feat(FSADT1-1525): Add FAM role CLIENT_SUSPEND (#1247)

bcgov · Oct 17, 2024 · 7aa77de · 7aa77de
1 parent b1d6570
commit 7aa77de
Show file tree

Hide file tree

Showing 4 changed files with 12 additions and 2 deletions.
diff --git a/backend/src/main/java/ca/bc/gov/app/ApplicationConstant.java b/backend/src/main/java/ca/bc/gov/app/ApplicationConstant.java
@@ -106,6 +106,7 @@ left join nrfc.province_code pc on (pc.province_code = sl.province_code and pc.c
   public static final String ROLE_VIEWER = "CLIENT_VIEWER";
   public static final String ROLE_EDITOR = "CLIENT_EDITOR";
   public static final String ROLE_ADMIN = "CLIENT_ADMIN";
+  public static final String ROLE_SUSPEND = "CLIENT_SUSPEND";
 
   public static final String OPENDATA_FILTER = "<Filter><Or><PropertyIsLike wildCard=\"*\" singleChar=\".\" escape=\"!\"><PropertyName>%s</PropertyName><Literal>*%s*</Literal></PropertyIsLike><PropertyIsLike wildCard=\"*\" singleChar=\".\" escape=\"!\"><PropertyName>%s</PropertyName><Literal>*%s*</Literal></PropertyIsLike><PropertyIsLike wildCard=\"*\" singleChar=\".\" escape=\"!\"><PropertyName>%s</PropertyName><Literal>*%s*</Literal></PropertyIsLike><PropertyIsLike wildCard=\"*\" singleChar=\".\" escape=\"!\"><PropertyName>%s</PropertyName><Literal>*%s*</Literal></PropertyIsLike></Or></Filter>";
 

diff --git a/backend/src/main/java/ca/bc/gov/app/security/ApiAuthorizationCustomizer.java b/backend/src/main/java/ca/bc/gov/app/security/ApiAuthorizationCustomizer.java
@@ -169,6 +169,15 @@ public void customize(AuthorizeExchangeSpec authorize) {
             ApplicationConstant.ROLE_VIEWER,
             ApplicationConstant.ROLE_EDITOR,
             ApplicationConstant.ROLE_ADMIN);
+
+    // Viewer, editor, suspend and admin users can GET from the clients endpoint
+    authorize
+        .pathMatchers(HttpMethod.GET, "/api/clients/search/**")
+        .hasAnyRole(
+            ApplicationConstant.ROLE_VIEWER,
+            ApplicationConstant.ROLE_EDITOR,
+            ApplicationConstant.ROLE_ADMIN,
+            ApplicationConstant.ROLE_SUSPEND);
 
     // Deny all other requests
     authorize.anyExchange().denyAll();

diff --git a/frontend/cypress/support/commands.ts b/frontend/cypress/support/commands.ts
@@ -78,7 +78,7 @@ Cypress.Commands.add(
 
     const userId = generateRandomHex(32);
 
-    const roles = provider === "idir" ? ["CLIENT_VIEWER", "CLIENT_EDITOR", "CLIENT_ADMIN"] : ["USER"];
+    const roles = provider === "idir" ? ["CLIENT_VIEWER", "CLIENT_EDITOR", "CLIENT_ADMIN", "CLIENT_SUSPEND"] : ["USER"];
 
     const jwtBody = {
       "custom:idp_display_name": name,

diff --git a/frontend/src/pages/SearchPage.vue b/frontend/src/pages/SearchPage.vue
@@ -19,7 +19,7 @@ import {
 
 const summitSvg = useSvg(summit);
 
-const userhasAuthority = ["CLIENT_VIEWER", "CLIENT_EDITOR", "CLIENT_ADMIN"].some(authority => ForestClientUserSession.authorities.includes(authority));
+const userhasAuthority = ["CLIENT_VIEWER", "CLIENT_EDITOR", "CLIENT_ADMIN", "CLIENT_SUSPEND"].some(authority => ForestClientUserSession.authorities.includes(authority));
 
 let networkErrorMsg = ref("");