NRPT-140: Fixes roles check. (#446)

bcgov · Jun 22, 2020 · c877301 · c877301
1 parent 8d959a9
commit c877301
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 1 deletion.
diff --git a/angular/projects/admin-nrpti/src/app/services/keycloak.service.ts b/angular/projects/admin-nrpti/src/app/services/keycloak.service.ts
@@ -1,6 +1,7 @@
 import { Injectable } from '@angular/core';
 import { JwtUtil } from '../utils/jwt-utils';
 import { Observable } from 'rxjs';
+import { ROLES } from '../../../../common/src/app/constants/auth';
 
 declare let Keycloak: any;
 
@@ -113,7 +114,10 @@ export class KeycloakService {
       return false;
     }
 
-    return jwt.realm_access.roles.includes('sysadmin');
+    // Make sure they have at least one instance of including a role in the ROLE array
+    return ROLES.some(role => {
+      return jwt.realm_access.roles.includes(role);
+    });
   }
 
   /**

diff --git a/angular/projects/common/src/app/constants/auth.ts b/angular/projects/common/src/app/constants/auth.ts
@@ -0,0 +1,6 @@
+export const ROLES = [
+    'sysadmin',
+    'admin:lng',
+    'admin:nrced',
+    'admin:bcmi'
+];