hide admin panels from non-admin users, addresses #472

openid-connect-server/src/main/webapp/WEB-INF/tags/actionmenu.tag

@@ -13,5 +13,6 @@
 <li><a href="manage/#user/approved">Manage Sites</a></li>
 <li><a href="manage/#user/tokens">Manage Active Tokens</a></li>
 <li><a href="manage/#user/profile">Manage Profiles</a></li>
+<li class="divider"></li>
 <li class="nav-header">Developer</li>
 <li><a href="manage/#dev/dynreg">Self-service client registration</a><li>

openid-connect-server/src/main/webapp/WEB-INF/tags/header.tag

@@ -119,6 +119,16 @@
 		function getUserAuthorities() {
 			return ${userAuthorities};
 		}
+		
+		// is the current user an admin?
+		function isAdmin() {
+			var auth = getUserAuthorities();
+			if (auth && _.contains(auth, "ROLE_ADMIN")) {
+				return true;
+			} else {
+				return false;
+			}
+		}
     </script>    
 </head>
 

openid-connect-server/src/main/webapp/resources/js/admin.js

@@ -340,7 +340,11 @@ var AppRouter = Backbone.Router.extend({
     },
     
     root:function() {
+    	if (isAdmin()) {
+    		this.navigate('admin/clients', {trigger: true});
+    	} else {
     		this.navigate('user/approved', {trigger: true});
+    	}
     },
     
     initialize:function () {
@@ -410,6 +414,11 @@ var AppRouter = Backbone.Router.extend({
 
     listClients:function () {
 
+    	if (!isAdmin()) {
+    		this.root();
+    		return;
+    	}
+    	
         this.breadCrumbView.collection.reset();
         this.breadCrumbView.collection.add([
             {text:"Home", href:""},
@@ -424,6 +433,11 @@ var AppRouter = Backbone.Router.extend({
 
     newClient:function() {
 
+    	if (!isAdmin()) {
+    		this.root()();
+    		return;
+    	}
+
         this.breadCrumbView.collection.reset();
         this.breadCrumbView.collection.add([
             {text:"Home", href:""},
@@ -450,6 +464,11 @@ var AppRouter = Backbone.Router.extend({
 
     editClient:function(id) {
 
+    	if (!isAdmin()) {
+    		this.root()();
+    		return;
+    	}
+
         this.breadCrumbView.collection.reset();
         this.breadCrumbView.collection.add([
             {text:"Home", href:""},
@@ -483,6 +502,12 @@ var AppRouter = Backbone.Router.extend({
     },
 
     whiteList:function () {
+
+    	if (!isAdmin()) {
+    		this.root()();
+    		return;
+    	}
+
     	this.breadCrumbView.collection.reset();
         this.breadCrumbView.collection.add([
             {text:"Home", href:""},
@@ -496,6 +521,12 @@ var AppRouter = Backbone.Router.extend({
     },
     
     newWhitelist:function(cid) {
+
+    	if (!isAdmin()) {
+    		this.root()();
+    		return;
+    	}
+
     	var client = this.clientList.get(cid);
 
         // if there's no client this is an error
@@ -525,6 +556,12 @@ var AppRouter = Backbone.Router.extend({
     },
     
     editWhitelist:function(id) {
+
+    	if (!isAdmin()) {
+    		this.root()();
+    		return;
+    	}
+
     	this.breadCrumbView.collection.reset();
         this.breadCrumbView.collection.add([
             {text:"Home", href:""},
@@ -551,7 +588,6 @@ var AppRouter = Backbone.Router.extend({
     },
     
     approvedSites:function() {
-    
     	this.breadCrumbView.collection.reset();
         this.breadCrumbView.collection.add([
             {text:"Home", href:""},
@@ -578,6 +614,12 @@ var AppRouter = Backbone.Router.extend({
     },
     
     blackList:function() {
+
+    	if (!isAdmin()) {
+    		this.root()();
+    		return;
+    	}
+
     	this.breadCrumbView.collection.reset();
         this.breadCrumbView.collection.add([
             {text:"Home", href:""},
@@ -596,6 +638,12 @@ var AppRouter = Backbone.Router.extend({
     },
     
     siteScope:function() {
+
+    	if (!isAdmin()) {
+    		this.root()();
+    		return;
+    	}
+
     	this.breadCrumbView.collection.reset();
     	this.breadCrumbView.collection.add([
              {text:"Home", href:""},
@@ -609,6 +657,12 @@ var AppRouter = Backbone.Router.extend({
     },
     
     newScope:function() {
+
+    	if (!isAdmin()) {
+    		this.root()();
+    		return;
+    	}
+
     	this.breadCrumbView.collection.reset();
     	this.breadCrumbView.collection.add([
              {text:"Home", href:""},
@@ -625,6 +679,12 @@ var AppRouter = Backbone.Router.extend({
     },
     
     editScope:function(sid) {
+
+    	if (!isAdmin()) {
+    		this.root()();
+    		return;
+    	}
+
     	this.breadCrumbView.collection.reset();
     	this.breadCrumbView.collection.add([
              {text:"Home", href:""},
@@ -676,6 +736,7 @@ var AppRouter = Backbone.Router.extend({
         ]);
     	
     	setPageTitle("Edit a New Client");
+    	// note that this doesn't actually load the client, that's supposed to happen elsewhere...
     }