project: Restrict project related operations to admins/ domain admins…

… and project owners (#529) Fixes #485
apache · Jul 10, 2020 · 55736c3 · 55736c3
1 parent fa9a521
commit 55736c3
Showing 1 changed file with 12 additions and 4 deletions.
diff --git a/src/config/section/project.js b/src/config/section/project.js
@@ -82,15 +82,20 @@ export default {
       icon: 'edit',
       label: 'label.edit.project.details',
       dataView: true,
-      args: ['displaytext']
+      args: ['displaytext'],
+      show: (record, store) => {
+        return record.account === store.userInfo.account || ['Admin', 'DomainAdmin'].includes(store.userInfo.roletype)
+      }
     },
     {
       api: 'activateProject',
       icon: 'play-circle',
       label: 'label.activate.project',
       message: 'message.activate.project',
       dataView: true,
-      show: (record) => { return record.state === 'Suspended' }
+      show: (record, store) => {
+        return (record.account === store.userInfo.account || ['Admin', 'DomainAdmin'].includes(store.userInfo.roletype)) && record.state === 'Suspended'
+      }
     },
     {
       api: 'suspendProject',
@@ -99,7 +104,9 @@ export default {
       message: 'message.suspend.project',
       docHelp: 'adminguide/projects.html#suspending-or-deleting-a-project',
       dataView: true,
-      show: (record) => { return record.state !== 'Suspended' }
+      show: (record, store) => {
+        return (record.account === store.userInfo.account || ['Admin', 'DomainAdmin'].includes(store.userInfo.roletype)) && record.state !== 'Suspended'
+      }
     },
     {
       api: 'addAccountToProject',
@@ -121,7 +128,8 @@ export default {
       label: 'label.delete.project',
       message: 'message.delete.project',
       docHelp: 'adminguide/projects.html#suspending-or-deleting-a-project',
-      dataView: true
+      dataView: true,
+      show: (record, store) => { return record.account === store.userInfo.account || ['Admin', 'DomainAdmin'].includes(store.userInfo.roletype) }
     }
   ]
 }