sudacode/ghostfolio
1
0
Fork 0
Code Issues Pull Requests Actions Packages Releases Activity

Feature/restrict permissions of demo user (#4697)

Browse Source 
* Restrict permissions of demo user

* Update changelog
This commit is contained in:
Thomas Kaul 2025-05-17 19:39:48 +02:00 committed by GitHub
parent ccbf958aa6
commit 698d71fb3a
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
CHANGELOG.md
View File

@ -14,6 +14,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
### Changed ### Changed
- Harmonized the data providers management style of the admin control panel - Harmonized the data providers management style of the admin control panel
- Restricted the permissions of the demo user
- Renamed `Order` to `activities` in the `User` database schema - Renamed `Order` to `activities` in the `User` database schema
- Improved the language localization for Catalan (`ca`) - Improved the language localization for Catalan (`ca`)
- Improved the language localization for Chinese (`zh`) - Improved the language localization for Chinese (`zh`)

8
apps/api/src/app/user/user.service.ts
View File

@ -394,9 +394,11 @@ export class UserService {
// Reset holdings view mode // Reset holdings view mode
user.Settings.settings.holdingsViewMode = undefined; user.Settings.settings.holdingsViewMode = undefined;
} else if (user.subscription?.type === 'Premium') { } else if (user.subscription?.type === 'Premium') {
currentPermissions.push(permissions.createApiKey); if (!hasRole(user, Role.DEMO)) {
currentPermissions.push(permissions.enableDataProviderGhostfolio); currentPermissions.push(permissions.createApiKey);
currentPermissions.push(permissions.reportDataGlitch); currentPermissions.push(permissions.enableDataProviderGhostfolio);
currentPermissions.push(permissions.reportDataGlitch);
}
currentPermissions = without( currentPermissions = without(
currentPermissions, currentPermissions,