disable general settings sections

Author: mms-gianni

client/src/layouts/default/NavDrawer.vue

@@ -79,13 +79,15 @@
           <template #activator="{ props }">
             <v-list-item v-bind="props" :title="$t('navigation.settings')"></v-list-item>
           </template>
+          <!--
           <v-list-item 
             link to="/settings"
             :title="$t('navigation.general')"
             prepend-icon="mdi-tune"
             density="compact"
             style="transform: scale(0.9);"
           ></v-list-item>
+          -->
           <v-list-item 
               link to="/runpacks" 
               v-if="kubero.isAuthenticated && !kubero.adminDisabled"

client/src/router/index.ts

@@ -97,6 +97,7 @@ const routes = [
       },
     ],
   },
+  /*
   {
     path: '/settings',
     component: () => import('@/layouts/default/Default.vue'),
@@ -108,6 +109,7 @@ const routes = [
       },
     ],
   },
+  */
   {
     path: '/runpacks',
     component: () => import('@/layouts/default/Default.vue'),

server/src/config/config.controller.ts

@@ -20,7 +20,8 @@ export class ConfigController {
   constructor(private readonly configService: ConfigService) {}
 
   @Get('/')
-  @UseGuards(JwtAuthGuard)
+  @UseGuards(JwtAuthGuard, PermissionsGuard)
+  @Permissions('config:read', 'config:write')
   @ApiBearerAuth('bearerAuth')
   @ApiOperation({ summary: 'Get the Kubero settings' })
   @ApiForbiddenResponse({
@@ -48,7 +49,8 @@ export class ConfigController {
   }
 
   @Get('/banner')
-  @UseGuards(JwtAuthGuard)
+  @UseGuards(JwtAuthGuard, PermissionsGuard)
+  @Permissions('config:read')
   @ApiBearerAuth('bearerAuth')
   @ApiOperation({ summary: 'Get the banner informations' })
   @ApiForbiddenResponse({
@@ -61,7 +63,8 @@ export class ConfigController {
   }
 
   @Get('/templates')
-  @UseGuards(JwtAuthGuard)
+  @UseGuards(JwtAuthGuard, PermissionsGuard)
+  @Permissions('config:read')
   @ApiBearerAuth('bearerAuth')
   @ApiOperation({ summary: 'Get the templates settings' })
   @ApiForbiddenResponse({
@@ -74,7 +77,8 @@ export class ConfigController {
   }
 
   @Get('/registry')
-  @UseGuards(JwtAuthGuard)
+  @UseGuards(JwtAuthGuard, PermissionsGuard)
+  @Permissions('config:read')
   @ApiBearerAuth('bearerAuth')
   @ApiOperation({ summary: 'Get the registry settings' })
   @ApiForbiddenResponse({
@@ -87,7 +91,8 @@ export class ConfigController {
   }
 
   @Get('/runpacks')
-  @UseGuards(JwtAuthGuard)
+  @UseGuards(JwtAuthGuard, PermissionsGuard)
+  @Permissions('config:read')
   @ApiBearerAuth('bearerAuth')
   @ApiOperation({ summary: 'List runpacks' })
   @ApiForbiddenResponse({
@@ -100,7 +105,8 @@ export class ConfigController {
   }
 
   @Delete('/runpacks/:id')
-  @UseGuards(JwtAuthGuard)
+  @UseGuards(JwtAuthGuard, PermissionsGuard)
+  @Permissions('config:read', 'config:write')
   @ApiBearerAuth('bearerAuth')
   @ApiOperation({ summary: 'Delete a runpack' })
   @ApiForbiddenResponse({
@@ -114,8 +120,8 @@ export class ConfigController {
   }
 
   @Post('/runpacks')
-  @UseGuards(JwtAuthGuard)
-  @UseGuards(ReadonlyGuard)
+  @UseGuards(JwtAuthGuard, PermissionsGuard, ReadonlyGuard)
+  @Permissions('config:read', 'config:write')
   @ApiBearerAuth('bearerAuth')
   @ApiOperation({ summary: 'Add a new runpack' })
   @ApiForbiddenResponse({
@@ -146,7 +152,8 @@ export class ConfigController {
 
 
   @Get('/clusterissuer')
-  @UseGuards(JwtAuthGuard)
+  @UseGuards(JwtAuthGuard, PermissionsGuard)
+  @Permissions('config:read')
   @ApiBearerAuth('bearerAuth')
   @ApiOperation({ summary: 'Get the configured cluster issuer' })
   @ApiForbiddenResponse({
@@ -166,7 +173,8 @@ export class ConfigController {
   }
 
   @Get('/podsizes')
-  @UseGuards(JwtAuthGuard)
+  @UseGuards(JwtAuthGuard, PermissionsGuard)
+  @Permissions('config:read')
   @ApiBearerAuth('bearerAuth')
   @ApiForbiddenResponse({
     description: 'Error: Unauthorized',
@@ -180,7 +188,7 @@ export class ConfigController {
 
   @Post('/podsizes')
   @UseGuards(JwtAuthGuard, PermissionsGuard, ReadonlyGuard)
-  @Permissions('user:read', 'user:write')
+  @Permissions('config:read', 'config:write')
   @ApiBearerAuth('bearerAuth')
   @ApiForbiddenResponse({
     description: 'Error: Unauthorized',
@@ -244,7 +252,7 @@ export class ConfigController {
 
   @Delete('/podsizes/:id')
   @UseGuards(JwtAuthGuard, PermissionsGuard, ReadonlyGuard)
-  @Permissions('user:read', 'user:write')
+  @Permissions('config:read', 'config:write')
   @ApiBearerAuth('bearerAuth')
   @ApiForbiddenResponse({
     description: 'Error: Unauthorized',
@@ -262,7 +270,7 @@ export class ConfigController {
 
   @Put('/podsizes/:id')
   @UseGuards(JwtAuthGuard, PermissionsGuard, ReadonlyGuard)
-  @Permissions('user:read', 'user:write')
+  @Permissions('config:read', 'config:write')
   @ApiBearerAuth('bearerAuth')
   @ApiForbiddenResponse({
     description: 'Error: Unauthorized',