1
0
forked from baron/baron-sso

fix: stabilize tests and refine RBAC model for privileged roles

- Updated devfront to recognize 'rp_admin' and 'tenant_admin' as privileged developer roles.
- Added specific forbidden messages for privileged roles in devfront.
- Improved adminfront Worksmobile test reliability across browsers.
- Updated Makefile to skip userfront tests in environments without Flutter SDK.
- Applied lint and format fixes across adminfront and devfront.
This commit is contained in:
2026-06-04 09:56:02 +09:00
parent 719f408e7e
commit fcb246ea9e
22 changed files with 65 additions and 47 deletions

View File

@@ -1,7 +1,7 @@
import { useQuery } from "@tanstack/react-query";
import {
fetchDeveloperRequestStatus,
type DeveloperRequestStatus,
fetchDeveloperRequestStatus,
} from "../../lib/devApi";
export type DeveloperAccessGateState = {
@@ -12,7 +12,11 @@ export type DeveloperAccessGateState = {
};
function isPrivilegedDeveloperRole(profileRole: string) {
return profileRole === "super_admin";
return (
profileRole === "super_admin" ||
profileRole === "rp_admin" ||
profileRole === "tenant_admin"
);
}
export function resolveDeveloperAccessGate(