadel/callback/callback.component';
|
|
import { PlatformMenuAccessComponent } from './platform-admin/menu-access/menu-access.component';
|
|
|
|
/**
|
|
* Fallback to this route when no prior route is matched.
|
|
*/
|
|
const routes: Routes = [
|
|
{
|
|
path: 'callback',
|
|
component: CallbackComponent
|
|
},
|
|
{
|
|
// Platform-operator only — outside the normal login/tenant flow on purpose, see
|
|
// PlatformMenuAccessComponent's own doc comment for why that is safe.
|
|
path: 'platform-admin/menu-access',
|
|
component: PlatformMenuAccessComponent
|
|
},
|
|
{
|
|
path: '**',
|
|
component: NotFoundComponent
|
|
}
|
|
];
|
|
|
|
/**
|
|
* App Routing Module.
|
|
*
|
|
* Configures the fallback route.
|
|
*/
|
|
@NgModule({
|
|
imports: [RouterModule.forRoot(routes, { useHash: true })],
|
|
exports: [RouterModule],
|
|
providers: []
|
|
})
|
|
export class AppRoutingModule {}
|