hackjunction / hackjunction/JunctionApp
BUG: admin page visible for non logged-in users
Open
bug
urgent
- Dominant language
- JavaScript
- Stars
- 78
- Forks
- 69
- PR merge metrics
- No merged PRs in 30d
Description
## 🐛 Bug Report
### What went wrong? 🤔
User can access https://app.hackjunction.com/admin without logging in. Fortunately, the actions check if the user has required permissions, so it seems no damage can be done.
### Expected Behavior
App should check the permissions before accessing a page.
### Actual Behavior
The page is shown, if the user happens to know the URL.
### Steps to Reproduce Issue
1. Log out
2. Navigate to https://app.hackjunction.com/admin
3. Avot
### Solution
Check permissions before routing the user.
### Environment
#### Operating System
macOS Monterey
#### Browser
Chrome
Contributor guide
Assessment
This issue has not been assessed yet.