hackjunction / hackjunction/JunctionApp

BUG: admin page visible for non logged-in users

Open
#473 1 comment 0 reactions 0 assignees View on GitHub
bug urgent
Dominant language
JavaScript
Stars
78
Forks
69
PR merge metrics
No merged PRs in 30d

Description

## 🐛 Bug Report

### What went wrong? 🤔

User can access https://app.hackjunction.com/admin without logging in. Fortunately, the actions check if the user has required permissions, so it seems no damage can be done.

### Expected Behavior

App should check the permissions before accessing a page.

### Actual Behavior

The page is shown, if the user happens to know the URL.

### Steps to Reproduce Issue

1. Log out
2. Navigate to https://app.hackjunction.com/admin
3. Avot

### Solution

Check permissions before routing the user.

### Environment

#### Operating System

macOS Monterey

#### Browser

Chrome

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.