fix(permissions): 🐛 Improved the security around the role "Manage Own Requests" (#4397)

* Secure ManageOwnRequests API paths

Fixes #4391

* Hide delete request option if user is not allowed

* Refactor CheckOwnRequests

* Fix deleteRequest test

* Improve performance and clean up code

* Fix manageOwnRequests check

* Refactor CheckCanManageRequest
This commit is contained in:
sephrat 2021-11-11 11:21:44 +01:00 committed by GitHub
commit 334a32bca4
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
18 changed files with 106 additions and 36 deletions

View file

@ -39,7 +39,7 @@ describe("Requests Tests", () => {
row.optionsDelete.click();
cy.wait('@deleteRequest').then((intercept) => {
expect(intercept.response.body).is.true;
expect(intercept.response.body.result).is.true;
})
row.title.should('not.exist');